0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 248.351945][ T24] audit: type=1400 audit(1645805311.815:149): avc: denied { name_bind } for pid=4246 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 248.378604][ T4264] loop2: detected capacity change from 0 to 4 16:08:31 executing program 3: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x591080, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001980)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf2515000000600001801400020076657468315f746f5f68737200000000140002006c6f0000000000000000000000000000140002006e657464657673696d300000000000000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003800018008000300000000000800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB="0800030078d118051c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0001801400020076657468305f746f5f626f6e6400000028000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e310000000000000000000000080003004fea71c0"], 0x104}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r6 = socket(0x3c, 0x4, 0x12) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001b00)=@ipmr_newroute={0x130, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x40, 0xfc, 0x3, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x3c, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x800, 0x5, 0x0, r7}}, @RTA_METRICS={0xfc, 0x8, 0x0, 0x1, "4790e28e709cbde89b14e7b877e83aab3f9a3c6ca10595a03bbd88596713b758e042594b2d8f8142334ce485a451000ecc0407ca9d99bd1a13322ffe6134d5d5290ac691f332e674c6c9152375f22c3b6059929d5a8cad65d9f817e6576f56998487d4d866e0e7d21f08ab0c34fb681709a940f5cc2d16dead180e3d092919f9981377b2911701d946de31a353100f75c584a923555589f73562a2d9134e9c536701e3f6f5c8a7aac62d94d760a8cc64dd508609078b5d694f4cce124f650a581e736d71e7d27c2212aa65a01f55e6d3579fb6dfd61ae26dc8a5cf394db1f2ed81f329bc6758adaf7faac9dd7c3af226e90e6efbe8bfeecc"}]}, 0x130}, 0x1, 0x0, 0x0, 0x40085}, 0x50) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, r8, "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", "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"}) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x147, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "719228", 0x111, 0x3a, 0xff, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, {[@srh={0x2b, 0x12, 0x4, 0x9, 0x0, 0x0, 0x0, [@mcast2, @mcast2, @mcast2, @local, @private2, @private0, @private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xff, 0x0, 0x4fc3f50cc5c81ea0, 0x4}], @echo_reply={0x81, 0x0, 0x0, 0x3f, 0xfffe, "7492018345b832455bc0215fe65c511fb34c51c27510b170b1bf5e161fb9424ad7abe99033426fd0e9bbeb3776a7885c8cae610ca7a78f8a1c90120ec4460dcb1132a2b82f971824bf44ab40bc1a8bace6045f282e90348fbd215509a1470ace73556bc7904008e1ae"}}}}}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x0, 0x10, 0x52, 0x66, 0x0, 0x3c, 0x2, 0x0, @private=0xa010100, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0xe, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x80}]}]}}, {0x15, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "25c1584677290e1c3498fd0846a81ccc86f4ed200bc7"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0xf8a, 0x797, 0x3d8, 0x451]}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x591080, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001980)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf2515000000600001801400020076657468315f746f5f68737200000000140002006c6f0000000000000000000000000000140002006e657464657673696d300000000000000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003800018008000300000000000800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB="0800030078d118051c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0001801400020076657468305f746f5f626f6e6400000028000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e310000000000000000000000080003004fea71c0"], 0x104}, 0x1, 0x0, 0x0, 0x4004}, 0x1) (async) socket(0x3c, 0x4, 0x12) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001b00)=@ipmr_newroute={0x130, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x40, 0xfc, 0x3, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x3c, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x800, 0x5, 0x0, r7}}, @RTA_METRICS={0xfc, 0x8, 0x0, 0x1, "4790e28e709cbde89b14e7b877e83aab3f9a3c6ca10595a03bbd88596713b758e042594b2d8f8142334ce485a451000ecc0407ca9d99bd1a13322ffe6134d5d5290ac691f332e674c6c9152375f22c3b6059929d5a8cad65d9f817e6576f56998487d4d866e0e7d21f08ab0c34fb681709a940f5cc2d16dead180e3d092919f9981377b2911701d946de31a353100f75c584a923555589f73562a2d9134e9c536701e3f6f5c8a7aac62d94d760a8cc64dd508609078b5d694f4cce124f650a581e736d71e7d27c2212aa65a01f55e6d3579fb6dfd61ae26dc8a5cf394db1f2ed81f329bc6758adaf7faac9dd7c3af226e90e6efbe8bfeecc"}]}, 0x130}, 0x1, 0x0, 0x0, 0x40085}, 0x50) (async) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, r8, "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", "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"}) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x147, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "719228", 0x111, 0x3a, 0xff, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, {[@srh={0x2b, 0x12, 0x4, 0x9, 0x0, 0x0, 0x0, [@mcast2, @mcast2, @mcast2, @local, @private2, @private0, @private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xff, 0x0, 0x4fc3f50cc5c81ea0, 0x4}], @echo_reply={0x81, 0x0, 0x0, 0x3f, 0xfffe, "7492018345b832455bc0215fe65c511fb34c51c27510b170b1bf5e161fb9424ad7abe99033426fd0e9bbeb3776a7885c8cae610ca7a78f8a1c90120ec4460dcb1132a2b82f971824bf44ab40bc1a8bace6045f282e90348fbd215509a1470ace73556bc7904008e1ae"}}}}}}, 0x0) (async) syz_emit_ethernet(0x64, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x0, 0x10, 0x52, 0x66, 0x0, 0x3c, 0x2, 0x0, @private=0xa010100, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0xe, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x80}]}]}}, {0x15, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "25c1584677290e1c3498fd0846a81ccc86f4ed200bc7"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0xf8a, 0x797, 0x3d8, 0x451]}) (async) 16:08:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 16:08:31 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @generic={0x3, 0x0, 0x7, 0x3f, 0x8001}, @alu={0x0, 0x0, 0xe, 0x4, 0x5}, @alu={0x4, 0x0, 0x3}, @map_idx={0x18, 0x3ede0d0227248a38, 0x5, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7}, 0x8, 0x10, 0x0}, 0x80) (async) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="39ef70196d2ae6135a72779a4e2e9075e2b933009ccd1e4e3046d3b0b40076b277049e6ceaf1797fe41a60bbde92a3763a3a2b554ce7a60855356540e043763ee8ba7460219475b69c3e4ba7476dce827c7cd523fdc6d7a7975b76415a60485dba8da001fee5521d7e08c9f52529cb0baa458e5df59590b3c237b1e07c5d9db80b523b8d616afda597ce5f6a8852739762a23391a6f0a1ae79dc4208b735752471b8d56a50b0215ac493228b2cf5") getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 248.428472][ T4264] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 248.433355][ T24] audit: type=1400 audit(1645805311.815:150): avc: denied { node_bind } for pid=4246 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 16:08:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 16:08:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 248.472101][ T4283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.492013][ T24] audit: type=1400 audit(1645805311.955:151): avc: denied { prog_load } for pid=4289 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.532115][ T4303] loop2: detected capacity change from 0 to 4 [ 248.546708][ T4303] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:08:32 executing program 4: unshare(0x6c060000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="76454c46ff0600f901d820d30b9477a023d72a39d84f08947a705e41ae446296ded0d6fc8a7d7a9d1c2001c353d1a7c69299b9c889589fbb8eaeb4455a1a1841f19528db10f8bfd8a77c48a8016549f1f3ba829cd8"], 0x67b) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000003c0)=0x7, 0x4) (async) getsockname$packet(r3, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) unshare(0x44020000) (async) splice(r1, 0x0, r0, 0x0, 0x2000800, 0x0) 16:08:32 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 16:08:32 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa240000000000000806000186dd06100001000000000000fc0100000000000000faffffff000000369d06bc4768fe8000000000000000000000000000aaa84850fc39d83c5c30343adab67e51a2e9a7ba66990c18ce5f81835c6c42e46cf14d6ed2ff1afae4b3b39372c405d4a578534c3af1dacf3bf0336f60cda133e633476217043ac99a4b6dfa3b9688c6f9a4221fd2705a30f4d17bd1c0d738da0c789f203af67d4ad9a96d94f0f471531fce091f"], &(0x7f0000000080)={0x0, 0x2, [0x5, 0x722, 0x971, 0xff8]}) 16:08:32 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:32 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @generic={0x3, 0x0, 0x7, 0x3f, 0x8001}, @alu={0x0, 0x0, 0xe, 0x4, 0x5}, @alu={0x4, 0x0, 0x3}, @map_idx={0x18, 0x3ede0d0227248a38, 0x5, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7}, 0x8, 0x10, 0x0}, 0x80) (async) syz_clone(0x40000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="39ef70196d2ae6135a72779a4e2e9075e2b933009ccd1e4e3046d3b0b40076b277049e6ceaf1797fe41a60bbde92a3763a3a2b554ce7a60855356540e043763ee8ba7460219475b69c3e4ba7476dce827c7cd523fdc6d7a7975b76415a60485dba8da001fee5521d7e08c9f52529cb0baa458e5df59590b3c237b1e07c5d9db80b523b8d616afda597ce5f6a8852739762a23391a6f0a1ae79dc4208b735752471b8d56a50b0215ac493228b2cf5") (async) getpid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 16:08:32 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:08:32 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (rerun: 64) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa240000000000000806000186dd06100001000000000000fc0100000000000000faffffff000000369d06bc4768fe8000000000000000000000000000aaa84850fc39d83c5c30343adab67e51a2e9a7ba66990c18ce5f81835c6c42e46cf14d6ed2ff1afae4b3b39372c405d4a578534c3af1dacf3bf0336f60cda133e633476217043ac99a4b6dfa3b9688c6f9a4221fd2705a30f4d17bd1c0d738da0c789f203af67d4ad9a96d94f0f471531fce091f"], &(0x7f0000000080)={0x0, 0x2, [0x5, 0x722, 0x971, 0xff8]}) 16:08:32 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 249.176439][ T4325] loop2: detected capacity change from 0 to 4 [ 249.193189][ T4325] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 249.241788][ T4192] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 249.252704][ T4192] CPU: 1 PID: 4192 Comm: syz-executor.1 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 249.263830][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.273888][ T4192] Call Trace: [ 249.277160][ T4192] [ 249.280083][ T4192] dump_stack_lvl+0xd6/0x122 [ 249.284675][ T4192] dump_stack+0x11/0x1b [ 249.288902][ T4192] dump_header+0x98/0x410 [ 249.293268][ T4192] oom_kill_process+0x18e/0x4a0 [ 249.298164][ T4192] out_of_memory+0x61d/0x8c0 [ 249.302743][ T4192] ? mem_cgroup_iter+0x29b/0x370 [ 249.307731][ T4192] mem_cgroup_oom+0x484/0x520 [ 249.312429][ T4192] try_charge_memcg+0x75c/0xa50 [ 249.317270][ T4192] ? kfree+0xe0/0x1c0 [ 249.321239][ T4192] ? __vunmap+0x7d2/0x810 [ 249.325607][ T4192] ? clear_user+0x48/0xa0 [ 249.329926][ T4192] ? __rcu_read_unlock+0x5c/0x290 [ 249.334996][ T4192] ? avc_has_perm_noaudit+0x1c0/0x270 [ 249.340375][ T4192] obj_cgroup_charge_pages+0xac/0x140 [ 249.345791][ T4192] obj_cgroup_charge+0xe2/0x1b0 [ 249.350723][ T4192] kmem_cache_alloc_node_trace+0xb7/0x310 [ 249.356534][ T4192] ? __kmalloc_node+0x30/0x40 [ 249.361246][ T4192] __kmalloc_node+0x30/0x40 [ 249.365909][ T4192] kvmalloc_node+0x6e/0xe0 [ 249.370423][ T4192] xt_alloc_table_info+0x39/0x70 [ 249.375357][ T4192] do_ipt_set_ctl+0x649/0x1710 [ 249.380106][ T4192] ? ip_getsockopt+0x10ab/0x1320 [ 249.385067][ T4192] ? debug_smp_processor_id+0x18/0x20 [ 249.390426][ T4192] ? delay_tsc+0x96/0xe0 [ 249.394656][ T4192] nf_setsockopt+0x1a6/0x1c0 [ 249.399238][ T4192] ip_setsockopt+0x2815/0x2c80 [ 249.403989][ T4192] ? mls_context_isvalid+0x80/0x1e0 [ 249.409170][ T4192] ? __rcu_read_unlock+0x5c/0x290 [ 249.414205][ T4192] ? ebitmap_destroy+0x91/0xa0 [ 249.418988][ T4192] ? __rcu_read_unlock+0x5c/0x290 [ 249.424054][ T4192] ? avc_has_perm_noaudit+0x1c0/0x270 [ 249.429463][ T4192] ? avc_has_perm+0x70/0x160 [ 249.434037][ T4192] ? avc_has_perm+0xd5/0x160 [ 249.438610][ T4192] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 249.444970][ T4192] ? selinux_socket_setsockopt+0x145/0x170 [ 249.450794][ T4192] tcp_setsockopt+0x8c/0xa0 [ 249.455282][ T4192] sock_common_setsockopt+0x5d/0x70 [ 249.460467][ T4192] ? sock_common_recvmsg+0xe0/0xe0 [ 249.465562][ T4192] __sys_setsockopt+0x209/0x2a0 [ 249.470415][ T4192] __x64_sys_setsockopt+0x62/0x70 [ 249.475422][ T4192] do_syscall_64+0x44/0xd0 [ 249.479830][ T4192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.485750][ T4192] RIP: 0033:0x7fcb0d6c46aa [ 249.490160][ T4192] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 249.509770][ T4192] RSP: 002b:00007ffeb4a76eb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 249.518184][ T4192] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb0d6c46aa [ 249.526233][ T4192] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 249.534188][ T4192] RBP: 00007ffeb4a76ee0 R08: 00000000000002d8 R09: ff00000000000000 [ 249.542153][ T4192] R10: 00007fcb0d7a6d80 R11: 0000000000000206 R12: 00007ffeb4a76f40 [ 249.550130][ T4192] R13: 0000000000000003 R14: 00007ffeb4a76edc R15: 00007fcb0d7a6d20 [ 249.558102][ T4192] [ 249.561283][ T4192] memory: usage 6276kB, limit 0kB, failcnt 91 [ 249.567355][ T4192] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:08:33 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0xa01d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x6e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c00858e0010000000000000000000000000002800f437bd9474da5b5299404c034ffeecf1a6a90400000000000068d779a08990bbbfab5db3349251838478c305314353c74bab0d0e3c513ddc83fb55386d34f60d4c4eaccca5c9994199deac5ddef391b9cca11eeaa4e8a4b92c35954bd2e036ff34e5d50acbfc21e4322f353e69762dce4828c0ce047caadff34404244f65f439d5c19b2dc93586e7d21de976f4a28aea2ca5ca5daf2a6c1cf6bb9bb984c2700327bf3556f473a02c62aa8ac73e2c388dd3954166a629c9493f407771d2047665ebe1e86031e5987845770bb54399ececd219aa", @ANYRES32=0x0, @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x2000004) 16:08:33 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa240000000000000806000186dd06100001000000000000fc0100000000000000faffffff000000369d06bc4768fe8000000000000000000000000000aaa84850fc39d83c5c30343adab67e51a2e9a7ba66990c18ce5f81835c6c42e46cf14d6ed2ff1afae4b3b39372c405d4a578534c3af1dacf3bf0336f60cda133e633476217043ac99a4b6dfa3b9688c6f9a4221fd2705a30f4d17bd1c0d738da0c789f203af67d4ad9a96d94f0f471531fce091f"], &(0x7f0000000080)={0x0, 0x2, [0x5, 0x722, 0x971, 0xff8]}) [ 249.574234][ T4192] Memory cgroup stats for /syz1: [ 249.588636][ T4192] anon 36864 [ 249.588636][ T4192] file 24576 [ 249.588636][ T4192] kernel_stack 0 [ 249.588636][ T4192] pagetables 8192 [ 249.588636][ T4192] percpu 0 [ 249.588636][ T4192] sock 0 [ 249.588636][ T4192] vmalloc 0 [ 249.588636][ T4192] shmem 24576 [ 249.588636][ T4192] file_mapped 24576 [ 249.588636][ T4192] file_dirty 0 [ 249.588636][ T4192] file_writeback 0 [ 249.588636][ T4192] swapcached 0 [ 249.588636][ T4192] inactive_anon 40960 [ 249.588636][ T4192] active_anon 20480 [ 249.588636][ T4192] inactive_file 0 [ 249.588636][ T4192] active_file 0 [ 249.588636][ T4192] unevictable 0 [ 249.588636][ T4192] slab_reclaimable 9072 [ 249.588636][ T4192] slab_unreclaimable 17208 [ 249.588636][ T4192] slab 26280 [ 249.588636][ T4192] workingset_refault_anon 0 [ 249.588636][ T4192] workingset_refault_file 1 [ 249.588636][ T4192] workingset_activate_anon 0 [ 249.588636][ T4192] workingset_activate_file 0 [ 249.588636][ T4192] workingset_restore_anon 0 16:08:33 executing program 4: unshare(0x6c060000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="76454c46ff0600f901d820d30b9477a023d72a39d84f08947a705e41ae446296ded0d6fc8a7d7a9d1c2001c353d1a7c69299b9c889589fbb8eaeb4455a1a1841f19528db10f8bfd8a77c48a8016549f1f3ba829cd8"], 0x67b) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000003c0)=0x7, 0x4) (async) getsockname$packet(r3, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x44020000) (async) splice(r1, 0x0, r0, 0x0, 0x2000800, 0x0) 16:08:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:33 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000001bb330b4000008000300", @ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) [ 249.682831][ T4192] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4192,uid=0 [ 249.698166][ T4192] Memory cgroup out of memory: Killed process 4192 (syz-executor.1) total-vm:48480kB, anon-rss:376kB, file-rss:15200kB, shmem-rss:24kB, UID:0 pgtables:76kB oom_score_adj:0 [ 249.716081][ T26] oom_reaper: reaped process 4192 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:24kB [ 249.727233][ T4335] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 16:08:33 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:08:33 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0xa01d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x6e) (async) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c00858e0010000000000000000000000000002800f437bd9474da5b5299404c034ffeecf1a6a90400000000000068d779a08990bbbfab5db3349251838478c305314353c74bab0d0e3c513ddc83fb55386d34f60d4c4eaccca5c9994199deac5ddef391b9cca11eeaa4e8a4b92c35954bd2e036ff34e5d50acbfc21e4322f353e69762dce4828c0ce047caadff34404244f65f439d5c19b2dc93586e7d21de976f4a28aea2ca5ca5daf2a6c1cf6bb9bb984c2700327bf3556f473a02c62aa8ac73e2c388dd3954166a629c9493f407771d2047665ebe1e86031e5987845770bb54399ececd219aa", @ANYRES32=0x0, @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) (async) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x2000004) [ 249.727262][ T4335] CPU: 1 PID: 4335 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 249.727282][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.727292][ T4335] Call Trace: [ 249.727297][ T4335] [ 249.727302][ T4335] dump_stack_lvl+0xd6/0x122 [ 249.727374][ T4335] dump_stack+0x11/0x1b [ 249.727401][ T4335] dump_header+0x98/0x410 [ 249.727418][ T4335] out_of_memory+0x65c/0x8c0 [ 249.727434][ T4335] ? memory_max_write+0x2bd/0x3d0 [ 249.727455][ T4335] memory_max_write+0x32c/0x3d0 [ 249.727507][ T4335] ? memory_max_show+0x70/0x70 [ 249.727527][ T4335] cgroup_file_write+0x161/0x300 [ 249.727547][ T4335] ? __check_object_size+0x22a/0x2d0 [ 249.727579][ T4335] ? cgroup_seqfile_stop+0x70/0x70 [ 249.727600][ T4335] kernfs_fop_write_iter+0x1d3/0x2d0 [ 249.727643][ T4335] do_iter_readv_writev+0x2de/0x380 [ 249.727663][ T4335] do_iter_write+0x192/0x5c0 [ 249.727679][ T4335] ? splice_from_pipe_next+0x34f/0x3b0 [ 249.727702][ T4335] ? kmalloc_array+0x2d/0x40 [ 249.727736][ T4335] vfs_iter_write+0x4c/0x70 [ 249.727752][ T4335] iter_file_splice_write+0x43a/0x790 [ 249.727778][ T4335] ? splice_from_pipe+0xd0/0xd0 [ 249.727800][ T4335] direct_splice_actor+0x80/0xa0 [ 249.727858][ T4335] splice_direct_to_actor+0x345/0x650 [ 249.727882][ T4335] ? do_splice_direct+0x190/0x190 [ 249.727978][ T4335] do_splice_direct+0x106/0x190 [ 249.728000][ T4335] do_sendfile+0x675/0xc40 [ 249.728068][ T4335] __x64_sys_sendfile64+0x102/0x140 [ 249.728088][ T4335] do_syscall_64+0x44/0xd0 [ 249.728106][ T4335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.728182][ T4335] RIP: 0033:0x7f8a9bb9b059 [ 249.728196][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 249.728270][ T4335] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 249.728289][ T4335] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 249.728300][ T4335] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 249.728311][ T4335] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 249.728322][ T4335] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 249.728334][ T4335] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 249.728350][ T4335] [ 249.728369][ T4335] memory: usage 64kB, limit 0kB, failcnt 92 [ 249.728380][ T4335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 249.728429][ T4335] Memory cgroup stats for /syz1: [ 249.750306][ T4335] anon 0 [ 249.750306][ T4335] file 24576 [ 249.750306][ T4335] kernel_stack 0 [ 249.750306][ T4335] pagetables 8192 [ 249.750306][ T4335] percpu 0 [ 249.750306][ T4335] sock 0 [ 249.750306][ T4335] vmalloc 0 [ 249.750306][ T4335] shmem 24576 [ 249.750306][ T4335] file_mapped 24576 [ 249.750306][ T4335] file_dirty 0 [ 249.750306][ T4335] file_writeback 0 [ 249.750306][ T4335] swapcached 0 [ 249.750306][ T4335] inactive_anon 4096 [ 249.750306][ T4335] active_anon 20480 [ 249.750306][ T4335] inactive_file 0 [ 249.750306][ T4335] active_file 0 [ 249.750306][ T4335] unevictable 0 [ 249.750306][ T4335] slab_reclaimable 6520 [ 249.750306][ T4335] slab_unreclaimable 15912 [ 249.750306][ T4335] slab 22432 [ 249.750306][ T4335] workingset_refault_anon 0 [ 249.750306][ T4335] workingset_refault_file 1 [ 249.750306][ T4335] workingset_activate_anon 0 [ 249.750306][ T4335] workingset_activate_file 0 [ 249.750306][ T4335] workingset_restore_anon 0 [ 249.750435][ T4335] Out of memory and no killable processes... [ 249.768980][ T24] audit: type=1400 audit(1645805313.235:152): avc: denied { module_request } for pid=4355 comm="syz-executor.3" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.814998][ T4362] loop2: detected capacity change from 0 to 4 [ 249.905804][ T4367] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 249.919366][ T4362] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 249.920570][ T4367] CPU: 0 PID: 4367 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 250.163551][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.173596][ T4367] Call Trace: [ 250.176865][ T4367] [ 250.179786][ T4367] dump_stack_lvl+0xd6/0x122 [ 250.184442][ T4367] dump_stack+0x11/0x1b [ 250.188637][ T4367] dump_header+0x98/0x410 [ 250.192948][ T4367] out_of_memory+0x65c/0x8c0 [ 250.197640][ T4367] memory_max_write+0x32c/0x3d0 [ 250.202480][ T4367] ? memory_max_show+0x70/0x70 [ 250.207302][ T4367] cgroup_file_write+0x161/0x300 [ 250.212338][ T4367] ? __check_object_size+0x22a/0x2d0 [ 250.217612][ T4367] ? cgroup_seqfile_stop+0x70/0x70 [ 250.222707][ T4367] kernfs_fop_write_iter+0x1d3/0x2d0 [ 250.227974][ T4367] do_iter_readv_writev+0x2de/0x380 [ 250.233166][ T4367] do_iter_write+0x192/0x5c0 [ 250.237733][ T4367] ? splice_from_pipe_next+0x34f/0x3b0 [ 250.243191][ T4367] ? kmalloc_array+0x2d/0x40 [ 250.247835][ T4367] vfs_iter_write+0x4c/0x70 [ 250.252322][ T4367] iter_file_splice_write+0x43a/0x790 [ 250.257777][ T4367] ? splice_from_pipe+0xd0/0xd0 [ 250.262674][ T4367] direct_splice_actor+0x80/0xa0 [ 250.267642][ T4367] splice_direct_to_actor+0x345/0x650 [ 250.272993][ T4367] ? do_splice_direct+0x190/0x190 [ 250.278001][ T4367] do_splice_direct+0x106/0x190 [ 250.282845][ T4367] do_sendfile+0x675/0xc40 [ 250.287293][ T4367] __x64_sys_sendfile64+0x102/0x140 [ 250.292471][ T4367] do_syscall_64+0x44/0xd0 [ 250.296865][ T4367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.302741][ T4367] RIP: 0033:0x7f8a9bb9b059 [ 250.307213][ T4367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 250.326870][ T4367] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.335355][ T4367] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 250.343397][ T4367] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 250.351347][ T4367] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 250.359297][ T4367] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 16:08:33 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000001bb330b4000008000300", @ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000001bb330b4000008000300", @ANYRES32=r4], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) [ 250.367376][ T4367] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 250.375435][ T4367] [ 250.378641][ T4367] memory: usage 52kB, limit 0kB, failcnt 108 [ 250.384672][ T4367] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 250.391566][ T4367] Memory cgroup stats for /syz1: [ 250.414157][ T4367] anon 0 [ 250.414157][ T4367] file 24576 [ 250.414157][ T4367] kernel_stack 0 [ 250.414157][ T4367] pagetables 0 [ 250.414157][ T4367] percpu 0 [ 250.414157][ T4367] sock 0 [ 250.414157][ T4367] vmalloc 0 [ 250.414157][ T4367] shmem 24576 [ 250.414157][ T4367] file_mapped 24576 [ 250.414157][ T4367] file_dirty 0 [ 250.414157][ T4367] file_writeback 0 [ 250.414157][ T4367] swapcached 0 [ 250.414157][ T4367] inactive_anon 4096 [ 250.414157][ T4367] active_anon 20480 16:08:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 250.414157][ T4367] inactive_file 0 [ 250.414157][ T4367] active_file 0 [ 250.414157][ T4367] unevictable 0 [ 250.414157][ T4367] slab_reclaimable 6520 [ 250.414157][ T4367] slab_unreclaimable 15912 [ 250.414157][ T4367] slab 22432 [ 250.414157][ T4367] workingset_refault_anon 0 [ 250.414157][ T4367] workingset_refault_file 1 [ 250.414157][ T4367] workingset_activate_anon 0 [ 250.414157][ T4367] workingset_activate_file 0 [ 250.414157][ T4367] workingset_restore_anon 0 [ 250.507815][ T4367] Out of memory and no killable processes... 16:08:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:08:34 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000001bb330b4000008000300", @ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) [ 250.512622][ T4390] loop2: detected capacity change from 0 to 4 [ 250.525824][ T4390] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 250.560642][ T4392] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 250.570869][ T4392] CPU: 1 PID: 4392 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 250.581886][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.591986][ T4392] Call Trace: [ 250.595259][ T4392] [ 250.598168][ T4392] dump_stack_lvl+0xd6/0x122 [ 250.602796][ T4392] dump_stack+0x11/0x1b [ 250.606946][ T4392] dump_header+0x98/0x410 [ 250.611271][ T4392] out_of_memory+0x65c/0x8c0 [ 250.615912][ T4392] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 250.621698][ T4392] memory_max_write+0x32c/0x3d0 [ 250.626532][ T4392] ? memory_max_show+0x70/0x70 [ 250.631274][ T4392] cgroup_file_write+0x161/0x300 [ 250.636203][ T4392] ? __check_object_size+0x22a/0x2d0 [ 250.641507][ T4392] ? cgroup_seqfile_stop+0x70/0x70 [ 250.646610][ T4392] kernfs_fop_write_iter+0x1d3/0x2d0 [ 250.651996][ T4392] do_iter_readv_writev+0x2de/0x380 [ 250.657177][ T4392] do_iter_write+0x192/0x5c0 [ 250.661815][ T4392] ? splice_from_pipe_next+0x34f/0x3b0 [ 250.667258][ T4392] ? kmalloc_array+0x2d/0x40 [ 250.671832][ T4392] vfs_iter_write+0x4c/0x70 [ 250.676379][ T4392] iter_file_splice_write+0x43a/0x790 [ 250.681806][ T4392] ? splice_from_pipe+0xd0/0xd0 [ 250.686684][ T4392] direct_splice_actor+0x80/0xa0 [ 250.691649][ T4392] splice_direct_to_actor+0x345/0x650 [ 250.697032][ T4392] ? do_splice_direct+0x190/0x190 [ 250.702141][ T4392] do_splice_direct+0x106/0x190 [ 250.707053][ T4392] do_sendfile+0x675/0xc40 [ 250.711456][ T4392] __x64_sys_sendfile64+0x102/0x140 [ 250.716635][ T4392] do_syscall_64+0x44/0xd0 [ 250.721041][ T4392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.726914][ T4392] RIP: 0033:0x7efc3b498059 [ 250.731303][ T4392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 250.750908][ T4392] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.759370][ T4392] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 250.767323][ T4392] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 250.775281][ T4392] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 250.783304][ T4392] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 250.791253][ T4392] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 250.799244][ T4392] [ 250.802381][ T4392] memory: usage 52kB, limit 0kB, failcnt 108 [ 250.808384][ T4392] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 250.815297][ T4392] Memory cgroup stats for /syz1: [ 250.817476][ T4392] anon 0 [ 250.817476][ T4392] file 24576 [ 250.817476][ T4392] kernel_stack 0 [ 250.817476][ T4392] pagetables 0 [ 250.817476][ T4392] percpu 0 [ 250.817476][ T4392] sock 0 [ 250.817476][ T4392] vmalloc 0 [ 250.817476][ T4392] shmem 24576 [ 250.817476][ T4392] file_mapped 24576 [ 250.817476][ T4392] file_dirty 0 [ 250.817476][ T4392] file_writeback 0 [ 250.817476][ T4392] swapcached 0 [ 250.817476][ T4392] inactive_anon 4096 [ 250.817476][ T4392] active_anon 20480 [ 250.817476][ T4392] inactive_file 0 [ 250.817476][ T4392] active_file 0 [ 250.817476][ T4392] unevictable 0 [ 250.817476][ T4392] slab_reclaimable 6520 [ 250.817476][ T4392] slab_unreclaimable 15912 [ 250.817476][ T4392] slab 22432 [ 250.817476][ T4392] workingset_refault_anon 0 [ 250.817476][ T4392] workingset_refault_file 1 [ 250.817476][ T4392] workingset_activate_anon 0 [ 250.817476][ T4392] workingset_activate_file 0 [ 250.817476][ T4392] workingset_restore_anon 0 16:08:34 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:34 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0xa01d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x6e) (async) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c00858e0010000000000000000000000000002800f437bd9474da5b5299404c034ffeecf1a6a90400000000000068d779a08990bbbfab5db3349251838478c305314353c74bab0d0e3c513ddc83fb55386d34f60d4c4eaccca5c9994199deac5ddef391b9cca11eeaa4e8a4b92c35954bd2e036ff34e5d50acbfc21e4322f353e69762dce4828c0ce047caadff34404244f65f439d5c19b2dc93586e7d21de976f4a28aea2ca5ca5daf2a6c1cf6bb9bb984c2700327bf3556f473a02c62aa8ac73e2c388dd3954166a629c9493f407771d2047665ebe1e86031e5987845770bb54399ececd219aa", @ANYRES32=0x0, @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) (async, rerun: 32) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) (rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x2000004) 16:08:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 250.911055][ T4392] Out of memory and no killable processes... 16:08:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000180012800e0001007769726567756172640000000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 250.936346][ T4404] loop2: detected capacity change from 0 to 4 [ 250.946564][ T4403] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 250.956770][ T4403] CPU: 1 PID: 4403 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 250.956794][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.956805][ T4403] Call Trace: [ 250.956811][ T4403] 16:08:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 250.956854][ T4403] dump_stack_lvl+0xd6/0x122 [ 250.988613][ T4403] dump_stack+0x11/0x1b [ 250.992778][ T4403] dump_header+0x98/0x410 [ 250.997114][ T4403] out_of_memory+0x65c/0x8c0 [ 251.001709][ T4403] memory_max_write+0x32c/0x3d0 [ 251.006564][ T4403] ? memory_max_show+0x70/0x70 [ 251.011331][ T4403] cgroup_file_write+0x161/0x300 [ 251.016274][ T4403] ? __check_object_size+0x22a/0x2d0 [ 251.021567][ T4403] ? cgroup_seqfile_stop+0x70/0x70 [ 251.026682][ T4403] kernfs_fop_write_iter+0x1d3/0x2d0 [ 251.031974][ T4403] do_iter_readv_writev+0x2de/0x380 [ 251.037182][ T4403] do_iter_write+0x192/0x5c0 [ 251.041783][ T4403] ? splice_from_pipe_next+0x34f/0x3b0 [ 251.047323][ T4403] ? kmalloc_array+0x2d/0x40 [ 251.051924][ T4403] vfs_iter_write+0x4c/0x70 [ 251.056557][ T4403] iter_file_splice_write+0x43a/0x790 [ 251.057697][ T4404] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 251.061963][ T4403] ? splice_from_pipe+0xd0/0xd0 [ 251.073285][ T4403] direct_splice_actor+0x80/0xa0 [ 251.078275][ T4403] splice_direct_to_actor+0x345/0x650 [ 251.083661][ T4403] ? do_splice_direct+0x190/0x190 [ 251.088812][ T4403] do_splice_direct+0x106/0x190 [ 251.093681][ T4403] do_sendfile+0x675/0xc40 [ 251.098111][ T4403] __x64_sys_sendfile64+0x102/0x140 [ 251.103343][ T4403] do_syscall_64+0x44/0xd0 [ 251.107770][ T4403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.113674][ T4403] RIP: 0033:0x7f8a9bb9b059 [ 251.118095][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 251.137732][ T4403] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 251.146148][ T4403] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 251.154178][ T4403] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 251.162162][ T4403] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 251.170136][ T4403] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 251.178117][ T4403] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 251.186130][ T4403] [ 251.189343][ T4403] memory: usage 44kB, limit 0kB, failcnt 108 [ 251.195338][ T4403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 251.202180][ T4403] Memory cgroup stats for /syz1: [ 251.205046][ T4403] anon 0 [ 251.205046][ T4403] file 24576 [ 251.205046][ T4403] kernel_stack 0 [ 251.205046][ T4403] pagetables 0 [ 251.205046][ T4403] percpu 0 [ 251.205046][ T4403] sock 0 [ 251.205046][ T4403] vmalloc 0 [ 251.205046][ T4403] shmem 24576 [ 251.205046][ T4403] file_mapped 24576 [ 251.205046][ T4403] file_dirty 0 [ 251.205046][ T4403] file_writeback 0 [ 251.205046][ T4403] swapcached 0 [ 251.205046][ T4403] inactive_anon 4096 [ 251.205046][ T4403] active_anon 20480 [ 251.205046][ T4403] inactive_file 0 [ 251.205046][ T4403] active_file 0 [ 251.205046][ T4403] unevictable 0 [ 251.205046][ T4403] slab_reclaimable 5544 [ 251.205046][ T4403] slab_unreclaimable 13400 [ 251.205046][ T4403] slab 18944 [ 251.205046][ T4403] workingset_refault_anon 0 [ 251.205046][ T4403] workingset_refault_file 1 16:08:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 251.205046][ T4403] workingset_activate_anon 0 [ 251.205046][ T4403] workingset_activate_file 0 [ 251.205046][ T4403] workingset_restore_anon 0 [ 251.298635][ T4403] Out of memory and no killable processes... [ 251.317422][ T4408] device wireguard0 entered promiscuous mode [ 251.374883][ T4412] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 251.385095][ T4412] CPU: 1 PID: 4412 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 251.388019][ T4414] loop2: detected capacity change from 0 to 4 [ 251.396029][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.396043][ T4412] Call Trace: [ 251.396048][ T4412] [ 251.396055][ T4412] dump_stack_lvl+0xd6/0x122 [ 251.396083][ T4412] dump_stack+0x11/0x1b [ 251.420548][ T4414] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 251.422949][ T4412] dump_header+0x98/0x410 [ 251.422975][ T4412] out_of_memory+0x65c/0x8c0 [ 251.442457][ T4412] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 251.448315][ T4412] memory_max_write+0x32c/0x3d0 [ 251.453255][ T4412] ? memory_max_show+0x70/0x70 [ 251.458028][ T4412] cgroup_file_write+0x161/0x300 [ 251.463055][ T4412] ? __check_object_size+0x22a/0x2d0 [ 251.468343][ T4412] ? cgroup_seqfile_stop+0x70/0x70 [ 251.473461][ T4412] kernfs_fop_write_iter+0x1d3/0x2d0 [ 251.478752][ T4412] do_iter_readv_writev+0x2de/0x380 [ 251.483974][ T4412] do_iter_write+0x192/0x5c0 [ 251.488607][ T4412] ? splice_from_pipe_next+0x34f/0x3b0 [ 251.494126][ T4412] ? kmalloc_array+0x2d/0x40 [ 251.498818][ T4412] vfs_iter_write+0x4c/0x70 [ 251.503384][ T4412] iter_file_splice_write+0x43a/0x790 [ 251.508769][ T4412] ? splice_from_pipe+0xd0/0xd0 [ 251.513629][ T4412] direct_splice_actor+0x80/0xa0 [ 251.518673][ T4412] splice_direct_to_actor+0x345/0x650 [ 251.524076][ T4412] ? do_splice_direct+0x190/0x190 [ 251.529257][ T4412] do_splice_direct+0x106/0x190 [ 251.534204][ T4412] do_sendfile+0x675/0xc40 [ 251.538645][ T4412] __x64_sys_sendfile64+0x102/0x140 [ 251.543944][ T4412] do_syscall_64+0x44/0xd0 [ 251.548434][ T4412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.554401][ T4412] RIP: 0033:0x7efc3b498059 [ 251.558816][ T4412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 251.578428][ T4412] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 251.586888][ T4412] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 251.594861][ T4412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 251.602904][ T4412] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 251.610924][ T4412] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 251.618896][ T4412] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 251.626887][ T4412] [ 251.630025][ T4412] memory: usage 44kB, limit 0kB, failcnt 108 [ 251.636022][ T4412] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 251.642871][ T4412] Memory cgroup stats for /syz1: [ 251.645176][ T4412] anon 0 [ 251.645176][ T4412] file 24576 [ 251.645176][ T4412] kernel_stack 0 [ 251.645176][ T4412] pagetables 0 [ 251.645176][ T4412] percpu 0 [ 251.645176][ T4412] sock 0 [ 251.645176][ T4412] vmalloc 0 [ 251.645176][ T4412] shmem 24576 [ 251.645176][ T4412] file_mapped 24576 [ 251.645176][ T4412] file_dirty 0 [ 251.645176][ T4412] file_writeback 0 [ 251.645176][ T4412] swapcached 0 [ 251.645176][ T4412] inactive_anon 4096 [ 251.645176][ T4412] active_anon 20480 [ 251.645176][ T4412] inactive_file 0 [ 251.645176][ T4412] active_file 0 [ 251.645176][ T4412] unevictable 0 [ 251.645176][ T4412] slab_reclaimable 4400 [ 251.645176][ T4412] slab_unreclaimable 13400 [ 251.645176][ T4412] slab 17800 [ 251.645176][ T4412] workingset_refault_anon 0 [ 251.645176][ T4412] workingset_refault_file 1 16:08:35 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 251.645176][ T4412] workingset_activate_anon 0 [ 251.645176][ T4412] workingset_activate_file 0 [ 251.645176][ T4412] workingset_restore_anon 0 [ 251.738680][ T4412] Out of memory and no killable processes... 16:08:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 251.795592][ T4419] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 251.805879][ T4419] CPU: 1 PID: 4419 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 251.816818][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.827011][ T4419] Call Trace: [ 251.830291][ T4419] [ 251.833231][ T4419] dump_stack_lvl+0xd6/0x122 [ 251.837837][ T4419] dump_stack+0x11/0x1b [ 251.842032][ T4419] dump_header+0x98/0x410 [ 251.846365][ T4419] out_of_memory+0x65c/0x8c0 [ 251.851035][ T4419] memory_max_write+0x32c/0x3d0 [ 251.855899][ T4419] ? memory_max_show+0x70/0x70 [ 251.860669][ T4419] cgroup_file_write+0x161/0x300 [ 251.865623][ T4419] ? __check_object_size+0x22a/0x2d0 [ 251.870916][ T4419] ? cgroup_seqfile_stop+0x70/0x70 [ 251.876082][ T4419] kernfs_fop_write_iter+0x1d3/0x2d0 [ 251.881374][ T4419] do_iter_readv_writev+0x2de/0x380 [ 251.886580][ T4419] do_iter_write+0x192/0x5c0 [ 251.891171][ T4419] ? splice_from_pipe_next+0x34f/0x3b0 [ 251.896661][ T4419] ? kmalloc_array+0x2d/0x40 [ 251.901269][ T4419] vfs_iter_write+0x4c/0x70 [ 251.905804][ T4419] iter_file_splice_write+0x43a/0x790 [ 251.911205][ T4419] ? splice_from_pipe+0xd0/0xd0 [ 251.916062][ T4419] direct_splice_actor+0x80/0xa0 [ 251.921074][ T4419] splice_direct_to_actor+0x345/0x650 [ 251.926453][ T4419] ? do_splice_direct+0x190/0x190 [ 251.931509][ T4419] do_splice_direct+0x106/0x190 [ 251.936372][ T4419] do_sendfile+0x675/0xc40 [ 251.940798][ T4419] __x64_sys_sendfile64+0x102/0x140 [ 251.946011][ T4419] do_syscall_64+0x44/0xd0 [ 251.950429][ T4419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.956473][ T4419] RIP: 0033:0x7f8a9bb9b059 [ 251.960889][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 251.980560][ T4419] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 251.988994][ T4419] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 251.996975][ T4419] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 252.004996][ T4419] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 252.012970][ T4419] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 252.020941][ T4419] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 252.028964][ T4419] [ 252.032115][ T4419] memory: usage 44kB, limit 0kB, failcnt 108 [ 252.038105][ T4419] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:08:35 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 252.044971][ T4419] Memory cgroup stats for /syz1: [ 252.048867][ T4422] loop2: detected capacity change from 0 to 4 [ 252.071724][ T4422] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:08:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000180012800e0001007769726567756172640000000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 16:08:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 252.154166][ T4441] loop2: detected capacity change from 0 to 4 [ 252.180545][ T4441] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 252.187196][ T4444] device wireguard0 entered promiscuous mode [ 252.195044][ T4419] anon 0 [ 252.195044][ T4419] file 24576 [ 252.195044][ T4419] kernel_stack 0 [ 252.195044][ T4419] pagetables 0 [ 252.195044][ T4419] percpu 0 [ 252.195044][ T4419] sock 0 [ 252.195044][ T4419] vmalloc 0 [ 252.195044][ T4419] shmem 24576 [ 252.195044][ T4419] file_mapped 24576 [ 252.195044][ T4419] file_dirty 0 [ 252.195044][ T4419] file_writeback 0 [ 252.195044][ T4419] swapcached 0 [ 252.195044][ T4419] inactive_anon 4096 [ 252.195044][ T4419] active_anon 20480 [ 252.195044][ T4419] inactive_file 0 [ 252.195044][ T4419] active_file 0 [ 252.195044][ T4419] unevictable 0 [ 252.195044][ T4419] slab_reclaimable 4400 [ 252.195044][ T4419] slab_unreclaimable 13400 [ 252.195044][ T4419] slab 17800 [ 252.195044][ T4419] workingset_refault_anon 0 [ 252.195044][ T4419] workingset_refault_file 1 [ 252.195044][ T4419] workingset_activate_anon 0 [ 252.195044][ T4419] workingset_activate_file 0 [ 252.195044][ T4419] workingset_restore_anon 0 [ 252.283582][ T4419] Out of memory and no killable processes... [ 252.289986][ T4429] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 252.300245][ T4429] CPU: 0 PID: 4429 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 252.311202][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.321279][ T4429] Call Trace: [ 252.324565][ T4429] [ 252.327494][ T4429] dump_stack_lvl+0xd6/0x122 [ 252.332091][ T4429] dump_stack+0x11/0x1b [ 252.336253][ T4429] dump_header+0x98/0x410 [ 252.340592][ T4429] out_of_memory+0x65c/0x8c0 [ 252.345186][ T4429] memory_max_write+0x32c/0x3d0 [ 252.350080][ T4429] ? memory_max_show+0x70/0x70 [ 252.354849][ T4429] cgroup_file_write+0x161/0x300 [ 252.359894][ T4429] ? __check_object_size+0x22a/0x2d0 [ 252.365192][ T4429] ? cgroup_seqfile_stop+0x70/0x70 [ 252.370325][ T4429] kernfs_fop_write_iter+0x1d3/0x2d0 [ 252.375692][ T4429] do_iter_readv_writev+0x2de/0x380 [ 252.380900][ T4429] do_iter_write+0x192/0x5c0 [ 252.385540][ T4429] ? splice_from_pipe_next+0x34f/0x3b0 [ 252.391147][ T4429] ? kmalloc_array+0x2d/0x40 [ 252.395769][ T4429] vfs_iter_write+0x4c/0x70 [ 252.400286][ T4429] iter_file_splice_write+0x43a/0x790 [ 252.405687][ T4429] ? splice_from_pipe+0xd0/0xd0 [ 252.410542][ T4429] direct_splice_actor+0x80/0xa0 [ 252.415516][ T4429] splice_direct_to_actor+0x345/0x650 [ 252.420890][ T4429] ? do_splice_direct+0x190/0x190 [ 252.425945][ T4429] do_splice_direct+0x106/0x190 [ 252.430804][ T4429] do_sendfile+0x675/0xc40 [ 252.435369][ T4429] __x64_sys_sendfile64+0x102/0x140 [ 252.440594][ T4429] do_syscall_64+0x44/0xd0 [ 252.445033][ T4429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.450933][ T4429] RIP: 0033:0x7efc3b498059 [ 252.455354][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 252.481279][ T4429] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 252.489772][ T4429] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 252.497751][ T4429] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 252.505725][ T4429] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 252.513760][ T4429] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 252.521762][ T4429] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 252.529737][ T4429] [ 252.532798][ T4429] memory: usage 44kB, limit 0kB, failcnt 108 [ 252.538797][ T4429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 252.545700][ T4429] Memory cgroup stats for /syz1: [ 252.553399][ T4429] anon 0 [ 252.553399][ T4429] file 24576 [ 252.553399][ T4429] kernel_stack 0 [ 252.553399][ T4429] pagetables 0 [ 252.553399][ T4429] percpu 0 [ 252.553399][ T4429] sock 0 [ 252.553399][ T4429] vmalloc 0 [ 252.553399][ T4429] shmem 24576 [ 252.553399][ T4429] file_mapped 24576 [ 252.553399][ T4429] file_dirty 0 [ 252.553399][ T4429] file_writeback 0 [ 252.553399][ T4429] swapcached 0 [ 252.553399][ T4429] inactive_anon 4096 [ 252.553399][ T4429] active_anon 20480 [ 252.553399][ T4429] inactive_file 0 [ 252.553399][ T4429] active_file 0 [ 252.553399][ T4429] unevictable 0 [ 252.553399][ T4429] slab_reclaimable 4400 [ 252.553399][ T4429] slab_unreclaimable 13400 [ 252.553399][ T4429] slab 17800 [ 252.553399][ T4429] workingset_refault_anon 0 [ 252.553399][ T4429] workingset_refault_file 1 [ 252.553399][ T4429] workingset_activate_anon 0 [ 252.553399][ T4429] workingset_activate_file 0 [ 252.553399][ T4429] workingset_restore_anon 0 [ 252.646817][ T4429] Out of memory and no killable processes... [ 253.873477][ T4510] chnl_net:caif_netlink_parms(): no params data found [ 253.973733][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.980913][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.006461][ T4510] device bridge_slave_0 entered promiscuous mode [ 254.026722][ T2416] device hsr_slave_0 left promiscuous mode [ 254.033142][ T2416] device hsr_slave_1 left promiscuous mode [ 254.047376][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.054846][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.066794][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.074215][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.084161][ T2416] device bridge_slave_1 left promiscuous mode [ 254.090364][ T2416] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.116364][ T2416] device bridge_slave_0 left promiscuous mode [ 254.122621][ T2416] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.134149][ T2416] device veth1_macvtap left promiscuous mode [ 254.140196][ T2416] device veth0_macvtap left promiscuous mode [ 254.146234][ T2416] device veth1_vlan left promiscuous mode [ 254.152019][ T2416] device veth0_vlan left promiscuous mode [ 254.259110][ T2416] team0 (unregistering): Port device team_slave_1 removed [ 254.270244][ T2416] team0 (unregistering): Port device team_slave_0 removed [ 254.281650][ T2416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.294080][ T2416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.330260][ T2416] bond0 (unregistering): Released all slaves [ 254.387194][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.394440][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.403555][ T4510] device bridge_slave_1 entered promiscuous mode [ 254.422160][ T4510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.434397][ T4510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.454234][ T4510] team0: Port device team_slave_0 added [ 254.462428][ T4510] team0: Port device team_slave_1 added [ 254.479367][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.486425][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.512373][ T4510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.526025][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.532985][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.559089][ T4510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.586519][ T4510] device hsr_slave_0 entered promiscuous mode [ 254.593079][ T4510] device hsr_slave_1 entered promiscuous mode [ 254.604073][ T4510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.614430][ T4510] Cannot create hsr debugfs directory [ 254.686552][ T4510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.697703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.707267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.716339][ T4510] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.728782][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.739677][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.749306][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.756391][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.776240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.790988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.799813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.815422][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.822489][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.846000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.870741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.887123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.900272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.910392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.919095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.928886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.937209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.957840][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.991652][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.011046][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.034317][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.044990][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.265246][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.378361][ T4510] device veth0_vlan entered promiscuous mode [ 255.395633][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.404351][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.425287][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.435721][ T4510] device veth1_vlan entered promiscuous mode [ 255.460929][ T4510] device veth0_macvtap entered promiscuous mode [ 255.475955][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.483923][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.505751][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.524859][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.546008][ T4510] device veth1_macvtap entered promiscuous mode [ 255.558168][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.568637][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.578486][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.588922][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.598769][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.609204][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.619124][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.629576][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.639490][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.649926][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.712653][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.722381][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.732139][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.742550][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.753072][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.762907][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.773357][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.783172][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.793612][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.803434][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.813874][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.823706][ T4510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 255.834142][ T4510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.848610][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.858519][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.875154][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:08:39 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:39 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:08:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f465", 0x33, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:39 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='memory.max\x00'}, 0x30) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:08:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000180012800e0001007769726567756172640000000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000180012800e0001007769726567756172640000000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) [ 256.093124][ T4641] loop2: detected capacity change from 0 to 4 [ 256.104139][ T4640] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.114391][ T4640] CPU: 1 PID: 4640 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 256.114443][ T4641] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 256.125328][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.125343][ T4640] Call Trace: [ 256.125348][ T4640] [ 256.125354][ T4640] dump_stack_lvl+0xd6/0x122 [ 256.125443][ T4640] dump_stack+0x11/0x1b [ 256.156867][ T4640] dump_header+0x98/0x410 [ 256.161223][ T4640] oom_kill_process+0x18e/0x4a0 [ 256.166160][ T4640] out_of_memory+0x61d/0x8c0 [ 256.170766][ T4640] memory_max_write+0x32c/0x3d0 [ 256.175674][ T4640] ? memory_max_show+0x70/0x70 [ 256.180510][ T4640] cgroup_file_write+0x161/0x300 [ 256.185462][ T4640] ? __check_object_size+0x22a/0x2d0 [ 256.190765][ T4640] ? cgroup_seqfile_stop+0x70/0x70 [ 256.195935][ T4640] kernfs_fop_write_iter+0x1d3/0x2d0 [ 256.201262][ T4640] do_iter_readv_writev+0x2de/0x380 [ 256.206684][ T4640] do_iter_write+0x192/0x5c0 [ 256.211337][ T4640] ? splice_from_pipe_next+0x34f/0x3b0 [ 256.216878][ T4640] ? kmalloc_array+0x2d/0x40 [ 256.221500][ T4640] vfs_iter_write+0x4c/0x70 [ 256.226118][ T4640] iter_file_splice_write+0x43a/0x790 [ 256.231514][ T4640] ? splice_from_pipe+0xd0/0xd0 [ 256.236383][ T4640] direct_splice_actor+0x80/0xa0 [ 256.241337][ T4640] splice_direct_to_actor+0x345/0x650 [ 256.246732][ T4640] ? do_splice_direct+0x190/0x190 [ 256.251880][ T4640] do_splice_direct+0x106/0x190 [ 256.256753][ T4640] do_sendfile+0x675/0xc40 [ 256.261186][ T4640] __x64_sys_sendfile64+0x102/0x140 [ 256.266470][ T4640] do_syscall_64+0x44/0xd0 [ 256.270969][ T4640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.276874][ T4640] RIP: 0033:0x7efc3b498059 [ 256.281296][ T4640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 256.300975][ T4640] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.309401][ T4640] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 256.317483][ T4640] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 256.325466][ T4640] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 256.333453][ T4640] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 256.341438][ T4640] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 256.349504][ T4640] [ 256.352652][ T4640] memory: usage 204kB, limit 0kB, failcnt 127 [ 256.358774][ T4640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 256.365635][ T4640] Memory cgroup stats for /syz1: [ 256.367660][ T4640] anon 32768 [ 256.367660][ T4640] file 24576 [ 256.367660][ T4640] kernel_stack 16384 [ 256.367660][ T4640] pagetables 53248 [ 256.367660][ T4640] percpu 0 [ 256.367660][ T4640] sock 0 [ 256.367660][ T4640] vmalloc 0 [ 256.367660][ T4640] shmem 24576 [ 256.367660][ T4640] file_mapped 24576 [ 256.367660][ T4640] file_dirty 0 [ 256.367660][ T4640] file_writeback 0 [ 256.367660][ T4640] swapcached 0 [ 256.367660][ T4640] inactive_anon 36864 [ 256.367660][ T4640] active_anon 20480 [ 256.367660][ T4640] inactive_file 0 [ 256.367660][ T4640] active_file 0 [ 256.367660][ T4640] unevictable 0 [ 256.367660][ T4640] slab_reclaimable 8272 [ 256.367660][ T4640] slab_unreclaimable 28376 [ 256.367660][ T4640] slab 36648 [ 256.367660][ T4640] workingset_refault_anon 0 [ 256.367660][ T4640] workingset_refault_file 1 [ 256.367660][ T4640] workingset_activate_anon 0 [ 256.367660][ T4640] workingset_activate_file 0 [ 256.367660][ T4640] workingset_restore_anon 0 [ 256.462359][ T4640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4510,uid=0 [ 256.477629][ T4640] Memory cgroup out of memory: Killed process 4510 (syz-executor.1) total-vm:48480kB, anon-rss:360kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 256.497273][ T26] oom_reaper: reaped process 4510 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB [ 256.506204][ T4642] device wireguard0 entered promiscuous mode [ 256.508536][ T4640] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.524544][ T4640] CPU: 1 PID: 4640 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 256.535602][ T4640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.545662][ T4640] Call Trace: [ 256.548947][ T4640] [ 256.551880][ T4640] dump_stack_lvl+0xd6/0x122 [ 256.556497][ T4640] dump_stack+0x11/0x1b [ 256.560672][ T4640] dump_header+0x98/0x410 [ 256.565013][ T4640] out_of_memory+0x65c/0x8c0 [ 256.569611][ T4640] memory_max_write+0x32c/0x3d0 [ 256.574534][ T4640] ? memory_max_show+0x70/0x70 [ 256.579308][ T4640] cgroup_file_write+0x161/0x300 [ 256.584267][ T4640] ? __check_object_size+0x22a/0x2d0 [ 256.589565][ T4640] ? cgroup_seqfile_stop+0x70/0x70 [ 256.594682][ T4640] kernfs_fop_write_iter+0x1d3/0x2d0 [ 256.599976][ T4640] do_iter_readv_writev+0x2de/0x380 [ 256.605229][ T4640] do_iter_write+0x192/0x5c0 [ 256.609910][ T4640] ? splice_from_pipe_next+0x34f/0x3b0 [ 256.615388][ T4640] ? kmalloc_array+0x2d/0x40 [ 256.620071][ T4640] vfs_iter_write+0x4c/0x70 [ 256.624590][ T4640] iter_file_splice_write+0x43a/0x790 [ 256.629978][ T4640] ? splice_from_pipe+0xd0/0xd0 [ 256.634840][ T4640] direct_splice_actor+0x80/0xa0 [ 256.639792][ T4640] splice_direct_to_actor+0x345/0x650 [ 256.645238][ T4640] ? do_splice_direct+0x190/0x190 [ 256.650399][ T4640] do_splice_direct+0x106/0x190 [ 256.655268][ T4640] do_sendfile+0x675/0xc40 [ 256.659731][ T4640] __x64_sys_sendfile64+0x102/0x140 [ 256.664971][ T4640] do_syscall_64+0x44/0xd0 [ 256.669394][ T4640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.675296][ T4640] RIP: 0033:0x7efc3b498059 [ 256.679707][ T4640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 256.699361][ T4640] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.707772][ T4640] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 256.715817][ T4640] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 256.723799][ T4640] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 256.731778][ T4640] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 256.739758][ T4640] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 256.747736][ T4640] [ 256.750910][ T4640] memory: usage 96kB, limit 0kB, failcnt 144 [ 256.756905][ T4640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 256.763768][ T4640] Memory cgroup stats for /syz1: [ 256.773609][ T4640] anon 0 [ 256.773609][ T4640] file 24576 [ 256.773609][ T4640] kernel_stack 0 [ 256.773609][ T4640] pagetables 0 [ 256.773609][ T4640] percpu 0 [ 256.773609][ T4640] sock 0 [ 256.773609][ T4640] vmalloc 0 [ 256.773609][ T4640] shmem 24576 [ 256.773609][ T4640] file_mapped 24576 [ 256.773609][ T4640] file_dirty 0 [ 256.773609][ T4640] file_writeback 0 [ 256.773609][ T4640] swapcached 0 [ 256.773609][ T4640] inactive_anon 0 [ 256.773609][ T4640] active_anon 24576 [ 256.773609][ T4640] inactive_file 0 [ 256.773609][ T4640] active_file 0 [ 256.773609][ T4640] unevictable 0 [ 256.773609][ T4640] slab_reclaimable 8272 [ 256.773609][ T4640] slab_unreclaimable 13904 [ 256.773609][ T4640] slab 22176 [ 256.773609][ T4640] workingset_refault_anon 0 [ 256.773609][ T4640] workingset_refault_file 1 [ 256.773609][ T4640] workingset_activate_anon 0 [ 256.773609][ T4640] workingset_activate_file 0 [ 256.773609][ T4640] workingset_restore_anon 0 [ 256.866768][ T4640] Out of memory and no killable processes... [ 256.872763][ T4639] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.882998][ T4639] CPU: 0 PID: 4639 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 256.893960][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.904041][ T4639] Call Trace: [ 256.907378][ T4639] [ 256.910324][ T4639] dump_stack_lvl+0xd6/0x122 [ 256.914945][ T4639] dump_stack+0x11/0x1b [ 256.919113][ T4639] dump_header+0x98/0x410 [ 256.923519][ T4639] out_of_memory+0x65c/0x8c0 [ 256.928136][ T4639] memory_max_write+0x32c/0x3d0 [ 256.932999][ T4639] ? memory_max_show+0x70/0x70 [ 256.937810][ T4639] cgroup_file_write+0x161/0x300 [ 256.942765][ T4639] ? __check_object_size+0x22a/0x2d0 [ 256.948235][ T4639] ? cgroup_seqfile_stop+0x70/0x70 [ 256.953359][ T4639] kernfs_fop_write_iter+0x1d3/0x2d0 [ 256.958661][ T4639] do_iter_readv_writev+0x2de/0x380 [ 256.963884][ T4639] do_iter_write+0x192/0x5c0 [ 256.968568][ T4639] ? splice_from_pipe_next+0x34f/0x3b0 [ 256.974046][ T4639] ? kmalloc_array+0x2d/0x40 [ 256.978656][ T4639] vfs_iter_write+0x4c/0x70 [ 256.983174][ T4639] iter_file_splice_write+0x43a/0x790 [ 256.988575][ T4639] ? splice_from_pipe+0xd0/0xd0 [ 256.993453][ T4639] direct_splice_actor+0x80/0xa0 [ 256.998406][ T4639] splice_direct_to_actor+0x345/0x650 [ 257.003864][ T4639] ? do_splice_direct+0x190/0x190 [ 257.008989][ T4639] do_splice_direct+0x106/0x190 [ 257.013876][ T4639] do_sendfile+0x675/0xc40 [ 257.018314][ T4639] __x64_sys_sendfile64+0x102/0x140 [ 257.023545][ T4639] do_syscall_64+0x44/0xd0 [ 257.027981][ T4639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.033889][ T4639] RIP: 0033:0x7f8a9bb9b059 [ 257.038318][ T4639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 257.057935][ T4639] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 257.066392][ T4639] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 257.074402][ T4639] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 257.082392][ T4639] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 257.090373][ T4639] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 16:08:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f465", 0x33, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 257.098391][ T4639] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 257.106475][ T4639] [ 257.109698][ T4639] memory: usage 52kB, limit 0kB, failcnt 144 [ 257.115692][ T4639] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 257.122590][ T4639] Memory cgroup stats for /syz1: [ 257.130716][ T4651] loop2: detected capacity change from 0 to 4 [ 257.160398][ T4651] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 257.216693][ T4639] anon 0 [ 257.216693][ T4639] file 24576 [ 257.216693][ T4639] kernel_stack 0 [ 257.216693][ T4639] pagetables 0 [ 257.216693][ T4639] percpu 0 [ 257.216693][ T4639] sock 0 [ 257.216693][ T4639] vmalloc 0 [ 257.216693][ T4639] shmem 24576 [ 257.216693][ T4639] file_mapped 24576 [ 257.216693][ T4639] file_dirty 0 [ 257.216693][ T4639] file_writeback 0 [ 257.216693][ T4639] swapcached 0 [ 257.216693][ T4639] inactive_anon 0 [ 257.216693][ T4639] active_anon 24576 [ 257.216693][ T4639] inactive_file 0 16:08:40 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 257.216693][ T4639] active_file 0 [ 257.216693][ T4639] unevictable 0 [ 257.216693][ T4639] slab_reclaimable 5544 [ 257.216693][ T4639] slab_unreclaimable 13400 [ 257.216693][ T4639] slab 18944 [ 257.216693][ T4639] workingset_refault_anon 0 [ 257.216693][ T4639] workingset_refault_file 1 [ 257.216693][ T4639] workingset_activate_anon 0 [ 257.216693][ T4639] workingset_activate_file 0 [ 257.216693][ T4639] workingset_restore_anon 0 [ 257.305020][ T4639] Out of memory and no killable processes... 16:08:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f465", 0x33, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 257.365630][ T4654] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 257.375898][ T4654] CPU: 1 PID: 4654 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 257.386960][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.397023][ T4654] Call Trace: [ 257.400306][ T4654] [ 257.403240][ T4654] dump_stack_lvl+0xd6/0x122 [ 257.407890][ T4654] dump_stack+0x11/0x1b [ 257.412056][ T4654] dump_header+0x98/0x410 [ 257.416395][ T4654] out_of_memory+0x65c/0x8c0 [ 257.421004][ T4654] memory_max_write+0x32c/0x3d0 [ 257.425928][ T4654] ? memory_max_show+0x70/0x70 [ 257.430702][ T4654] cgroup_file_write+0x161/0x300 [ 257.435697][ T4654] ? __check_object_size+0x22a/0x2d0 [ 257.440996][ T4654] ? cgroup_seqfile_stop+0x70/0x70 [ 257.446172][ T4654] kernfs_fop_write_iter+0x1d3/0x2d0 [ 257.451561][ T4654] do_iter_readv_writev+0x2de/0x380 [ 257.456779][ T4654] do_iter_write+0x192/0x5c0 [ 257.461492][ T4654] ? splice_from_pipe_next+0x34f/0x3b0 [ 257.467022][ T4654] ? kmalloc_array+0x2d/0x40 [ 257.471617][ T4654] vfs_iter_write+0x4c/0x70 [ 257.476128][ T4654] iter_file_splice_write+0x43a/0x790 [ 257.481629][ T4654] ? splice_from_pipe+0xd0/0xd0 [ 257.486543][ T4654] direct_splice_actor+0x80/0xa0 [ 257.491487][ T4654] splice_direct_to_actor+0x345/0x650 [ 257.496951][ T4654] ? do_splice_direct+0x190/0x190 [ 257.502045][ T4654] do_splice_direct+0x106/0x190 [ 257.506913][ T4654] do_sendfile+0x675/0xc40 [ 257.511347][ T4654] __x64_sys_sendfile64+0x102/0x140 [ 257.516565][ T4654] do_syscall_64+0x44/0xd0 [ 257.520993][ T4654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.526900][ T4654] RIP: 0033:0x7f8a9bb9b059 [ 257.531404][ T4654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 257.551236][ T4654] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 16:08:40 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 257.559685][ T4654] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 257.567665][ T4654] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 257.575637][ T4654] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 257.583614][ T4654] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 257.591608][ T4654] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 257.599596][ T4654] [ 257.602709][ T4654] memory: usage 52kB, limit 0kB, failcnt 144 [ 257.608773][ T4654] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:08:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffeffff}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x6c}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0x952, 0x200000) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x220, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x840) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) [ 257.615704][ T4654] Memory cgroup stats for /syz1: [ 257.618691][ T4656] loop2: detected capacity change from 0 to 4 [ 257.621811][ T4654] anon 0 [ 257.621811][ T4654] file 24576 [ 257.621811][ T4654] kernel_stack 0 [ 257.621811][ T4654] pagetables 0 [ 257.621811][ T4654] percpu 0 [ 257.621811][ T4654] sock 0 [ 257.621811][ T4654] vmalloc 0 [ 257.621811][ T4654] shmem 24576 [ 257.621811][ T4654] file_mapped 24576 [ 257.621811][ T4654] file_dirty 0 [ 257.621811][ T4654] file_writeback 0 [ 257.621811][ T4654] swapcached 0 [ 257.621811][ T4654] inactive_anon 0 [ 257.621811][ T4654] active_anon 24576 [ 257.621811][ T4654] inactive_file 0 [ 257.621811][ T4654] active_file 0 [ 257.621811][ T4654] unevictable 0 [ 257.621811][ T4654] slab_reclaimable 5544 [ 257.621811][ T4654] slab_unreclaimable 13400 [ 257.621811][ T4654] slab 18944 [ 257.621811][ T4654] workingset_refault_anon 0 [ 257.621811][ T4654] workingset_refault_file 1 [ 257.621811][ T4654] workingset_activate_anon 0 [ 257.621811][ T4654] workingset_activate_file 0 [ 257.621811][ T4654] workingset_restore_anon 0 16:08:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffeffff}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x6c}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0x952, 0x200000) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x220, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x840) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffeffff}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) (async) sysinfo(&(0x7f00000007c0)=""/142) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x6c}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000001c0), 0x952, 0x200000) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x2) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x220, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) (async) [ 257.717923][ T4654] Out of memory and no killable processes... [ 257.730287][ T4656] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:08:41 executing program 4: delete_module(&(0x7f0000000000)='[\x00', 0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x5687c947e9e18eb4, 0x8, 0x2, 0x8000, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x7, 0xcd, [@local]}, @ra={0x94, 0x4}, @noop]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r3 = socket$inet(0x2, 0x1, 0x0) fstat(r3, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@acquire={0x3e0, 0x17, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d2, 0x33}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@mcast1, 0x4e23, 0x8, 0x4e22, 0xc3cc, 0xa, 0xa0, 0x0, 0x3a, r1, r2}, {{@in6=@empty, @in=@multicast2, 0x4e21, 0x5ad1, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, {0x7fffffff, 0x9, 0x3, 0xbc6, 0x6, 0x73, 0x6cef, 0x5}, {0x3, 0x200, 0x0, 0x7fffffffffffffff}, 0x6fd, 0x0, 0x2, 0x1, 0x2}, 0x5a, 0xabb6, 0x0, 0x70bd2a}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x80, 0xa, 0x0, 0xa0, 0xc, 0x0, 0xee01}, {0x7fff, 0x12ad009, 0x6, 0x6073, 0x4, 0x2, 0x3, 0x20}, {0x7, 0x5, 0x8, 0x7}, 0x745b, 0x6e6bb5, 0x2, 0x1, 0x1}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-neonbs\x00'}, 0x6f8, "361992be3f97707ec3d434f0d586be1b3910532e98d4fa4ea5a88bbdafaf8c5b9bb2d08b96dcc4bb1750b96ef8742472166e30dd1251c267082d3479046b4da35733f7617004dd18aab8a18d9b63aa6f47a36c908f59d2e9d420c4b6c708e51013a322deb8f64cc8795b97af8f09b3eb39f8eabcc2251f2459d09683ef9e9be56f5c2e6a707565ed42a52b31530df486e7d3bad930e9123e635fc9cab8e657528b9aaa6b76be7701ffde48a15a2bb33a04d05f57017a648a128ef90dd10ffad1287c79df8693dd064b4fa9b2bb9fec9fd5abab8275e5f3e129d75f5804167f"}}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e21, 0x1f, 0x2, 0x60, 0x20, 0x2b, 0x0, 0xee01}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6}, @in=@local, {0xfff, 0x1, 0x4, 0x9f1, 0x10001, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x7f, 0x6}, {0x80000000, 0x22, 0x7f}, 0x70bd26, 0x3507, 0x2, 0x1, 0x4, 0x16}}]}, 0x3e0}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000fc0), 0x14200, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x6500, 0x4, &(0x7f0000001340)) getgroups(0x8, &(0x7f0000001440)=[r5, r5, r5, r5, r5, r5, r5, r5]) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b755604fc3134a1200a8b746851c85f5f9db6bf113f6c87dc28ec42862514898fc40ee4f6ebc9d4d22592663de458620295e9352b130765b73f4e4480d95378453f04f6a815a5815efdb5f011ca552949453296901f298e5f8478a7144c6bef5a454bfbb232f78675c1", 0x6a}, {&(0x7f0000000040)="2de2", 0x2}, {&(0x7f00000001c0)="382cfe70a48bc96726982b4e5c8bdaf125288070fdce46ff7dea25b6bcfc672cf8ef0612bdb84780c9708b0ec618ec60bef26a8d3b2a2e8279b88ba95252fbc0031c15b3709aa17a34c14f1f85f4d43a090db9b4a5d1a3007d839b7265f2", 0x5e}, {&(0x7f0000000380)="e6a79487b55f610757307d9742a683dacda3", 0x12}, {&(0x7f00000003c0)="cb147f3e71bad2b292ad3f0ce32886", 0xf}, {&(0x7f0000000840)="859fe96840f6cd722b27e7f6404f7c7e6e1a11560b20cf19b8fb302d854296a7f15e2f4181b2729e001689dcf752df2eb486edf19cd30191c3ed2c9845f4870c2a63c594e6d2c78da7782f38e4175f8867cbbd5f60e6554c8a549f5ad0456dfed2619c94403b1d2a6f0af5e923400dfaa7d007490abf5365e2ae2e33ad5193a565cbcc8d54781da45fb406", 0x8b}, {&(0x7f0000000900)="0a10cb9d6988e2f9ce36bcfc7472fbb8a00ca2eb7e7dca6ffb8d2eb8521c390caabd828177a7a91c800dfda53f7a7e9a981b1bd7e70dc1211a99839477a8d0152cf8cf193c0c44a1587808db796825c517749375ffff6913269a8734cdd91cec44bf99e785746faa5af161ab591e02ceeed2cf9df9e7f1d89e5d09848408a48eee36aac7128b7a12f7adf766c84d4c9d75cc217e0efff8a888fd1fbfe781e278", 0xa0}], 0x7, 0x0, 0x0, 0x20040000}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="99b2dc3ce4f3c7e6402e0bd6e1964134a41fdd1ac9e0197d161e6b536669ca8b5cab508786d4fcf04ff8733ab264f3a0d8d3ea80496171ff69fa3d2df61cd399836249d99af7087f77250ba2af25f0570d07da8ac70d95cce058544b77bd012838d22d65111af45ab556fdb3b6d4a714b5a122bfd77caa9891226496cee3970461", 0x81}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x24008805}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="9af8b95b8c08e651394f2fce7463b20ee479c9d7144e491b7b6af4418c69f208199587772bfe9af105e170742bdf36afd4f854e576c65599d24b95c362cd4fe2d9ec189b428f36c965a7b2870e96", 0x4e}], 0x1, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r10, r11, r0]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000bc0)="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", 0x161}, {&(0x7f00000011c0)="e0fd9aa21d5e9d82084fb3b9fde0c1088f9281b5a5085325113aa1bb95d1d56f2b9c47f3f6ce378393135367b82e1bb367616619a9d02258418ff17df5b474303a28959005763d767eacbb345c2dfe0ace6b0b974c88ead2d227d93974db5c80d2f378bb1af5a5017ef73ad024def22181a969e86a21bfa84e1d2dca4af45d100fe5d669ff99af866752e3c0dfb63ec6777f08ce16e1bb6ab72b966d5ceb775de75c2f08bf928b4b41ff65ee67e88ce43c5bf739e32a12cf0f2f7f232ad9c377a9d38def75a3f44ae81010031b79c11947415a5ddf4093c752eb0b3f6859c2e1ccbe1c85", 0xe4}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}], 0x20, 0x40}}], 0x4, 0x4080045) 16:08:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:41 executing program 4: delete_module(&(0x7f0000000000)='[\x00', 0x800) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x5687c947e9e18eb4, 0x8, 0x2, 0x8000, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x7, 0xcd, [@local]}, @ra={0x94, 0x4}, @noop]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) (async) r3 = socket$inet(0x2, 0x1, 0x0) fstat(r3, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@acquire={0x3e0, 0x17, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d2, 0x33}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@mcast1, 0x4e23, 0x8, 0x4e22, 0xc3cc, 0xa, 0xa0, 0x0, 0x3a, r1, r2}, {{@in6=@empty, @in=@multicast2, 0x4e21, 0x5ad1, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, {0x7fffffff, 0x9, 0x3, 0xbc6, 0x6, 0x73, 0x6cef, 0x5}, {0x3, 0x200, 0x0, 0x7fffffffffffffff}, 0x6fd, 0x0, 0x2, 0x1, 0x2}, 0x5a, 0xabb6, 0x0, 0x70bd2a}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x80, 0xa, 0x0, 0xa0, 0xc, 0x0, 0xee01}, {0x7fff, 0x12ad009, 0x6, 0x6073, 0x4, 0x2, 0x3, 0x20}, {0x7, 0x5, 0x8, 0x7}, 0x745b, 0x6e6bb5, 0x2, 0x1, 0x1}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-neonbs\x00'}, 0x6f8, "361992be3f97707ec3d434f0d586be1b3910532e98d4fa4ea5a88bbdafaf8c5b9bb2d08b96dcc4bb1750b96ef8742472166e30dd1251c267082d3479046b4da35733f7617004dd18aab8a18d9b63aa6f47a36c908f59d2e9d420c4b6c708e51013a322deb8f64cc8795b97af8f09b3eb39f8eabcc2251f2459d09683ef9e9be56f5c2e6a707565ed42a52b31530df486e7d3bad930e9123e635fc9cab8e657528b9aaa6b76be7701ffde48a15a2bb33a04d05f57017a648a128ef90dd10ffad1287c79df8693dd064b4fa9b2bb9fec9fd5abab8275e5f3e129d75f5804167f"}}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e21, 0x1f, 0x2, 0x60, 0x20, 0x2b, 0x0, 0xee01}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6}, @in=@local, {0xfff, 0x1, 0x4, 0x9f1, 0x10001, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x7f, 0x6}, {0x80000000, 0x22, 0x7f}, 0x70bd26, 0x3507, 0x2, 0x1, 0x4, 0x16}}]}, 0x3e0}}, 0x0) (async) keyctl$chown(0x4, 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000fc0), 0x14200, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x6500, 0x4, &(0x7f0000001340)) (async) getgroups(0x8, &(0x7f0000001440)=[r5, r5, r5, r5, r5, r5, r5, r5]) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b755604fc3134a1200a8b746851c85f5f9db6bf113f6c87dc28ec42862514898fc40ee4f6ebc9d4d22592663de458620295e9352b130765b73f4e4480d95378453f04f6a815a5815efdb5f011ca552949453296901f298e5f8478a7144c6bef5a454bfbb232f78675c1", 0x6a}, {&(0x7f0000000040)="2de2", 0x2}, {&(0x7f00000001c0)="382cfe70a48bc96726982b4e5c8bdaf125288070fdce46ff7dea25b6bcfc672cf8ef0612bdb84780c9708b0ec618ec60bef26a8d3b2a2e8279b88ba95252fbc0031c15b3709aa17a34c14f1f85f4d43a090db9b4a5d1a3007d839b7265f2", 0x5e}, {&(0x7f0000000380)="e6a79487b55f610757307d9742a683dacda3", 0x12}, {&(0x7f00000003c0)="cb147f3e71bad2b292ad3f0ce32886", 0xf}, {&(0x7f0000000840)="859fe96840f6cd722b27e7f6404f7c7e6e1a11560b20cf19b8fb302d854296a7f15e2f4181b2729e001689dcf752df2eb486edf19cd30191c3ed2c9845f4870c2a63c594e6d2c78da7782f38e4175f8867cbbd5f60e6554c8a549f5ad0456dfed2619c94403b1d2a6f0af5e923400dfaa7d007490abf5365e2ae2e33ad5193a565cbcc8d54781da45fb406", 0x8b}, {&(0x7f0000000900)="0a10cb9d6988e2f9ce36bcfc7472fbb8a00ca2eb7e7dca6ffb8d2eb8521c390caabd828177a7a91c800dfda53f7a7e9a981b1bd7e70dc1211a99839477a8d0152cf8cf193c0c44a1587808db796825c517749375ffff6913269a8734cdd91cec44bf99e785746faa5af161ab591e02ceeed2cf9df9e7f1d89e5d09848408a48eee36aac7128b7a12f7adf766c84d4c9d75cc217e0efff8a888fd1fbfe781e278", 0xa0}], 0x7, 0x0, 0x0, 0x20040000}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="99b2dc3ce4f3c7e6402e0bd6e1964134a41fdd1ac9e0197d161e6b536669ca8b5cab508786d4fcf04ff8733ab264f3a0d8d3ea80496171ff69fa3d2df61cd399836249d99af7087f77250ba2af25f0570d07da8ac70d95cce058544b77bd012838d22d65111af45ab556fdb3b6d4a714b5a122bfd77caa9891226496cee3970461", 0x81}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x24008805}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="9af8b95b8c08e651394f2fce7463b20ee479c9d7144e491b7b6af4418c69f208199587772bfe9af105e170742bdf36afd4f854e576c65599d24b95c362cd4fe2d9ec189b428f36c965a7b2870e96", 0x4e}], 0x1, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r10, r11, r0]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000bc0)="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", 0x161}, {&(0x7f00000011c0)="e0fd9aa21d5e9d82084fb3b9fde0c1088f9281b5a5085325113aa1bb95d1d56f2b9c47f3f6ce378393135367b82e1bb367616619a9d02258418ff17df5b474303a28959005763d767eacbb345c2dfe0ace6b0b974c88ead2d227d93974db5c80d2f378bb1af5a5017ef73ad024def22181a969e86a21bfa84e1d2dca4af45d100fe5d669ff99af866752e3c0dfb63ec6777f08ce16e1bb6ab72b966d5ceb775de75c2f08bf928b4b41ff65ee67e88ce43c5bf739e32a12cf0f2f7f232ad9c377a9d38def75a3f44ae81010031b79c11947415a5ddf4093c752eb0b3f6859c2e1ccbe1c85", 0xe4}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}], 0x20, 0x40}}], 0x4, 0x4080045) 16:08:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffeffff}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x6c}}, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0x952, 0x200000) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x2) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x220, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 16:08:41 executing program 4: delete_module(&(0x7f0000000000)='[\x00', 0x800) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x5687c947e9e18eb4, 0x8, 0x2, 0x8000, {{0x8, 0x4, 0x2, 0x16, 0x20, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x7, 0xcd, [@local]}, @ra={0x94, 0x4}, @noop]}}}}}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) (async) r3 = socket$inet(0x2, 0x1, 0x0) fstat(r3, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@acquire={0x3e0, 0x17, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d2, 0x33}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@mcast1, 0x4e23, 0x8, 0x4e22, 0xc3cc, 0xa, 0xa0, 0x0, 0x3a, r1, r2}, {{@in6=@empty, @in=@multicast2, 0x4e21, 0x5ad1, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, {0x7fffffff, 0x9, 0x3, 0xbc6, 0x6, 0x73, 0x6cef, 0x5}, {0x3, 0x200, 0x0, 0x7fffffffffffffff}, 0x6fd, 0x0, 0x2, 0x1, 0x2}, 0x5a, 0xabb6, 0x0, 0x70bd2a}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x80, 0xa, 0x0, 0xa0, 0xc, 0x0, 0xee01}, {0x7fff, 0x12ad009, 0x6, 0x6073, 0x4, 0x2, 0x3, 0x20}, {0x7, 0x5, 0x8, 0x7}, 0x745b, 0x6e6bb5, 0x2, 0x1, 0x1}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-neonbs\x00'}, 0x6f8, "361992be3f97707ec3d434f0d586be1b3910532e98d4fa4ea5a88bbdafaf8c5b9bb2d08b96dcc4bb1750b96ef8742472166e30dd1251c267082d3479046b4da35733f7617004dd18aab8a18d9b63aa6f47a36c908f59d2e9d420c4b6c708e51013a322deb8f64cc8795b97af8f09b3eb39f8eabcc2251f2459d09683ef9e9be56f5c2e6a707565ed42a52b31530df486e7d3bad930e9123e635fc9cab8e657528b9aaa6b76be7701ffde48a15a2bb33a04d05f57017a648a128ef90dd10ffad1287c79df8693dd064b4fa9b2bb9fec9fd5abab8275e5f3e129d75f5804167f"}}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e21, 0x1f, 0x2, 0x60, 0x20, 0x2b, 0x0, 0xee01}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6}, @in=@local, {0xfff, 0x1, 0x4, 0x9f1, 0x10001, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x7f, 0x6}, {0x80000000, 0x22, 0x7f}, 0x70bd26, 0x3507, 0x2, 0x1, 0x4, 0x16}}]}, 0x3e0}}, 0x0) (async) keyctl$chown(0x4, 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000fc0), 0x14200, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x6500, 0x4, &(0x7f0000001340)) (async) getgroups(0x8, &(0x7f0000001440)=[r5, r5, r5, r5, r5, r5, r5, r5]) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b755604fc3134a1200a8b746851c85f5f9db6bf113f6c87dc28ec42862514898fc40ee4f6ebc9d4d22592663de458620295e9352b130765b73f4e4480d95378453f04f6a815a5815efdb5f011ca552949453296901f298e5f8478a7144c6bef5a454bfbb232f78675c1", 0x6a}, {&(0x7f0000000040)="2de2", 0x2}, {&(0x7f00000001c0)="382cfe70a48bc96726982b4e5c8bdaf125288070fdce46ff7dea25b6bcfc672cf8ef0612bdb84780c9708b0ec618ec60bef26a8d3b2a2e8279b88ba95252fbc0031c15b3709aa17a34c14f1f85f4d43a090db9b4a5d1a3007d839b7265f2", 0x5e}, {&(0x7f0000000380)="e6a79487b55f610757307d9742a683dacda3", 0x12}, {&(0x7f00000003c0)="cb147f3e71bad2b292ad3f0ce32886", 0xf}, {&(0x7f0000000840)="859fe96840f6cd722b27e7f6404f7c7e6e1a11560b20cf19b8fb302d854296a7f15e2f4181b2729e001689dcf752df2eb486edf19cd30191c3ed2c9845f4870c2a63c594e6d2c78da7782f38e4175f8867cbbd5f60e6554c8a549f5ad0456dfed2619c94403b1d2a6f0af5e923400dfaa7d007490abf5365e2ae2e33ad5193a565cbcc8d54781da45fb406", 0x8b}, {&(0x7f0000000900)="0a10cb9d6988e2f9ce36bcfc7472fbb8a00ca2eb7e7dca6ffb8d2eb8521c390caabd828177a7a91c800dfda53f7a7e9a981b1bd7e70dc1211a99839477a8d0152cf8cf193c0c44a1587808db796825c517749375ffff6913269a8734cdd91cec44bf99e785746faa5af161ab591e02ceeed2cf9df9e7f1d89e5d09848408a48eee36aac7128b7a12f7adf766c84d4c9d75cc217e0efff8a888fd1fbfe781e278", 0xa0}], 0x7, 0x0, 0x0, 0x20040000}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="99b2dc3ce4f3c7e6402e0bd6e1964134a41fdd1ac9e0197d161e6b536669ca8b5cab508786d4fcf04ff8733ab264f3a0d8d3ea80496171ff69fa3d2df61cd399836249d99af7087f77250ba2af25f0570d07da8ac70d95cce058544b77bd012838d22d65111af45ab556fdb3b6d4a714b5a122bfd77caa9891226496cee3970461", 0x81}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x24008805}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="9af8b95b8c08e651394f2fce7463b20ee479c9d7144e491b7b6af4418c69f208199587772bfe9af105e170742bdf36afd4f854e576c65599d24b95c362cd4fe2d9ec189b428f36c965a7b2870e96", 0x4e}], 0x1, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r10, r11, r0]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000bc0)="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", 0x161}, {&(0x7f00000011c0)="e0fd9aa21d5e9d82084fb3b9fde0c1088f9281b5a5085325113aa1bb95d1d56f2b9c47f3f6ce378393135367b82e1bb367616619a9d02258418ff17df5b474303a28959005763d767eacbb345c2dfe0ace6b0b974c88ead2d227d93974db5c80d2f378bb1af5a5017ef73ad024def22181a969e86a21bfa84e1d2dca4af45d100fe5d669ff99af866752e3c0dfb63ec6777f08ce16e1bb6ab72b966d5ceb775de75c2f08bf928b4b41ff65ee67e88ce43c5bf739e32a12cf0f2f7f232ad9c377a9d38def75a3f44ae81010031b79c11947415a5ddf4093c752eb0b3f6859c2e1ccbe1c85", 0xe4}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}], 0x20, 0x40}}], 0x4, 0x4080045) [ 257.837709][ T4682] loop2: detected capacity change from 0 to 4 [ 257.859376][ T4682] EXT4-fs (loop2): invalid first ino: 0 16:08:41 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x2, 0x2, 0x4, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, r0, 0x8, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 16:08:41 executing program 0: syz_emit_ethernet(0x2ba, &(0x7f0000000100)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "917456", 0x280, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208060001080006040001aaaaaaaaaa157f000001bbbbbbbbbbbbac1e0001bd5d6c127324b50f62ceb885eb7bbf22bdd3f1196e1caa52fb4ac4dade756c718095119e2440591dd39004353e"], &(0x7f0000000080)={0x0, 0x1, [0x8cb, 0x90b, 0x6a9, 0x5a8]}) syz_emit_ethernet(0x2185, &(0x7f00000003c0)={@random="894dc0b9c423", @broadcast, @val={@val={0x9100, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @ipv6=@gre_packet={0x7, 0x6, "e83e15", 0x2143, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, {[@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xff, 0x0, 0x40, 0x0, 0x0, 0x10, 0x65}, @fragment={0x5e, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x65}, @routing={0x3c, 0x6, 0x2, 0x0, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x6, 0x4, 0x3, 0x17, 0x50, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x4, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x3db], "e79b7b64c6e86ccd2bfe77bce2ab74c58772d751622c2ce8314f50635c3c6cd05b085cf9d31ad2755c20e4c48199c6e4e8af1bc9dffaf71c8ba818a3e720011da117f5560b7e518a371ebb66432c6857ed4709dce154b4419540ad4289ab301c8d521ecff6fb8da47aed60a8113a1bda7e639776a8fc16775e64b652c7d9d8855d93e2217b00752e5ea598308833b1105c9b75702742eeb6ae6d7838c3a167aea3f63ea7392d32db68452e2b334a04d26fc19f36bd0f809e7ce135062b6a0499d626e0df8a9aebc901851d17be38f1facc65c26d3bd858b719ed46b17c9dd7d85919028dc9d9c99f1e83b2a81f8646826537bf5b3673fdd943429606dcdff276a1dce497311583d2ca2aaac8c8de850c5354b877579eb981b429d293ccc09f1ed6a19ccea9f568476862565a2a5fe54a15f76c937e3640dd3ad4d3bafa1b238766bf866507b4d5a8b0bbff4a7ec0a94fde5adc1873197415d6dc78e6db2a579c7961f34076920560591be9a6a4098cc9dd9d397831babb628b4844d0765ad1cccc455eae928569fc7b47a2cb94325f642a7bf8e482a82ab340ec0f2f32e492af5ebee23f053dee6c1e34d2a5b4074e13cbc4e05db31c662c3fb24a886b2bfb2bac267470a09bd7fd34f586b77b60ae75b7206c43c5a73a5e279fb38cf26e4d4e370ac747a2c0cb7d4011662d37db80588042d9fea624db5b75a209b5b8f306386572e33cb52cfc4f0dbc85a3d4a832accd058895502931155fd60bc2f17a44a5184c45fd232901e099004f5f0ef9d0c214ccf55526cbfabe0799f2588bfbfd8beab27c04126f1f25ac1e75e3624710090a52c94886641a2d8ce6558b77ac1291eb59bfa200e0e79f144d995b924fefde0e50b3566da37a37afa97f45e310d9e8d239960c92033018836f0cc66a3d3eb97ce70e3da88aa2f4a594eb8aec9650017c1fd20462d43261d2fb53535c9a3b7ff6689ac494ba7e84accc765b51e524db66ea94d75841c1e119a05b5cc287057a8e449d1c6cb7133662ea474d9153e60c089942e7433ad69903c0cf3bbfa47fa9eaad7bee8990767aebb8492ace9f8a244fbeea122bd80044a0a3ce3cffbcc675fa05a9a04b36ca793142c2b00ed84109d2aee413303bf3339a7ceecafae375110adab981d57ce01bcedfb2cbfde6d12adb1759be2ff06a1841b94111ded27d63c3aa0db2770f496367432552c354bdb1e5efe9fb5e0a36e55736ae1e69fdb866e5a4d01741ba619bc9e7e0651b316dc67fab1f5d4bd5eae3990604a9a5c95aefdf3fcd1543d2e16aec562a07e18ec5a478024c16f27d3352b0a5de6a4a96e62e5c5938451ed6ea083e4ae12e7eb337b4e1eaa81156991ad89f95721a64ddae0178a062c59214a34c295e70d1b69353d1c0ecf230a2d5b38f7d04b6dc80f0b81087017dc58f6eee168613ef021f5153dd68cdec812b78fc95aebd5efe311db255e8301c9e2f910540f7eb2b3a67fbe8739c6e754a3b2334ff6eb8fa3e11bc4df82a3ef2aaba6a991bd24d09e1394731ac1cd1225b41a1fa202c350de9a77d3f516cb415ffe30a4be0bb4b6ffa05e50ae3d6a6e6c3df745f5620ede6f9faf5008ab66d843924902096bb63f8a099aea2d0b22aa1f440439bfa9b1847ef5eecf48292750146284694f27c8c5e8fa4a35445a25c43df8563f88d89623a8c4ef297cff7424bd37a0daabf39053156165d27d2881bfb38250576fe56d7a5747e6e924505954015b4d0d0ca821fdb552b3ec6813b0fadf5c9c22c26bc3624db0ff54dcfb9cf2a9aba44ca5923698ea273d0f235305905e099c2cfc011d9674b9c5bd149460391813baafca8612519afe356f8193f7c0775dff0721fe05247eec16d7576b7398be1014f5996eab6058b92f8c856926c2635e591049ddba189c885b8f11c5997bfabecb71be5d9765fdb8831a28e1057c740d8e44eec8389886eb7cb5a05e87f4632f9a9ee9199e39ef4d23bffd2399b80b47518c3ba13aa2ef3830ec0acaa6bab7770215e6ada4ee444d63016cf99ec343036935ed6acbe9e3d61220618efb00ebbefcec760d1afb4fde10ba37dbfe13ea9deb0f202f5e7239b53cec30d7758333df386a040e6373dc1a6ec3512f124f28ceb9fb46ad086c9811e862ea6c10825f0c8aa2d197de73d0669d499c6d105e51d17ed967afe02d3d9395aff4e8e689f23b783ca0e0bf308e6fed30fb334ee15e81a56829c3ed4407e8d925871b9a241998a823d9c7e5124fe82143f3663a9692db6b5ded79aa192867b4a0950571031b6a3d3a78ab0caa4a91ad8965ae94618eb23e84dcaa3377491f83b878abe2cf5f6d2de2545d8afc3f0699f3ef7735ec982562da95d499321b0b11f3429112b453b1f0e3395081c8b673bb5bbdc7ecdc7ed186a428b9fe7378bc215828383afeb183a82731a211bb9a3226c06ddbed673ed304e25e74db8a8aef3e2965aeb431b633afe46ae65ee87bd4af69e7538194d74818e813c592d269bae9a6ec888f26b1bd27f9130f62e166e2473cbd00204e8ab54c038b77bb7748bf800a491091cd95f2ac1acd07f2f59e936602c876a8aa1c4292d8221e5b0688654911915487403c9b9eb2004bb1a2a6bbd5314938166970a5cb6a9f9d2a22c33f3cfe3f8058e432471810e0240294405576e7f39aa5cf0ca787394b96418164004ec22dc5e7bc853952091afefbce657e8f155c706c5a2d4e645fe06981f9d855ddf16f530fe3fcad1afc393134f1eb3a87975c79538612acc24ab0e3791e4101f2dd115733d79b3a534501b01ffc3c0bc64a392da4af0c4fd896ff7a3a989706f7d71ef5c05086c971ee0becaecad7aeaf2b4cff56cf8907bfdb95a5893e10bcb0aa249e1e390bd95dff85c8a3e72fdccc56908b4bc22a2ae31553def956b78912b8cba8010bfd7791c2009662fb555979b7d647247c6b8101dc4a2b7a3caadb7f96da4e09ec7944bc96e685822720e7389a30a393b00ef686d55f18b849b49f1ebf9d59ca7575fb589d026e00fa996088d95b5feeaab5b1108fb0c0513027d6056bd0ea24980a74e43829fad6dfe1514149f56ca7363e3aa18bccf83303b73ea40630f69485f2c5723e17c57bc1e1f999c157a9f992cf67fb0865e35a6d59afeb1c9ccd7c7ef05fe74ae5cd9db3bffe8b588bb5b8c299d9cf2fef3527591bcfc44ee61bfd041c2a322cf48a6679af30fad74e44d26875e9a407c2952ec9c5e9a1f1cc6fb3ba7189eaf93c176e3fb1dc087e72016a9d1a928d76b9843c2c935124e48edb7a0d55d25224b7758a8388de497084a90f3fef0269f036ec20fdea8372df668a88eaa00b656cc2a913f6114a3556fa5bd2d124923cc06c8967fbe20a8e1522bfca556d36efa9e4c1fa2f2bfbdbdbbfbd98552ac20ed414bde559ba196ad1e9ed2d749d61dbed87b3c5ffc39dd8cdd2898430da9d5d064675015f452a62e29e8cbce3d1dcecb1d77e9ad9bf8c7fed3e5760153bbe3001db31f84f011ef7d951a08e3be9d778eb2c78779ac2d087eeb7329c8926879922d1374ef1c3feb0b92e63723e0bfbd2da1eeb039cd79ae520bf52762a42707a129686844ecf7d326a3a4e38df1590e5dd4907971a045d710e6b1ff5c65743c4abeca535bf41a4a929c5b5e8f5c76dd78f26c9707838699b5e12338a765d2e79519ef21e219a70b558765509960950f075ece5a6f8ac89becfdebd4a01e26fd6fb125be734a2c1f469f51894eeaa7281b289106097c8ae511ea06e81f470504c4378de18b1a83eb49773c0c995dccc840f7a77a93aa323d141191e6988f5af4e161901e060cb4334b31bec660d858734439bd89c32367dc4a386323cbbea68a24bda9fc85f78de4c0d3708ccd610845b327fec3c81af99f85329305b43ecfa5729ab8da8af60c83c68c8dbca970e0abfb32db80720531548a615d5a9b068ad779fd251eebadb7b91161753e868efb4ae91d812486648694e9a0423e0f83710995bc09364f0b9ef6a1dcbe79ee6164e8eba697a68e5addd0d24df8e7882cf968db6b45e128c380ca8817a1f3796a08f5b7ddbf57bbd628557f3ad58cd7f8fad58b31b0baf7cd24e7b7b3f9267cb9bdd590312709b9900ab30767b5fa5af8127f94b36c53cf3e8ed82effa2a7bd7d6c274f3c90361a19fe1bf494082f0a89846bccafb9b6583ce260337db920909846b1c00bf3cf801bb00aa2f1efebd8a9fc25790ccf3c48e3cb492f7535097a9e2da12871dc4bee45b44a9fbcadf6de7a81f686fe05535e6ab1a6bd23046b4f8b5b8e7eedd617d7c3d49961ee24d1ca5245b0106282f075c5ab5f7e732c2c98b8d556f5f0e7d3b9e474b58df6d776914271fc689d3d05149853032904a925fcadfaffbc5c4482e37c141ce21406860b56daf616fe1a87c2ce46e862b9841cc747e9260aca1c7eafa271d2d67e3f0398a072a91e1f450443b3a94ff8241e627e310758aa1baa225a3ca434ce69b2558cf0f507935b8582fdd3da9c4f62c54557d1d58b71004b73d756d744ba52374a0c906402403f5e734fc22454a25ae4a2909f988bca9a0a284021d7cf5e1f525a3eb796b662e5c96619ac3af7a9f37b3dd67fd2184e0a13d8b8d2c9dd33355d55507fa3f1d9b65368657230fec2dcc84653aa43c2ed2d7899fe91a8c6b84f0a9dfba97f3cf00e0cdd248bf620cb1fb485aa23c589e9cdec4514dca2f598e196f8ea3f42f9139eed6cca47c83589fe83a5d79a872423666005200d37d836bc095d63cc536d9a7437ce79f0ffdaa96fd1aff6eb02d629f17f8d8cf323d14ac0132023521e63242fe8082b665b83334bbcc69194eb5bc79f43cb68ca4793ef3b632ee5ef3a9c15b352f92df93346118ce2a1b7f0d9e0ad2b0113dddaa4adea484a4e715039b1f7b7e274375721605b5b46b0b414861cdf0096194a7817a48f77e6bc9a8b7524bc7b5501f565088f825746ce13fc8d27e889ee82f62460415e5eedd635e8fe66cbbb5ee21646abf8ddd6dd1bd2bda7f32e69ec6d81638d2592ca0cd2d0d7161071a6e4d1d5e0f2db43716f9b35415a4048e3dd8cf8d4959912ba0b8c2ea6493f96b9093529e025d16bceea109717e06a6bf0e9dbb17f9168f136f4611f59900e2229b9bf70d2b4f5fc3b2858e9bf5bd15b708c0e924e8961c9ce409c023c9c1239ace1f5533853a14476ecacd8f8a914540b02a2eca01ce97a0ac14e08029053f804a55864bcce7197986160dbe0eff7f8593636754216155a1712eef792e7efdfc8b2c4e223c207666f6412955b77447b13359116a829f7de9b5ede5127bea53b2405dacdf4c710c8aed965eda2e31f40669db03e9a9ad7f935add2bf090320826d0cec56d1c1b0a424a444a70b747066172e3539ee8a654a1420e9ab37bfe8328cdd3c30a6b8307f776d9c716962e0ab7cce25f2adaf51fb95ccae52ccf8bc251249f73933cc3f8c8df7e10c00be974aa991c107f3be5907c9233b903a09b920be584f4ee27d5344ba7c470c631c7d3b9bc2b75118986c4506d8230268fc4be0684eb09a896e54817d53ebbfc8c686e025f2f6d1f52eeb83db6fd6eb1af2bcb24177cde9b4d5a6e7fdb099e99027b4b9590ac6669b95042ea0f6c52c2f4e896c2f28b026751dbf852cc709daf96810e05f553fb805f40cc7798f8764b4bf9b73641b61f8722b5d429b61f0723c8285457ef06da41487b74c2bdcbf54283ef8d2925fcaa971e0ab63dcd664c399e9b14c8481e9c6fb7eacf8ee721695e1bd6b27488b658c5a4fe6c190c5d5fe32539fe8c9a627b5484a47a86633"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1e04a8f6beb1389da52e8386bb0b5f540d42ffa89b16c44ee1a8ea0c3276659bb428a6a2e85186ec268efb3d529ffba0a04a030a6048177832945a44f3434c6f07ea0f0eb8214aa5c39e1a9309fbb69d6c1aedb3498c7319d539c0ec24"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x20, 0x3, 0x1, 0x0, 0x6, 0x5}, 0x1, {0xcd}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x31, 0x3, 0x0, 0x1, 0x7, 0x3}, 0x2, {0x6, 0x5, 0x0, 0x17, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x4a7, 0x758, 0x6c0, 0x725]}) [ 257.934277][ T4698] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 16:08:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:41 executing program 0: syz_emit_ethernet(0x2ba, &(0x7f0000000100)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "917456", 0x280, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208060001080006040001aaaaaaaaaa157f000001bbbbbbbbbbbbac1e0001bd5d6c127324b50f62ceb885eb7bbf22bdd3f1196e1caa52fb4ac4dade756c718095119e2440591dd39004353e"], &(0x7f0000000080)={0x0, 0x1, [0x8cb, 0x90b, 0x6a9, 0x5a8]}) syz_emit_ethernet(0x2185, &(0x7f00000003c0)={@random="894dc0b9c423", @broadcast, @val={@val={0x9100, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @ipv6=@gre_packet={0x7, 0x6, "e83e15", 0x2143, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, {[@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xff, 0x0, 0x40, 0x0, 0x0, 0x10, 0x65}, @fragment={0x5e, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x65}, @routing={0x3c, 0x6, 0x2, 0x0, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x6, 0x4, 0x3, 0x17, 0x50, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x4, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x3db], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1e04a8f6beb1389da52e8386bb0b5f540d42ffa89b16c44ee1a8ea0c3276659bb428a6a2e85186ec268efb3d529ffba0a04a030a6048177832945a44f3434c6f07ea0f0eb8214aa5c39e1a9309fbb69d6c1aedb3498c7319d539c0ec24"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x20, 0x3, 0x1, 0x0, 0x6, 0x5}, 0x1, {0xcd}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x31, 0x3, 0x0, 0x1, 0x7, 0x3}, 0x2, {0x6, 0x5, 0x0, 0x17, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x4a7, 0x758, 0x6c0, 0x725]}) syz_emit_ethernet(0x2ba, &(0x7f0000000100)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "917456", 0x280, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000002580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208060001080006040001aaaaaaaaaa157f000001bbbbbbbbbbbbac1e0001bd5d6c127324b50f62ceb885eb7bbf22bdd3f1196e1caa52fb4ac4dade756c718095119e2440591dd39004353e"], &(0x7f0000000080)={0x0, 0x1, [0x8cb, 0x90b, 0x6a9, 0x5a8]}) (async) syz_emit_ethernet(0x2185, &(0x7f00000003c0)={@random="894dc0b9c423", @broadcast, @val={@val={0x9100, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @ipv6=@gre_packet={0x7, 0x6, "e83e15", 0x2143, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, {[@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xff, 0x0, 0x40, 0x0, 0x0, 0x10, 0x65}, @fragment={0x5e, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x65}, @routing={0x3c, 0x6, 0x2, 0x0, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x6, 0x4, 0x3, 0x17, 0x50, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x4, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x3db], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1e04a8f6beb1389da52e8386bb0b5f540d42ffa89b16c44ee1a8ea0c3276659bb428a6a2e85186ec268efb3d529ffba0a04a030a6048177832945a44f3434c6f07ea0f0eb8214aa5c39e1a9309fbb69d6c1aedb3498c7319d539c0ec24"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x20, 0x3, 0x1, 0x0, 0x6, 0x5}, 0x1, {0xcd}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x31, 0x3, 0x0, 0x1, 0x7, 0x3}, 0x2, {0x6, 0x5, 0x0, 0x17, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x4a7, 0x758, 0x6c0, 0x725]}) (async) [ 257.978891][ T4698] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 258.016237][ T4698] bridge0: port 3(team0) entered blocking state [ 258.022532][ T4698] bridge0: port 3(team0) entered disabled state [ 258.048659][ T4702] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 258.058883][ T4702] CPU: 1 PID: 4702 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 258.059173][ T4698] device team0 entered promiscuous mode [ 258.069864][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.069879][ T4702] Call Trace: [ 258.069885][ T4702] [ 258.069891][ T4702] dump_stack_lvl+0xd6/0x122 [ 258.075482][ T4698] device team_slave_0 entered promiscuous mode [ 258.075553][ T4698] device team_slave_1 entered promiscuous mode [ 258.085564][ T4702] dump_stack+0x11/0x1b [ 258.085614][ T4702] dump_header+0x98/0x410 [ 258.117274][ T4702] out_of_memory+0x65c/0x8c0 [ 258.121884][ T4702] memory_max_write+0x32c/0x3d0 [ 258.126781][ T4702] ? memory_max_show+0x70/0x70 [ 258.130215][ T4698] bridge0: port 3(team0) entered blocking state [ 258.131582][ T4702] cgroup_file_write+0x161/0x300 [ 258.131607][ T4702] ? __check_object_size+0x22a/0x2d0 [ 258.137871][ T4698] bridge0: port 3(team0) entered forwarding state [ 258.154472][ T4702] ? cgroup_seqfile_stop+0x70/0x70 [ 258.159688][ T4702] kernfs_fop_write_iter+0x1d3/0x2d0 [ 258.164984][ T4702] do_iter_readv_writev+0x2de/0x380 [ 258.170210][ T4702] do_iter_write+0x192/0x5c0 [ 258.174833][ T4702] ? splice_from_pipe_next+0x34f/0x3b0 [ 258.180310][ T4702] ? kmalloc_array+0x2d/0x40 [ 258.184954][ T4702] vfs_iter_write+0x4c/0x70 [ 258.189478][ T4702] iter_file_splice_write+0x43a/0x790 [ 258.194866][ T4702] ? splice_from_pipe+0xd0/0xd0 [ 258.199791][ T4702] direct_splice_actor+0x80/0xa0 [ 258.204741][ T4702] splice_direct_to_actor+0x345/0x650 [ 258.210165][ T4702] ? do_splice_direct+0x190/0x190 [ 258.215378][ T4702] do_splice_direct+0x106/0x190 [ 258.220241][ T4702] do_sendfile+0x675/0xc40 [ 258.224673][ T4702] __x64_sys_sendfile64+0x102/0x140 [ 258.229953][ T4702] do_syscall_64+0x44/0xd0 [ 258.234429][ T4702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.240335][ T4702] RIP: 0033:0x7f8a9bb9b059 [ 258.244749][ T4702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 258.264360][ T4702] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 258.272805][ T4702] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 258.280778][ T4702] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 258.288754][ T4702] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 258.296733][ T4702] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 258.304712][ T4702] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 258.312692][ T4702] [ 258.315912][ T4702] memory: usage 44kB, limit 0kB, failcnt 144 [ 258.321892][ T4702] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 258.328754][ T4702] Memory cgroup stats for /syz1: [ 258.333933][ T4702] anon 0 [ 258.333933][ T4702] file 24576 [ 258.333933][ T4702] kernel_stack 0 [ 258.333933][ T4702] pagetables 0 [ 258.333933][ T4702] percpu 0 [ 258.333933][ T4702] sock 0 [ 258.333933][ T4702] vmalloc 0 [ 258.333933][ T4702] shmem 24576 [ 258.333933][ T4702] file_mapped 24576 [ 258.333933][ T4702] file_dirty 0 [ 258.333933][ T4702] file_writeback 0 [ 258.333933][ T4702] swapcached 0 [ 258.333933][ T4702] inactive_anon 0 [ 258.333933][ T4702] active_anon 24576 [ 258.333933][ T4702] inactive_file 0 [ 258.333933][ T4702] active_file 0 [ 258.333933][ T4702] unevictable 0 [ 258.333933][ T4702] slab_reclaimable 4400 [ 258.333933][ T4702] slab_unreclaimable 13400 [ 258.333933][ T4702] slab 17800 [ 258.333933][ T4702] workingset_refault_anon 0 [ 258.333933][ T4702] workingset_refault_file 1 [ 258.333933][ T4702] workingset_activate_anon 0 [ 258.333933][ T4702] workingset_activate_file 0 [ 258.333933][ T4702] workingset_restore_anon 0 [ 258.427117][ T4702] Out of memory and no killable processes... [ 258.546957][ T2416] device hsr_slave_0 left promiscuous mode [ 258.563150][ T2416] device hsr_slave_1 left promiscuous mode [ 258.569596][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.577116][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.595455][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.602881][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.625288][ T2416] device bridge_slave_1 left promiscuous mode [ 258.631524][ T2416] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.665212][ T2416] device bridge_slave_0 left promiscuous mode [ 258.671431][ T2416] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.698461][ T2416] device veth1_macvtap left promiscuous mode [ 258.704475][ T2416] device veth0_macvtap left promiscuous mode [ 258.710612][ T2416] device veth1_vlan left promiscuous mode [ 258.716396][ T2416] device veth0_vlan left promiscuous mode [ 258.916088][ T2416] team0 (unregistering): Port device team_slave_1 removed [ 258.928407][ T2416] team0 (unregistering): Port device team_slave_0 removed [ 258.939912][ T2416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.953563][ T2416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.993091][ T2416] bond0 (unregistering): Released all slaves [ 260.416431][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 260.448548][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.455736][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.463334][ T4707] device bridge_slave_0 entered promiscuous mode [ 260.470818][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.477905][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.486677][ T4707] device bridge_slave_1 entered promiscuous mode [ 260.504176][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.514888][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.533709][ T4707] team0: Port device team_slave_0 added [ 260.540278][ T4707] team0: Port device team_slave_1 added [ 260.556639][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.563599][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.589589][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.601390][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.608383][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.634345][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.658347][ T4707] device hsr_slave_0 entered promiscuous mode [ 260.666215][ T4707] device hsr_slave_1 entered promiscuous mode [ 260.672734][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.680646][ T4707] Cannot create hsr debugfs directory [ 260.744535][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.756254][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 260.767613][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.775651][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.785185][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.796558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.805439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.813899][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.820987][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.828889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.837666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.846171][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.853224][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.873123][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.883544][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.900137][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.909468][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.918536][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.927356][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.935863][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.951544][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.961146][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.969164][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.984437][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.998989][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.079426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.139776][ T4707] device veth0_vlan entered promiscuous mode [ 261.147924][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.156985][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.166003][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.176520][ T4707] device veth1_vlan entered promiscuous mode [ 261.186062][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.194219][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.211848][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.236492][ T4707] device veth0_macvtap entered promiscuous mode [ 261.244655][ T4707] device veth1_macvtap entered promiscuous mode [ 261.268461][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.279019][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.288861][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.299294][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.309119][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.319849][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.329752][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.340219][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.350055][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.360490][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.372821][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.381240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.391392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.400549][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.411134][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.421028][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.431486][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.441346][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.451882][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.461777][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.472209][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.482110][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.492982][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.505935][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.514500][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:08:45 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:45 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x2, 0x2, 0x4, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, r0, 0x8, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 16:08:45 executing program 0: syz_emit_ethernet(0x2ba, &(0x7f0000000100)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "917456", 0x280, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208060001080006040001aaaaaaaaaa157f000001bbbbbbbbbbbbac1e0001bd5d6c127324b50f62ceb885eb7bbf22bdd3f1196e1caa52fb4ac4dade756c718095119e2440591dd39004353e"], &(0x7f0000000080)={0x0, 0x1, [0x8cb, 0x90b, 0x6a9, 0x5a8]}) syz_emit_ethernet(0x2185, &(0x7f00000003c0)={@random="894dc0b9c423", @broadcast, @val={@val={0x9100, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @ipv6=@gre_packet={0x7, 0x6, "e83e15", 0x2143, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, {[@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xff, 0x0, 0x40, 0x0, 0x0, 0x10, 0x65}, @fragment={0x5e, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x65}, @routing={0x3c, 0x6, 0x2, 0x0, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x6, 0x4, 0x3, 0x17, 0x50, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x4, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x3db], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1e04a8f6beb1389da52e8386bb0b5f540d42ffa89b16c44ee1a8ea0c3276659bb428a6a2e85186ec268efb3d529ffba0a04a030a6048177832945a44f3434c6f07ea0f0eb8214aa5c39e1a9309fbb69d6c1aedb3498c7319d539c0ec24"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x20, 0x3, 0x1, 0x0, 0x6, 0x5}, 0x1, {0xcd}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x31, 0x3, 0x0, 0x1, 0x7, 0x3}, 0x2, {0x6, 0x5, 0x0, 0x17, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x4a7, 0x758, 0x6c0, 0x725]}) syz_emit_ethernet(0x2ba, &(0x7f0000000100)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "917456", 0x280, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "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"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000002580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208060001080006040001aaaaaaaaaa157f000001bbbbbbbbbbbbac1e0001bd5d6c127324b50f62ceb885eb7bbf22bdd3f1196e1caa52fb4ac4dade756c718095119e2440591dd39004353e"], &(0x7f0000000080)={0x0, 0x1, [0x8cb, 0x90b, 0x6a9, 0x5a8]}) (async) syz_emit_ethernet(0x2185, &(0x7f00000003c0)={@random="894dc0b9c423", @broadcast, @val={@val={0x9100, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @ipv6=@gre_packet={0x7, 0x6, "e83e15", 0x2143, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, {[@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0xff, 0x0, 0x40, 0x0, 0x0, 0x10, 0x65}, @fragment={0x5e, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x65}, @routing={0x3c, 0x6, 0x2, 0x0, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0x6, 0x4, 0x3, 0x17, 0x50, 0x0, [@private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x4, 0x66}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x3db], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1e04a8f6beb1389da52e8386bb0b5f540d42ffa89b16c44ee1a8ea0c3276659bb428a6a2e85186ec268efb3d529ffba0a04a030a6048177832945a44f3434c6f07ea0f0eb8214aa5c39e1a9309fbb69d6c1aedb3498c7319d539c0ec24"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x20, 0x3, 0x1, 0x0, 0x6, 0x5}, 0x1, {0xcd}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x31, 0x3, 0x0, 0x1, 0x7, 0x3}, 0x2, {0x6, 0x5, 0x0, 0x17, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x4a7, 0x758, 0x6c0, 0x725]}) (async) 16:08:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fcntl$setsig(r0, 0xa, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) [ 262.121956][ T4746] loop2: detected capacity change from 0 to 4 [ 262.132492][ T4752] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 262.147654][ T4750] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 262.158021][ T4750] CPU: 0 PID: 4750 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 262.168996][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.179138][ T4750] Call Trace: [ 262.182403][ T4750] [ 262.185398][ T4750] dump_stack_lvl+0xd6/0x122 [ 262.189992][ T4750] dump_stack+0x11/0x1b [ 262.194135][ T4750] dump_header+0x98/0x410 [ 262.198472][ T4750] oom_kill_process+0x18e/0x4a0 [ 262.203318][ T4750] out_of_memory+0x61d/0x8c0 [ 262.207902][ T4750] memory_max_write+0x32c/0x3d0 [ 262.212746][ T4750] ? memory_max_show+0x70/0x70 [ 262.217518][ T4750] cgroup_file_write+0x161/0x300 [ 262.222625][ T4750] ? __check_object_size+0x22a/0x2d0 [ 262.227958][ T4750] ? cgroup_seqfile_stop+0x70/0x70 [ 262.233081][ T4750] kernfs_fop_write_iter+0x1d3/0x2d0 [ 262.238357][ T4750] do_iter_readv_writev+0x2de/0x380 [ 262.243548][ T4750] do_iter_write+0x192/0x5c0 [ 262.248124][ T4750] ? splice_from_pipe_next+0x34f/0x3b0 [ 262.253600][ T4750] ? kmalloc_array+0x2d/0x40 [ 262.258192][ T4750] vfs_iter_write+0x4c/0x70 [ 262.262707][ T4750] iter_file_splice_write+0x43a/0x790 [ 262.268075][ T4750] ? splice_from_pipe+0xd0/0xd0 [ 262.272919][ T4750] direct_splice_actor+0x80/0xa0 [ 262.277850][ T4750] splice_direct_to_actor+0x345/0x650 [ 262.283262][ T4750] ? do_splice_direct+0x190/0x190 [ 262.288280][ T4750] do_splice_direct+0x106/0x190 [ 262.293133][ T4750] do_sendfile+0x675/0xc40 [ 262.297539][ T4750] __x64_sys_sendfile64+0x102/0x140 [ 262.302727][ T4750] do_syscall_64+0x44/0xd0 [ 262.307188][ T4750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.313072][ T4750] RIP: 0033:0x7f8a9bb9b059 [ 262.317474][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 262.337076][ T4750] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.345505][ T4750] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 262.353466][ T4750] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 262.361425][ T4750] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 262.369384][ T4750] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 262.377344][ T4750] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 262.385320][ T4750] [ 262.388374][ T4750] memory: usage 6476kB, limit 0kB, failcnt 144 [ 262.394552][ T4750] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 262.401448][ T4750] Memory cgroup stats for /syz1: [ 262.413386][ T4746] EXT4-fs (loop2): invalid first ino: 0 [ 262.431998][ T4752] device team0 left promiscuous mode [ 262.437335][ T4752] device team_slave_0 left promiscuous mode [ 262.443336][ T4752] device team_slave_1 left promiscuous mode [ 262.449500][ T4752] bridge0: port 3(team0) entered disabled state [ 262.455047][ T24] audit: type=1400 audit(1645805325.905:153): avc: denied { prog_run } for pid=4759 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 262.475242][ T4750] anon 98304 [ 262.475242][ T4750] file 24576 [ 262.475242][ T4750] kernel_stack 32768 [ 262.475242][ T4750] pagetables 90112 [ 262.475242][ T4750] percpu 0 [ 262.475242][ T4750] sock 0 [ 262.475242][ T4750] vmalloc 0 [ 262.475242][ T4750] shmem 24576 [ 262.475242][ T4750] file_mapped 24576 [ 262.475242][ T4750] file_dirty 0 [ 262.475242][ T4750] file_writeback 0 [ 262.475242][ T4750] swapcached 0 [ 262.475242][ T4750] inactive_anon 98304 [ 262.475242][ T4750] active_anon 24576 [ 262.475242][ T4750] inactive_file 0 [ 262.475242][ T4750] active_file 0 [ 262.475242][ T4750] unevictable 0 [ 262.475242][ T4750] slab_reclaimable 9056 [ 262.475242][ T4750] slab_unreclaimable 41760 [ 262.475242][ T4750] slab 50816 [ 262.475242][ T4750] workingset_refault_anon 0 [ 262.475242][ T4750] workingset_refault_file 1 [ 262.475242][ T4750] workingset_activate_anon 0 [ 262.475242][ T4750] workingset_activate_file 0 [ 262.475242][ T4750] workingset_restore_anon 0 16:08:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110800000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe750aaf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61622cfd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da091f5d8f44417cf85cf231a060d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513d01003209620db20fbd4ecbdfb13e1c6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500abc584327d6a7a4628c4298c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a802bf057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225b678ac6789f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b1039d7d13fb59d6ba1932056435fa2dcb739732e77f75d09ddeec8fe0e849e28e3a643f7aefaa44bf3d63449a61a6fc2526d93ea010a2d09b38b0d55d1e26086359b2ef6dbc833f473d0f99bd5f58fc6605a24bd3c59adc54c01835251edd467eee872c0119f276ae4012f33763d8a4c2c47be839acaef3f2cfc39c2a324579cb3ac697f8d98cb3ab3fe3aa5f36339b079cfdd5a5c80066667271d4cb9b51c418a1a14152bd0342505f50d688eadc9b3fa5456e9277a4693d4ff2a1afd5079e033e3f9125f6ed045530c47d74d9fb42fa6a979e1efbc36f7fb482ec7921bc7807e1eecd5c48ddbf4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fcntl$setsig(r0, 0xa, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) fcntl$setsig(r0, 0xa, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) pipe(&(0x7f0000000080)) (async) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) (async) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) (async) [ 262.565097][ T4750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4745,uid=0 [ 262.580285][ T4750] Memory cgroup out of memory: Killed process 4745 (syz-executor.1) total-vm:52584kB, anon-rss:376kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 262.604999][ T4753] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 262.605216][ T26] oom_reaper: reaped process 4745 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 16:08:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 262.624232][ T4753] bridge0: port 3(team0) entered blocking state [ 262.630569][ T4753] bridge0: port 3(team0) entered disabled state [ 262.661321][ T4772] loop2: detected capacity change from 0 to 4 [ 262.664217][ T4753] device team0 entered promiscuous mode 16:08:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110800000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe750aaf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61622cfd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da091f5d8f44417cf85cf231a060d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513d01003209620db20fbd4ecbdfb13e1c6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500abc584327d6a7a4628c4298c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a802bf057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225b678ac6789f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b1039d7d13fb59d6ba1932056435fa2dcb739732e77f75d09ddeec8fe0e849e28e3a643f7aefaa44bf3d63449a61a6fc2526d93ea010a2d09b38b0d55d1e26086359b2ef6dbc833f473d0f99bd5f58fc6605a24bd3c59adc54c01835251edd467eee872c0119f276ae4012f33763d8a4c2c47be839acaef3f2cfc39c2a324579cb3ac697f8d98cb3ab3fe3aa5f36339b079cfdd5a5c80066667271d4cb9b51c418a1a14152bd0342505f50d688eadc9b3fa5456e9277a4693d4ff2a1afd5079e033e3f9125f6ed045530c47d74d9fb42fa6a979e1efbc36f7fb482ec7921bc7807e1eecd5c48ddbf4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fcntl$setsig(r0, 0xa, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) (async) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) 16:08:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x101}]}}}]}, 0x3c}, 0x1, 0x74}, 0x0) [ 262.672997][ T4753] device team_slave_0 entered promiscuous mode [ 262.679299][ T4753] device team_slave_1 entered promiscuous mode [ 262.702203][ T4753] bridge0: port 3(team0) entered blocking state [ 262.708548][ T4753] bridge0: port 3(team0) entered forwarding state 16:08:46 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x2, 0x2, 0x4, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, r0, 0x8, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x2, 0x2, 0x4, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, r0, 0x8, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) [ 262.725761][ T4772] EXT4-fs (loop2): invalid first ino: 0 [ 262.741571][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.751869][ T4750] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 262.762276][ T4750] CPU: 0 PID: 4750 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 262.773219][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.783280][ T4750] Call Trace: [ 262.786567][ T4750] [ 262.789498][ T4750] dump_stack_lvl+0xd6/0x122 [ 262.794131][ T4750] dump_stack+0x11/0x1b [ 262.798319][ T4750] dump_header+0x98/0x410 [ 262.802662][ T4750] oom_kill_process+0x18e/0x4a0 [ 262.807547][ T4750] out_of_memory+0x61d/0x8c0 [ 262.812152][ T4750] memory_max_write+0x32c/0x3d0 [ 262.817059][ T4750] ? memory_max_show+0x70/0x70 [ 262.821837][ T4750] cgroup_file_write+0x161/0x300 [ 262.826773][ T4750] ? __check_object_size+0x22a/0x2d0 [ 262.832053][ T4750] ? cgroup_seqfile_stop+0x70/0x70 [ 262.837173][ T4750] kernfs_fop_write_iter+0x1d3/0x2d0 [ 262.842450][ T4750] do_iter_readv_writev+0x2de/0x380 [ 262.847728][ T4750] do_iter_write+0x192/0x5c0 [ 262.852330][ T4750] ? splice_from_pipe_next+0x34f/0x3b0 [ 262.857779][ T4750] ? kmalloc_array+0x2d/0x40 [ 262.862372][ T4750] vfs_iter_write+0x4c/0x70 [ 262.866882][ T4750] iter_file_splice_write+0x43a/0x790 [ 262.872270][ T4750] ? splice_from_pipe+0xd0/0xd0 [ 262.877123][ T4750] direct_splice_actor+0x80/0xa0 [ 262.882053][ T4750] splice_direct_to_actor+0x345/0x650 [ 262.887424][ T4750] ? do_splice_direct+0x190/0x190 [ 262.892440][ T4750] do_splice_direct+0x106/0x190 [ 262.897283][ T4750] do_sendfile+0x675/0xc40 [ 262.901731][ T4750] __x64_sys_sendfile64+0x102/0x140 [ 262.906921][ T4750] do_syscall_64+0x44/0xd0 [ 262.911327][ T4750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.917256][ T4750] RIP: 0033:0x7f8a9bb9b059 [ 262.921657][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 262.941335][ T4750] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.949747][ T4750] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 262.957712][ T4750] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 262.965739][ T4750] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 16:08:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 262.973726][ T4750] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 262.981783][ T4750] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 262.989746][ T4750] [ 262.992791][ T4750] memory: usage 240kB, limit 0kB, failcnt 216 [ 262.998889][ T4750] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 263.005779][ T4750] Memory cgroup stats for /syz1: [ 263.029512][ T4780] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 263.048241][ T4780] device team0 left promiscuous mode [ 263.053563][ T4780] device team_slave_0 left promiscuous mode [ 263.059540][ T4780] device team_slave_1 left promiscuous mode [ 263.065696][ T4780] bridge0: port 3(team0) entered disabled state [ 263.073523][ T4780] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 263.081996][ T4780] bridge0: port 3(team0) entered blocking state [ 263.088292][ T4780] bridge0: port 3(team0) entered disabled state [ 263.096587][ T4780] device team0 entered promiscuous mode [ 263.102156][ T4780] device team_slave_0 entered promiscuous mode [ 263.108462][ T4780] device team_slave_1 entered promiscuous mode [ 263.116961][ T4780] bridge0: port 3(team0) entered blocking state [ 263.123393][ T4780] bridge0: port 3(team0) entered forwarding state [ 263.130764][ T4784] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 263.140670][ T4784] device team0 left promiscuous mode [ 263.146095][ T4784] device team_slave_0 left promiscuous mode [ 263.152139][ T4784] device team_slave_1 left promiscuous mode [ 263.158278][ T4784] bridge0: port 3(team0) entered disabled state [ 263.165077][ T4750] anon 36864 [ 263.165077][ T4750] file 24576 [ 263.165077][ T4750] kernel_stack 16384 [ 263.165077][ T4750] pagetables 90112 [ 263.165077][ T4750] percpu 0 [ 263.165077][ T4750] sock 0 [ 263.165077][ T4750] vmalloc 0 [ 263.165077][ T4750] shmem 24576 [ 263.165077][ T4750] file_mapped 24576 [ 263.165077][ T4750] file_dirty 0 [ 263.165077][ T4750] file_writeback 0 [ 263.165077][ T4750] swapcached 0 [ 263.165077][ T4750] inactive_anon 36864 [ 263.165077][ T4750] active_anon 24576 [ 263.165077][ T4750] inactive_file 0 [ 263.165077][ T4750] active_file 0 [ 263.165077][ T4750] unevictable 0 [ 263.165077][ T4750] slab_reclaimable 7504 [ 263.165077][ T4750] slab_unreclaimable 37352 [ 263.165077][ T4750] slab 44856 [ 263.165077][ T4750] workingset_refault_anon 0 [ 263.165077][ T4750] workingset_refault_file 1 [ 263.165077][ T4750] workingset_activate_anon 0 [ 263.165077][ T4750] workingset_activate_file 0 [ 263.165077][ T4750] workingset_restore_anon 0 [ 263.254810][ T4750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4707,uid=0 [ 263.256855][ T4785] loop2: detected capacity change from 0 to 4 [ 263.270031][ T4750] Memory cgroup out of memory: Killed process 4707 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 263.272201][ T26] oom_reaper: reaped process 4707 (syz-executor.1), now anon-rss:0kB, file-rss:13472kB, shmem-rss:0kB [ 263.293440][ T4785] EXT4-fs (loop2): Can't read superblock on 2nd try [ 263.317072][ T4782] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 263.327401][ T4782] bridge0: port 3(team0) entered blocking state [ 263.333696][ T4782] bridge0: port 3(team0) entered disabled state [ 263.346176][ T4782] device team0 entered promiscuous mode [ 263.351743][ T4782] device team_slave_0 entered promiscuous mode [ 263.358025][ T4782] device team_slave_1 entered promiscuous mode [ 263.364368][ T4782] bridge0: port 3(team0) entered blocking state [ 263.370758][ T4782] bridge0: port 3(team0) entered forwarding state 16:08:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x101}]}}}]}, 0x3c}, 0x1, 0x74}, 0x0) 16:08:46 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:46 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = io_uring_setup(0x5f5a, &(0x7f0000000140)={0x0, 0x3bd6, 0x10, 0x2, 0x294}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYBLOB]}, @name="28ce59dfc7ae9009f994fd025a0444dfebfb7061a5948c4662e39f8256c579834959742b871c005de3473b0e280182715450c02515a2c5d21e772323fe1657d3642995ef8d01878b4dbe5ede9690d2d84ca15da1e7c84eddf9aca1da186d54a296939e223b6265d68dfe21f81723d7a621f6f7aa2c89463dfc1d69dd148f62656028fc982be8c7a2e3db7886e44b9cdb10817a47ca82dde2e49bf7ea9a1b46194a6cbeb18135d16ce9bada1b60428b6ca93555de1e2ddd207dc9c27a6619bcc41e286831a35bd48f43f25533121478d86e7d0de744bdb0d916809fb565f85374cbaf7f4cd1a93720f63f44d1c97a87d72473869397b2fb08cdf9387a7448e463888dd126e3d9f50c5bf051e04d25c63adec3f2c51a8817c39f219b27c45bbda09415e0bfac248567c9305a3c315b3dace9e38c4e74a6e2ee113d04664499ceb5eb09c96110b2519cda7eb60f3a232cbc8612aba66257dbc4331619aba1949219079ab50af9774d5458bc1c7b220753b97bc0bca415c7185b1b17cecc72971abe4f746f1de7709e5310836bb4c0b6032a126074aa144162817627e876bec17c0f1097ff0434ee10e224bc5be76c5045a10a390830760c83ad960bd6994c6041870ca5ffc5552fe110623a3db1f20fd82f3696af69f30aeb07c5e4059a2634f5ebcb2f1d6464cfbaa981d170b600b6d0cddcc6cff8b43d289dfe2fb889fc7cae3a2fb4236ad58247d77561b646d95745fb3ff7424accfea99ec6f082da6d7c70fe94b3ec470dc6221f8af3ebdcfc13411e0021005bae03fcc3fc63e4c9779233bb798d848187111c0eae93d43a9f17673c95cd3241d4b6c6f073a81ed65b11c8558be0f17354f360d458301874afe6737e1477eb5b9f85beaf38f73e73409b8b9c13efeb44c11524fca25625f6cdf5096f0f109a84bfad42bdcb33a669cb178a6754a74f02ab9bccb040d5067f06909ac9b16d38e7cd83cb098fc6967354c0f3dc34a85b4393dce310abb803edbd2406637e03502c4e9b6ddd2ecc17514155743958322eda52bbadcfe23d6be9e5c20f066d4576e7e642b19e4578bc0ad247d01b399b78512e86aa1257d84a19cc87e9577085924297b3a2c5a037dc1c5f951c6323a728e6a5a18dec901c2394eee655df7ba19a3005bda0399f2aa951d450870dcd7f6dd205e623f2034135ad43fe6a572f00211b348219ea08e60e4983847bf0c966f4161bc9c321e1c4896bfc214ba6187da50cfb6bb600f5f357ddcf6c870893f537977f25ed88e093346fcf7e487480a03e5feba3043539a7bc6a8f9caaf478d971aa3711491d3b8243e08df7d3107a004db259865f00c65980a71399aaa1546678325f1ad823c5ac42b87aa87a6e9df14d710aab37fe2879857685d7e255d7ed20389dedef7e609981d70844808699cddd431cb43c24f6cab329ab62d2209d6d4aabd6f725d65aa060285b18e8da5442ccee5eb133401d2e7296790e0ff5fd704ae77279c305ffdde9cf2c38c453f9d3111cf091a853d196b649c9e4d2210e9806ff00bf67210a0fe0a908a51e64d49d78220f2d832222bbca3129f1399a0b526af79d7b598e4bbf2ce7a0c87fbae70cb1c015c4688912639ef7e86d1fe05a05c5b2d31e8a41f4e1cf54f0118b872a9351e69a7ce9e9ebc45cab02023ac2020422c67108b2b2c90de25c82f7d83fc2ab1a4561fd01bdc659a5ba5bb830dfcd308e8717bf193fc117b81eca101b0420825405448d5e89360f872fa7da544d70526b8e46f1667272e0e5e0aabbb207024cee92acd42de8cf88dfe9657df9fc49baba452c838ed655172ea101b49cf114b5e84ef41c82af855fcb41c2def9211b2fbb80718df94d9c9983df56f1d2162f2a24a0711c8528ae63d79e618a913c809b0cd8ea3f678580ed41b15eac9ac719b2f1d8c058004cefa6a8b93fdbfb6cd497b91349aa209e9401aa4040f9c627db8c7cbd2ba2620ff25762a2b0f9a536f88ddd3e4c9a82f435ca7073572a6b9d33a4a4781f5807986556cdbe6fec2a2172a0aa6c5a69c2232056488bf2ba99d85665e1fee7a2a6b6c2350e241fe28250c455c03dfc65dc96786f0e5cbb51ab87bd9d9d158faab451d7413da5a6aaa45073ef019c79c52e9de921b28b65e08211b800ef1683bfcad71daaf22ffee53df5e89044c2a326d47b9b280f3fe92cd67aa45d5464e680e90608b43206c5c760dea98e5d62bc920ed020900a033fea587e98a1079ed5487b19853986725eb68a53ee376fa4260bea626bca1814c2575545662bfedef988acb23156e56688b84dfaef74cbd9b3149acc3b4d58dcfa5d096e034ea5c908461a6a85067b6e4640d7b0f707c441102475742ce3e80af6828f5b80c172af605a3388f43589d79562394b473b49c3dcf3f67fba758451e191a8f5539b91e40766bb2c1bbed2a2193d7ac6bff747adc3df1e566aa2484b8d989daf327bdcaeaf289cba3e063772bd268f926f01fb76f23b5e7bc950635a2a653d2fee646e3bf7c855456be51d7ea8f3ecc43f9794dae591219492481d40e36bf7190ba4aa32e46b2400c0ab1ec1d2fc17e1cb8061fe94a2f01b1c44dfa7c0b2dd9438c8d103304e8f3bbbedfa6b1a302e10bd8d9fddca1c7954f4b9eb4ab47e91bc549eff21702a62875e01ca5ff8e61b25aa61b0d8c2c0f636c3202c068e1abbf47f259ebfce16560194b70409e6d15f185707da1ba8365e954c24d70481499587bf10f78c9a5cefc7e0b47636e7e8842f2a52fe3814091bdc40e525632fc42cdcfe7d8c0caedb8e2704502ec6ff139be06555523cb458031bdea1aed979aa7053683eae25eb0f7aa04ba06db9bfe5c3084d661f8026cf81a352a45d04312d12b9b3e1a1a5e34ca5219feaa7abe61c20d60745ca5039df6afbfb2d1a2ca3c7d66f1404ec5418e2f7fe2a0bb72b9d9ebca3a1c94247487416d95197ed5b6678a6bc313f70639b0e671eb805669232259360a6f1c8c019b30e5a13d897ec9a18166b06a51de49f6d434ed08fe1fa899daa6837f8fc538657ab4b8e67b6fc66beae7b0454f00d3b7f520406e4b03609ce04137217c7a55da45fd21b1af18a7c4588ea6b453f4ac0cf4148f8b8eef01844a1eacc253cf56b93e59b7a110b5b9d6fa0d12a19c7ca11c81eb6a97b327d3f2a21364a02cb31d6b722a9928a57a934455473905d5d177ec57d798f0b8497e3702d00afe8ff20d54b6aae293fd6f7915448fc5494a1694402c377230c1ae15512bebaaf077d338aeab3604dbaa87a4dff5a9a9cc73cf7b0f2ae1953720414a352f91c905cb1b034363861a0735645c43a4eef1f7e77f270e42e55df8909ab81f50b16be2db6629efa8a316f1b6090f7705481c5152cc0886ff9794030573fe087dd55029b800375c102d596eed0c56581b7b60de12be1bfaa586bf7ac2988f87e9f79fc655284b02b9a6e48e68c70e9e7623cdc441bf8f4ede01abf16850bbbaa5546780b22096639243501e302a26ea901f589cc46ad20cd1b449d44710341b8944b33daf18a8a07fee2d6d582c098fa1ea15be8c19a482cb9b66096933e7a935dab7b6b78064ddc5aca9d670f05e178f7ec11a7759a7dc4134a62a076bddf1583724f53cdb6735fdf035c487049a582efbd383c132c0f1812b8b17b81a78ee9e0c0f0ef03f150b40e8dba014b7ebf14a5625a3f829cbfaed783010d2d152b87439b553ffe9dc2f18880fa3c8e3bd894afbff760d399af441b291b17c746ac18475cc68f65669ff36bf4a65b5dfb07b6f6f159efef98e56cbf2de04e1a6d632224597f50297355d683aa02e4088f019f3ad1b96cc9ed93184a5374ae78bf967c48092da50435ab0248f3f357021f23d1155cec96efc277a988f4c4e3de8c40181238ee851fcc04cb19a9ac5340d7c2ef34989f23e82c0adc0b05c6860c8b8f9c0e91b8228e1e3ea7ffd5d051210f83027ec9f1bab539d58e2553828c58274a8262c3114d9ce02d63608d5b6dfb142d80e6ad8c161dde7e9116887e8ec6af73c7b83abf046ee9e331c2a5420925b5ece25d711d4e0682b6ce2d9e983e992feeec14554a5a6057e8295c01c3d804be6973849730f7a843a08568ab8d141de44d974f5fc674935d8463a568e4c491154606b2e323038716584e0dbe67ab70014d01d3874e0b9f24cf1ece5fa03793dfa7b11243d7f6429958842b62330c8f89850cb5f8fe70cf68e71d49ba6ed53e702feafd0d1e5a658da4a47c88244a97e3a7002618f76c9965837a7f1ee394a8440df7cf1f191966df765d361056d5db3956626930fef1a89958a44b54eb53f7f573f1d9ead5d41a830b1fc2beeb555ddcbad949f6d413c41c73f9c42637852fc6d14b78ec9058fabdae49a8fdd1cd713dccc2cb19887da1a7e67d73ec5d004f5eaa92681423809eb6169de7223cd6479f494a8dd9dc9554535ea60ccb06a8447aa7e5d925fcbff4de1cfb74bfa13a95e3d3ede6d3ebfdad1ba37f88c4f4fe5dc3663d54879bdaa0a276971b56e4656b1fff27c6a3d227f5d7ca67dbc7bfb2292f15f3632dc7d0a85fd2a6a2d06dcd4dbf67ea4d6882d594048ae005259ec148671d35cbad59d2097fac024665d1361bea887647c49d84c005800f9923e382459e999ef28008e7057fd243a7606dfd010c6632504e6f438cbcb5fa0739f55e65ddd99033239dc8df3bb1a3f7c00263128d72bbfb078fd909c6855312b516ee7580adcf35358cc4d63cc6fbee890a15116fdfe3836671af25ff88c8f2545012a4332d015b6a3d71aaab84f2823a73698cdefbb8232137b19edd5e1572b7745de6caa2c7147e9492cf29e284651b575ed08efd0aa9eb7399a022427c89cf2c9c4ec364ba9b72ea09dc2cadb9070652baadd18a1f78138b09c384d4383c5d5f091b58015d98e3f1d8a9aca5f805740658e1171c2a48ae88272890882fa865a8728bb733eb827d5f2b19348af28c933abca596fe6d959221ec2f8de2516b2b29624c62f13a5a6ac8249a19538dcd00ce538393a06c25418ba80bd49ea0a3479801dca9be79752745b2dce441e15c3a4684e7eae98f8932936c30c658fa5d669541d342786fc91a61f566ae6b02db3700add11c81d4e82da126295ab6451ad11db35a1f66ae039d7fd88f9c5cbed848292b4cfa9697315a5be50a0350d0466e8d6b5f00d0d4a2f8f55234a9fc20d45d0dd13aa0a4ebbee89259af4223a6aa9ca08624a2da75f639436d564f6bea795b9d9eda1b862fd423f08cb1c2a921a56507a2195863f3339b932ac0da21bb5b7834a6a964a38f367479452c08bd3ec30b1c4bd389fdf550456e7d06448cfcee499f3e565fa419bf6e7a0d47bcb312b6809198800cd353f4306cc28fa625fda8509094824b89b8de2d92bdfb65802f558db3f7839886049aec113307de7b40701015e5c043940be1f8fdd9b767c54607fbfc8eec0520b53ce2059debdcc99f602e9db12c5cb9c034669e22fbe7bd0525bfb9464c6aba7454f015a6a6fb9d5da687ce1fc0c151b7fd72e00c95449663f8cea68f09258bc9bacf223a20bba6489149d2a0f8d1bccbdb32d1ff18bafd0fd6eb4b8252e870da204bac6895753e112fb5b2b2f604865ddc68e9696cdf175e3ec96d42d1071ce19911949b3735b52c5b18cf9480141087146a4d32081ef09473cfd61a714c2cb70eca00"}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001500)={0xfffffffffffffffd, [{r11, r13}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12}, {r11, r13}, {}, {}, {}, {r12, r13}, {r11}, {r11}, {r12, r13}, {}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {r11}, {r11, r13}, {}, {0x0, 0x0}, {}, {r12}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {r11, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11}, {r11, r13}, {}, {r12, r13}, {r11}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r11}, {r12}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {r12}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {r12, r13}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {0x0, r13}, {}, {r12}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {r11}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {r12}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11}], 0x5, "3a894611d5205a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r13}, {}, {r12}, {r12}, {r12, r13}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r11}, {}, {r11}, {0x0, r13}, {}, {0x0, r14}, {r11, r13}, {r12}, {}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {r12}, {r11}, {}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r15}, {r11, r13}, {}, {r11}, {r12, r13}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {r11}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {0x0, r13}, {}, {r12}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11}, {r11}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {r11}, {}, {r12}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r12}, {r11}, {r12, r13}, {}, {}, {}, {}, {}, {r11}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {r12}, {r11}, {0x0, r13}, {r12}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0x81, [{r4}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {r5, r6}, {r5, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {}, {r5}, {}, {r4}, {r4, r6}, {r4}, {0x0, r6}, {r5}, {}, {}, {r5}, {r4, r6}, {}, {}, {r4}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4}, {r4}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {r4, r6}, {}, {r5}, {r4}, {r4}, {}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {r4}, {}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {r4}, {r5, r6}, {}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5}, {r5, r6}, {r5}, {r5}, {}, {}, {}, {r5, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4, r6}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4}, {r4, r6}, {r5}, {r4}, {}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r5}, {}, {}, {}, {r4, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r13}], 0x3f, "ef42af5d52a082"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"93db139a3aa55937c153ffb06b6b036d", 0x0, r8, {0x81}, {0x7, 0x400}, 0x3, [0xffff, 0xb97, 0x9, 0x8, 0x20, 0x0, 0x2, 0x1ff, 0x80, 0x401, 0x3, 0x9, 0x6, 0x7ff, 0x401, 0x1]}) splice(r2, &(0x7f00000001c0)=0xa7, r0, &(0x7f0000000200)=0xc7b8, 0x9, 0xd) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/170) syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08050307fba888759d5027b9d64765bf429d7d33f115e1ee1df7f9e47d1b9b1f7d1fb8bb0680476d70866fe946885348577166802d4686e6050efbb4cc6a6d1bdbbcf8c6b04f6e4838f6fef4"], 0x0) syz_emit_ethernet(0x28, &(0x7f0000000280)={@multicast, @random="881c831db860", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@generic={0x4, "970c70de98fe9ccba493a05ef0405bf5abb2ff75cea9"}}}, &(0x7f00000002c0)={0x1, 0x1, [0x9b9, 0xfae, 0x1c1, 0xb7]}) 16:08:46 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x101}]}}}]}, 0x3c}, 0x1, 0x74}, 0x0) [ 263.484665][ T4796] loop2: detected capacity change from 0 to 4 [ 263.512711][ T4795] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 263.522984][ T4795] CPU: 1 PID: 4795 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 263.533955][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.544015][ T4795] Call Trace: [ 263.547300][ T4795] [ 263.550326][ T4795] dump_stack_lvl+0xd6/0x122 [ 263.554936][ T4795] dump_stack+0x11/0x1b [ 263.559094][ T4795] dump_header+0x98/0x410 [ 263.563525][ T4795] out_of_memory+0x65c/0x8c0 [ 263.568123][ T4795] memory_max_write+0x32c/0x3d0 [ 263.573022][ T4795] ? memory_max_show+0x70/0x70 [ 263.577864][ T4795] cgroup_file_write+0x161/0x300 [ 263.582850][ T4795] ? __check_object_size+0x22a/0x2d0 [ 263.588146][ T4795] ? cgroup_seqfile_stop+0x70/0x70 [ 263.593265][ T4795] kernfs_fop_write_iter+0x1d3/0x2d0 [ 263.598578][ T4795] do_iter_readv_writev+0x2de/0x380 [ 263.603784][ T4795] do_iter_write+0x192/0x5c0 [ 263.608389][ T4795] ? splice_from_pipe_next+0x34f/0x3b0 [ 263.613860][ T4795] ? kmalloc_array+0x2d/0x40 [ 263.618456][ T4795] vfs_iter_write+0x4c/0x70 [ 263.623006][ T4795] iter_file_splice_write+0x43a/0x790 [ 263.628394][ T4795] ? splice_from_pipe+0xd0/0xd0 [ 263.633254][ T4795] direct_splice_actor+0x80/0xa0 [ 263.638201][ T4795] splice_direct_to_actor+0x345/0x650 [ 263.643650][ T4795] ? do_splice_direct+0x190/0x190 [ 263.648692][ T4795] do_splice_direct+0x106/0x190 [ 263.653742][ T4795] do_sendfile+0x675/0xc40 [ 263.658294][ T4795] __x64_sys_sendfile64+0x102/0x140 [ 263.663507][ T4795] do_syscall_64+0x44/0xd0 [ 263.667933][ T4795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.673832][ T4795] RIP: 0033:0x7efc3b498059 [ 263.678286][ T4795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 263.697895][ T4795] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.706313][ T4795] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 263.714334][ T4795] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 263.722308][ T4795] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 263.730284][ T4795] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 263.738271][ T4795] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 263.746259][ T4795] [ 263.749418][ T4795] memory: usage 44kB, limit 0kB, failcnt 216 [ 263.755410][ T4795] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 263.762301][ T4795] Memory cgroup stats for /syz1: [ 263.771541][ T4796] EXT4-fs (loop2): Can't read superblock on 2nd try [ 263.775808][ T4795] anon 0 [ 263.775808][ T4795] file 24576 [ 263.775808][ T4795] kernel_stack 0 [ 263.775808][ T4795] pagetables 0 [ 263.775808][ T4795] percpu 0 [ 263.775808][ T4795] sock 0 [ 263.775808][ T4795] vmalloc 0 [ 263.775808][ T4795] shmem 24576 [ 263.775808][ T4795] file_mapped 24576 [ 263.775808][ T4795] file_dirty 0 [ 263.775808][ T4795] file_writeback 0 [ 263.775808][ T4795] swapcached 0 [ 263.775808][ T4795] inactive_anon 0 [ 263.775808][ T4795] active_anon 24576 [ 263.775808][ T4795] inactive_file 0 [ 263.775808][ T4795] active_file 0 [ 263.775808][ T4795] unevictable 0 [ 263.775808][ T4795] slab_reclaimable 5544 [ 263.775808][ T4795] slab_unreclaimable 13640 [ 263.775808][ T4795] slab 19184 [ 263.775808][ T4795] workingset_refault_anon 0 [ 263.775808][ T4795] workingset_refault_file 1 [ 263.775808][ T4795] workingset_activate_anon 0 [ 263.775808][ T4795] workingset_activate_file 0 [ 263.775808][ T4795] workingset_restore_anon 0 [ 263.871439][ T4795] Out of memory and no killable processes... [ 263.877839][ T4799] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 263.888063][ T4799] CPU: 1 PID: 4799 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 263.899347][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.909476][ T4799] Call Trace: [ 263.912756][ T4799] [ 263.915688][ T4799] dump_stack_lvl+0xd6/0x122 [ 263.920291][ T4799] dump_stack+0x11/0x1b [ 263.924456][ T4799] dump_header+0x98/0x410 [ 263.928907][ T4799] out_of_memory+0x65c/0x8c0 [ 263.933576][ T4799] memory_max_write+0x32c/0x3d0 [ 263.938444][ T4799] ? memory_max_show+0x70/0x70 [ 263.943226][ T4799] cgroup_file_write+0x161/0x300 [ 263.948201][ T4799] ? __check_object_size+0x22a/0x2d0 [ 263.953537][ T4799] ? cgroup_seqfile_stop+0x70/0x70 [ 263.958656][ T4799] kernfs_fop_write_iter+0x1d3/0x2d0 [ 263.964022][ T4799] do_iter_readv_writev+0x2de/0x380 [ 263.969231][ T4799] do_iter_write+0x192/0x5c0 [ 263.973886][ T4799] ? splice_from_pipe_next+0x34f/0x3b0 [ 263.979366][ T4799] ? kmalloc_array+0x2d/0x40 [ 263.983969][ T4799] vfs_iter_write+0x4c/0x70 [ 263.988480][ T4799] iter_file_splice_write+0x43a/0x790 [ 263.993860][ T4799] ? splice_from_pipe+0xd0/0xd0 [ 263.998721][ T4799] direct_splice_actor+0x80/0xa0 [ 264.003739][ T4799] splice_direct_to_actor+0x345/0x650 [ 264.009264][ T4799] ? do_splice_direct+0x190/0x190 [ 264.014358][ T4799] do_splice_direct+0x106/0x190 [ 264.019235][ T4799] do_sendfile+0x675/0xc40 [ 264.023684][ T4799] __x64_sys_sendfile64+0x102/0x140 [ 264.028911][ T4799] do_syscall_64+0x44/0xd0 [ 264.033327][ T4799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.039291][ T4799] RIP: 0033:0x7f8a9bb9b059 [ 264.043748][ T4799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 264.063396][ T4799] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.071808][ T4799] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 264.079781][ T4799] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 264.087755][ T4799] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 264.095753][ T4799] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 264.103726][ T4799] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 264.111707][ T4799] [ 264.114758][ T4799] memory: usage 44kB, limit 0kB, failcnt 216 [ 264.118294][ C0] sd 0:0:1:0: [sda] tag#6414 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 264.120778][ T4799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 264.120791][ T4799] Memory cgroup stats for /syz1: [ 264.138020][ C0] sd 0:0:1:0: [sda] tag#6414 CDB: opcode=0xe5 (vendor) [ 264.149800][ C0] sd 0:0:1:0: [sda] tag#6414 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 264.159359][ C0] sd 0:0:1:0: [sda] tag#6414 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 264.168929][ C0] sd 0:0:1:0: [sda] tag#6414 CDB[20]: ba [ 264.179405][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.179860][ T24] audit: type=1400 audit(1645805327.645:154): avc: denied { ioctl } for pid=4791 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23363 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.230208][ T4799] anon 0 [ 264.230208][ T4799] file 24576 [ 264.230208][ T4799] kernel_stack 0 [ 264.230208][ T4799] pagetables 0 [ 264.230208][ T4799] percpu 0 [ 264.230208][ T4799] sock 0 [ 264.230208][ T4799] vmalloc 0 [ 264.230208][ T4799] shmem 24576 [ 264.230208][ T4799] file_mapped 24576 [ 264.230208][ T4799] file_dirty 0 [ 264.230208][ T4799] file_writeback 0 [ 264.230208][ T4799] swapcached 0 [ 264.230208][ T4799] inactive_anon 0 [ 264.230208][ T4799] active_anon 24576 [ 264.230208][ T4799] inactive_file 0 [ 264.230208][ T4799] active_file 0 [ 264.230208][ T4799] unevictable 0 [ 264.230208][ T4799] slab_reclaimable 4400 [ 264.230208][ T4799] slab_unreclaimable 13400 [ 264.230208][ T4799] slab 17800 [ 264.230208][ T4799] workingset_refault_anon 0 [ 264.230208][ T4799] workingset_refault_file 1 [ 264.230208][ T4799] workingset_activate_anon 0 [ 264.230208][ T4799] workingset_activate_file 0 [ 264.230208][ T4799] workingset_restore_anon 0 [ 264.318434][ T4799] Out of memory and no killable processes... 16:08:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x3, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x6, 0x0, 0x9, 0xffffffffffffffe0, 0x13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x46a8384d, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000380)=""/224, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x9, 0x3ff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1]}, 0x80) r2 = syz_io_uring_setup(0x184, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TEE, 0x0) r5 = fsmount(r0, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x41a8e842eb82dd18, 0x0, r6, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x1050, [0x0, 0x20000500, 0x20000530, 0x2000093c], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x8100, 'vlan0\x00', 'ip6gre0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', @local, [0x8b83c3cd33dda01, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0x10e, 0x13e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wg2\x00', 'veth0_virt_wifi\x00', 0x1, 0x0, 0x8, 0x9, 0x101, 0x24, {0x5}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xaa}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x3, 0x9, 0x6004, 'veth0_macvtap\x00', 'veth1_to_hsr\x00', 'veth1_to_batadv\x00', 'syzkaller0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x126, 0x16e, 0x29e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast1, @mcast2, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xb049708005155529], 0x2, 0x2f, 0x31, 0x10, 0x4e20, 0x4e22, 0x4e21, 0x4e23}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x3ff, 0x94d, 0x0, 0x3}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x2, {0x4}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x28, 0x809b, 'syzkaller0\x00', 'veth0_virt_wifi\x00', 'batadv_slave_1\x00', 'dummy0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0x1fe], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x9, 0x1691, 0x0, 0x0, "999acb40ec2ab0da97864f316d1a097ce28fa4fe2db7cd75d13e1754dcf010f44410466f9bc7713a3a00dca1b33a50ebd7c9038fe15d5c8cbb8af0361079271d"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x8809, 'wlan0\x00', 'veth0_macvtap\x00', 'veth0_to_bond\x00', 'bridge0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9a6, 0xa26, 0xa9e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'rose0\x00', {}, 'vlan0\x00', {}, 0x10, 0x10}}}, @among={{'among\x00', 0x0, 0x8a0}, {{@zero, @zero, 0x0, {[0x4, 0x7f, 0x9, 0x7, 0x9dd, 0x4, 0x3f, 0x8, 0x1, 0x7, 0xb6, 0x6bc, 0x564, 0x7fffffff, 0x7b58, 0x10001, 0x2, 0x0, 0x5, 0x81, 0x0, 0x14c, 0x3, 0xffffffff, 0x7ff, 0x300000, 0x0, 0x9, 0xf9, 0x9, 0x37, 0x0, 0x7, 0xf74c, 0x5037, 0x3, 0x0, 0xc5ee, 0x4, 0x2, 0x9, 0x1, 0x25, 0x200, 0xcab, 0x0, 0x81, 0x20, 0x7f, 0xb6, 0x597d, 0x4, 0x7fff, 0x80, 0xffffffe0, 0x87a1, 0x5, 0x67, 0x80000000, 0x1, 0x4, 0x800, 0xed9d, 0xff, 0xfffffff8, 0x6, 0x100, 0x0, 0xfffffe00, 0x7f, 0x10ad2551, 0x1, 0x8000, 0x1, 0xfff, 0x3, 0x1, 0x4, 0x5, 0x81, 0x7, 0x1, 0x1, 0x8eb2, 0x10001, 0x8000, 0x227, 0x6, 0x6c7, 0xff, 0x375, 0x10000, 0x9, 0x1, 0x2000, 0x7, 0x100, 0x4, 0x0, 0x3, 0x9, 0x9, 0x79f, 0x7, 0x6, 0x0, 0x20, 0x3f, 0x3, 0x0, 0x1, 0x101, 0x1, 0x5, 0x3, 0x80000000, 0x200, 0x70, 0x800, 0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x2, 0x2, 0x7ff, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1, 0x3, 0x5, 0x5, 0x3, 0xfffffff9, 0x6, 0x0, 0x2, 0x7, 0x7, 0x200000, 0x101, 0x8, 0x2, 0x89, 0x9, 0x284, 0x7, 0x4eea, 0x18, 0xa5, 0x7, 0x800, 0x1433, 0xff, 0x20, 0x891, 0xc729, 0x5, 0x3, 0xfffffff7, 0xff, 0x0, 0x7fffffff, 0x4, 0x7fff, 0x10001, 0x1000, 0x147, 0x101, 0x8000, 0x4, 0xf14f, 0x52, 0x324bd569, 0x7f, 0x77, 0x3f, 0x8000, 0xff, 0x6, 0xfffffffd, 0x7db, 0x7, 0xa244, 0x2, 0x200, 0x4, 0x9, 0x7ccd, 0x200, 0x3, 0x46d8, 0x3ff, 0x80000001, 0x5a0, 0x4, 0x2, 0x1, 0x8a9, 0x8001, 0x6, 0x9, 0x8, 0x12ee, 0x5, 0x0, 0x2, 0x2, 0x2, 0x12b, 0xfffffc01, 0x4, 0x4, 0xffff1143, 0x7, 0x3, 0xfffffffb, 0x1, 0x7f, 0x3, 0x9, 0x3, 0x4b5b, 0x8, 0xf0e4, 0x8000, 0x8001, 0x4000000, 0x9, 0x9, 0x0, 0xc7, 0xff, 0x8, 0x3, 0x7fff, 0x2, 0x0, 0x401, 0x639, 0x1, 0x7ff, 0x4, 0x800, 0x9, 0x2, 0x79e, 0x0, 0xc0, 0x9, 0x95, 0xffffffff], 0x8, [{[0x3, 0x6], @remote}, {[0x7, 0x9], @local}, {[0x6, 0x3], @empty}, {[0x3f, 0x1], @dev={0xac, 0x14, 0x14, 0x3d}}, {[0x10000, 0x9], @broadcast}, {[0x200, 0x1], @remote}, {[0x3d, 0x5], @private=0xa010101}, {[0xff, 0x3f], @remote}]}, {[0x3, 0x81, 0x4, 0xc46, 0x54c, 0x8001, 0x401, 0x5, 0x7f, 0xff, 0x0, 0x5, 0x44, 0x4, 0x3, 0x1, 0x73e4, 0x5, 0x8, 0x7fffffff, 0x8, 0x9, 0x4, 0x9556, 0x782, 0x8, 0xffff63da, 0x6, 0x1, 0x2, 0x3c, 0x9, 0x200, 0x6, 0x5fed, 0x0, 0x9, 0x1c000000, 0xfffffff9, 0x8, 0x5, 0x9, 0x1, 0x5, 0x7f, 0x2, 0xfff, 0xe05c, 0x4, 0x5, 0x4e, 0xfffffffc, 0x3, 0x3f, 0x1, 0x10001, 0x660, 0x3, 0xd4d, 0xd5d3, 0x90c8, 0xffff37c3, 0x80000000, 0x9, 0x8000, 0xaa1, 0x7, 0x2, 0xca, 0x2, 0xffffffff, 0x80, 0xed7, 0x8000, 0x0, 0x8, 0x240000, 0xcc, 0x5, 0x0, 0x9, 0x6a, 0xff, 0x89, 0x4, 0x10000, 0x9, 0x9, 0x5, 0x0, 0x3, 0x0, 0x1, 0x9, 0xfffffffd, 0xffff, 0x4, 0x9, 0x3f, 0xffff, 0x401, 0x1, 0xfffff001, 0x7, 0x8, 0x9, 0x1ff, 0x8, 0xe07e, 0x5, 0x5, 0x7f, 0x2e6, 0x4, 0x7fffffff, 0xef9, 0x7, 0x73, 0x800, 0x2, 0x4, 0x5901, 0x0, 0x2, 0x4, 0x0, 0x9371, 0x0, 0x9, 0x4, 0x80000001, 0xffffffff, 0xfffffa8b, 0x7, 0x6, 0x5, 0x4, 0x26b, 0x1, 0x0, 0x8001, 0x0, 0x7fffffff, 0x2, 0x8, 0xad, 0x6, 0x6, 0x4, 0xb1, 0x1ff, 0x3, 0x0, 0x147e2cd0, 0x1ff, 0x3, 0x40, 0x915, 0x0, 0x6, 0x6, 0x3, 0xfc2, 0x7ff, 0x7fffffff, 0xffffffff, 0x7ff, 0x105, 0x4, 0xffffffff, 0x2, 0x4, 0x9, 0x4, 0x81, 0x7, 0x80, 0xffff01a5, 0x4, 0x9, 0x7fff, 0x3, 0x100, 0x2, 0x80, 0x3, 0x10001, 0x200, 0xa9, 0x2, 0x0, 0xff, 0x1ff, 0x8000, 0x7, 0x1ff, 0x2, 0x6, 0x4, 0x5, 0x100, 0x6, 0x7, 0xb5a, 0xffffff00, 0x8, 0x7fffffff, 0x5, 0x70, 0x3, 0x81, 0xd12, 0x2, 0x40, 0x101, 0x2, 0x5, 0x5, 0x2, 0x8, 0x4, 0x2, 0x800, 0x3, 0x2a2, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x0, 0x1, 0x6, 0x3, 0x5, 0x77, 0x80, 0xa02, 0x100, 0x1f0000, 0x502ebf39, 0x7fffffff, 0x8, 0xffff1595, 0xd9, 0x4, 0x1000, 0x4, 0x3, 0x9c22, 0x800, 0x10000, 0x0, 0x7fff, 0x4, 0x2ea, 0x200, 0x9], 0x3, [{[0x10000, 0x3], @empty}, {[0x1, 0xfffffff7], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x6, 0x8], @rand_addr=0x64010101}]}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9d}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', {0x2}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x1, 0x2, 0x0, 0x0, "cd85b294dabf8c5c1eb90dcb03193c4bc740e5bfbc72c1fdfc2d66868eff03fab2c737ca528fe4c82012d6aa59f12d920a3441bf6a8f41cbe60e482cab01db8b"}}}}]}]}, 0x10c8) io_uring_enter(r2, 0x133f, 0x0, 0x0, 0x0, 0x0) 16:08:47 executing program 4: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = getpid() r2 = gettid() r3 = syz_clone(0xc000, &(0x7f0000001500)="7d35525f690a99a4895cda5bc3ba2ab1972cd43885abf99088425e9d8c7fd243dd88fd4cc8e57b709c4ab2a87879661e775aa8ecb43b62d65058c0cd22dc2cd227719467d109ca35738e8b06d8afdcafb144a6d24b3aaf612ad972f20d1f18574eefcaf966d87a9e507628d8421e0aa5ef04644b377069de92c30344ef9d53a6853754dfd09ae5c4cdf59338a4", 0x8d, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f00000015c0)="0c20999baa8d04fbfda0521f05c151965cbbd5f42e6126ec879667048c4e9f015198b20afd651ec52be2cb32beb53a2ba575cd1f6e8d0372e002c780c64d71bf4b9ab2256908ccb87f3df914b7065db27eefa71072ed3728adad94c1b9af17152c11934687d7669895a40e5241fda0102cdb218d2e6517e55ef7fe650e6f7f5da65b62a8cc733d0340888c58397231") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) syz_clone3(&(0x7f00000016c0)={0x1890000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f0000000140)=""/165, 0xa5, &(0x7f0000000500)=""/4096, &(0x7f0000001680)=[r0, r1, r2, r3, 0xffffffffffffffff, r4], 0x6}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1ba}, {&(0x7f0000000280)="51c1eb3ac3465c472c49d8ee8c8c6c5b4843b0381692d795dd37535735e85760b5edc7cfc4a67e3da430aa851b35f822eb86437f07a9c0492d610ec8499be23ac8f08da53d97f558537ed174d3d3dccf83ece35dfe53ca82cde4f7259bee339ccc7a497ec6435ade77bf28c420c6ed8bafb13ad9fb32635fcbabaa33481034e12965c7e140c17f1f65fa9f712d0729d4070edefb9091557114ed4c759c28a450b795293b029b701787d7ee17", 0xac}], 0x2) 16:08:47 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:47 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = io_uring_setup(0x5f5a, &(0x7f0000000140)={0x0, 0x3bd6, 0x10, 0x2, 0x294}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYBLOB]}, @name="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"}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001500)={0xfffffffffffffffd, [{r11, r13}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12}, {r11, r13}, {}, {}, {}, {r12, r13}, {r11}, {r11}, {r12, r13}, {}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {r11}, {r11, r13}, {}, {0x0, 0x0}, {}, {r12}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {r11, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11}, {r11, r13}, {}, {r12, r13}, {r11}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r11}, {r12}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {r12}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {r12, r13}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {0x0, r13}, {}, {r12}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {r11}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {r12}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11}], 0x5, "3a894611d5205a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r13}, {}, {r12}, {r12}, {r12, r13}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r11}, {}, {r11}, {0x0, r13}, {}, {0x0, r14}, {r11, r13}, {r12}, {}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {r12}, {r11}, {}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r15}, {r11, r13}, {}, {r11}, {r12, r13}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {r11}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {0x0, r13}, {}, {r12}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11}, {r11}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {r11}, {}, {r12}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r12}, {r11}, {r12, r13}, {}, {}, {}, {}, {}, {r11}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {r12}, {r11}, {0x0, r13}, {r12}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0x81, [{r4}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {r5, r6}, {r5, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {}, {r5}, {}, {r4}, {r4, r6}, {r4}, {0x0, r6}, {r5}, {}, {}, {r5}, {r4, r6}, {}, {}, {r4}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4}, {r4}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {r4, r6}, {}, {r5}, {r4}, {r4}, {}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {r4}, {}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {r4}, {r5, r6}, {}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5}, {r5, r6}, {r5}, {r5}, {}, {}, {}, {r5, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4, r6}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4}, {r4, r6}, {r5}, {r4}, {}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r5}, {}, {}, {}, {r4, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r13}], 0x3f, "ef42af5d52a082"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"93db139a3aa55937c153ffb06b6b036d", 0x0, r8, {0x81}, {0x7, 0x400}, 0x3, [0xffff, 0xb97, 0x9, 0x8, 0x20, 0x0, 0x2, 0x1ff, 0x80, 0x401, 0x3, 0x9, 0x6, 0x7ff, 0x401, 0x1]}) splice(r2, &(0x7f00000001c0)=0xa7, r0, &(0x7f0000000200)=0xc7b8, 0x9, 0xd) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/170) syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08050307fba888759d5027b9d64765bf429d7d33f115e1ee1df7f9e47d1b9b1f7d1fb8bb0680476d70866fe946885348577166802d4686e6050efbb4cc6a6d1bdbbcf8c6b04f6e4838f6fef4"], 0x0) syz_emit_ethernet(0x28, &(0x7f0000000280)={@multicast, @random="881c831db860", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@generic={0x4, "970c70de98fe9ccba493a05ef0405bf5abb2ff75cea9"}}}, &(0x7f00000002c0)={0x1, 0x1, [0x9b9, 0xfae, 0x1c1, 0xb7]}) pipe(&(0x7f0000000240)) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) io_uring_setup(0x5f5a, &(0x7f0000000140)={0x0, 0x3bd6, 0x10, 0x2, 0x294}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYBLOB]}, @name="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"}) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001500)={0xfffffffffffffffd, [{r11, r13}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12}, {r11, r13}, {}, {}, {}, {r12, r13}, {r11}, {r11}, {r12, r13}, {}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {r11}, {r11, r13}, {}, {}, {}, {r12}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {r11, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11}, {r11, r13}, {}, {r12, r13}, {r11}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r11}, {r12}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {r12}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {r12, r13}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {0x0, r13}, {}, {r12}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {r11}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {r12}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11}], 0x5, "3a894611d5205a"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r13}, {}, {r12}, {r12}, {r12, r13}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r11}, {}, {r11}, {0x0, r13}, {}, {0x0, r14}, {r11, r13}, {r12}, {}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {r12}, {r11}, {}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r15}, {r11, r13}, {}, {r11}, {r12, r13}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {r11}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {0x0, r13}, {}, {r12}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11}, {r11}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {r11}, {}, {r12}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r12}, {r11}, {r12, r13}, {}, {}, {}, {}, {}, {r11}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {r12}, {r11}, {0x0, r13}, {r12}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0x81, [{r4}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {r5, r6}, {r5, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {}, {r5}, {}, {r4}, {r4, r6}, {r4}, {0x0, r6}, {r5}, {}, {}, {r5}, {r4, r6}, {}, {}, {r4}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4}, {r4}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {r4, r6}, {}, {r5}, {r4}, {r4}, {}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {r4}, {}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {r4}, {r5, r6}, {}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5}, {r5, r6}, {r5}, {r5}, {}, {}, {}, {r5, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4, r6}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4}, {r4, r6}, {r5}, {r4}, {}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r5}, {}, {}, {}, {r4, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r13}], 0x3f, "ef42af5d52a082"}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"93db139a3aa55937c153ffb06b6b036d", 0x0, r8, {0x81}, {0x7, 0x400}, 0x3, [0xffff, 0xb97, 0x9, 0x8, 0x20, 0x0, 0x2, 0x1ff, 0x80, 0x401, 0x3, 0x9, 0x6, 0x7ff, 0x401, 0x1]}) (async) splice(r2, &(0x7f00000001c0)=0xa7, r0, &(0x7f0000000200)=0xc7b8, 0x9, 0xd) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/170) (async) syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08050307fba888759d5027b9d64765bf429d7d33f115e1ee1df7f9e47d1b9b1f7d1fb8bb0680476d70866fe946885348577166802d4686e6050efbb4cc6a6d1bdbbcf8c6b04f6e4838f6fef4"], 0x0) (async) syz_emit_ethernet(0x28, &(0x7f0000000280)={@multicast, @random="881c831db860", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@generic={0x4, "970c70de98fe9ccba493a05ef0405bf5abb2ff75cea9"}}}, &(0x7f00000002c0)={0x1, 0x1, [0x9b9, 0xfae, 0x1c1, 0xb7]}) (async) [ 264.508746][ T4810] loop2: detected capacity change from 0 to 4 [ 264.521469][ T4809] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 264.531726][ T4809] CPU: 0 PID: 4809 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 264.542660][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.552712][ T4809] Call Trace: [ 264.555985][ T4809] [ 264.558996][ T4809] dump_stack_lvl+0xd6/0x122 [ 264.563651][ T4809] dump_stack+0x11/0x1b [ 264.567830][ T4809] dump_header+0x98/0x410 [ 264.572150][ T4809] out_of_memory+0x65c/0x8c0 [ 264.576741][ T4809] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 264.582561][ T4809] memory_max_write+0x32c/0x3d0 [ 264.587401][ T4809] ? memory_max_show+0x70/0x70 [ 264.592562][ T4809] cgroup_file_write+0x161/0x300 [ 264.597533][ T4809] ? __check_object_size+0x22a/0x2d0 [ 264.602847][ T4809] ? cgroup_seqfile_stop+0x70/0x70 [ 264.607946][ T4809] kernfs_fop_write_iter+0x1d3/0x2d0 [ 264.613221][ T4809] do_iter_readv_writev+0x2de/0x380 [ 264.618409][ T4809] do_iter_write+0x192/0x5c0 [ 264.623021][ T4809] ? splice_from_pipe_next+0x34f/0x3b0 [ 264.628547][ T4809] ? kmalloc_array+0x2d/0x40 [ 264.633125][ T4809] vfs_iter_write+0x4c/0x70 [ 264.637634][ T4809] iter_file_splice_write+0x43a/0x790 [ 264.643023][ T4809] ? splice_from_pipe+0xd0/0xd0 [ 264.647862][ T4809] direct_splice_actor+0x80/0xa0 [ 264.652805][ T4809] splice_direct_to_actor+0x345/0x650 [ 264.658176][ T4809] ? do_splice_direct+0x190/0x190 [ 264.663189][ T4809] do_splice_direct+0x106/0x190 [ 264.668037][ T4809] do_sendfile+0x675/0xc40 [ 264.672440][ T4809] __x64_sys_sendfile64+0x102/0x140 [ 264.677630][ T4809] do_syscall_64+0x44/0xd0 [ 264.682033][ T4809] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.687912][ T4809] RIP: 0033:0x7f8a9bb9b059 [ 264.692310][ T4809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 264.711950][ T4809] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.720350][ T4809] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 264.728322][ T4809] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 264.736368][ T4809] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 264.744360][ T4809] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 16:08:48 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x3, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x6, 0x0, 0x9, 0xffffffffffffffe0, 0x13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x46a8384d, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000380)=""/224, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x9, 0x3ff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1]}, 0x80) (async) r2 = syz_io_uring_setup(0x184, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TEE, 0x0) (async) r5 = fsmount(r0, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x41a8e842eb82dd18, 0x0, r6, 0x0, 0x0}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x1050, [0x0, 0x20000500, 0x20000530, 0x2000093c], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x8100, 'vlan0\x00', 'ip6gre0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', @local, [0x8b83c3cd33dda01, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0x10e, 0x13e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wg2\x00', 'veth0_virt_wifi\x00', 0x1, 0x0, 0x8, 0x9, 0x101, 0x24, {0x5}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xaa}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x3, 0x9, 0x6004, 'veth0_macvtap\x00', 'veth1_to_hsr\x00', 'veth1_to_batadv\x00', 'syzkaller0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x126, 0x16e, 0x29e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast1, @mcast2, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xb049708005155529], 0x2, 0x2f, 0x31, 0x10, 0x4e20, 0x4e22, 0x4e21, 0x4e23}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x3ff, 0x94d, 0x0, 0x3}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x2, {0x4}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x28, 0x809b, 'syzkaller0\x00', 'veth0_virt_wifi\x00', 'batadv_slave_1\x00', 'dummy0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0x1fe], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x9, 0x1691, 0x0, 0x0, "999acb40ec2ab0da97864f316d1a097ce28fa4fe2db7cd75d13e1754dcf010f44410466f9bc7713a3a00dca1b33a50ebd7c9038fe15d5c8cbb8af0361079271d"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x8809, 'wlan0\x00', 'veth0_macvtap\x00', 'veth0_to_bond\x00', 'bridge0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9a6, 0xa26, 0xa9e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'rose0\x00', {}, 'vlan0\x00', {}, 0x10, 0x10}}}, @among={{'among\x00', 0x0, 0x8a0}, {{@zero, @zero, 0x0, {[0x4, 0x7f, 0x9, 0x7, 0x9dd, 0x4, 0x3f, 0x8, 0x1, 0x7, 0xb6, 0x6bc, 0x564, 0x7fffffff, 0x7b58, 0x10001, 0x2, 0x0, 0x5, 0x81, 0x0, 0x14c, 0x3, 0xffffffff, 0x7ff, 0x300000, 0x0, 0x9, 0xf9, 0x9, 0x37, 0x0, 0x7, 0xf74c, 0x5037, 0x3, 0x0, 0xc5ee, 0x4, 0x2, 0x9, 0x1, 0x25, 0x200, 0xcab, 0x0, 0x81, 0x20, 0x7f, 0xb6, 0x597d, 0x4, 0x7fff, 0x80, 0xffffffe0, 0x87a1, 0x5, 0x67, 0x80000000, 0x1, 0x4, 0x800, 0xed9d, 0xff, 0xfffffff8, 0x6, 0x100, 0x0, 0xfffffe00, 0x7f, 0x10ad2551, 0x1, 0x8000, 0x1, 0xfff, 0x3, 0x1, 0x4, 0x5, 0x81, 0x7, 0x1, 0x1, 0x8eb2, 0x10001, 0x8000, 0x227, 0x6, 0x6c7, 0xff, 0x375, 0x10000, 0x9, 0x1, 0x2000, 0x7, 0x100, 0x4, 0x0, 0x3, 0x9, 0x9, 0x79f, 0x7, 0x6, 0x0, 0x20, 0x3f, 0x3, 0x0, 0x1, 0x101, 0x1, 0x5, 0x3, 0x80000000, 0x200, 0x70, 0x800, 0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x2, 0x2, 0x7ff, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1, 0x3, 0x5, 0x5, 0x3, 0xfffffff9, 0x6, 0x0, 0x2, 0x7, 0x7, 0x200000, 0x101, 0x8, 0x2, 0x89, 0x9, 0x284, 0x7, 0x4eea, 0x18, 0xa5, 0x7, 0x800, 0x1433, 0xff, 0x20, 0x891, 0xc729, 0x5, 0x3, 0xfffffff7, 0xff, 0x0, 0x7fffffff, 0x4, 0x7fff, 0x10001, 0x1000, 0x147, 0x101, 0x8000, 0x4, 0xf14f, 0x52, 0x324bd569, 0x7f, 0x77, 0x3f, 0x8000, 0xff, 0x6, 0xfffffffd, 0x7db, 0x7, 0xa244, 0x2, 0x200, 0x4, 0x9, 0x7ccd, 0x200, 0x3, 0x46d8, 0x3ff, 0x80000001, 0x5a0, 0x4, 0x2, 0x1, 0x8a9, 0x8001, 0x6, 0x9, 0x8, 0x12ee, 0x5, 0x0, 0x2, 0x2, 0x2, 0x12b, 0xfffffc01, 0x4, 0x4, 0xffff1143, 0x7, 0x3, 0xfffffffb, 0x1, 0x7f, 0x3, 0x9, 0x3, 0x4b5b, 0x8, 0xf0e4, 0x8000, 0x8001, 0x4000000, 0x9, 0x9, 0x0, 0xc7, 0xff, 0x8, 0x3, 0x7fff, 0x2, 0x0, 0x401, 0x639, 0x1, 0x7ff, 0x4, 0x800, 0x9, 0x2, 0x79e, 0x0, 0xc0, 0x9, 0x95, 0xffffffff], 0x8, [{[0x3, 0x6], @remote}, {[0x7, 0x9], @local}, {[0x6, 0x3], @empty}, {[0x3f, 0x1], @dev={0xac, 0x14, 0x14, 0x3d}}, {[0x10000, 0x9], @broadcast}, {[0x200, 0x1], @remote}, {[0x3d, 0x5], @private=0xa010101}, {[0xff, 0x3f], @remote}]}, {[0x3, 0x81, 0x4, 0xc46, 0x54c, 0x8001, 0x401, 0x5, 0x7f, 0xff, 0x0, 0x5, 0x44, 0x4, 0x3, 0x1, 0x73e4, 0x5, 0x8, 0x7fffffff, 0x8, 0x9, 0x4, 0x9556, 0x782, 0x8, 0xffff63da, 0x6, 0x1, 0x2, 0x3c, 0x9, 0x200, 0x6, 0x5fed, 0x0, 0x9, 0x1c000000, 0xfffffff9, 0x8, 0x5, 0x9, 0x1, 0x5, 0x7f, 0x2, 0xfff, 0xe05c, 0x4, 0x5, 0x4e, 0xfffffffc, 0x3, 0x3f, 0x1, 0x10001, 0x660, 0x3, 0xd4d, 0xd5d3, 0x90c8, 0xffff37c3, 0x80000000, 0x9, 0x8000, 0xaa1, 0x7, 0x2, 0xca, 0x2, 0xffffffff, 0x80, 0xed7, 0x8000, 0x0, 0x8, 0x240000, 0xcc, 0x5, 0x0, 0x9, 0x6a, 0xff, 0x89, 0x4, 0x10000, 0x9, 0x9, 0x5, 0x0, 0x3, 0x0, 0x1, 0x9, 0xfffffffd, 0xffff, 0x4, 0x9, 0x3f, 0xffff, 0x401, 0x1, 0xfffff001, 0x7, 0x8, 0x9, 0x1ff, 0x8, 0xe07e, 0x5, 0x5, 0x7f, 0x2e6, 0x4, 0x7fffffff, 0xef9, 0x7, 0x73, 0x800, 0x2, 0x4, 0x5901, 0x0, 0x2, 0x4, 0x0, 0x9371, 0x0, 0x9, 0x4, 0x80000001, 0xffffffff, 0xfffffa8b, 0x7, 0x6, 0x5, 0x4, 0x26b, 0x1, 0x0, 0x8001, 0x0, 0x7fffffff, 0x2, 0x8, 0xad, 0x6, 0x6, 0x4, 0xb1, 0x1ff, 0x3, 0x0, 0x147e2cd0, 0x1ff, 0x3, 0x40, 0x915, 0x0, 0x6, 0x6, 0x3, 0xfc2, 0x7ff, 0x7fffffff, 0xffffffff, 0x7ff, 0x105, 0x4, 0xffffffff, 0x2, 0x4, 0x9, 0x4, 0x81, 0x7, 0x80, 0xffff01a5, 0x4, 0x9, 0x7fff, 0x3, 0x100, 0x2, 0x80, 0x3, 0x10001, 0x200, 0xa9, 0x2, 0x0, 0xff, 0x1ff, 0x8000, 0x7, 0x1ff, 0x2, 0x6, 0x4, 0x5, 0x100, 0x6, 0x7, 0xb5a, 0xffffff00, 0x8, 0x7fffffff, 0x5, 0x70, 0x3, 0x81, 0xd12, 0x2, 0x40, 0x101, 0x2, 0x5, 0x5, 0x2, 0x8, 0x4, 0x2, 0x800, 0x3, 0x2a2, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x0, 0x1, 0x6, 0x3, 0x5, 0x77, 0x80, 0xa02, 0x100, 0x1f0000, 0x502ebf39, 0x7fffffff, 0x8, 0xffff1595, 0xd9, 0x4, 0x1000, 0x4, 0x3, 0x9c22, 0x800, 0x10000, 0x0, 0x7fff, 0x4, 0x2ea, 0x200, 0x9], 0x3, [{[0x10000, 0x3], @empty}, {[0x1, 0xfffffff7], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x6, 0x8], @rand_addr=0x64010101}]}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9d}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', {0x2}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x1, 0x2, 0x0, 0x0, "cd85b294dabf8c5c1eb90dcb03193c4bc740e5bfbc72c1fdfc2d66868eff03fab2c737ca528fe4c82012d6aa59f12d920a3441bf6a8f41cbe60e482cab01db8b"}}}}]}]}, 0x10c8) (async) io_uring_enter(r2, 0x133f, 0x0, 0x0, 0x0, 0x0) [ 264.752397][ T4809] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 264.760411][ T4809] [ 264.763621][ T4809] memory: usage 44kB, limit 0kB, failcnt 216 [ 264.769651][ T4809] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 264.769672][ T4811] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.776500][ T4809] Memory cgroup stats for /syz1: [ 264.784766][ T4809] anon 0 [ 264.784766][ T4809] file 24576 [ 264.784766][ T4809] kernel_stack 0 [ 264.784766][ T4809] pagetables 0 [ 264.784766][ T4809] percpu 0 [ 264.784766][ T4809] sock 0 [ 264.784766][ T4809] vmalloc 0 [ 264.784766][ T4809] shmem 24576 [ 264.784766][ T4809] file_mapped 24576 [ 264.784766][ T4809] file_dirty 0 [ 264.784766][ T4809] file_writeback 0 [ 264.784766][ T4809] swapcached 0 [ 264.784766][ T4809] inactive_anon 0 [ 264.784766][ T4809] active_anon 24576 [ 264.784766][ T4809] inactive_file 0 [ 264.784766][ T4809] active_file 0 [ 264.784766][ T4809] unevictable 0 [ 264.784766][ T4809] slab_reclaimable 4400 [ 264.784766][ T4809] slab_unreclaimable 13400 [ 264.784766][ T4809] slab 17800 [ 264.784766][ T4809] workingset_refault_anon 0 [ 264.784766][ T4809] workingset_refault_file 1 [ 264.784766][ T4809] workingset_activate_anon 0 [ 264.784766][ T4809] workingset_activate_file 0 [ 264.784766][ T4809] workingset_restore_anon 0 [ 264.878861][ T4809] Out of memory and no killable processes... [ 264.884001][ C1] sd 0:0:1:0: [sda] tag#6415 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 264.893688][ T4810] EXT4-fs (loop2): Can't read superblock on 2nd try [ 264.895211][ C1] sd 0:0:1:0: [sda] tag#6415 CDB: opcode=0xe5 (vendor) 16:08:48 executing program 4: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = getpid() r2 = gettid() r3 = syz_clone(0xc000, &(0x7f0000001500)="7d35525f690a99a4895cda5bc3ba2ab1972cd43885abf99088425e9d8c7fd243dd88fd4cc8e57b709c4ab2a87879661e775aa8ecb43b62d65058c0cd22dc2cd227719467d109ca35738e8b06d8afdcafb144a6d24b3aaf612ad972f20d1f18574eefcaf966d87a9e507628d8421e0aa5ef04644b377069de92c30344ef9d53a6853754dfd09ae5c4cdf59338a4", 0x8d, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f00000015c0)="0c20999baa8d04fbfda0521f05c151965cbbd5f42e6126ec879667048c4e9f015198b20afd651ec52be2cb32beb53a2ba575cd1f6e8d0372e002c780c64d71bf4b9ab2256908ccb87f3df914b7065db27eefa71072ed3728adad94c1b9af17152c11934687d7669895a40e5241fda0102cdb218d2e6517e55ef7fe650e6f7f5da65b62a8cc733d0340888c58397231") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) syz_clone3(&(0x7f00000016c0)={0x1890000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f0000000140)=""/165, 0xa5, &(0x7f0000000500)=""/4096, &(0x7f0000001680)=[r0, r1, r2, r3, 0xffffffffffffffff, r4], 0x6}, 0x58) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1ba}, {&(0x7f0000000280)="51c1eb3ac3465c472c49d8ee8c8c6c5b4843b0381692d795dd37535735e85760b5edc7cfc4a67e3da430aa851b35f822eb86437f07a9c0492d610ec8499be23ac8f08da53d97f558537ed174d3d3dccf83ece35dfe53ca82cde4f7259bee339ccc7a497ec6435ade77bf28c420c6ed8bafb13ad9fb32635fcbabaa33481034e12965c7e140c17f1f65fa9f712d0729d4070edefb9091557114ed4c759c28a450b795293b029b701787d7ee17", 0xac}], 0x2) 16:08:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:48 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x3, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x6, 0x0, 0x9, 0xffffffffffffffe0, 0x13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x46a8384d, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000380)=""/224, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x9, 0x3ff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0x1]}, 0x80) (async) r2 = syz_io_uring_setup(0x184, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TEE, 0x0) r5 = fsmount(r0, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x41a8e842eb82dd18, 0x0, r6, 0x0, 0x0}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x1050, [0x0, 0x20000500, 0x20000530, 0x2000093c], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x8100, 'vlan0\x00', 'ip6gre0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', @local, [0x8b83c3cd33dda01, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0x10e, 0x13e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wg2\x00', 'veth0_virt_wifi\x00', 0x1, 0x0, 0x8, 0x9, 0x101, 0x24, {0x5}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xaa}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x3, 0x9, 0x6004, 'veth0_macvtap\x00', 'veth1_to_hsr\x00', 'veth1_to_batadv\x00', 'syzkaller0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x126, 0x16e, 0x29e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast1, @mcast2, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xb049708005155529], 0x2, 0x2f, 0x31, 0x10, 0x4e20, 0x4e22, 0x4e21, 0x4e23}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x3ff, 0x94d, 0x0, 0x3}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x2, {0x4}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x28, 0x809b, 'syzkaller0\x00', 'veth0_virt_wifi\x00', 'batadv_slave_1\x00', 'dummy0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0x1fe], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x9, 0x1691, 0x0, 0x0, "999acb40ec2ab0da97864f316d1a097ce28fa4fe2db7cd75d13e1754dcf010f44410466f9bc7713a3a00dca1b33a50ebd7c9038fe15d5c8cbb8af0361079271d"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x8809, 'wlan0\x00', 'veth0_macvtap\x00', 'veth0_to_bond\x00', 'bridge0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9a6, 0xa26, 0xa9e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'rose0\x00', {}, 'vlan0\x00', {}, 0x10, 0x10}}}, @among={{'among\x00', 0x0, 0x8a0}, {{@zero, @zero, 0x0, {[0x4, 0x7f, 0x9, 0x7, 0x9dd, 0x4, 0x3f, 0x8, 0x1, 0x7, 0xb6, 0x6bc, 0x564, 0x7fffffff, 0x7b58, 0x10001, 0x2, 0x0, 0x5, 0x81, 0x0, 0x14c, 0x3, 0xffffffff, 0x7ff, 0x300000, 0x0, 0x9, 0xf9, 0x9, 0x37, 0x0, 0x7, 0xf74c, 0x5037, 0x3, 0x0, 0xc5ee, 0x4, 0x2, 0x9, 0x1, 0x25, 0x200, 0xcab, 0x0, 0x81, 0x20, 0x7f, 0xb6, 0x597d, 0x4, 0x7fff, 0x80, 0xffffffe0, 0x87a1, 0x5, 0x67, 0x80000000, 0x1, 0x4, 0x800, 0xed9d, 0xff, 0xfffffff8, 0x6, 0x100, 0x0, 0xfffffe00, 0x7f, 0x10ad2551, 0x1, 0x8000, 0x1, 0xfff, 0x3, 0x1, 0x4, 0x5, 0x81, 0x7, 0x1, 0x1, 0x8eb2, 0x10001, 0x8000, 0x227, 0x6, 0x6c7, 0xff, 0x375, 0x10000, 0x9, 0x1, 0x2000, 0x7, 0x100, 0x4, 0x0, 0x3, 0x9, 0x9, 0x79f, 0x7, 0x6, 0x0, 0x20, 0x3f, 0x3, 0x0, 0x1, 0x101, 0x1, 0x5, 0x3, 0x80000000, 0x200, 0x70, 0x800, 0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x2, 0x2, 0x7ff, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1, 0x3, 0x5, 0x5, 0x3, 0xfffffff9, 0x6, 0x0, 0x2, 0x7, 0x7, 0x200000, 0x101, 0x8, 0x2, 0x89, 0x9, 0x284, 0x7, 0x4eea, 0x18, 0xa5, 0x7, 0x800, 0x1433, 0xff, 0x20, 0x891, 0xc729, 0x5, 0x3, 0xfffffff7, 0xff, 0x0, 0x7fffffff, 0x4, 0x7fff, 0x10001, 0x1000, 0x147, 0x101, 0x8000, 0x4, 0xf14f, 0x52, 0x324bd569, 0x7f, 0x77, 0x3f, 0x8000, 0xff, 0x6, 0xfffffffd, 0x7db, 0x7, 0xa244, 0x2, 0x200, 0x4, 0x9, 0x7ccd, 0x200, 0x3, 0x46d8, 0x3ff, 0x80000001, 0x5a0, 0x4, 0x2, 0x1, 0x8a9, 0x8001, 0x6, 0x9, 0x8, 0x12ee, 0x5, 0x0, 0x2, 0x2, 0x2, 0x12b, 0xfffffc01, 0x4, 0x4, 0xffff1143, 0x7, 0x3, 0xfffffffb, 0x1, 0x7f, 0x3, 0x9, 0x3, 0x4b5b, 0x8, 0xf0e4, 0x8000, 0x8001, 0x4000000, 0x9, 0x9, 0x0, 0xc7, 0xff, 0x8, 0x3, 0x7fff, 0x2, 0x0, 0x401, 0x639, 0x1, 0x7ff, 0x4, 0x800, 0x9, 0x2, 0x79e, 0x0, 0xc0, 0x9, 0x95, 0xffffffff], 0x8, [{[0x3, 0x6], @remote}, {[0x7, 0x9], @local}, {[0x6, 0x3], @empty}, {[0x3f, 0x1], @dev={0xac, 0x14, 0x14, 0x3d}}, {[0x10000, 0x9], @broadcast}, {[0x200, 0x1], @remote}, {[0x3d, 0x5], @private=0xa010101}, {[0xff, 0x3f], @remote}]}, {[0x3, 0x81, 0x4, 0xc46, 0x54c, 0x8001, 0x401, 0x5, 0x7f, 0xff, 0x0, 0x5, 0x44, 0x4, 0x3, 0x1, 0x73e4, 0x5, 0x8, 0x7fffffff, 0x8, 0x9, 0x4, 0x9556, 0x782, 0x8, 0xffff63da, 0x6, 0x1, 0x2, 0x3c, 0x9, 0x200, 0x6, 0x5fed, 0x0, 0x9, 0x1c000000, 0xfffffff9, 0x8, 0x5, 0x9, 0x1, 0x5, 0x7f, 0x2, 0xfff, 0xe05c, 0x4, 0x5, 0x4e, 0xfffffffc, 0x3, 0x3f, 0x1, 0x10001, 0x660, 0x3, 0xd4d, 0xd5d3, 0x90c8, 0xffff37c3, 0x80000000, 0x9, 0x8000, 0xaa1, 0x7, 0x2, 0xca, 0x2, 0xffffffff, 0x80, 0xed7, 0x8000, 0x0, 0x8, 0x240000, 0xcc, 0x5, 0x0, 0x9, 0x6a, 0xff, 0x89, 0x4, 0x10000, 0x9, 0x9, 0x5, 0x0, 0x3, 0x0, 0x1, 0x9, 0xfffffffd, 0xffff, 0x4, 0x9, 0x3f, 0xffff, 0x401, 0x1, 0xfffff001, 0x7, 0x8, 0x9, 0x1ff, 0x8, 0xe07e, 0x5, 0x5, 0x7f, 0x2e6, 0x4, 0x7fffffff, 0xef9, 0x7, 0x73, 0x800, 0x2, 0x4, 0x5901, 0x0, 0x2, 0x4, 0x0, 0x9371, 0x0, 0x9, 0x4, 0x80000001, 0xffffffff, 0xfffffa8b, 0x7, 0x6, 0x5, 0x4, 0x26b, 0x1, 0x0, 0x8001, 0x0, 0x7fffffff, 0x2, 0x8, 0xad, 0x6, 0x6, 0x4, 0xb1, 0x1ff, 0x3, 0x0, 0x147e2cd0, 0x1ff, 0x3, 0x40, 0x915, 0x0, 0x6, 0x6, 0x3, 0xfc2, 0x7ff, 0x7fffffff, 0xffffffff, 0x7ff, 0x105, 0x4, 0xffffffff, 0x2, 0x4, 0x9, 0x4, 0x81, 0x7, 0x80, 0xffff01a5, 0x4, 0x9, 0x7fff, 0x3, 0x100, 0x2, 0x80, 0x3, 0x10001, 0x200, 0xa9, 0x2, 0x0, 0xff, 0x1ff, 0x8000, 0x7, 0x1ff, 0x2, 0x6, 0x4, 0x5, 0x100, 0x6, 0x7, 0xb5a, 0xffffff00, 0x8, 0x7fffffff, 0x5, 0x70, 0x3, 0x81, 0xd12, 0x2, 0x40, 0x101, 0x2, 0x5, 0x5, 0x2, 0x8, 0x4, 0x2, 0x800, 0x3, 0x2a2, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x0, 0x1, 0x6, 0x3, 0x5, 0x77, 0x80, 0xa02, 0x100, 0x1f0000, 0x502ebf39, 0x7fffffff, 0x8, 0xffff1595, 0xd9, 0x4, 0x1000, 0x4, 0x3, 0x9c22, 0x800, 0x10000, 0x0, 0x7fff, 0x4, 0x2ea, 0x200, 0x9], 0x3, [{[0x10000, 0x3], @empty}, {[0x1, 0xfffffff7], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x6, 0x8], @rand_addr=0x64010101}]}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9d}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', {0x2}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x1, 0x2, 0x0, 0x0, "cd85b294dabf8c5c1eb90dcb03193c4bc740e5bfbc72c1fdfc2d66868eff03fab2c737ca528fe4c82012d6aa59f12d920a3441bf6a8f41cbe60e482cab01db8b"}}}}]}]}, 0x10c8) io_uring_enter(r2, 0x133f, 0x0, 0x0, 0x0, 0x0) 16:08:48 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = io_uring_setup(0x5f5a, &(0x7f0000000140)={0x0, 0x3bd6, 0x10, 0x2, 0x294}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYBLOB]}, @name="28ce59dfc7ae9009f994fd025a0444dfebfb7061a5948c4662e39f8256c579834959742b871c005de3473b0e280182715450c02515a2c5d21e772323fe1657d3642995ef8d01878b4dbe5ede9690d2d84ca15da1e7c84eddf9aca1da186d54a296939e223b6265d68dfe21f81723d7a621f6f7aa2c89463dfc1d69dd148f62656028fc982be8c7a2e3db7886e44b9cdb10817a47ca82dde2e49bf7ea9a1b46194a6cbeb18135d16ce9bada1b60428b6ca93555de1e2ddd207dc9c27a6619bcc41e286831a35bd48f43f25533121478d86e7d0de744bdb0d916809fb565f85374cbaf7f4cd1a93720f63f44d1c97a87d72473869397b2fb08cdf9387a7448e463888dd126e3d9f50c5bf051e04d25c63adec3f2c51a8817c39f219b27c45bbda09415e0bfac248567c9305a3c315b3dace9e38c4e74a6e2ee113d04664499ceb5eb09c96110b2519cda7eb60f3a232cbc8612aba66257dbc4331619aba1949219079ab50af9774d5458bc1c7b220753b97bc0bca415c7185b1b17cecc72971abe4f746f1de7709e5310836bb4c0b6032a126074aa144162817627e876bec17c0f1097ff0434ee10e224bc5be76c5045a10a390830760c83ad960bd6994c6041870ca5ffc5552fe110623a3db1f20fd82f3696af69f30aeb07c5e4059a2634f5ebcb2f1d6464cfbaa981d170b600b6d0cddcc6cff8b43d289dfe2fb889fc7cae3a2fb4236ad58247d77561b646d95745fb3ff7424accfea99ec6f082da6d7c70fe94b3ec470dc6221f8af3ebdcfc13411e0021005bae03fcc3fc63e4c9779233bb798d848187111c0eae93d43a9f17673c95cd3241d4b6c6f073a81ed65b11c8558be0f17354f360d458301874afe6737e1477eb5b9f85beaf38f73e73409b8b9c13efeb44c11524fca25625f6cdf5096f0f109a84bfad42bdcb33a669cb178a6754a74f02ab9bccb040d5067f06909ac9b16d38e7cd83cb098fc6967354c0f3dc34a85b4393dce310abb803edbd2406637e03502c4e9b6ddd2ecc17514155743958322eda52bbadcfe23d6be9e5c20f066d4576e7e642b19e4578bc0ad247d01b399b78512e86aa1257d84a19cc87e9577085924297b3a2c5a037dc1c5f951c6323a728e6a5a18dec901c2394eee655df7ba19a3005bda0399f2aa951d450870dcd7f6dd205e623f2034135ad43fe6a572f00211b348219ea08e60e4983847bf0c966f4161bc9c321e1c4896bfc214ba6187da50cfb6bb600f5f357ddcf6c870893f537977f25ed88e093346fcf7e487480a03e5feba3043539a7bc6a8f9caaf478d971aa3711491d3b8243e08df7d3107a004db259865f00c65980a71399aaa1546678325f1ad823c5ac42b87aa87a6e9df14d710aab37fe2879857685d7e255d7ed20389dedef7e609981d70844808699cddd431cb43c24f6cab329ab62d2209d6d4aabd6f725d65aa060285b18e8da5442ccee5eb133401d2e7296790e0ff5fd704ae77279c305ffdde9cf2c38c453f9d3111cf091a853d196b649c9e4d2210e9806ff00bf67210a0fe0a908a51e64d49d78220f2d832222bbca3129f1399a0b526af79d7b598e4bbf2ce7a0c87fbae70cb1c015c4688912639ef7e86d1fe05a05c5b2d31e8a41f4e1cf54f0118b872a9351e69a7ce9e9ebc45cab02023ac2020422c67108b2b2c90de25c82f7d83fc2ab1a4561fd01bdc659a5ba5bb830dfcd308e8717bf193fc117b81eca101b0420825405448d5e89360f872fa7da544d70526b8e46f1667272e0e5e0aabbb207024cee92acd42de8cf88dfe9657df9fc49baba452c838ed655172ea101b49cf114b5e84ef41c82af855fcb41c2def9211b2fbb80718df94d9c9983df56f1d2162f2a24a0711c8528ae63d79e618a913c809b0cd8ea3f678580ed41b15eac9ac719b2f1d8c058004cefa6a8b93fdbfb6cd497b91349aa209e9401aa4040f9c627db8c7cbd2ba2620ff25762a2b0f9a536f88ddd3e4c9a82f435ca7073572a6b9d33a4a4781f5807986556cdbe6fec2a2172a0aa6c5a69c2232056488bf2ba99d85665e1fee7a2a6b6c2350e241fe28250c455c03dfc65dc96786f0e5cbb51ab87bd9d9d158faab451d7413da5a6aaa45073ef019c79c52e9de921b28b65e08211b800ef1683bfcad71daaf22ffee53df5e89044c2a326d47b9b280f3fe92cd67aa45d5464e680e90608b43206c5c760dea98e5d62bc920ed020900a033fea587e98a1079ed5487b19853986725eb68a53ee376fa4260bea626bca1814c2575545662bfedef988acb23156e56688b84dfaef74cbd9b3149acc3b4d58dcfa5d096e034ea5c908461a6a85067b6e4640d7b0f707c441102475742ce3e80af6828f5b80c172af605a3388f43589d79562394b473b49c3dcf3f67fba758451e191a8f5539b91e40766bb2c1bbed2a2193d7ac6bff747adc3df1e566aa2484b8d989daf327bdcaeaf289cba3e063772bd268f926f01fb76f23b5e7bc950635a2a653d2fee646e3bf7c855456be51d7ea8f3ecc43f9794dae591219492481d40e36bf7190ba4aa32e46b2400c0ab1ec1d2fc17e1cb8061fe94a2f01b1c44dfa7c0b2dd9438c8d103304e8f3bbbedfa6b1a302e10bd8d9fddca1c7954f4b9eb4ab47e91bc549eff21702a62875e01ca5ff8e61b25aa61b0d8c2c0f636c3202c068e1abbf47f259ebfce16560194b70409e6d15f185707da1ba8365e954c24d70481499587bf10f78c9a5cefc7e0b47636e7e8842f2a52fe3814091bdc40e525632fc42cdcfe7d8c0caedb8e2704502ec6ff139be06555523cb458031bdea1aed979aa7053683eae25eb0f7aa04ba06db9bfe5c3084d661f8026cf81a352a45d04312d12b9b3e1a1a5e34ca5219feaa7abe61c20d60745ca5039df6afbfb2d1a2ca3c7d66f1404ec5418e2f7fe2a0bb72b9d9ebca3a1c94247487416d95197ed5b6678a6bc313f70639b0e671eb805669232259360a6f1c8c019b30e5a13d897ec9a18166b06a51de49f6d434ed08fe1fa899daa6837f8fc538657ab4b8e67b6fc66beae7b0454f00d3b7f520406e4b03609ce04137217c7a55da45fd21b1af18a7c4588ea6b453f4ac0cf4148f8b8eef01844a1eacc253cf56b93e59b7a110b5b9d6fa0d12a19c7ca11c81eb6a97b327d3f2a21364a02cb31d6b722a9928a57a934455473905d5d177ec57d798f0b8497e3702d00afe8ff20d54b6aae293fd6f7915448fc5494a1694402c377230c1ae15512bebaaf077d338aeab3604dbaa87a4dff5a9a9cc73cf7b0f2ae1953720414a352f91c905cb1b034363861a0735645c43a4eef1f7e77f270e42e55df8909ab81f50b16be2db6629efa8a316f1b6090f7705481c5152cc0886ff9794030573fe087dd55029b800375c102d596eed0c56581b7b60de12be1bfaa586bf7ac2988f87e9f79fc655284b02b9a6e48e68c70e9e7623cdc441bf8f4ede01abf16850bbbaa5546780b22096639243501e302a26ea901f589cc46ad20cd1b449d44710341b8944b33daf18a8a07fee2d6d582c098fa1ea15be8c19a482cb9b66096933e7a935dab7b6b78064ddc5aca9d670f05e178f7ec11a7759a7dc4134a62a076bddf1583724f53cdb6735fdf035c487049a582efbd383c132c0f1812b8b17b81a78ee9e0c0f0ef03f150b40e8dba014b7ebf14a5625a3f829cbfaed783010d2d152b87439b553ffe9dc2f18880fa3c8e3bd894afbff760d399af441b291b17c746ac18475cc68f65669ff36bf4a65b5dfb07b6f6f159efef98e56cbf2de04e1a6d632224597f50297355d683aa02e4088f019f3ad1b96cc9ed93184a5374ae78bf967c48092da50435ab0248f3f357021f23d1155cec96efc277a988f4c4e3de8c40181238ee851fcc04cb19a9ac5340d7c2ef34989f23e82c0adc0b05c6860c8b8f9c0e91b8228e1e3ea7ffd5d051210f83027ec9f1bab539d58e2553828c58274a8262c3114d9ce02d63608d5b6dfb142d80e6ad8c161dde7e9116887e8ec6af73c7b83abf046ee9e331c2a5420925b5ece25d711d4e0682b6ce2d9e983e992feeec14554a5a6057e8295c01c3d804be6973849730f7a843a08568ab8d141de44d974f5fc674935d8463a568e4c491154606b2e323038716584e0dbe67ab70014d01d3874e0b9f24cf1ece5fa03793dfa7b11243d7f6429958842b62330c8f89850cb5f8fe70cf68e71d49ba6ed53e702feafd0d1e5a658da4a47c88244a97e3a7002618f76c9965837a7f1ee394a8440df7cf1f191966df765d361056d5db3956626930fef1a89958a44b54eb53f7f573f1d9ead5d41a830b1fc2beeb555ddcbad949f6d413c41c73f9c42637852fc6d14b78ec9058fabdae49a8fdd1cd713dccc2cb19887da1a7e67d73ec5d004f5eaa92681423809eb6169de7223cd6479f494a8dd9dc9554535ea60ccb06a8447aa7e5d925fcbff4de1cfb74bfa13a95e3d3ede6d3ebfdad1ba37f88c4f4fe5dc3663d54879bdaa0a276971b56e4656b1fff27c6a3d227f5d7ca67dbc7bfb2292f15f3632dc7d0a85fd2a6a2d06dcd4dbf67ea4d6882d594048ae005259ec148671d35cbad59d2097fac024665d1361bea887647c49d84c005800f9923e382459e999ef28008e7057fd243a7606dfd010c6632504e6f438cbcb5fa0739f55e65ddd99033239dc8df3bb1a3f7c00263128d72bbfb078fd909c6855312b516ee7580adcf35358cc4d63cc6fbee890a15116fdfe3836671af25ff88c8f2545012a4332d015b6a3d71aaab84f2823a73698cdefbb8232137b19edd5e1572b7745de6caa2c7147e9492cf29e284651b575ed08efd0aa9eb7399a022427c89cf2c9c4ec364ba9b72ea09dc2cadb9070652baadd18a1f78138b09c384d4383c5d5f091b58015d98e3f1d8a9aca5f805740658e1171c2a48ae88272890882fa865a8728bb733eb827d5f2b19348af28c933abca596fe6d959221ec2f8de2516b2b29624c62f13a5a6ac8249a19538dcd00ce538393a06c25418ba80bd49ea0a3479801dca9be79752745b2dce441e15c3a4684e7eae98f8932936c30c658fa5d669541d342786fc91a61f566ae6b02db3700add11c81d4e82da126295ab6451ad11db35a1f66ae039d7fd88f9c5cbed848292b4cfa9697315a5be50a0350d0466e8d6b5f00d0d4a2f8f55234a9fc20d45d0dd13aa0a4ebbee89259af4223a6aa9ca08624a2da75f639436d564f6bea795b9d9eda1b862fd423f08cb1c2a921a56507a2195863f3339b932ac0da21bb5b7834a6a964a38f367479452c08bd3ec30b1c4bd389fdf550456e7d06448cfcee499f3e565fa419bf6e7a0d47bcb312b6809198800cd353f4306cc28fa625fda8509094824b89b8de2d92bdfb65802f558db3f7839886049aec113307de7b40701015e5c043940be1f8fdd9b767c54607fbfc8eec0520b53ce2059debdcc99f602e9db12c5cb9c034669e22fbe7bd0525bfb9464c6aba7454f015a6a6fb9d5da687ce1fc0c151b7fd72e00c95449663f8cea68f09258bc9bacf223a20bba6489149d2a0f8d1bccbdb32d1ff18bafd0fd6eb4b8252e870da204bac6895753e112fb5b2b2f604865ddc68e9696cdf175e3ec96d42d1071ce19911949b3735b52c5b18cf9480141087146a4d32081ef09473cfd61a714c2cb70eca00"}) (async) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001500)={0xfffffffffffffffd, [{r11, r13}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12}, {r11, r13}, {}, {}, {}, {r12, r13}, {r11}, {r11}, {r12, r13}, {}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {r11}, {r11, r13}, {}, {0x0, 0x0}, {}, {r12}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {r11, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11}, {r11, r13}, {}, {r12, r13}, {r11}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r11}, {r12}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {r12}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11}, {r12, r13}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {}, {0x0, r13}, {}, {r12}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {r11}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12}, {}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {}, {r12}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {}, {r12}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r11}], 0x5, "3a894611d5205a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r13}, {}, {r12}, {r12}, {r12, r13}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r11}, {}, {r11}, {0x0, r13}, {}, {0x0, r14}, {r11, r13}, {r12}, {}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {r12}, {r11}, {}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r15}, {r11, r13}, {}, {r11}, {r12, r13}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {r11}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {0x0, r13}, {}, {r12}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11}, {r11}, {}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {r11}, {}, {r12}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r12}, {r11}, {r12, r13}, {}, {}, {}, {}, {}, {r11}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {r12}, {r11}, {0x0, r13}, {r12}], 0x1, "2156816c73038c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0x81, [{r4}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {r5, r6}, {r5, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {}, {r5}, {}, {r4}, {r4, r6}, {r4}, {0x0, r6}, {r5}, {}, {}, {r5}, {r4, r6}, {}, {}, {r4}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4}, {r4}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {r4, r6}, {}, {r5}, {r4}, {r4}, {}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {r4}, {}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {r4}, {r5, r6}, {}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5}, {r5, r6}, {r5}, {r5}, {}, {}, {}, {r5, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4, r6}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4}, {r4, r6}, {r5}, {r4}, {}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r5}, {}, {}, {}, {r4, r6}, {r4, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {r4, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r13}], 0x3f, "ef42af5d52a082"}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"93db139a3aa55937c153ffb06b6b036d", 0x0, r8, {0x81}, {0x7, 0x400}, 0x3, [0xffff, 0xb97, 0x9, 0x8, 0x20, 0x0, 0x2, 0x1ff, 0x80, 0x401, 0x3, 0x9, 0x6, 0x7ff, 0x401, 0x1]}) splice(r2, &(0x7f00000001c0)=0xa7, r0, &(0x7f0000000200)=0xc7b8, 0x9, 0xd) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/170) (async) syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08050307fba888759d5027b9d64765bf429d7d33f115e1ee1df7f9e47d1b9b1f7d1fb8bb0680476d70866fe946885348577166802d4686e6050efbb4cc6a6d1bdbbcf8c6b04f6e4838f6fef4"], 0x0) (async) syz_emit_ethernet(0x28, &(0x7f0000000280)={@multicast, @random="881c831db860", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@generic={0x4, "970c70de98fe9ccba493a05ef0405bf5abb2ff75cea9"}}}, &(0x7f00000002c0)={0x1, 0x1, [0x9b9, 0xfae, 0x1c1, 0xb7]}) [ 264.908642][ C1] sd 0:0:1:0: [sda] tag#6415 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 264.918216][ C1] sd 0:0:1:0: [sda] tag#6415 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 264.927806][ C1] sd 0:0:1:0: [sda] tag#6415 CDB[20]: ba [ 264.976898][ T4844] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.028336][ C1] sd 0:0:1:0: [sda] tag#6416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 265.038712][ C1] sd 0:0:1:0: [sda] tag#6416 CDB: opcode=0xe5 (vendor) [ 265.045577][ C1] sd 0:0:1:0: [sda] tag#6416 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 265.055135][ C1] sd 0:0:1:0: [sda] tag#6416 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 265.064656][ C1] sd 0:0:1:0: [sda] tag#6416 CDB[20]: ba [ 265.186552][ T2379] device hsr_slave_0 left promiscuous mode [ 265.192675][ T2379] device hsr_slave_1 left promiscuous mode [ 265.198913][ T2379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.206299][ T2379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.213825][ T2379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.221265][ T2379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.228961][ T2379] device bridge_slave_1 left promiscuous mode [ 265.235171][ T2379] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.244118][ T2379] device bridge_slave_0 left promiscuous mode [ 265.250320][ T2379] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.260545][ T2379] device veth1_macvtap left promiscuous mode [ 265.266555][ T2379] device veth0_macvtap left promiscuous mode [ 265.272606][ T2379] device veth1_vlan left promiscuous mode [ 265.278381][ T2379] device veth0_vlan left promiscuous mode [ 265.361717][ T2379] team0 (unregistering): Port device team_slave_1 removed [ 265.371479][ T2379] team0 (unregistering): Port device team_slave_0 removed [ 265.380905][ T2379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.392919][ T2379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.421387][ T2379] bond0 (unregistering): Released all slaves [ 265.675505][ T4855] chnl_net:caif_netlink_parms(): no params data found [ 265.705828][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.712898][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.720484][ T4855] device bridge_slave_0 entered promiscuous mode [ 265.727766][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.734854][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.742557][ T4855] device bridge_slave_1 entered promiscuous mode [ 265.760576][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.772075][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.790833][ T4855] team0: Port device team_slave_0 added [ 265.798386][ T4855] team0: Port device team_slave_1 added [ 265.827566][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.834515][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.860508][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.872867][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.879834][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.905720][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.939232][ T4855] device hsr_slave_0 entered promiscuous mode [ 265.945648][ T4855] device hsr_slave_1 entered promiscuous mode [ 265.952014][ T4855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.960489][ T4855] Cannot create hsr debugfs directory [ 265.990723][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.997765][ T4855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.005029][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.012223][ T4855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.041203][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.051951][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.060304][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.068174][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.079828][ T4855] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.090954][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.099872][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.106921][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.126089][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.134351][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.141446][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.149905][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.158535][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.167066][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.175816][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.185700][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.195112][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.208655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.216087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.225943][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.301462][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.342108][ T4855] device veth0_vlan entered promiscuous mode [ 266.349147][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.357755][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.365741][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.376548][ T4855] device veth1_vlan entered promiscuous mode [ 266.389634][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.397599][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.405818][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.416028][ T4855] device veth0_macvtap entered promiscuous mode [ 266.424265][ T4855] device veth1_macvtap entered promiscuous mode [ 266.436062][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.446712][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.456573][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.466991][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.476788][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.487198][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.497029][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.507467][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.517345][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.527752][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.539236][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.549186][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.558857][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.569027][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.579506][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.589356][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.599809][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.609614][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.620031][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.629886][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.640327][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.650157][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.660584][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.671493][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.680529][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.689379][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:08:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000094) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400f39e000000000000000000", @ANYRES32=r1, @ANYBLOB="82"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000539945cde6bc47c46b97519cfc98173a172236af3ca1c76ecc9f9787b3063a7fe6f31504b273bc11add7268388fd24536f00fa09e78ca5b663b8abc5af47535dbe6dd2da7e8b2e8496f44dbdeecf844c42346eadb725fe8165dc8d230b23e9fff0ffe1c24cde91e2745c4e62c5f7737c4740492b4fd19482901190564cf147345a8eda16395eab8a11ec01be68292b166e117bbd657e2180778a482878e6b734091fa8fcbe9afa9eaea13ff8fd69a4d5977f44ef88ce300064df8d6d30d83101e8433b740dbfc6c28d08d8ee475bdf6b", @ANYRES32=r1, @ANYBLOB="0b28020000000000bbb7f59902d8a97c1ce9c7d68078720a5d1e2294e6f9e0e99765d6bba44a76deae8898f5259414f03b0e6224b16d9e43a3cd7e587e2ab455a3467ea5284e"], 0x20}}, 0x0) 16:08:50 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:50 executing program 4: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r1 = getpid() (async) r2 = gettid() (async) r3 = syz_clone(0xc000, &(0x7f0000001500)="7d35525f690a99a4895cda5bc3ba2ab1972cd43885abf99088425e9d8c7fd243dd88fd4cc8e57b709c4ab2a87879661e775aa8ecb43b62d65058c0cd22dc2cd227719467d109ca35738e8b06d8afdcafb144a6d24b3aaf612ad972f20d1f18574eefcaf966d87a9e507628d8421e0aa5ef04644b377069de92c30344ef9d53a6853754dfd09ae5c4cdf59338a4", 0x8d, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f00000015c0)="0c20999baa8d04fbfda0521f05c151965cbbd5f42e6126ec879667048c4e9f015198b20afd651ec52be2cb32beb53a2ba575cd1f6e8d0372e002c780c64d71bf4b9ab2256908ccb87f3df914b7065db27eefa71072ed3728adad94c1b9af17152c11934687d7669895a40e5241fda0102cdb218d2e6517e55ef7fe650e6f7f5da65b62a8cc733d0340888c58397231") (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) syz_clone3(&(0x7f00000016c0)={0x1890000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f0000000140)=""/165, 0xa5, &(0x7f0000000500)=""/4096, &(0x7f0000001680)=[r0, r1, r2, r3, 0xffffffffffffffff, r4], 0x6}, 0x58) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000340)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a00030001332564aa25b9a64411f6bbf44dc48f57c443b784fefa61c5480d5c64f6494bfab4631cacbef1a2d987553f41a999e9b6e4327757a4d4bf63fabeddb190274ce05bac766652d1f814bcdd38049c7776a055e894d130aeb4c425e266243d91dc24a72699b0a5eb7f877d7ca3334a55b6736fa1150a075d636ae517efce66e1e9d0156ddad8778502e102d8e5a636fc498edfc55163b9ade6267b93cf590c4cca8a4aabd1ab131fdd6472eecccf1a40c0b7065e3868b34888a53d97988207fd3abfe190408a80af29f9086b5f769d4eefa4f5d0d3244d8e68e566d0da05174728074410497e9b9b3d697858f3bdfe02690051b767e056d69940847451401239e7524337f63ccdeb2a5ac9e90663ce4c35d4a58230c3544316e8f15c950f221d2f6367f096273b386890f1bb64c6ce2f6126a86af5121798cc05223176de26ebdb1e58f06dbf26a1d8840435a9a2b9f4f3fc7266bbbb938bd64b15303b52cbe6c8d3d5588f7b6ed3385a6f640a862a8f1977fba59521ee4402016d5e9030ee150560a0bbd7dd7e00d268b247d768a33dd4fcc7", 0x1ba}, {&(0x7f0000000280)="51c1eb3ac3465c472c49d8ee8c8c6c5b4843b0381692d795dd37535735e85760b5edc7cfc4a67e3da430aa851b35f822eb86437f07a9c0492d610ec8499be23ac8f08da53d97f558537ed174d3d3dccf83ece35dfe53ca82cde4f7259bee339ccc7a497ec6435ade77bf28c420c6ed8bafb13ad9fb32635fcbabaa33481034e12965c7e140c17f1f65fa9f712d0729d4070edefb9091557114ed4c759c28a450b795293b029b701787d7ee17", 0xac}], 0x2) 16:08:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:50 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x610, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x4e22, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) 16:08:50 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:50 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x610, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x4e22, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) 16:08:50 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x610, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x4e22, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x610, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x4e22, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) [ 266.905518][ T4902] loop2: detected capacity change from 0 to 4 [ 266.933005][ T4902] EXT4-fs (loop2): Can't read superblock on 2nd try 16:08:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xf9fdb000) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd602863f1000c21a4fe80000000008f0f8c63008000000000fe80000000000000e2ffffffffffffa90000883eb30c8f561b794a6ac2000c907801100000"], 0x0) 16:08:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 266.955690][ T4910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4910 comm=syz-executor.0 16:08:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000094) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400f39e000000000000000000", @ANYRES32=r1, @ANYBLOB="82"], 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000539945cde6bc47c46b97519cfc98173a172236af3ca1c76ecc9f9787b3063a7fe6f31504b273bc11add7268388fd24536f00fa09e78ca5b663b8abc5af47535dbe6dd2da7e8b2e8496f44dbdeecf844c42346eadb725fe8165dc8d230b23e9fff0ffe1c24cde91e2745c4e62c5f7737c4740492b4fd19482901190564cf147345a8eda16395eab8a11ec01be68292b166e117bbd657e2180778a482878e6b734091fa8fcbe9afa9eaea13ff8fd69a4d5977f44ef88ce300064df8d6d30d83101e8433b740dbfc6c28d08d8ee475bdf6b", @ANYRES32=r1, @ANYBLOB="0b28020000000000bbb7f59902d8a97c1ce9c7d68078720a5d1e2294e6f9e0e99765d6bba44a76deae8898f5259414f03b0e6224b16d9e43a3cd7e587e2ab455a3467ea5284e"], 0x20}}, 0x0) [ 267.009914][ T4896] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.014105][ T4920] loop2: detected capacity change from 0 to 4 [ 267.035553][ T4920] EXT4-fs (loop2): Can't read superblock on 2nd try [ 267.048574][ T4923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4923 comm=syz-executor.0 [ 267.066110][ T4924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4924 comm=syz-executor.0 16:08:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:50 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xf9fdb000) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd602863f1000c21a4fe80000000008f0f8c63008000000000fe80000000000000e2ffffffffffffa90000883eb30c8f561b794a6ac2000c907801100000"], 0x0) 16:08:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:50 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000094) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400f39e000000000000000000", @ANYRES32=r1, @ANYBLOB="82"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000539945cde6bc47c46b97519cfc98173a172236af3ca1c76ecc9f9787b3063a7fe6f31504b273bc11add7268388fd24536f00fa09e78ca5b663b8abc5af47535dbe6dd2da7e8b2e8496f44dbdeecf844c42346eadb725fe8165dc8d230b23e9fff0ffe1c24cde91e2745c4e62c5f7737c4740492b4fd19482901190564cf147345a8eda16395eab8a11ec01be68292b166e117bbd657e2180778a482878e6b734091fa8fcbe9afa9eaea13ff8fd69a4d5977f44ef88ce300064df8d6d30d83101e8433b740dbfc6c28d08d8ee475bdf6b", @ANYRES32=r1, @ANYBLOB="0b28020000000000bbb7f59902d8a97c1ce9c7d68078720a5d1e2294e6f9e0e99765d6bba44a76deae8898f5259414f03b0e6224b16d9e43a3cd7e587e2ab455a3467ea5284e"], 0x20}}, 0x0) [ 267.189825][ T4931] loop2: detected capacity change from 0 to 4 [ 267.191348][ T4932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4932 comm=syz-executor.0 [ 267.223156][ T4938] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 267.233457][ T4938] CPU: 1 PID: 4938 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 267.244464][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.254552][ T4938] Call Trace: [ 267.257822][ T4938] [ 267.260738][ T4938] dump_stack_lvl+0xd6/0x122 [ 267.265319][ T4938] dump_stack+0x11/0x1b [ 267.269607][ T4938] dump_header+0x98/0x410 [ 267.274005][ T4938] oom_kill_process+0x18e/0x4a0 [ 267.278843][ T4938] out_of_memory+0x61d/0x8c0 [ 267.283431][ T4938] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 267.289253][ T4938] memory_max_write+0x32c/0x3d0 [ 267.294091][ T4938] ? memory_max_show+0x70/0x70 [ 267.298889][ T4938] cgroup_file_write+0x161/0x300 [ 267.303863][ T4938] ? __check_object_size+0x22a/0x2d0 [ 267.309138][ T4938] ? cgroup_seqfile_stop+0x70/0x70 [ 267.314233][ T4938] kernfs_fop_write_iter+0x1d3/0x2d0 [ 267.319503][ T4938] do_iter_readv_writev+0x2de/0x380 [ 267.324746][ T4938] do_iter_write+0x192/0x5c0 [ 267.329394][ T4938] ? splice_from_pipe_next+0x34f/0x3b0 [ 267.334903][ T4938] ? kmalloc_array+0x2d/0x40 [ 267.339505][ T4938] vfs_iter_write+0x4c/0x70 [ 267.344007][ T4938] iter_file_splice_write+0x43a/0x790 [ 267.349450][ T4938] ? splice_from_pipe+0xd0/0xd0 [ 267.354311][ T4938] direct_splice_actor+0x80/0xa0 [ 267.359244][ T4938] splice_direct_to_actor+0x345/0x650 [ 267.364608][ T4938] ? do_splice_direct+0x190/0x190 [ 267.369685][ T4938] do_splice_direct+0x106/0x190 [ 267.374577][ T4938] do_sendfile+0x675/0xc40 [ 267.379046][ T4938] __x64_sys_sendfile64+0x102/0x140 [ 267.384229][ T4938] do_syscall_64+0x44/0xd0 [ 267.388632][ T4938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 267.394545][ T4938] RIP: 0033:0x7f8a9bb9b059 [ 267.398947][ T4938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 267.418553][ T4938] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 267.426961][ T4938] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 16:08:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) [ 267.434953][ T4938] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 267.442908][ T4938] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 267.450867][ T4938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 267.458824][ T4938] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 267.466785][ T4938] [ 267.469838][ T4938] memory: usage 6280kB, limit 0kB, failcnt 253 [ 267.475996][ T4938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:08:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xf9fdb000) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd602863f1000c21a4fe80000000008f0f8c63008000000000fe80000000000000e2ffffffffffffa90000883eb30c8f561b794a6ac2000c907801100000"], 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, 0xffffffffffffffff, 0xf9fdb000) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd602863f1000c21a4fe80000000008f0f8c63008000000000fe80000000000000e2ffffffffffffa90000883eb30c8f561b794a6ac2000c907801100000"], 0x0) (async) 16:08:50 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "0ee4a5e4ed1e029b4d8d6546dce072dacb8f4b467651e33b1b5c74be92e42e92805af3395402"}, 0x2a) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) [ 267.482839][ T4938] Memory cgroup stats for /syz1: [ 267.495763][ T4931] EXT4-fs (loop2): Can't read superblock on 2nd try [ 267.521350][ T4938] anon 36864 [ 267.521350][ T4938] file 24576 [ 267.521350][ T4938] kernel_stack 0 [ 267.521350][ T4938] pagetables 8192 [ 267.521350][ T4938] percpu 0 [ 267.521350][ T4938] sock 0 [ 267.521350][ T4938] vmalloc 0 [ 267.521350][ T4938] shmem 24576 [ 267.521350][ T4938] file_mapped 24576 [ 267.521350][ T4938] file_dirty 0 [ 267.521350][ T4938] file_writeback 0 [ 267.521350][ T4938] swapcached 0 [ 267.521350][ T4938] inactive_anon 36864 [ 267.521350][ T4938] active_anon 24576 [ 267.521350][ T4938] inactive_file 0 [ 267.521350][ T4938] active_file 0 [ 267.521350][ T4938] unevictable 0 [ 267.521350][ T4938] slab_reclaimable 7696 [ 267.521350][ T4938] slab_unreclaimable 17808 [ 267.521350][ T4938] slab 25504 [ 267.521350][ T4938] workingset_refault_anon 0 16:08:51 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "0ee4a5e4ed1e029b4d8d6546dce072dacb8f4b467651e33b1b5c74be92e42e92805af3395402"}, 0x2a) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "0ee4a5e4ed1e029b4d8d6546dce072dacb8f4b467651e33b1b5c74be92e42e92805af3395402"}, 0x2a) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) 16:08:51 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "0ee4a5e4ed1e029b4d8d6546dce072dacb8f4b467651e33b1b5c74be92e42e92805af3395402"}, 0x2a) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) 16:08:51 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @local, @void, {@canfd={0xd, {{0x3}, 0x15, 0x3, 0x0, 0x0, "65c988885adf689a6d338cf4ee69ba615ab6efab5e6efc775340615c21796132a602c41543da627c73636b930606024652504ba8e0ba72ef205b505533f7472f"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x72b, 0x744, 0x329, 0xc60]}) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0x9a00, "3fc7315d0a4f89e72932"}}}, &(0x7f0000000040)={0x0, 0x3, [0x957, 0x72, 0x329, 0x46f]}) [ 267.521350][ T4938] workingset_refault_file 1 [ 267.521350][ T4938] workingset_activate_anon 0 [ 267.521350][ T4938] workingset_activate_file 0 [ 267.521350][ T4938] workingset_restore_anon 0 [ 267.610770][ T4938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4855,uid=0 [ 267.625998][ T4938] Memory cgroup out of memory: Killed process 4855 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 267.643832][ T4943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.691838][ T24] audit: type=1400 audit(1645805331.155:155): avc: denied { connect } for pid=4942 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.735949][ T4938] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 267.746214][ T4938] CPU: 0 PID: 4938 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 267.757171][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.767255][ T4938] Call Trace: [ 267.770525][ T4938] [ 267.773451][ T4938] dump_stack_lvl+0xd6/0x122 [ 267.778109][ T4938] dump_stack+0x11/0x1b [ 267.782270][ T4938] dump_header+0x98/0x410 [ 267.786597][ T4938] out_of_memory+0x65c/0x8c0 [ 267.791200][ T4938] memory_max_write+0x32c/0x3d0 [ 267.796128][ T4938] ? memory_max_show+0x70/0x70 [ 267.800892][ T4938] cgroup_file_write+0x161/0x300 [ 267.805906][ T4938] ? __check_object_size+0x22a/0x2d0 [ 267.811190][ T4938] ? cgroup_seqfile_stop+0x70/0x70 [ 267.816315][ T4938] kernfs_fop_write_iter+0x1d3/0x2d0 [ 267.821694][ T4938] do_iter_readv_writev+0x2de/0x380 [ 267.826893][ T4938] do_iter_write+0x192/0x5c0 [ 267.831489][ T4938] ? splice_from_pipe_next+0x34f/0x3b0 [ 267.837098][ T4938] ? kmalloc_array+0x2d/0x40 [ 267.841690][ T4938] vfs_iter_write+0x4c/0x70 [ 267.846191][ T4938] iter_file_splice_write+0x43a/0x790 [ 267.851611][ T4938] ? splice_from_pipe+0xd0/0xd0 [ 267.856558][ T4938] direct_splice_actor+0x80/0xa0 [ 267.861729][ T4938] splice_direct_to_actor+0x345/0x650 [ 267.867121][ T4938] ? do_splice_direct+0x190/0x190 [ 267.872206][ T4938] do_splice_direct+0x106/0x190 [ 267.877180][ T4938] do_sendfile+0x675/0xc40 [ 267.881595][ T4938] __x64_sys_sendfile64+0x102/0x140 [ 267.886796][ T4938] do_syscall_64+0x44/0xd0 [ 267.891249][ T4938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 267.897144][ T4938] RIP: 0033:0x7f8a9bb9b059 [ 267.901553][ T4938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 267.921199][ T4938] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 267.929687][ T4938] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 267.937811][ T4938] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 267.945780][ T4938] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 267.953787][ T4938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 267.961780][ T4938] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 267.969756][ T4938] [ 267.972957][ T4938] memory: usage 48kB, limit 0kB, failcnt 270 [ 267.978952][ T4938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.985806][ T4938] Memory cgroup stats for /syz1: [ 267.987181][ T4938] anon 0 [ 267.987181][ T4938] file 24576 [ 267.987181][ T4938] kernel_stack 0 [ 267.987181][ T4938] pagetables 0 [ 267.987181][ T4938] percpu 0 [ 267.987181][ T4938] sock 0 [ 267.987181][ T4938] vmalloc 0 [ 267.987181][ T4938] shmem 24576 [ 267.987181][ T4938] file_mapped 24576 [ 267.987181][ T4938] file_dirty 0 [ 267.987181][ T4938] file_writeback 0 [ 267.987181][ T4938] swapcached 0 [ 267.987181][ T4938] inactive_anon 0 [ 267.987181][ T4938] active_anon 24576 [ 267.987181][ T4938] inactive_file 0 [ 267.987181][ T4938] active_file 0 [ 267.987181][ T4938] unevictable 0 [ 267.987181][ T4938] slab_reclaimable 5544 [ 267.987181][ T4938] slab_unreclaimable 13400 [ 267.987181][ T4938] slab 18944 [ 267.987181][ T4938] workingset_refault_anon 0 [ 267.987181][ T4938] workingset_refault_file 1 [ 267.987181][ T4938] workingset_activate_anon 0 [ 267.987181][ T4938] workingset_activate_file 0 [ 267.987181][ T4938] workingset_restore_anon 0 [ 268.080476][ T4938] Out of memory and no killable processes... 16:08:51 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:51 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @local, @void, {@canfd={0xd, {{0x3}, 0x15, 0x3, 0x0, 0x0, "65c988885adf689a6d338cf4ee69ba615ab6efab5e6efc775340615c21796132a602c41543da627c73636b930606024652504ba8e0ba72ef205b505533f7472f"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x72b, 0x744, 0x329, 0xc60]}) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0x9a00, "3fc7315d0a4f89e72932"}}}, &(0x7f0000000040)={0x0, 0x3, [0x957, 0x72, 0x329, 0x46f]}) 16:08:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) 16:08:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:51 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:51 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:51 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @local, @void, {@canfd={0xd, {{0x3}, 0x15, 0x3, 0x0, 0x0, "65c988885adf689a6d338cf4ee69ba615ab6efab5e6efc775340615c21796132a602c41543da627c73636b930606024652504ba8e0ba72ef205b505533f7472f"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x72b, 0x744, 0x329, 0xc60]}) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0x9a00, "3fc7315d0a4f89e72932"}}}, &(0x7f0000000040)={0x0, 0x3, [0x957, 0x72, 0x329, 0x46f]}) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @local, @void, {@canfd={0xd, {{0x3}, 0x15, 0x3, 0x0, 0x0, "65c988885adf689a6d338cf4ee69ba615ab6efab5e6efc775340615c21796132a602c41543da627c73636b930606024652504ba8e0ba72ef205b505533f7472f"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x72b, 0x744, 0x329, 0xc60]}) (async) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0x9a00, "3fc7315d0a4f89e72932"}}}, &(0x7f0000000040)={0x0, 0x3, [0x957, 0x72, 0x329, 0x46f]}) (async) [ 268.163534][ T4959] loop2: detected capacity change from 0 to 4 [ 268.176432][ T4959] EXT4-fs (loop2): Unsupported encryption level 116 [ 268.201255][ T4962] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 268.211526][ T4962] CPU: 1 PID: 4962 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 268.222482][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.232566][ T4962] Call Trace: [ 268.235841][ T4962] [ 268.238768][ T4962] dump_stack_lvl+0xd6/0x122 [ 268.243366][ T4962] dump_stack+0x11/0x1b [ 268.247535][ T4962] dump_header+0x98/0x410 [ 268.251868][ T4962] out_of_memory+0x65c/0x8c0 [ 268.256466][ T4962] memory_max_write+0x32c/0x3d0 [ 268.261367][ T4962] ? memory_max_show+0x70/0x70 [ 268.266171][ T4962] cgroup_file_write+0x161/0x300 [ 268.271256][ T4962] ? __check_object_size+0x22a/0x2d0 [ 268.276545][ T4962] ? cgroup_seqfile_stop+0x70/0x70 [ 268.281661][ T4962] kernfs_fop_write_iter+0x1d3/0x2d0 [ 268.286955][ T4962] do_iter_readv_writev+0x2de/0x380 [ 268.292156][ T4962] do_iter_write+0x192/0x5c0 [ 268.296838][ T4962] ? splice_from_pipe_next+0x34f/0x3b0 [ 268.302458][ T4962] ? kmalloc_array+0x2d/0x40 [ 268.307136][ T4962] vfs_iter_write+0x4c/0x70 [ 268.311650][ T4962] iter_file_splice_write+0x43a/0x790 [ 268.317030][ T4962] ? splice_from_pipe+0xd0/0xd0 [ 268.321916][ T4962] direct_splice_actor+0x80/0xa0 [ 268.326865][ T4962] splice_direct_to_actor+0x345/0x650 [ 268.332293][ T4962] ? do_splice_direct+0x190/0x190 [ 268.337378][ T4962] do_splice_direct+0x106/0x190 [ 268.342242][ T4962] do_sendfile+0x675/0xc40 [ 268.346772][ T4962] __x64_sys_sendfile64+0x102/0x140 [ 268.351974][ T4962] do_syscall_64+0x44/0xd0 [ 268.356452][ T4962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.362353][ T4962] RIP: 0033:0x7f8a9bb9b059 [ 268.366765][ T4962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 268.386373][ T4962] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 268.394794][ T4962] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 268.402766][ T4962] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 268.410739][ T4962] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 268.418707][ T4962] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 268.426724][ T4962] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 268.434759][ T4962] [ 268.437911][ T4962] memory: usage 44kB, limit 0kB, failcnt 270 [ 268.443894][ T4962] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.450752][ T4962] Memory cgroup stats for /syz1: [ 268.453736][ T4962] anon 0 [ 268.453736][ T4962] file 24576 16:08:51 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x33c, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1039cb", 0x306, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x29, 0x25, '\x00', [@generic={0x3, 0x61, "0613cbd1f8918abd1eec5119219376d318560acca95fb3a0b5a888fc85918684471df9f14f4c30fc4eeaa59e3c07d48fe6f5cbc157d672e9ff410af9c344895d14df8c6fa38733c8a41534f011c35567fdac174e3533ae1b536f4c6219fdb60768"}, @ra={0x5, 0x2, 0xef8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0x9, [0x4, 0x9, 0x100, 0x4, 0x9, 0x4, 0xfffffffffffffff8, 0x3, 0xffffffffffff8001]}}, @generic={0x20, 0x6a, "1a6c1bdde1d4afe847ce7c7b84d4e65fcbf242db4520c365d4ba14419315b52500775cd1348043dfd9a70bcf35c973cbcd409c529bd1e8bc10da5ee6878aaeb99433f223cb3c7235cc05fe7dacf85e5dece29029f54dcf4f7f031789acc55601fbfa327e7553235a7ad3"}, @ra={0x5, 0x2, 0xfff9}]}, @srh={0x6c, 0x12, 0x4, 0x9, 0xff, 0x48, 0xf000, [@private1, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @loopback, @empty, @remote]}, @routing={0x89, 0xc, 0x1, 0x7, 0x0, [@private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @remote, @private1, @empty]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0xf, 0x67}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x1, "4330d0", 0x0, '):.'}, "3eb1b3c96cd7006692debe95e072677d2d84d576d621d725e38fe0fcdf57be0cac172db4b27904e3115ec90f9c6d9d83d1300ddd53c44f34665e4ddf7741b4f21ab38c84aebc7055d06101af70450cfab02d1ee6c0651b4d49f877f150d62e9e953bc0a1adadb6cf8310336bd463cb9290662f3ba3ea3810ff2ee8e7506e95cdfb9888c04f4566c9c00de007ba0720aa09eb9203d8a8191cc53ecc84b80bf012c9301c935d1f137dae7c28563a84b7177733e5b5b1a6"}}}}}}, 0x0) [ 268.453736][ T4962] kernel_stack 0 [ 268.453736][ T4962] pagetables 0 [ 268.453736][ T4962] percpu 0 [ 268.453736][ T4962] sock 0 [ 268.453736][ T4962] vmalloc 0 [ 268.453736][ T4962] shmem 24576 [ 268.453736][ T4962] file_mapped 24576 [ 268.453736][ T4962] file_dirty 0 [ 268.453736][ T4962] file_writeback 0 [ 268.453736][ T4962] swapcached 0 [ 268.453736][ T4962] inactive_anon 0 [ 268.453736][ T4962] active_anon 24576 [ 268.453736][ T4962] inactive_file 0 [ 268.453736][ T4962] active_file 0 [ 268.453736][ T4962] unevictable 0 [ 268.453736][ T4962] slab_reclaimable 4400 [ 268.453736][ T4962] slab_unreclaimable 13400 [ 268.453736][ T4962] slab 17800 [ 268.453736][ T4962] workingset_refault_anon 0 [ 268.453736][ T4962] workingset_refault_file 1 [ 268.453736][ T4962] workingset_activate_anon 0 [ 268.453736][ T4962] workingset_activate_file 0 [ 268.453736][ T4962] workingset_restore_anon 0 [ 268.546879][ T4962] Out of memory and no killable processes... [ 268.552982][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async, rerun: 32) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (rerun: 32) 16:08:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:52 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x33c, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1039cb", 0x306, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x29, 0x25, '\x00', [@generic={0x3, 0x61, "0613cbd1f8918abd1eec5119219376d318560acca95fb3a0b5a888fc85918684471df9f14f4c30fc4eeaa59e3c07d48fe6f5cbc157d672e9ff410af9c344895d14df8c6fa38733c8a41534f011c35567fdac174e3533ae1b536f4c6219fdb60768"}, @ra={0x5, 0x2, 0xef8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0x9, [0x4, 0x9, 0x100, 0x4, 0x9, 0x4, 0xfffffffffffffff8, 0x3, 0xffffffffffff8001]}}, @generic={0x20, 0x6a, "1a6c1bdde1d4afe847ce7c7b84d4e65fcbf242db4520c365d4ba14419315b52500775cd1348043dfd9a70bcf35c973cbcd409c529bd1e8bc10da5ee6878aaeb99433f223cb3c7235cc05fe7dacf85e5dece29029f54dcf4f7f031789acc55601fbfa327e7553235a7ad3"}, @ra={0x5, 0x2, 0xfff9}]}, @srh={0x6c, 0x12, 0x4, 0x9, 0xff, 0x48, 0xf000, [@private1, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @loopback, @empty, @remote]}, @routing={0x89, 0xc, 0x1, 0x7, 0x0, [@private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @remote, @private1, @empty]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0xf, 0x67}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x1, "4330d0", 0x0, '):.'}, "3eb1b3c96cd7006692debe95e072677d2d84d576d621d725e38fe0fcdf57be0cac172db4b27904e3115ec90f9c6d9d83d1300ddd53c44f34665e4ddf7741b4f21ab38c84aebc7055d06101af70450cfab02d1ee6c0651b4d49f877f150d62e9e953bc0a1adadb6cf8310336bd463cb9290662f3ba3ea3810ff2ee8e7506e95cdfb9888c04f4566c9c00de007ba0720aa09eb9203d8a8191cc53ecc84b80bf012c9301c935d1f137dae7c28563a84b7177733e5b5b1a6"}}}}}}, 0x0) 16:08:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 268.626232][ T4986] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.644485][ T4994] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 268.654746][ T4994] CPU: 1 PID: 4994 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 268.665684][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.675742][ T4994] Call Trace: [ 268.679022][ T4994] [ 268.681994][ T4994] dump_stack_lvl+0xd6/0x122 [ 268.686726][ T4994] dump_stack+0x11/0x1b [ 268.690894][ T4994] dump_header+0x98/0x410 [ 268.695234][ T4994] out_of_memory+0x65c/0x8c0 [ 268.699828][ T4994] memory_max_write+0x32c/0x3d0 [ 268.704684][ T4994] ? memory_max_show+0x70/0x70 [ 268.709457][ T4994] cgroup_file_write+0x161/0x300 [ 268.714399][ T4994] ? __check_object_size+0x22a/0x2d0 [ 268.719728][ T4994] ? cgroup_seqfile_stop+0x70/0x70 16:08:52 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x33c, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1039cb", 0x306, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x29, 0x25, '\x00', [@generic={0x3, 0x61, "0613cbd1f8918abd1eec5119219376d318560acca95fb3a0b5a888fc85918684471df9f14f4c30fc4eeaa59e3c07d48fe6f5cbc157d672e9ff410af9c344895d14df8c6fa38733c8a41534f011c35567fdac174e3533ae1b536f4c6219fdb60768"}, @ra={0x5, 0x2, 0xef8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0x9, [0x4, 0x9, 0x100, 0x4, 0x9, 0x4, 0xfffffffffffffff8, 0x3, 0xffffffffffff8001]}}, @generic={0x20, 0x6a, "1a6c1bdde1d4afe847ce7c7b84d4e65fcbf242db4520c365d4ba14419315b52500775cd1348043dfd9a70bcf35c973cbcd409c529bd1e8bc10da5ee6878aaeb99433f223cb3c7235cc05fe7dacf85e5dece29029f54dcf4f7f031789acc55601fbfa327e7553235a7ad3"}, @ra={0x5, 0x2, 0xfff9}]}, @srh={0x6c, 0x12, 0x4, 0x9, 0xff, 0x48, 0xf000, [@private1, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @loopback, @empty, @remote]}, @routing={0x89, 0xc, 0x1, 0x7, 0x0, [@private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @remote, @private1, @empty]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0xf, 0x67}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x1, "4330d0", 0x0, '):.'}, "3eb1b3c96cd7006692debe95e072677d2d84d576d621d725e38fe0fcdf57be0cac172db4b27904e3115ec90f9c6d9d83d1300ddd53c44f34665e4ddf7741b4f21ab38c84aebc7055d06101af70450cfab02d1ee6c0651b4d49f877f150d62e9e953bc0a1adadb6cf8310336bd463cb9290662f3ba3ea3810ff2ee8e7506e95cdfb9888c04f4566c9c00de007ba0720aa09eb9203d8a8191cc53ecc84b80bf012c9301c935d1f137dae7c28563a84b7177733e5b5b1a6"}}}}}}, 0x0) [ 268.724845][ T4994] kernfs_fop_write_iter+0x1d3/0x2d0 [ 268.730143][ T4994] do_iter_readv_writev+0x2de/0x380 [ 268.735389][ T4994] do_iter_write+0x192/0x5c0 [ 268.739983][ T4994] ? splice_from_pipe_next+0x34f/0x3b0 [ 268.745448][ T4994] ? kmalloc_array+0x2d/0x40 [ 268.750077][ T4994] vfs_iter_write+0x4c/0x70 [ 268.754637][ T4994] iter_file_splice_write+0x43a/0x790 [ 268.760018][ T4994] ? splice_from_pipe+0xd0/0xd0 [ 268.764873][ T4994] direct_splice_actor+0x80/0xa0 [ 268.769908][ T4994] splice_direct_to_actor+0x345/0x650 16:08:52 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xd0, &(0x7f0000000000)={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[{0x8}, {0x2, 0x0, 0x1}, {0x6}], @llc={@snap={0x1, 0x0, "8f", "4b3ff9", 0x88f5, "7faae0fb3d9b5e447afe53c724505529d6268e549122a66e88725429d2fdc64413c930d2513bc35f9d80dc1e2ecee75036741d75fcec46c8e47bb74a7f58811955abd03fd4084dbe19d1ba1dfa12dd18603ec2fe036a85860127cd17407af30cf88ecb345016bdc44432ec28c96f7df7d17b0b943d5932cac89fc78796cf029bfb40a168e5085d8bd4cae1978a1acae707c366ce138f170edb01ec8596fd2d460dd77b81e214035898f4652a498f"}}}}}}, 0x0) [ 268.775428][ T4994] ? do_splice_direct+0x190/0x190 [ 268.780493][ T4994] do_splice_direct+0x106/0x190 [ 268.785352][ T4994] do_sendfile+0x675/0xc40 [ 268.789774][ T4994] __x64_sys_sendfile64+0x102/0x140 [ 268.795073][ T4994] do_syscall_64+0x44/0xd0 [ 268.799496][ T4994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.805049][ T4989] loop2: detected capacity change from 0 to 4 [ 268.805468][ T4994] RIP: 0033:0x7f8a9bb9b059 [ 268.805487][ T4994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 268.835518][ T4994] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 268.843918][ T4994] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 268.851874][ T4994] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 268.859830][ T4994] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 268.867786][ T4994] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 16:08:52 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0xd0, &(0x7f0000000000)={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[{0x8}, {0x2, 0x0, 0x1}, {0x6}], @llc={@snap={0x1, 0x0, "8f", "4b3ff9", 0x88f5, "7faae0fb3d9b5e447afe53c724505529d6268e549122a66e88725429d2fdc64413c930d2513bc35f9d80dc1e2ecee75036741d75fcec46c8e47bb74a7f58811955abd03fd4084dbe19d1ba1dfa12dd18603ec2fe036a85860127cd17407af30cf88ecb345016bdc44432ec28c96f7df7d17b0b943d5932cac89fc78796cf029bfb40a168e5085d8bd4cae1978a1acae707c366ce138f170edb01ec8596fd2d460dd77b81e214035898f4652a498f"}}}}}}, 0x0) (rerun: 32) [ 268.875812][ T4994] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 268.883781][ T4994] [ 268.887023][ T4994] memory: usage 44kB, limit 0kB, failcnt 270 [ 268.893033][ T4994] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.899893][ T4994] Memory cgroup stats for /syz1: [ 268.901429][ T4989] EXT4-fs (loop2): Can't read superblock on 2nd try 16:08:52 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xd0, &(0x7f0000000000)={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[{0x8}, {0x2, 0x0, 0x1}, {0x6}], @llc={@snap={0x1, 0x0, "8f", "4b3ff9", 0x88f5, "7faae0fb3d9b5e447afe53c724505529d6268e549122a66e88725429d2fdc64413c930d2513bc35f9d80dc1e2ecee75036741d75fcec46c8e47bb74a7f58811955abd03fd4084dbe19d1ba1dfa12dd18603ec2fe036a85860127cd17407af30cf88ecb345016bdc44432ec28c96f7df7d17b0b943d5932cac89fc78796cf029bfb40a168e5085d8bd4cae1978a1acae707c366ce138f170edb01ec8596fd2d460dd77b81e214035898f4652a498f"}}}}}}, 0x0) 16:08:52 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 269.134310][ T4994] anon 0 [ 269.134310][ T4994] file 24576 [ 269.134310][ T4994] kernel_stack 0 [ 269.134310][ T4994] pagetables 0 [ 269.134310][ T4994] percpu 0 [ 269.134310][ T4994] sock 0 [ 269.134310][ T4994] vmalloc 0 [ 269.134310][ T4994] shmem 24576 [ 269.134310][ T4994] file_mapped 24576 [ 269.134310][ T4994] file_dirty 0 [ 269.134310][ T4994] file_writeback 0 [ 269.134310][ T4994] swapcached 0 [ 269.134310][ T4994] inactive_anon 0 [ 269.134310][ T4994] active_anon 24576 [ 269.134310][ T4994] inactive_file 0 [ 269.134310][ T4994] active_file 0 [ 269.134310][ T4994] unevictable 0 [ 269.134310][ T4994] slab_reclaimable 4400 [ 269.134310][ T4994] slab_unreclaimable 13400 [ 269.134310][ T4994] slab 17800 [ 269.134310][ T4994] workingset_refault_anon 0 [ 269.134310][ T4994] workingset_refault_file 1 [ 269.134310][ T4994] workingset_activate_anon 0 [ 269.134310][ T4994] workingset_activate_file 0 [ 269.134310][ T4994] workingset_restore_anon 0 [ 269.222788][ T4994] Out of memory and no killable processes... [ 269.326722][ T2384] device hsr_slave_0 left promiscuous mode [ 269.332964][ T2384] device hsr_slave_1 left promiscuous mode [ 269.341393][ T2384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.348859][ T2384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.357921][ T2384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.365372][ T2384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.373079][ T2384] device bridge_slave_1 left promiscuous mode [ 269.379337][ T2384] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.388447][ T2384] device bridge_slave_0 left promiscuous mode [ 269.394658][ T2384] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.408024][ T2384] device veth1_macvtap left promiscuous mode [ 269.414117][ T2384] device veth0_macvtap left promiscuous mode [ 269.420159][ T2384] device veth1_vlan left promiscuous mode [ 269.425912][ T2384] device veth0_vlan left promiscuous mode [ 269.535467][ T2384] team0 (unregistering): Port device team_slave_1 removed [ 269.547331][ T2384] team0 (unregistering): Port device team_slave_0 removed [ 269.559046][ T2384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.570426][ T2384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.598249][ T2384] bond0 (unregistering): Released all slaves [ 270.415195][ T5012] chnl_net:caif_netlink_parms(): no params data found [ 270.444920][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.451987][ T5012] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.459665][ T5012] device bridge_slave_0 entered promiscuous mode [ 270.466855][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.473880][ T5012] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.481666][ T5012] device bridge_slave_1 entered promiscuous mode [ 270.497541][ T5012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.507720][ T5012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.524268][ T5012] team0: Port device team_slave_0 added [ 270.530683][ T5012] team0: Port device team_slave_1 added [ 270.546253][ T5012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.553275][ T5012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.579221][ T5012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.590321][ T5012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.597291][ T5012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.623172][ T5012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.644665][ T5012] device hsr_slave_0 entered promiscuous mode [ 270.651145][ T5012] device hsr_slave_1 entered promiscuous mode [ 270.658043][ T5012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.665702][ T5012] Cannot create hsr debugfs directory [ 270.716209][ T5012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.727290][ T5012] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.735894][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.743509][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.751171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.759777][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.768326][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.775380][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.783250][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.793582][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.802389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.811505][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.818604][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.835113][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.843775][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.852393][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.860826][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.869526][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.878054][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.886834][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.895180][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.903668][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.912047][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.920870][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.929016][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.942514][ T5012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.950047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.957551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.022537][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.031278][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.067382][ T5012] device veth0_vlan entered promiscuous mode [ 271.075018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.083253][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.091912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.099517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.108050][ T5012] device veth1_vlan entered promiscuous mode [ 271.122266][ T5012] device veth0_macvtap entered promiscuous mode [ 271.129703][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.138026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.146128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.154417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.163995][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.172684][ T5012] device veth1_macvtap entered promiscuous mode [ 271.184694][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.195233][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.205045][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.215532][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.225433][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.235854][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.245786][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.256222][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.266036][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.276549][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.287643][ T5012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.296661][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.307125][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.317054][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.327756][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.337574][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.348101][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.357921][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.368344][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.378197][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.388619][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.399881][ T5012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.408031][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.416887][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.425540][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.433998][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:08:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:55 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 16:08:55 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:55 executing program 5: mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:55 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x0) 16:08:55 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fc0200000000000000000000000000000000000000aa0000883e000c9078011000004d52476a5cbffae55de8c635313fcb721e7115b963712e47d6985756eab0bfaf7c891282357fcc00f7a90c71102dbb0f9e2c23872ad9488978101d9df4caf5d798c5982fb344d14513cc95a4c3132ec04ea0c6ac76e92b6800000000000000000000fa95e227e2a1daa0fb5e2667c388527bfeacf2bd1df277f84840705cabc6a78490e2291b67748e4a44c55069e31965f018e0f6b9a39cf0f9d5e19c32aa4b80eea69c234266353d4b59c7dde0efc090d5cf43563d02167ed3b23ea74f96c333bc9f7490c67f210de635c31c140672f2c9cbdb8cf4a96e2203bf844fc177d6efc25cb76caea789b50960e12a426e76cfdc27000fc9f5b27a3cc04bd51296b0c389baec3df0803d51e9d45db075ed627d8ef386a21c0f61dac389e0981c70a248fd7b7c1f0047f5c845324283e1d42d932bd3d1dc1c222bb0708fdedd1be5"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) (async) [ 271.642069][ T5054] loop2: detected capacity change from 0 to 4 [ 271.656582][ T5012] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 271.667533][ T5012] CPU: 0 PID: 5012 Comm: syz-executor.1 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 271.678462][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.688510][ T5012] Call Trace: [ 271.691773][ T5012] [ 271.694690][ T5012] dump_stack_lvl+0xd6/0x122 [ 271.699272][ T5012] dump_stack+0x11/0x1b [ 271.703415][ T5012] dump_header+0x98/0x410 [ 271.707734][ T5012] oom_kill_process+0x18e/0x4a0 [ 271.712581][ T5012] out_of_memory+0x61d/0x8c0 [ 271.717172][ T5012] ? mem_cgroup_iter+0x29b/0x370 [ 271.722094][ T5012] mem_cgroup_oom+0x484/0x520 [ 271.726828][ T5012] try_charge_memcg+0x75c/0xa50 [ 271.731667][ T5012] ? debug_smp_processor_id+0x18/0x20 [ 271.737026][ T5012] ? check_preempt_wakeup+0x1d6/0x3c0 [ 271.742404][ T5012] ? __rcu_read_unlock+0x5c/0x290 [ 271.747462][ T5012] ? ttwu_do_wakeup+0x35/0x140 [ 271.752212][ T5012] obj_cgroup_charge_pages+0xac/0x140 [ 271.757621][ T5012] obj_cgroup_charge+0xe2/0x1b0 [ 271.762458][ T5012] ? __alloc_file+0x2e/0x1a0 [ 271.767034][ T5012] kmem_cache_alloc+0x96/0x320 [ 271.771786][ T5012] __alloc_file+0x2e/0x1a0 [ 271.776202][ T5012] alloc_empty_file+0xcd/0x1c0 [ 271.780951][ T5012] path_openat+0x6a/0x1f30 [ 271.785356][ T5012] ? __rcu_read_unlock+0x5c/0x290 [ 271.790406][ T5012] ? lockref_get_not_dead+0xf2/0x1a0 [ 271.795808][ T5012] ? __rcu_read_unlock+0x5c/0x290 [ 271.800884][ T5012] ? avc_has_perm_noaudit+0x1c0/0x270 [ 271.806242][ T5012] do_filp_open+0x105/0x220 [ 271.810739][ T5012] do_sys_openat2+0xb5/0x2b0 [ 271.815313][ T5012] __x64_sys_openat+0xef/0x110 [ 271.820097][ T5012] do_syscall_64+0x44/0xd0 [ 271.824579][ T5012] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 271.830481][ T5012] RIP: 0033:0x7f0f2f0a4b98 [ 271.834921][ T5012] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 271.854513][ T5012] RSP: 002b:00007fff2d901730 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 271.862935][ T5012] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0f2f0a4b98 [ 271.870890][ T5012] RDX: 0000000000090800 RSI: 00007fff2d902920 RDI: 00000000ffffff9c [ 271.878846][ T5012] RBP: 00007fff2d9028fc R08: 0000000000090800 R09: 00007fff2d902920 16:08:55 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x0) (async) 16:08:55 executing program 5: mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 271.886855][ T5012] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f0f2f0fe1ea [ 271.894811][ T5012] R13: 00007fff2d902920 R14: 0000000000000013 R15: 00007fff2d902960 [ 271.902772][ T5012] [ 271.905812][ T5012] memory: usage 6256kB, limit 0kB, failcnt 289 [ 271.906656][ T5054] EXT4-fs (loop2): Can't read superblock on 2nd try [ 271.911971][ T5012] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 271.911983][ T5012] Memory cgroup stats for /syz1: [ 271.919155][ T5012] anon 24576 [ 271.919155][ T5012] file 24576 [ 271.919155][ T5012] kernel_stack 0 [ 271.919155][ T5012] pagetables 8192 [ 271.919155][ T5012] percpu 0 [ 271.919155][ T5012] sock 0 [ 271.919155][ T5012] vmalloc 0 [ 271.919155][ T5012] shmem 24576 [ 271.919155][ T5012] file_mapped 24576 [ 271.919155][ T5012] file_dirty 0 [ 271.919155][ T5012] file_writeback 0 [ 271.919155][ T5012] swapcached 0 [ 271.919155][ T5012] inactive_anon 24576 [ 271.919155][ T5012] active_anon 24576 [ 271.919155][ T5012] inactive_file 0 [ 271.919155][ T5012] active_file 0 [ 271.919155][ T5012] unevictable 0 [ 271.919155][ T5012] slab_reclaimable 16424 16:08:55 executing program 5: mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:55 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x0) (async) 16:08:55 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) [ 271.919155][ T5012] slab_unreclaimable 14696 [ 271.919155][ T5012] slab 31120 [ 271.919155][ T5012] workingset_refault_anon 0 [ 271.919155][ T5012] workingset_refault_file 1 [ 271.919155][ T5012] workingset_activate_anon 0 [ 271.919155][ T5012] workingset_activate_file 0 [ 271.919155][ T5012] workingset_restore_anon 0 [ 272.019805][ T5012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5012,uid=0 [ 272.035027][ T5012] Memory cgroup out of memory: Killed process 5012 (syz-executor.1) total-vm:48480kB, anon-rss:368kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 272.052569][ T26] oom_reaper: reaped process 5012 (syz-executor.1), now anon-rss:0kB, file-rss:13504kB, shmem-rss:0kB [ 272.063569][ T5051] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 272.073775][ T5051] CPU: 0 PID: 5051 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 272.084711][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.094774][ T5051] Call Trace: [ 272.098035][ T5051] [ 272.100963][ T5051] dump_stack_lvl+0xd6/0x122 [ 272.105535][ T5051] dump_stack+0x11/0x1b [ 272.109683][ T5051] dump_header+0x98/0x410 [ 272.114041][ T5051] out_of_memory+0x65c/0x8c0 [ 272.118630][ T5051] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 272.124589][ T5051] memory_max_write+0x32c/0x3d0 [ 272.129456][ T5051] ? memory_max_show+0x70/0x70 [ 272.134218][ T5051] cgroup_file_write+0x161/0x300 [ 272.139141][ T5051] ? __check_object_size+0x22a/0x2d0 [ 272.144419][ T5051] ? cgroup_seqfile_stop+0x70/0x70 [ 272.149600][ T5051] kernfs_fop_write_iter+0x1d3/0x2d0 [ 272.154889][ T5051] do_iter_readv_writev+0x2de/0x380 [ 272.160143][ T5051] do_iter_write+0x192/0x5c0 [ 272.164733][ T5051] ? splice_from_pipe_next+0x34f/0x3b0 [ 272.170279][ T5051] ? kmalloc_array+0x2d/0x40 [ 272.174859][ T5051] vfs_iter_write+0x4c/0x70 [ 272.179368][ T5051] iter_file_splice_write+0x43a/0x790 [ 272.184788][ T5051] ? splice_from_pipe+0xd0/0xd0 [ 272.189782][ T5051] direct_splice_actor+0x80/0xa0 [ 272.194802][ T5051] splice_direct_to_actor+0x345/0x650 [ 272.200207][ T5051] ? do_splice_direct+0x190/0x190 [ 272.205256][ T5051] do_splice_direct+0x106/0x190 [ 272.210167][ T5051] do_sendfile+0x675/0xc40 [ 272.214600][ T5051] __x64_sys_sendfile64+0x102/0x140 [ 272.219778][ T5051] do_syscall_64+0x44/0xd0 [ 272.224175][ T5051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.230052][ T5051] RIP: 0033:0x7fdafc148059 [ 272.234450][ T5051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 272.254230][ T5051] RSP: 002b:00007fdafb2be168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.262632][ T5051] RAX: ffffffffffffffda RBX: 00007fdafc25af60 RCX: 00007fdafc148059 [ 272.270582][ T5051] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 272.278531][ T5051] RBP: 00007fdafc1a208d R08: 0000000000000000 R09: 0000000000000000 [ 272.286482][ T5051] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 272.294475][ T5051] R13: 00007ffd8ec620bf R14: 00007fdafb2be300 R15: 0000000000022000 [ 272.302427][ T5051] [ 272.305582][ T5051] memory: usage 56kB, limit 0kB, failcnt 289 [ 272.311628][ T5051] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 272.318499][ T5051] Memory cgroup stats for /syz1: [ 272.320005][ T5051] anon 0 [ 272.320005][ T5051] file 24576 [ 272.320005][ T5051] kernel_stack 0 [ 272.320005][ T5051] pagetables 0 [ 272.320005][ T5051] percpu 0 [ 272.320005][ T5051] sock 0 [ 272.320005][ T5051] vmalloc 0 [ 272.320005][ T5051] shmem 24576 [ 272.320005][ T5051] file_mapped 24576 [ 272.320005][ T5051] file_dirty 0 [ 272.320005][ T5051] file_writeback 0 [ 272.320005][ T5051] swapcached 0 [ 272.320005][ T5051] inactive_anon 0 [ 272.320005][ T5051] active_anon 24576 [ 272.320005][ T5051] inactive_file 0 [ 272.320005][ T5051] active_file 0 [ 272.320005][ T5051] unevictable 0 [ 272.320005][ T5051] slab_reclaimable 5544 [ 272.320005][ T5051] slab_unreclaimable 13400 [ 272.320005][ T5051] slab 18944 [ 272.320005][ T5051] workingset_refault_anon 0 [ 272.320005][ T5051] workingset_refault_file 1 [ 272.320005][ T5051] workingset_activate_anon 0 [ 272.320005][ T5051] workingset_activate_file 0 [ 272.320005][ T5051] workingset_restore_anon 0 [ 272.413296][ T5051] Out of memory and no killable processes... 16:08:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:55 executing program 5: mkdir(0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:55 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa60747108fdaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c907801100000"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000100)="c7bd31d3a6c7c07cdaec6407be1d7fbda3dae0328cbf0065de1c01700ebd33") setsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xbc83, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd69e}, 0x1c) 16:08:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000005880)=ANY=[], 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="65fca9c6", @ANYRES32=0x0, @ANYBLOB="00000000e0000300"/24], 0x38}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) fstat(r4, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x9}, {0x800, 0x3}], r5}, 0x18, 0x3) r6 = socket(0x200000000000011, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000040000000000000000620000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 16:08:55 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@private0, r2}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12ec}, 0x1, 0x0, 0x0, 0x4080}, 0x4008884) 16:08:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:56 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 272.505733][ T5077] loop2: detected capacity change from 0 to 4 [ 272.506787][ T24] audit: type=1400 audit(1645805335.975:156): avc: denied { create } for pid=5072 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 16:08:56 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa60747108fdaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c907801100000"], 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000100)="c7bd31d3a6c7c07cdaec6407be1d7fbda3dae0328cbf0065de1c01700ebd33") setsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f00000000c0)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xbc83, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd69e}, 0x1c) 16:08:56 executing program 5: mkdir(0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:56 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@private0, r2}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) (async) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=ANY=[@ANYBLOB="ec1200003e00050100000000000000000a000000ec007180de008900b12a187c8d1e493700a2d895e216916c1ead74a2f71a6f8996e99065c1f48262168a0bd84745f9d8223a82ae25195af7bfdd827bbb5d6e6166ae25205e52570dac6a61311f9748f1ba1a9e8cb4c21bbd5da9c618771059bd3850967d53f2e6e55123760f67e40b7bc1186b4b08693c7c84bef4c72d91633669402dd7a7f64529914de79f1cd22d33c57f76f89a6bc267645e1cfee1cfe27332630d498f7e60f40a452796de2f35c362e35dc85d6d195431306f9ea7746cfabcc731320b6a9698cf6e87536884f2138149c7563e2c28d8769469372c61f52cf0b4000005000c0000000000ca3ac951cce1cae4654a525aa3d3c69e578a2605000500000000006260435b8d02e035378ef32a753f1e3f889a9ef6b087bed5cb74998e36e8a34187e1c6448baf985f23077ae6a8baeb374edb0d41157a99684a87f720cc72269a7f42ded86b10801b560d911de32d3db083edf8502dd8165d6530049f62b74efd66ce533d02df5e90e9c16a346e4057e6b3031da2379fcef315841d9faebc61ebd549a7f4f9ec6ce33583feaaa2e0780d140456c31082f714cb88a600a5529736360d18746c5bf563822509aa8797f2b4276b0f2846d909c2fc8993527f6b74a085b001684c7761335cd5732e342a27d7ae4caa33788a142a4c2397cda1f0831429bfa3a0ed1daf54d26a015b2d60ee986a828c417b98730d7c8c90671d09cce838c23c9015a866f1b9b9c550f626776dd5879f9312189dcf2e3befc162b128d918fe300f357033ef0471acf1d418a5dd69a7ebbf6b4285edfa6ff485d0001a4b908975e7f24093d3f669d12e206e4abc7c95d44af619842312707d1ab4cdbda371786f5b66b7e4eea5aa29ddc19c3afc2280284afddf61d94c4630cc9b1c667844055a2a4ea1010013adcc0f5ac95beda098656552a2b2845b46ddbbe3f276f56106ea3c1433f8077bb09422c1bdbee23fa04a95f92a4fbc9014894014c7c5ca5c1db138ba94c0a8dfcfb7c618ffe16c3af17279cdaa9360152cb7e660983770672dad9f3ebdb2ab087c585b2f844e4b7197d9f7d21e8d4efb47d64424406b9fec39fa73fc17f59121a3d5192510ea1fc676007ea4e866d1232765ea1407aa129e1d1aaff140aa4f2824d64901e48d038269b9de55121d2bb368605ce1128fd7f873f285762b9d6a72bf338b500abe9d29c0c10e4c10f6b3938dd1f27156670b4abd64392e681539ad1cc0f0614dd74ebcb1059bf25ad30c463d106e20e2248daf633e3960c565ddc1dee8c5b4f9953f85e1c62cd9868654b45351466fa5a50a4b870acd98818063da2f7e70d075d2be0992ec64c0e820a3fae3595718142a915e378050f6d910ba25b093de4c7457bb387efb49f7816cad78cd79bfe8d88887d62dfd6e658379eab7b5e1e56b56398ec9e413d659c6d9a64c75bef1bd2135d17e33ae7dfdadc6bb85598a0b4553c782107305f25d940aa9b98db3fd5ffe19ac1c500953fe0f5c0756d328cd368b69dd6f749048e31b6882fd75cf0ac18cf8b74fa500867f46953155730b014afec1e3aa63744eb2d71935d5f54c7407e87dcb19b551282b55dcdeec55ca620819bd58c40482b42f55e0830f34bc54037aeaa67df7a1c7fea382ad25446e1fa490151492210f2f0d796b434769c9a831f67f833af4d64cfdd9a1d1e43ec93938af387800b55939ee06cc3cdf7004c967e9faf5d07a0f07188da6c4157253b5bdcff9193609605e1293130ddda6d9dedb2cd631077fafc7e414e7e4f17e27a40e8ad9889a83f90cc82edf668a4f1b46370e09bdea0fc2ceb94c3dcf085260fb05f11a3c4d2fc8d03fbb6ca8fa26a41f0470a2831224fd46062559d405d63eecb8f3bfc28ceb07d06bfdf0c9414745919ae11fc9f29b2b77a97c53d9ea2b226e487f3ea4bfccfe5bb60394e1a3ec4c02d3688c0fdff1397065a7683bd9aa0e7285f20744411a34f510922600055240de6ab22b5c76dfb374f5daa408a7e67ebe38907d6d0f36d5f6d91bcf351586a0503234680e8885a6865babe3de037bf51ab2ef94a844fb03225cf48d345fb6313a8fa0bb833664ee87a204407958a06165163f38b6a7d6160261ec9aec0225e17497e25da87c7542c1237770d5ebc66b8dd8716b5b12cdac884e6b689c3843c49749b4942510a551928d4891ba9609c0ebbc0acc124fd67383b7daef38b362aa781030827973ce7fbeaa4f7691598e04f0945c2bdb010e6df5c772d2d2a17f9627c4407b95ef895a6d54e4e7a87f232db1e8d370e8ae0672853d82239f4fa91ce0907e51bdd86e49fb097dbe1a3b2df891559aeb9c83e5e49704705121c88ca86e709e9f24944b6d33046d997dd32e1f776ad3909ad0072797905d5da27e76f0404a3147cd1310bd543c6f4d24a92087ea4ff4181271fcd3595e75e0b9d34ff0fc0330baae5d96232e7839d37a8a291839544df98087b8191ddd82874fae15f464e001e5b6ad489d14a5e499c03071458505adf7efc98ca4503a8fbbb73eb56e9c8457f5a650e819a962ef3c4dda017cfd46812c94da69df40995985712a9ad228d5b6ff9d8d5fde8c115e9f04aa071767480949b982d42c9151bd5c5337326cdf1d6a8d325ab1d55209af57c450c823a5b29ec91519e995229c334b72f89a6a64bff1915af770d52cd17b512bf2afa421d1aabb9feca03e88b67626b940df4cfc01f81efec1802bebbc5e4457f80778606230612b0f9c1bd930f537dac519c0ba59899d8335fc7ed113e33747cda0e539bf89d5069a116c7358d150f010f5235a53db04f704ab6d3901c7b0ba63e2c175ee0b74fcc8928b34c09f39d9cccb0882ec7fa96f5f3a2d0ef7818b2f362cd32cf45d6ef5ec823f77307519ae46d1c178b96dbb7f75701300fb1e6dbe3233d0218b18ff39a1530a769eef249c030c3c0c9d020463f9c8f18144d9d3de128c00e8670e6da773a3614078ac4aa12a8c7baf4aa5b2c62ec4955009c2924819a2c0445189c69f00063924bd724b8f0814606c5946c4dabb6b7c226b2dede17bb886266e8b04e0316bf48c07c1b3058e9c28b45254232f6d6c5fe9d82d077f4744d0e1582dd4200c2e76f35e8f30e5d68f2e3da1ddc551b469096fbe189db6fef2caa88dc9724b89a881bc53378386f1e98175b71147ad74e30d76f016eb8c1d088779f53e7787dde94371a953e978470c5032148e2f094736c590a2591c0c07eb4272557c197a7787d1bd6c542409a6266c1e5e3c2b8205aad77be67d99c2cecebb106c1dd2802d7c48c97175dcd7410d222fd35246c75ccfc58183b07169afc51b46905997838b1c13e6ce03cb2982f306f0e0ea4dc41aef11b70724116c7b137011805c41957c53d315d0e0c47ad1fe883f449b462f16881ab09b14fabf26918412a7ee86db9f439aab157cf19f187c4de15cdd6e28913f0ff705eaa6c65e0ca50471bd9c0da60499fdb0a735803fb2b324ee4ce65f2ed1e2817fa2b55480aefa34e0db6bf3df3a498ca5a3098a95516856899a1e2469bc5ed45337a5637535950b521f73b0334eb36cc3ec16d02c6b6a058971133c390809d400d0edaae17fc06cb36275b93ea6630ff586d934e126c8a59cfcf2ff4f76f658e5a1a39cf1aa8b602ca83343c593721d2f4d376da9b8f2280fec70ca85d8e982ca3925963a24cf981edec7428fef5bf94222e94a357ace9e32100307e3c54922dd508ffa5fafc633e53e5942b19d2f88e87c3dbfb34cd4e8cbed18c10aec67d310ee4d83ad04ceaaca5d9a80d16a93904e8b3996c332ce91b0a9f2e9d468351befef50cfb1a47c36496b4a159c34a04f6fb23548f1ea87544e176f633b6a99e907733a7e9ae272f87677128660350a063ef2ee445c950e668e27a045ae4ab66cf8d391eb064ed88fc5159eff55d5b1ebdc14ebaaf1115e4a5ea643a21d9fad9c45f1f49617713c4b5eb6453349677efc328f00d38171aefd0e9028c66ea8afd2ce0e239032d3f07033656e3e89f8f8b2ac1c24298ddb2b00183defe1b8a9a0e80e4639c38bb23f6b1d4d64f8a76e1b5b2c1d229edd467401acac0dd089c6b4ec9b9b3ef65221bd40f4af2a7d7e6a96078e327498a0861be5912269db485b74ab6e6515008e8108e5559d6e463d53b5d949edc58f90d033a1fd1124f75096ec1641c0f4e85cdf785feb472c7e05e84e031fbb18d2c2b8945d2196306505adeca773811eb05b61fb07b190acebb60e8069cacced0b7c2321b794bda7290e7ae6a61b38b214d6e0a7b56c14023f8848f6cce9e972a9675430356d333e2f3f65ccb6d582da49b69715cf07fab4e9a6b69d5e437a713348cb962a97441674042be8fe9fe7e380827ca58fd979840701b7345576d799b9e19b2a7a0a5289d8fbe8cd4bea51809a5f23e77e208bed23306c1564d52516652ef5b7c8dd318a9d00b0431b2b1ac8041d9db3286421664c76ecd6aa7275d0201d1ac6593ce7af7af474c37ba832ce66422ce6488ec5652f6eba79a4f8a5d3bfb881aa17d2c567f31e27d680126f83ffb360685280c453b4e7ab8f2e392b0b2a632a7dab6fee4f0f444e0a2c54aeb5778189eb7a9b7ad9e1023435d423b141d2fd304ac7f5ca51b7d81de29158174f9a0f4aceec142f3d7894a20b353154cf7547a471585f48fed7a7bd63e5bb39b8244de38b79a0b849da63e0b43c680acbcc343dec64e6775def5440a0a5d17ef80c15bbc30ca1aaca76aa0f3227f18d2c3f1691e333b679be3252b7242c2907c29f08ba2bef8fa851deadacd3a960d6fc72abbd6d4525642d0ac3dd085b55c9bb2ed66b41167e2364d3057fad75ab2bed4a75cc9bc1b88ce7d4f426bfa4b8960502f40d8bfabfaa253872ec277098cd5c5c426e2cfe857da71dd80fa387eb31695e71f8edc86536bd0f623a83029e340d6046286214ff8d95dd7b9b972bca77225d4b216b715a996ccd7ada56985ec84756fd9d6f7d9c0555213d77dfa43939b2d05305159f6563108f0b8df62b7e1da7e06a43eccbfd39268d0e80b84cf5263d2b54c0035ca08cc603bff5c183a1d30c7adce241ac10d01d4f87508828bd87bb262d30459df4936314fed4aa6a71bf89752f377257c948d3d9f190b54d60a3a20320be473848b9b9477a48840d159cb029f438ef9823cdd891447963a92c3a1fb30ac18d7540d94dd4c1613b4cd5c7fd04f96c95d85a959868ffee7d4c5d8fac6fc61b5b743a3c94e88c287c367c524fe79e1e87964c488220203f3712c21967bb7f29ec4d8973a1d789ee7378ad0196975429c0cbf9f0d4bebfa556ae1c66392bfef950c63565d90cca514609a09a983f78127aa758091360423e56fecb2d2f8a82e4e5fd420234c4dcb61cd84a0df86a51fe1de765cc572eb7e10e089a011d5b40d3956c9051ee0e399eaef1780051a156d26b734bef9c0a52ca221531574b8e04c75ddd26e9b22083bd24abdafe59b95678f73b67464b3b32e1660282c05a98c0fd24878607c1677bfcc5e7a22f19eaa79216a68046906005de2e3f47cec0fe0d7fb190506da83b71f8b5ccb4f70753f1f62673ec9ec9a21462060dcaced313bfbd793682250b427731156fd98acec300a94e11eef86fe6a0b055a53d3ef258a1c90e173f9e2730cdf4e997e8be8c1379ec6f11b1b77e64b49249c942692f6d0295403fef5ec3d93d6c1b01da09b1aef799bb09531d39cd338af6ffa0a69d8c4c030d3a527e42854d6aaeefcc278971f8afe26b7be91f0cd37f3e0709b36c6a633ec6831e23dcba693ae3ac3da7626383a3e794fa262f69a9d1ca79699a5e9dc2c143c50cb8bc17e5a86280de78ad492b7344f9e27b0bef9863625ee58cceadbf6c185c9f78d656c9280ce41f2aa0c5dbacc922c1ad94d0e83449bb0ddf5b6eaaabefb633464a5056c661cf1353499ce04f2bc2606ebc2f8bf92173536f1e348436931a0750b2c777becd77cc5443034a3215437f56fffcd32d7f75127c8def8147e197caa73fea2f25be6b42ee68e690916131e5172f6ba9309d15d2087196d50761b0eaff8b3fc6f0df1f903f6d29da986e9ad487c7c2c7bbb97991877977c9520ef546e806c5f6b0c07251ef8d3baad4995983d59f63c5847c700933e3089be4fc6cde1cc0a9fb47f8eb09a04bc1932309c073f2e19b60c0e8ff1376d2615dd4d332f9bbefdb6b1302d9d6af3d699bcf2018ff553ca72eae0d02302d117087fb173fe7a6b43bad6bddf720abdc547e29f7a68d38d831a7e53c85e09870195973afbbce6f9726c1bc5e80b140151e3aa5cf519c1a78dc93265fe14d643d2c51ab138f3fedb0a5fb72ad2874ad7b71fb61528ce4a8ddc1503726ec04016eb99c4a41be7af9991421a52c66358298ee62dd5b0744c95e65053902ec76654221b29f8d53a1645ffd510dd95c628cfb7a4e4eb3a1a0a2ccfdaaed64522de653cff1c0e0ca3ff4dd2a9303604a7a211864fceeb5cfa7764c56feb143482f05b9ebd8f8aa066c57ae1c642e95475df40af6ae245c81753c44103a54380d63f91e36cb1f087cc1c309c425cafa18debd3a33a16683b1ef7b11b18e26d9bc77bc1912a66569032b7455377efbe0107deb701b241367e4bc4560d8475a5f726072a105b110c71b846f4f48a009847f05137fa218659f3910905c1afb437283db2bf362e636457df9bb0bd4a80dc1a9370ecdb60327a34f0e8a87415ae8e1c6d8117337a8560db5c1e07ad7ebc7b0ca917b49de11a7af42552201009a11e0714e21a927ab5e0b2a2d7858829fcdc5910482215bbcdf9b86d350c02b0ee0992016829e017b195f6f43cafe31679d5ffb964f47bf00001b63a079c261e8e7c46e38"], 0x12ec}, 0x1, 0x0, 0x0, 0x4080}, 0x4008884) [ 272.555278][ T5079] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.564645][ T5077] EXT4-fs (loop2): Can't read superblock on 2nd try 16:08:56 executing program 5: mkdir(0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f73673000fe70dcc15b7e23fa78c40d61eb0507c1617a39232d301195d12c7d090cc1d25be288042cc3a451a9db9fa714188a09621ef4ad077b661e5b67616c724a88c83289a5310cc45442d2a7f202aea8d53b6e5c565764e556a56203a79138ca15f43dfd5467024f6969077a41bc8aecfd4be6cdf011b6e98df537f42fc26d858ce872897a34a140d665c8b8cb41f738aca300c54713a05d273aa5cfa9def49298b45e26e624479458211315d342e74c2c3f592275f1aa99d5d5c991adca41eb20aeb1cf832736c7bfee9d27e2605d69c107443901e566a1a2b48cd46458b821ede37a9d73830c2092cd459246"], 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:08:56 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 272.604762][ T24] audit: type=1400 audit(1645805336.015:157): avc: denied { setopt } for pid=5072 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 272.624691][ T24] audit: type=1400 audit(1645805336.015:158): avc: denied { bind } for pid=5072 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 272.644265][ T24] audit: type=1400 audit(1645805336.015:159): avc: denied { name_bind } for pid=5072 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 272.665299][ T24] audit: type=1400 audit(1645805336.015:160): avc: denied { node_bind } for pid=5072 comm="syz-executor.3" saddr=fe88::104 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 272.671871][ T5089] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 16:08:56 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa60747108fdaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c907801100000"], 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000100)="c7bd31d3a6c7c07cdaec6407be1d7fbda3dae0328cbf0065de1c01700ebd33") (async) setsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f00000000c0)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xbc83, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd69e}, 0x1c) [ 272.698118][ T5089] CPU: 1 PID: 5089 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 272.709237][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.719290][ T5089] Call Trace: [ 272.722567][ T5089] [ 272.725500][ T5089] dump_stack_lvl+0xd6/0x122 [ 272.730162][ T5089] dump_stack+0x11/0x1b [ 272.734328][ T5089] dump_header+0x98/0x410 [ 272.738663][ T5089] out_of_memory+0x65c/0x8c0 [ 272.743469][ T5089] memory_max_write+0x32c/0x3d0 [ 272.748361][ T5089] ? memory_max_show+0x70/0x70 [ 272.753226][ T5089] cgroup_file_write+0x161/0x300 [ 272.758231][ T5089] ? __check_object_size+0x22a/0x2d0 [ 272.763523][ T5089] ? cgroup_seqfile_stop+0x70/0x70 [ 272.768682][ T5089] kernfs_fop_write_iter+0x1d3/0x2d0 [ 272.773974][ T5089] do_iter_readv_writev+0x2de/0x380 [ 272.779183][ T5089] do_iter_write+0x192/0x5c0 [ 272.783853][ T5089] ? splice_from_pipe_next+0x34f/0x3b0 [ 272.789328][ T5089] ? kmalloc_array+0x2d/0x40 [ 272.793929][ T5089] vfs_iter_write+0x4c/0x70 [ 272.798435][ T5089] iter_file_splice_write+0x43a/0x790 [ 272.803927][ T5089] ? splice_from_pipe+0xd0/0xd0 [ 272.808795][ T5089] direct_splice_actor+0x80/0xa0 [ 272.813803][ T5089] splice_direct_to_actor+0x345/0x650 [ 272.819218][ T5089] ? do_splice_direct+0x190/0x190 [ 272.824331][ T5089] do_splice_direct+0x106/0x190 [ 272.829247][ T5089] do_sendfile+0x675/0xc40 [ 272.833667][ T5089] __x64_sys_sendfile64+0x102/0x140 [ 272.838906][ T5089] do_syscall_64+0x44/0xd0 [ 272.843331][ T5089] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.849235][ T5089] RIP: 0033:0x7f8a9bb9b059 [ 272.853648][ T5089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 272.873255][ T5089] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.881748][ T5089] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 272.889719][ T5089] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 272.897765][ T5089] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 16:08:56 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa000d020000c002000000e493d64a053a0792c3cfd9e3578f32dcd5fd7fd618d1fb19f16dc2e8e702a3707c1a3e774be2803a11748c2452a8abc056637aef35bd4fbdc543413a0d0f78a1556553b675"], 0x0) syz_emit_ethernet(0x90, &(0x7f0000000140)={@empty, @empty, @void, {@llc_tr={0x11, {@snap={0x3, 0xaa, "e5ea", "850f0f", 0x88be, "92da276378cd813ae29d0cdd1e55b197d0140ecfe26901eb967bd3991e66cfcfd053d0cc7225414f7e50a5e196d057d03dc88c5c9a90b7c5a45cf23429b82a2240d8e53d0a46c7b5ee41fa4a06eecc9dcd8a6a01ce1fa4ddde881e15c5c81abeee9b626c7cc22937572afee215ee2d38e3793f588f04e94900"}}}}}, &(0x7f0000000100)={0x0, 0x5, [0x665, 0x183, 0xb83, 0xf9b]}) syz_emit_ethernet(0x107, &(0x7f0000000200)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="499357fc9af1a7e22f5eea15de5897931e665e2cf1e24dff47a73f1565b6217e5b0ac4b1e8e8cdf18f66b996ac16417025879e8060440abc811dbd3657964df98cbbc2721ba4f10dbd95b982c122d1457b07a339b7386263ef879e38c46bdde4c6583139104306c96894f06be56a209a8aec6e93c197684fb97d5ebf2ec056948ce30e30c8f0718dc2f6928bcd53c9f574b0c45688fd81a5f723af50991697c7c3334aac48d1ca8b71501808dfa4fd955ff4642179bdb13ec5754635a3b45a3083aa40035df16266b43146c13d96a5ea791d6d2caeaeedf9f84c316217113d81370f3f44214afe55cc0e791571"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x850, 0xcb6, 0xa79, 0xaa6]}) 16:08:56 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@private0, r2}, 0x14) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) (async) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x12ec}, 0x1, 0x0, 0x0, 0x4080}, 0x4008884) [ 272.905813][ T5089] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 272.913806][ T5089] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 272.921822][ T5089] [ 272.924874][ T5089] memory: usage 44kB, limit 0kB, failcnt 289 [ 272.930857][ T5089] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:08:56 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa000d020000c002000000e493d64a053a0792c3cfd9e3578f32dcd5fd7fd618d1fb19f16dc2e8e702a3707c1a3e774be2803a11748c2452a8abc056637aef35bd4fbdc543413a0d0f78a1556553b675"], 0x0) (async) syz_emit_ethernet(0x90, &(0x7f0000000140)={@empty, @empty, @void, {@llc_tr={0x11, {@snap={0x3, 0xaa, "e5ea", "850f0f", 0x88be, "92da276378cd813ae29d0cdd1e55b197d0140ecfe26901eb967bd3991e66cfcfd053d0cc7225414f7e50a5e196d057d03dc88c5c9a90b7c5a45cf23429b82a2240d8e53d0a46c7b5ee41fa4a06eecc9dcd8a6a01ce1fa4ddde881e15c5c81abeee9b626c7cc22937572afee215ee2d38e3793f588f04e94900"}}}}}, &(0x7f0000000100)={0x0, 0x5, [0x665, 0x183, 0xb83, 0xf9b]}) syz_emit_ethernet(0x107, &(0x7f0000000200)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="499357fc9af1a7e22f5eea15de5897931e665e2cf1e24dff47a73f1565b6217e5b0ac4b1e8e8cdf18f66b996ac16417025879e8060440abc811dbd3657964df98cbbc2721ba4f10dbd95b982c122d1457b07a339b7386263ef879e38c46bdde4c6583139104306c96894f06be56a209a8aec6e93c197684fb97d5ebf2ec056948ce30e30c8f0718dc2f6928bcd53c9f574b0c45688fd81a5f723af50991697c7c3334aac48d1ca8b71501808dfa4fd955ff4642179bdb13ec5754635a3b45a3083aa40035df16266b43146c13d96a5ea791d6d2caeaeedf9f84c316217113d81370f3f44214afe55cc0e791571"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x850, 0xcb6, 0xa79, 0xaa6]}) 16:08:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000005880)=ANY=[], 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="65fca9c6", @ANYRES32=0x0, @ANYBLOB="00000000e0000300"/24], 0x38}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) fstat(r4, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x9}, {0x800, 0x3}], r5}, 0x18, 0x3) r6 = socket(0x200000000000011, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000040000000000000000620000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000005880)=ANY=[], 0x208e24b) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="65fca9c6", @ANYRES32=0x0, @ANYBLOB="00000000e0000300"/24], 0x38}}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) fstat(r4, &(0x7f0000003040)) (async) setreuid(0x0, r5) (async) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x9}, {0x800, 0x3}], r5}, 0x18, 0x3) (async) socket(0x200000000000011, 0x2, 0xffffffff) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000040000000000000000620000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) (async) [ 272.937732][ T5089] Memory cgroup stats for /syz1: [ 273.023228][ T5105] loop2: detected capacity change from 0 to 4 [ 273.056839][ T5105] EXT4-fs (loop2): Can't read superblock on 2nd try [ 273.158864][ T5112] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.195244][ T5089] anon 0 [ 273.195244][ T5089] file 24576 [ 273.195244][ T5089] kernel_stack 0 [ 273.195244][ T5089] pagetables 0 [ 273.195244][ T5089] percpu 0 [ 273.195244][ T5089] sock 0 [ 273.195244][ T5089] vmalloc 0 [ 273.195244][ T5089] shmem 24576 [ 273.195244][ T5089] file_mapped 24576 [ 273.195244][ T5089] file_dirty 0 [ 273.195244][ T5089] file_writeback 0 [ 273.195244][ T5089] swapcached 0 [ 273.195244][ T5089] inactive_anon 0 [ 273.195244][ T5089] active_anon 24576 [ 273.195244][ T5089] inactive_file 0 [ 273.195244][ T5089] active_file 0 [ 273.195244][ T5089] unevictable 0 [ 273.195244][ T5089] slab_reclaimable 4400 [ 273.195244][ T5089] slab_unreclaimable 13400 [ 273.195244][ T5089] slab 17800 [ 273.195244][ T5089] workingset_refault_anon 0 [ 273.195244][ T5089] workingset_refault_file 1 [ 273.195244][ T5089] workingset_activate_anon 0 [ 273.195244][ T5089] workingset_activate_file 0 [ 273.195244][ T5089] workingset_restore_anon 0 [ 273.283717][ T5089] Out of memory and no killable processes... [ 273.376590][ T2416] device hsr_slave_0 left promiscuous mode [ 273.383107][ T2416] device hsr_slave_1 left promiscuous mode [ 273.389927][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.397341][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.406173][ T2416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.413614][ T2416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.421353][ T2416] device bridge_slave_1 left promiscuous mode [ 273.427544][ T2416] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.435172][ T2416] device bridge_slave_0 left promiscuous mode [ 273.441336][ T2416] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.451017][ T2416] device veth1_macvtap left promiscuous mode [ 273.457045][ T2416] device veth0_macvtap left promiscuous mode [ 273.463086][ T2416] device veth1_vlan left promiscuous mode [ 273.468856][ T2416] device veth0_vlan left promiscuous mode [ 273.552635][ T2416] team0 (unregistering): Port device team_slave_1 removed [ 273.562417][ T2416] team0 (unregistering): Port device team_slave_0 removed [ 273.572777][ T2416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.584256][ T2416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.613098][ T2416] bond0 (unregistering): Released all slaves [ 274.499365][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 274.529135][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.536392][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.544555][ T5132] device bridge_slave_0 entered promiscuous mode [ 274.551746][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.558874][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.566649][ T5132] device bridge_slave_1 entered promiscuous mode [ 274.581992][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.592052][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.609966][ T5132] team0: Port device team_slave_0 added [ 274.616376][ T5132] team0: Port device team_slave_1 added [ 274.631129][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.638102][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.664208][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.675329][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.682297][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.708176][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.729380][ T5132] device hsr_slave_0 entered promiscuous mode [ 274.736353][ T5132] device hsr_slave_1 entered promiscuous mode [ 274.742746][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.750921][ T5132] Cannot create hsr debugfs directory [ 274.778718][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.785971][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.793194][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.800235][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.829041][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.839815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.848521][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.856549][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.868978][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.879147][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.887679][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.894688][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.914505][ T5132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.924847][ T5132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.938009][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.946506][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.953531][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.962111][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.971041][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.979713][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.988035][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.996834][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.004426][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.018974][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.026415][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.035281][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.111422][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.120070][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.157100][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.165992][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.175659][ T5132] device veth0_vlan entered promiscuous mode [ 275.182663][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.190863][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.200640][ T5132] device veth1_vlan entered promiscuous mode [ 275.212796][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.220893][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.229738][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.238140][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.248797][ T5132] device veth0_macvtap entered promiscuous mode [ 275.257223][ T5132] device veth1_macvtap entered promiscuous mode [ 275.267905][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.278367][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.288166][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.298587][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.308437][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.318880][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.328675][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.339076][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.348887][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.359286][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.370256][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.377821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.386819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.394644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.403304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.413963][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.424388][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.434258][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.444750][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.454537][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.465127][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.474957][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.485436][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.495255][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.505743][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.517421][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.525512][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.533882][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:08:59 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r8 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r8, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:08:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0xfffffffe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 16:08:59 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa000d020000c002000000e493d64a053a0792c3cfd9e3578f32dcd5fd7fd618d1fb19f16dc2e8e702a3707c1a3e774be2803a11748c2452a8abc056637aef35bd4fbdc543413a0d0f78a1556553b675"], 0x0) (async) syz_emit_ethernet(0x90, &(0x7f0000000140)={@empty, @empty, @void, {@llc_tr={0x11, {@snap={0x3, 0xaa, "e5ea", "850f0f", 0x88be, "92da276378cd813ae29d0cdd1e55b197d0140ecfe26901eb967bd3991e66cfcfd053d0cc7225414f7e50a5e196d057d03dc88c5c9a90b7c5a45cf23429b82a2240d8e53d0a46c7b5ee41fa4a06eecc9dcd8a6a01ce1fa4ddde881e15c5c81abeee9b626c7cc22937572afee215ee2d38e3793f588f04e94900"}}}}}, &(0x7f0000000100)={0x0, 0x5, [0x665, 0x183, 0xb83, 0xf9b]}) syz_emit_ethernet(0x107, &(0x7f0000000200)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="499357fc9af1a7e22f5eea15de5897931e665e2cf1e24dff47a73f1565b6217e5b0ac4b1e8e8cdf18f66b996ac16417025879e8060440abc811dbd3657964df98cbbc2721ba4f10dbd95b982c122d1457b07a339b7386263ef879e38c46bdde4c6583139104306c96894f06be56a209a8aec6e93c197684fb97d5ebf2ec056948ce30e30c8f0718dc2f6928bcd53c9f574b0c45688fd81a5f723af50991697c7c3334aac48d1ca8b71501808dfa4fd955ff4642179bdb13ec5754635a3b45a3083aa40035df16266b43146c13d96a5ea791d6d2caeaeedf9f84c316217113d81370f3f44214afe55cc0e791571"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x850, 0xcb6, 0xa79, 0xaa6]}) 16:08:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:08:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000005880)=ANY=[], 0x208e24b) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="65fca9c6", @ANYRES32=0x0, @ANYBLOB="00000000e0000300"/24], 0x38}}, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) fstat(r4, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x9}, {0x800, 0x3}], r5}, 0x18, 0x3) (async) r6 = socket(0x200000000000011, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1=0xe0000300}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000040000000000000000620000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 16:08:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 275.751819][ T5174] loop2: detected capacity change from 0 to 4 [ 275.762070][ T5171] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 275.772313][ T5171] CPU: 1 PID: 5171 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 275.783397][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.793446][ T5171] Call Trace: [ 275.796719][ T5171] 16:08:59 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8, 0xfffff6b6) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "3c2287", 0x36, 0x21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, {[@fragment={0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x68}, @hopopts={0xd2}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, "5d279c", 0x81, "5198be"}, "2b017fa13f87635f7723b491d59106a6069a2e8b5e82"}}}}}}, &(0x7f0000000180)={0x1, 0x3, [0x22c, 0xfdd, 0xf13, 0x413]}) syz_emit_ethernet(0x118, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @dccp={{0x28, 0x4, 0x2, 0x22, 0x106, 0x66, 0x0, 0xeb, 0x21, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x0, [{@remote, 0x6}, {@private=0xa010100, 0x6}, {@multicast1, 0x401}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x24, 0x3, 0x1, [{@private=0xa010100, 0x9}, {@multicast1, 0x20}, {@local, 0x5}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0x401}]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x7, [{@loopback, 0x1ff}]}, @rr={0x7, 0x13, 0x40, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @loopback, @loopback]}, @end, @lsrr={0x83, 0x17, 0x81, [@dev={0xac, 0x14, 0x14, 0x11}, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, "b67620", 0x5, "37da6d"}, "9e9ff28de427c9af498f0daa27a9937ab817d9206c8ea525519a193a615d25d744b6429019322a001bdeba1359e376ba85ce9f3d3dea7eddb48a28d61fb09456053886da7c3559e1648120010977b2eefa8d7d689f14"}}}}}, &(0x7f0000000300)={0x0, 0x2, [0x73e, 0xd5e, 0x6aa, 0xafa]}) syz_emit_ethernet(0x1206, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="7040000190787ff8fe06e2d4c3d90000b670276e825e4e6ab325a726b42ece3afc28db006cb7eee6199f2d9857670e3f551108e1fe52354dfd9d61e7e86eb7c592c0a77596ab8e0e37f31384c7f024e282766e62fa232974e3d9dcbe26b39a367efaefce9f141d762183491db884abe3bcc08d79b329258e170a3d2b4dfa7dcef00cdfc1ab0871b0ab18d33778f688ebb8b655226c265cf2c7f5e299636a082404ec77a7493774eab8a8bddd9c0e99d20247b4771e9e0cd5a8650ab10295a14513cc45c3c6618ccd0be2f4f39dc1f08f1a04aee892b80a8830cb9ff9b4e490fcf7e190a7906b39f5509ff04296f01cd37160645be3e48c8e22f36fe30b315e03937eab55574d316213e4482615cd9c4c99cf3a826e9da91bdc8fad2c10433737838ae26633b4b0174f946121a730a8c79b7c540d09c3aece7d7ca505853374499ff174174cc61949768b1df1db250af32521f58763e2425a7ee970bae2f171f15696c9490623d2f129a726565b1aee847cd97c2da017010ef4cce1b8dfc677a4db5f3ea89fc1e1a1a5009ddfd49877cc627303c5cf771a78aa6cbcaab04aa68dc3bdc150499f939d76653f15c42b0f950ddb13b1f283ce844d3a16f5368a9a1faa7dc2df8777b722faccf8876ba3001b42b8f34f6e99cd2505abf905302985e17a9b43df4861558ea364a4ffb047cf9f269d858808b1921a5d04ac5c6b6fd07ff1f78c487e844aab1c60fcda21b95625bc067d66fbd4a2c937595dffbc667ea23a471af4893ddea717a0cf65e43a2bc2c956b4e932dbf433a825e62a5d1e3fad8f4fc676b3c2dffb36126150d695bfd21e15249ee9ecd88ca56fe32af21e7baf0e2aaebfc74492fc9fac4d2b25b56228627e044ba7548d8617d1ceda852955eaad57dae8e58ffd1bae2165391fed06cdb6e3403dfad50fdf3e07e8864d8c5e0a8c0ae899705d85516cbef0849bd52d29033220bb7372137676532365c95e628e90fca9b2c50ff9f0079758ce7ae26e57e038f67608ad05cf2c38f84681e972f027227a9e58df49783dd8e272fbb9153d98d0bdaf06a4531c8386fd076ab86cd38b9d45cfc07d9b4ac31ae2496b0542d3c6a66eaae68a59f2112611fe70c3ff6af101c944c788a2aeab2b4cfac0acf698a6e92fadad94c60f72b79a844a753622a45afd44546bd045d299677c1a7af2b10df4aba95a3f5101efa5f66d8235995251c96b7cec1b4eec71ee96f9f78e6a157f48ac1c5d70606f8c4cd85d6f5dede5b245e43800576bdd1a78f2760a2df1f0670165e3ac935d7b975427ea6c9436a6bf2afb8d03131e856a5cf8c3ac587f832c82914c7bb3b7033bdc78d3760cc783bfcc7b26df46643d1e9da97e80b8e3de670c2a4acac71eeebce94f3795f28749b61ee09638ea4eabd0ca17cddef9b6d4632ae749157258f4e4f98393bda246d9fb5920074e9a42ca81c29bc2327a4e79af9f4f37538e01e985d91019d30625ed518885f6229ead54bf0aae7da270de4223e45137dd95ada859a5307d24458e7034eac8780f0222697317b74acc19145dc02ae306f5e7862e497ef6d3ecebf9e4a89a3c292ea4ea6d62eb801827d95a5559ce2f66518ee48545ceed52607530a55c9a3c365a3c1878105bb1bd989a20b73c672e1713f58a140200a250954adb803f2e7718a58b8f938ef9a5fe7f2c6655bbf4c9e579dca0c4f54e86eae228078dadda4158900eaf56b088089e89d8342a01c418237a6ccc7b0eec772fa8d5a3903642f50fd9c8e2cc1022236f249cc03d2df75bdb6b47c98cb2b95165593c0442df4cc458a79ac4c4b2d57e1f68eacb4a0c1b15947a6210b91da52865209508de76595214474c7e0980dda88afb425d052547fe8ea3286dd98db7502f66146106649d82a917260dea803c182c373a832641f19acf1c631fa6ef711e210338eda0fa05faa383913249482cc761d92ebfbf8a174422b48796fb9474eaf0db27434c572213f7eff33d90b192c8aeff560ed78e8c47e9ca204b8b2faae0fc33cebdc41139ab8282e43a5dad6a7cbdca87fbe874ebd8d257f78d7e3984672734187fb81e2660b500c8c911b38b477e794d3d87d65af79fc9f17d3ba388e677fb76bee76fe6fc187ae64ae6f30163825c99c60a929b25a1a336447a20370d8f035b437f6728855fef8acc34e8aa7cfdbdd8c030c47098400b5e9effa12ba9f42b306e8b178841f4dade9f2f56c724a81d04746feaa1a31ddb653a3bf3d0153e7d828b142406dd3678f1d33ea4a4852f291ce9c5314ce6971c6f1af2e404cfd5ce7d137e8061f9e9695f2da1688b33519c51b29c40493c4d32847ab72359459b68fe1c10480f0d66c161dc550642f18c61ba696630a85af08c9c9b9636e10fedf48ec743c1570457eced8abfa2e6f4ac15482b7deff43fa16a091284dba33d69a8c36ba482b01406774264ef69ba9c8e018f6ed8874e8db144e54e0ee0a0dea8f3a9f29a21139052dbe1698d9755467e121b2dfa4e9efd100d05fb4de69651f8cc3719053909b4cb2d32cad273c5368cbc6ab0fe63300eff3b8f4ec1826f955f26c5666e0b06c9294ebbb54f87a9ca32cd605a70502fabbc61a759ae1ccdf6cc7ec094abb2e0b07ce5bd324a5e163f39db3dbfb90c7fe2497e427e85f7f509de6c2d5fc812f5a48d32e133cdc8622338bf9ac81f9a95f5734b7a184a4791f054e6a43029f6925e839ab08efa95cbe441dec6034258469eb08f2e3b690d567158a1c2c0cd04b25271179a871cd34e0e462777b508345b2621ba0b947a31c008f8e503e92682e998c2329c535bb0a30516986882f6bbc7d3c88e0e3ef86453ab78b645dbc5fb9a457ca58176ffa1a94fdefe0281802769fc5b73276d98387751794ccfe03e34f92080f54762a9b763531b7fc8208ef111dc0cc3bab00357dbed6aa53b22ce25c3e60ec805a1014dcaed0eac634c3cc802a6931accf658d76d20c5a88b47c9574c4826a2ab8d4daf7f4f526644cb2647d88154b22a3853826ba643941ebc27e291dfd1d34a76673074f3c7b72c5e2439ab35b0ecd1e1d4f971564f682e25dfa8dc89d052eba96e126b3a0e585b141bca99b03ae9d5ec81caaa0a61c369da2848357d17a2626ddf0e92859b758b87f11aeb4a6fe1328d6b21a223dcc43af635692e449080e7adfc056511a54997a0296fbf37ca47ac5376b4f63f6e15b478ca06c92e942a6a63443a56e00c321fac0b6e558ad2194118ace1b096436cc54543d82cc0e949fde70f7f2d2367c1784ccf33749b8a8a07cb3e4cf4cdfcdeeb6da33e0517534e27aa1abef46aeef91413a91db3752af3171381a22b72e1b89efe6e5059548175835a8dae1eec33e1d5869568555d552b9ef874e300771c8a804a0430fba4ae867dfcab18b9f762ad451d2057f0911b61210cf9d6c5d3198c1e9a692b03d4836ba120697ec3a424afc29e750e5398eb77ac99c53c0838b8ceed06c6fb7b1596f71b204a970ae3e59f8323810000000000000064d51871f1c8d5549ae6be797d5014ff56cd45dae3768c5a91ca5fa1900a9932f48ef6b9f84979c196bcce42d17bd5a7e84299381d3418f6d011a479bdc365d3719aacaf81cff2edb0bec1c7a16da05debfbeff6bdbb21cd7a9fff4d7af5dd7718cf8825086aab9fcfb9cc37cd27dd637ce2520b656461e2286a12cea5618d200f6e696c2033d4da0e4363301bac6a16b42af10a71e33a1f25d74db4c7a9e21c9205ff983903c214bb8f88d5529d8e47afd8371bf7e4ab0e3b150d0767693781548706239d9dcf1442e43dfe592002235ac3c3d4807cd95b636bd197ef5061faf8d69e894caff78cf6c2577a3b9605f948448b5b9efd9a144d9f7ccfc8c0306ea2b53d4d78035caa057887fc5246cf8818d9c8df291d27fa8e451c6e654f32e9f9c8249443129c6c036d5430f37bb3084460c80412535e958b2f6c082ca7675671934cfafb870e403f068ebb1c1f3045e1041f48250d57e3079b0830a8d3fb0b7f8e1fccbbf8b25737a8e48fce62a2da7d7de12d6ea00ad40f8ef1967e7a7a54187321c02019dd2ce8f199a7f810c5d15a654e759f3fdfe04864ce36495cc417f865c0357636297df8529836fec590f19bbf29665ab14f91482f2a13605a69cd94a4a534fae3514e4d412d60568e14513f48f1f51db1b07931f65968f2703484c68636a48d1e7b47abbcc0530c73aaefa917c2d26b21368cf44b1fada6d98f7add49bba8e61e479e4448432b5645bddb875bad9ffbbe207c01f509a25d7453c85fdeace16c47b890259119a0d9076f9b67bc6c494406b1117b56063fa7a01579444d9880d3005a24900745020047c7b2ee7c77329a7faaf5e869858a153e07951afa751110fa61f1cac5148681bdd351d9c469034347534322974a749a689497687337d976e861a091ddd1c21154216396b1ab3ff43910ae3e8c6b566a5ee3376c0714d044912c909e092c6fa3e9b9b012e85c7ef19804a41cf79f122cdb3da8c124e431d105511f4b1466f83a3dbde6afe6af0a985cc57ab85f10d3c2e3ae23bfa8b51129f28cbfbd942675145c87e8aeb890a788c73ea11ff87188fcee8f3cf4a8affcd52d36f11b7d21724a34213f521565b28c912d83b45150aa958dc611628d7f4a3dcbd263603ff463c26097ad8c23b22c5e45a21cfcf72909f03b0268720646b8f83b93a7d3d2d141d6ad995dbdd0a8377e6d14a7c40dd70ec330b66a672bc9ef36f629b06d6f66d8d0e5c7206ee2d99e2e37f5ef36e6337ad5b3a7cc1afe59ac15dfb456b176c73ef04e70d9f730784a2dd57dedcffde5fd6979ab93f6e3aca7c7037a4fb5cd4888769ba3c53b8c4f39dd9b75342ba73ad4439ffa393e31b41777a3f03c4d01876e75ceb5ba26a35153d2dbd960ad3caae573b591d559d1a7d0247689ad6c520609e387b509880e1d545008d2d4248bca70d1d973804e6fed07deb24536f3b72e704d8ce02bfb1d0f09ad25bf7e21469181ccb402b5e3f8496095dedf7ac5e2b2a639a9df055a54839dfced44035abaa7e6d4f6e45e33c2c8404bda8d4dd9bd4a357c9a2aab7f35d8b1da2fc888f2f37f771b662777a779788e56c60c59f007392d53800c3ec614cbc4ae57722ba57611c34c23ae26fe1ac445e6e7c81a814f860d81454e0e8986479db3c6f12fadb7b66fde05c7b4278fb14b4a87fa0ef41500e545312b990f6d16462672f863b93a575dc67e30bdbfb19d60343f8c3ff9402dbc9217f1cffda834f85fcae612d3987522d60a661e2d5e7cc83c347b6b3d7fffbc3a9518288605119c093525c73ad8a87167c7be22119dde62e67d9971de50fa6e5a8b898668aaeddea0e257622e93c95b4b8a35a250e04fe00fff440a92883fccbf899bb19c9303e1bc5a5998d9d5b5748ae8cd9eae0f65ac8f88ad0198812fbc435cdf9116c46a50078a7bac464b4546240cd61f542f31aede1121e4051465caab3ca57a8c0c2c04208349c1ab40b1cebb1a916fcc455f089080bbd36a99dad423e4d03a49b147238b8803c411aa58764884adc015d03f3fd9466dc4017ef98d1c78638584d0c72fb95e2ebe1bcb23c316fb9b92c5d95d4c3c4f2265d21f1227428e9f9ea09950cc98292ec2262dbb026f39e30bcd56554ad7132198899ad6657047e35d4ea5a8aa9dba214b69237c6935e5290f0c33acd89f8485da9482601f0c0a8dfaae60d7bcfd5bb1c51819253e0d4fc4c8b81cc16582901fa563b6023e2a01455b45a13322bbe95ff2463d6eb282515ff483436427584508c5eae0de98fc3ff156adcb64b6b5625dd28c"], &(0x7f0000000040)={0x1, 0x2, [0xf18, 0x43d, 0x135, 0x98e]}) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @local}}}}, &(0x7f0000000380)={0x0, 0x2, [0x997, 0x26b, 0x8e8, 0x493]}) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@remote, @local, @val={@val={0x9100, 0x6, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "606909c19a607f397d2279d34b97e73e14ebe0279e3cc84cab4cc10cfb8a9bab0545d5b755ff1ec171ed15202f69a2f23dd8d8d948901f72bac26a705637549d"}}}}, 0x0) 16:08:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0xfffffffe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) [ 275.799640][ T5171] dump_stack_lvl+0xd6/0x122 [ 275.804310][ T5171] dump_stack+0x11/0x1b [ 275.808469][ T5171] dump_header+0x98/0x410 [ 275.812860][ T5171] oom_kill_process+0x18e/0x4a0 [ 275.817706][ T5171] out_of_memory+0x61d/0x8c0 [ 275.822290][ T5171] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 275.828099][ T5171] memory_max_write+0x32c/0x3d0 [ 275.832956][ T5171] ? memory_max_show+0x70/0x70 [ 275.837810][ T5171] cgroup_file_write+0x161/0x300 [ 275.842813][ T5171] ? __check_object_size+0x22a/0x2d0 [ 275.848091][ T5171] ? cgroup_seqfile_stop+0x70/0x70 [ 275.853325][ T5171] kernfs_fop_write_iter+0x1d3/0x2d0 [ 275.858597][ T5171] do_iter_readv_writev+0x2de/0x380 [ 275.863787][ T5171] do_iter_write+0x192/0x5c0 [ 275.868403][ T5171] ? splice_from_pipe_next+0x34f/0x3b0 [ 275.873848][ T5171] ? kmalloc_array+0x2d/0x40 [ 275.878425][ T5171] vfs_iter_write+0x4c/0x70 [ 275.882941][ T5171] iter_file_splice_write+0x43a/0x790 [ 275.888356][ T5171] ? splice_from_pipe+0xd0/0xd0 [ 275.893193][ T5171] direct_splice_actor+0x80/0xa0 [ 275.898116][ T5171] splice_direct_to_actor+0x345/0x650 [ 275.903478][ T5171] ? do_splice_direct+0x190/0x190 [ 275.908488][ T5171] do_splice_direct+0x106/0x190 [ 275.913342][ T5171] do_sendfile+0x675/0xc40 [ 275.917801][ T5171] __x64_sys_sendfile64+0x102/0x140 [ 275.922995][ T5171] do_syscall_64+0x44/0xd0 [ 275.927412][ T5171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.933454][ T5171] RIP: 0033:0x7f8a9bb9b059 [ 275.937877][ T5171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 275.957592][ T5171] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 275.965995][ T5171] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 275.973958][ T5171] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 275.981996][ T5171] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 275.989948][ T5171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 275.997923][ T5171] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 276.005880][ T5171] [ 276.009039][ T5171] memory: usage 6268kB, limit 0kB, failcnt 308 [ 276.015197][ T5171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 276.022188][ T5171] Memory cgroup stats for /syz1: [ 276.029242][ T5178] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.040368][ T5171] anon 32768 [ 276.040368][ T5171] file 24576 [ 276.040368][ T5171] kernel_stack 0 [ 276.040368][ T5171] pagetables 8192 [ 276.040368][ T5171] percpu 0 [ 276.040368][ T5171] sock 0 [ 276.040368][ T5171] vmalloc 0 [ 276.040368][ T5171] shmem 24576 [ 276.040368][ T5171] file_mapped 24576 [ 276.040368][ T5171] file_dirty 0 [ 276.040368][ T5171] file_writeback 0 [ 276.040368][ T5171] swapcached 0 [ 276.040368][ T5171] inactive_anon 32768 [ 276.040368][ T5171] active_anon 24576 [ 276.040368][ T5171] inactive_file 0 [ 276.040368][ T5171] active_file 0 [ 276.040368][ T5171] unevictable 0 16:08:59 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8, 0xfffff6b6) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "3c2287", 0x36, 0x21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, {[@fragment={0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x68}, @hopopts={0xd2}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, "5d279c", 0x81, "5198be"}, "2b017fa13f87635f7723b491d59106a6069a2e8b5e82"}}}}}}, &(0x7f0000000180)={0x1, 0x3, [0x22c, 0xfdd, 0xf13, 0x413]}) (async) syz_emit_ethernet(0x118, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @dccp={{0x28, 0x4, 0x2, 0x22, 0x106, 0x66, 0x0, 0xeb, 0x21, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x0, [{@remote, 0x6}, {@private=0xa010100, 0x6}, {@multicast1, 0x401}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x24, 0x3, 0x1, [{@private=0xa010100, 0x9}, {@multicast1, 0x20}, {@local, 0x5}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0x401}]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x7, [{@loopback, 0x1ff}]}, @rr={0x7, 0x13, 0x40, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @loopback, @loopback]}, @end, @lsrr={0x83, 0x17, 0x81, [@dev={0xac, 0x14, 0x14, 0x11}, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, "b67620", 0x5, "37da6d"}, "9e9ff28de427c9af498f0daa27a9937ab817d9206c8ea525519a193a615d25d744b6429019322a001bdeba1359e376ba85ce9f3d3dea7eddb48a28d61fb09456053886da7c3559e1648120010977b2eefa8d7d689f14"}}}}}, &(0x7f0000000300)={0x0, 0x2, [0x73e, 0xd5e, 0x6aa, 0xafa]}) (async) syz_emit_ethernet(0x1206, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)={0x1, 0x2, [0xf18, 0x43d, 0x135, 0x98e]}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @local}}}}, &(0x7f0000000380)={0x0, 0x2, [0x997, 0x26b, 0x8e8, 0x493]}) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@remote, @local, @val={@val={0x9100, 0x6, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "606909c19a607f397d2279d34b97e73e14ebe0279e3cc84cab4cc10cfb8a9bab0545d5b755ff1ec171ed15202f69a2f23dd8d8d948901f72bac26a705637549d"}}}}, 0x0) [ 276.040368][ T5171] slab_reclaimable 12672 [ 276.040368][ T5171] slab_unreclaimable 16032 [ 276.040368][ T5171] slab 28704 [ 276.040368][ T5171] workingset_refault_anon 0 [ 276.040368][ T5171] workingset_refault_file 1 [ 276.040368][ T5171] workingset_activate_anon 0 [ 276.040368][ T5171] workingset_activate_file 0 [ 276.040368][ T5171] workingset_restore_anon 0 [ 276.133000][ T5171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5132,uid=0 16:08:59 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8, 0xfffff6b6) (async) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "3c2287", 0x36, 0x21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, {[@fragment={0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x68}, @hopopts={0xd2}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x2, "5d279c", 0x81, "5198be"}, "2b017fa13f87635f7723b491d59106a6069a2e8b5e82"}}}}}}, &(0x7f0000000180)={0x1, 0x3, [0x22c, 0xfdd, 0xf13, 0x413]}) syz_emit_ethernet(0x118, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @dccp={{0x28, 0x4, 0x2, 0x22, 0x106, 0x66, 0x0, 0xeb, 0x21, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x0, [{@remote, 0x6}, {@private=0xa010100, 0x6}, {@multicast1, 0x401}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x24, 0x3, 0x1, [{@private=0xa010100, 0x9}, {@multicast1, 0x20}, {@local, 0x5}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0x401}]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x7, [{@loopback, 0x1ff}]}, @rr={0x7, 0x13, 0x40, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @loopback, @loopback]}, @end, @lsrr={0x83, 0x17, 0x81, [@dev={0xac, 0x14, 0x14, 0x11}, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, "b67620", 0x5, "37da6d"}, "9e9ff28de427c9af498f0daa27a9937ab817d9206c8ea525519a193a615d25d744b6429019322a001bdeba1359e376ba85ce9f3d3dea7eddb48a28d61fb09456053886da7c3559e1648120010977b2eefa8d7d689f14"}}}}}, &(0x7f0000000300)={0x0, 0x2, [0x73e, 0xd5e, 0x6aa, 0xafa]}) syz_emit_ethernet(0x1206, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)={0x1, 0x2, [0xf18, 0x43d, 0x135, 0x98e]}) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @local}}}}, &(0x7f0000000380)={0x0, 0x2, [0x997, 0x26b, 0x8e8, 0x493]}) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@remote, @local, @val={@val={0x9100, 0x6, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "606909c19a607f397d2279d34b97e73e14ebe0279e3cc84cab4cc10cfb8a9bab0545d5b755ff1ec171ed15202f69a2f23dd8d8d948901f72bac26a705637549d"}}}}, 0x0) (rerun: 32) 16:08:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0xfffffffe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 16:08:59 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x8cffffff}}], [{@context={'context', 0x3d, 'unconfined_u'}, 0x22}]}}) [ 276.148208][ T5171] Memory cgroup out of memory: Killed process 5132 (syz-executor.1) total-vm:48480kB, anon-rss:360kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 276.169269][ T26] oom_reaper: reaped process 5132 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB [ 276.188409][ T5174] EXT4-fs (loop2): Can't read superblock on 2nd try [ 276.214896][ T5171] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 276.225193][ T5171] CPU: 0 PID: 5171 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 276.236124][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.246209][ T5171] Call Trace: [ 276.249481][ T5171] [ 276.252460][ T5171] dump_stack_lvl+0xd6/0x122 [ 276.257041][ T5171] dump_stack+0x11/0x1b [ 276.261228][ T5171] dump_header+0x98/0x410 [ 276.265541][ T5171] out_of_memory+0x65c/0x8c0 [ 276.270171][ T5171] memory_max_write+0x32c/0x3d0 [ 276.275042][ T5171] ? memory_max_show+0x70/0x70 [ 276.279821][ T5171] cgroup_file_write+0x161/0x300 [ 276.284816][ T5171] ? __check_object_size+0x22a/0x2d0 [ 276.290172][ T5171] ? cgroup_seqfile_stop+0x70/0x70 [ 276.295275][ T5171] kernfs_fop_write_iter+0x1d3/0x2d0 [ 276.300562][ T5171] do_iter_readv_writev+0x2de/0x380 [ 276.305765][ T5171] do_iter_write+0x192/0x5c0 [ 276.310369][ T5171] ? splice_from_pipe_next+0x34f/0x3b0 [ 276.315818][ T5171] ? kmalloc_array+0x2d/0x40 [ 276.320411][ T5171] vfs_iter_write+0x4c/0x70 [ 276.324899][ T5171] iter_file_splice_write+0x43a/0x790 [ 276.330273][ T5171] ? splice_from_pipe+0xd0/0xd0 [ 276.335173][ T5171] direct_splice_actor+0x80/0xa0 [ 276.340123][ T5171] splice_direct_to_actor+0x345/0x650 [ 276.345553][ T5171] ? do_splice_direct+0x190/0x190 [ 276.350638][ T5171] do_splice_direct+0x106/0x190 [ 276.355508][ T5171] do_sendfile+0x675/0xc40 [ 276.359993][ T5171] __x64_sys_sendfile64+0x102/0x140 [ 276.365186][ T5171] do_syscall_64+0x44/0xd0 [ 276.369590][ T5171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.375476][ T5171] RIP: 0033:0x7f8a9bb9b059 [ 276.379876][ T5171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 276.399552][ T5171] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.407986][ T5171] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 276.415971][ T5171] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 276.423976][ T5171] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 276.431932][ T5171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 276.439887][ T5171] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 276.447846][ T5171] [ 276.451042][ T5171] memory: usage 48kB, limit 0kB, failcnt 325 [ 276.457035][ T5171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 276.462043][ T24] audit: type=1400 audit(1645805339.695:161): avc: denied { mounton } for pid=5203 comm="syz-executor.4" path="/root/syzkaller-testdir83908744/syzkaller.0E35O7/77/file0" dev="sda1" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 276.463872][ T5171] Memory cgroup stats for /syz1: [ 276.497424][ T5171] anon 0 [ 276.497424][ T5171] file 24576 [ 276.497424][ T5171] kernel_stack 0 [ 276.497424][ T5171] pagetables 0 [ 276.497424][ T5171] percpu 0 [ 276.497424][ T5171] sock 0 [ 276.497424][ T5171] vmalloc 0 [ 276.497424][ T5171] shmem 24576 [ 276.497424][ T5171] file_mapped 24576 [ 276.497424][ T5171] file_dirty 0 [ 276.497424][ T5171] file_writeback 0 [ 276.497424][ T5171] swapcached 0 [ 276.497424][ T5171] inactive_anon 0 [ 276.497424][ T5171] active_anon 24576 [ 276.497424][ T5171] inactive_file 0 [ 276.497424][ T5171] active_file 0 [ 276.497424][ T5171] unevictable 0 [ 276.497424][ T5171] slab_reclaimable 4400 [ 276.497424][ T5171] slab_unreclaimable 13400 [ 276.497424][ T5171] slab 17800 [ 276.497424][ T5171] workingset_refault_anon 0 [ 276.497424][ T5171] workingset_refault_file 1 [ 276.497424][ T5171] workingset_activate_anon 0 [ 276.497424][ T5171] workingset_activate_file 0 [ 276.497424][ T5171] workingset_restore_anon 0 [ 276.590664][ T5171] Out of memory and no killable processes... 16:09:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:00 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket(0x10, 0x804, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000140)="376974e38fa8c95bde2624c2cff6d58fee2fae67da5923c7587109544accdd4911c86e0799705e25112d9cac814e45062cffe9311fbb7e360e23d078e3b7cf3549a2fdd08dda832be52fe0e5bf05d90cae69cf312005393fda76d9cebb9d4eea4bee32a46bdc2dd68e1052321e9d0fafcc7eec96945e9f743d4fe3951c02e3a9aed1a2cc5115f44ae6a6f17f793161", 0x8f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x20, 0x0, 0x0, 0x19, @dev, @local}}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000080)=0x47c, 0x4) 16:09:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:00 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x8cffffff}}], [{@context={'context', 0x3d, 'unconfined_u'}, 0x22}]}}) 16:09:00 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:00 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x2f, 0x1, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xe8, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@llc={0x4, {@snap={0xab, 0xaa, "daff", "d8af2e", 0x8884, "c6736d412efbef9096a45551af3ee49506d4261e215ea36ddaf10efd6354be9a4f5a9c99c0f37f8b0ae57919af93a2a61781cb18577e2f07169692f7c3e1f5fd150d2b5e1f64b97220124986b52ce1a1ad81bb314b7a07c04e87ae9ad03e5568f8c9c45f4e7be54e9a9fa776f79afdf8d0416eaf98f206426ed420f8d2dbe8ae68f13e436730501cb9c9585eb3a2866ffb2b9020db9779b11f287264cf43adef898e198cb8c661749c5c082ba0ef6b9bd71666130fde27d72bd873208911fdb62278445b7fd1be8a03801f319c"}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000001980)={0x41424344, 0x41424344}, 0x7, 0x7fffffff) syz_emit_ethernet(0x101, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x1, [0xdb3, 0x88a, 0x53a, 0xf8f]}) syz_emit_ethernet(0x87, &(0x7f00000002c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@llc={0x4, {@llc={0xe, 0x80, '(m', "7f7bbda4f96bb8777e443a27e64694e88c5aa36bcb96d1ab9bb0bbf83ee6d94150849866b9301624b71cc39b32dc82923d6d76676235128127ffcd82cc09e79fdaee3ccea6453df1a88650166149d2ea9f16af6d49279882cd7a4263d3343a435cc56b8778edc5b7faad3e93a806204e81"}}}}}, 0x0) syz_emit_ethernet(0x2eb, &(0x7f0000000540)={@remote, @random="75b2d3048143", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0xd, 0x6, "fca6d0", 0x2b1, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x5c, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x2, [0x7, 0x0, 0x8, 0x2, 0x9566, 0x100000001, 0x0, 0x3]}}]}, @dstopts={0x89, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0x4, 0x1, [0x3, 0xfffffffffffffe01, 0x1, 0x1f, 0x8, 0x4, 0x5, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x33, 0x13, '\x00', [@jumbo, @ra={0x5, 0x2, 0x7ff}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x81, 0x83, "a7e2007135bf42e1c726451ff10358c0d64c6c221cba8141737a7e8762651749011ffe252d870d20e60c806e8ace499dcd315bb355adc3e993ef238654e1d288112ea5dfa5445b2243977da772c79aed450e6bba93117a8f263a5a6eff04dae54cd370854e2716abcb383ee9b9fe3765603ecaf68762db984709a1de24ca3c8c1de3bc"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x62}, @routing={0x84, 0x8, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @dstopts={0x0, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9e}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x3, 0xe, 0x1, 0x0, [0x7, 0x7, 0x2, 0xffffffffffff7fff, 0x100, 0x6, 0x10000]}}]}, @routing={0x2e, 0x8, 0x0, 0x2, 0x0, [@mcast2, @mcast2, @mcast2, @empty]}], @payload_mcast={{{{{{0x31, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0xf800, 0x0, 0x1, 0xb, 0x4, 0x1, 0x4, 0x8, 0x3, 0x4e21, 0x4e22}, 0x2, 0x1}, 0x1, 0x1}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_emit_ethernet(0x101a, &(0x7f0000000840)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x9100, 0x6, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x3f, 0x0, 0x1}], @generic="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"}}}}, &(0x7f0000001880)={0x1, 0x1, [0xd90, 0xec1, 0x1ae, 0x22c]}) syz_emit_ethernet(0x112, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @multicast, @void, {@mpls_mc={0x8848, {[{0x81}], @ipv4=@tcp={{0x19, 0x4, 0x0, 0x1, 0x100, 0x67, 0x0, 0x5, 0x6, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x4c, 0x1, [{0x7, 0x7, "b6d5ac6b92"}, {0x1, 0x7, "b5bda46ea7"}, {0x7, 0x9, "251a40c31be879"}, {0x1, 0x10, "08fff0f548fa31053bc10aaef659"}, {0x5, 0xa, "8aab90d09d7c8c6e"}, {0x5, 0x10, "f0dac85ce010d1ef897359838cdc"}, {0x7, 0x5, "ab5dcb"}]}, @end]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0xc2, 0x1ff, 0x0, 0xffc0, {[@mptcp=@syn={0x1e, 0xc, 0xe, 0x1, 0x1, 0x800, 0x7}, @exp_smc={0xfe, 0x6}]}}, {"e0dac3fd73782ae43ee275981d12b37e3788989e935949e0e769ea15c6074b1b8ed176310e88e9a351329891c4b533c43313c81dc91912e1093142e245194bddc432d7fdd0cb7ef15cda7dd9ab8e7e535a495075bb5c056a6b387c3dfedba47c0882bd515e6f49b59a428e72cc06873bf03c66d7"}}}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x935, 0xf1e, 0xe78, 0xbf8]}) syz_emit_ethernet(0xbe, &(0x7f00000019c0)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf4, 0x1, "9981", "c1c47fc09fd57614405e0194b71d65bbc9be6c3a7aefb477b2c7216be8eff3fe02a9e27994e5a0f10195014c0c8ccf5b0a5e059b5ac5712799c08f11f647ef61270aac3ac24a11cef11b47bee4530bd82e0c62185dd161341b9a0000123039920dc51211a6c8f5b7840aa83302bb9409fcaf9664c06946d03fd0fb81f7d6405fd7d53d45303ea10fc06b874c4b019597768199ae7de4bdb127abaac8a858f0cdbfd5864d"}}}}}, &(0x7f0000001940)={0x0, 0x2, [0xd94, 0x199, 0xf19, 0x6dd]}) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x11, 0x0, @remote, @local, {[], {{0x0, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x5, "21a46d"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xb, 0xf989, "825d64015449fe"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000001a80)={@multicast, @multicast, @val={@val={0x9100, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}], @ipv6=@tcp={0x9, 0x6, "906688", 0xaf, 0x6, 0x0, @remote, @private2, {[@fragment={0x87, 0x0, 0x20, 0x1, 0x0, 0x16, 0x64}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x1b, 0x67}, @srh={0xea, 0x6, 0x4, 0x3, 0x9, 0x40, 0xd2, [@empty, @private1, @mcast1]}, @routing={0x5c, 0x6, 0x1, 0x81, 0x0, [@mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x4e21, 0x4e22, r1, r0, 0x1, 0x0, 0x6, 0xde, 0x8, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3}]}}, {"4ab4bb4d7a86aee09aa8318f87710420fa0e75284522cd"}}}}}}}}, &(0x7f00000018c0)={0x1, 0x2, [0xd00, 0x65a, 0x30d, 0x8f2]}) 16:09:00 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x2) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x8cffffff}}], [{@context={'context', 0x3d, 'unconfined_u'}, 0x22}]}}) 16:09:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 276.710178][ T5214] loop2: detected capacity change from 0 to 4 [ 276.716975][ T5213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 276.747893][ T5214] EXT4-fs (loop2): Can't read superblock on 2nd try [ 276.778640][ T5220] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 276.788911][ T5220] CPU: 0 PID: 5220 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 276.799852][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.809906][ T5220] Call Trace: [ 276.813295][ T5220] [ 276.816224][ T5220] dump_stack_lvl+0xd6/0x122 [ 276.820915][ T5220] dump_stack+0x11/0x1b [ 276.825084][ T5220] dump_header+0x98/0x410 [ 276.829419][ T5220] out_of_memory+0x65c/0x8c0 [ 276.834096][ T5220] memory_max_write+0x32c/0x3d0 [ 276.839016][ T5220] ? memory_max_show+0x70/0x70 [ 276.843788][ T5220] cgroup_file_write+0x161/0x300 [ 276.848733][ T5220] ? __check_object_size+0x22a/0x2d0 [ 276.854056][ T5220] ? cgroup_seqfile_stop+0x70/0x70 [ 276.859202][ T5220] kernfs_fop_write_iter+0x1d3/0x2d0 [ 276.864493][ T5220] do_iter_readv_writev+0x2de/0x380 [ 276.869704][ T5220] do_iter_write+0x192/0x5c0 [ 276.874342][ T5220] ? splice_from_pipe_next+0x34f/0x3b0 [ 276.879820][ T5220] ? kmalloc_array+0x2d/0x40 [ 276.884496][ T5220] vfs_iter_write+0x4c/0x70 [ 276.889009][ T5220] iter_file_splice_write+0x43a/0x790 [ 276.894482][ T5220] ? splice_from_pipe+0xd0/0xd0 [ 276.899414][ T5220] direct_splice_actor+0x80/0xa0 [ 276.904372][ T5220] splice_direct_to_actor+0x345/0x650 [ 276.909850][ T5220] ? do_splice_direct+0x190/0x190 [ 276.914919][ T5220] do_splice_direct+0x106/0x190 [ 276.919788][ T5220] do_sendfile+0x675/0xc40 [ 276.924262][ T5220] __x64_sys_sendfile64+0x102/0x140 [ 276.929482][ T5220] do_syscall_64+0x44/0xd0 [ 276.933910][ T5220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.939815][ T5220] RIP: 0033:0x7f8a9bb9b059 [ 276.944231][ T5220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 276.963920][ T5220] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.972385][ T5220] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 276.980365][ T5220] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 276.988352][ T5220] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 276.996380][ T5220] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 277.004469][ T5220] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 277.012446][ T5220] [ 277.015511][ T5220] memory: usage 44kB, limit 0kB, failcnt 325 [ 277.021479][ T5220] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:09:00 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x2f, 0x1, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xe8, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@llc={0x4, {@snap={0xab, 0xaa, "daff", "d8af2e", 0x8884, "c6736d412efbef9096a45551af3ee49506d4261e215ea36ddaf10efd6354be9a4f5a9c99c0f37f8b0ae57919af93a2a61781cb18577e2f07169692f7c3e1f5fd150d2b5e1f64b97220124986b52ce1a1ad81bb314b7a07c04e87ae9ad03e5568f8c9c45f4e7be54e9a9fa776f79afdf8d0416eaf98f206426ed420f8d2dbe8ae68f13e436730501cb9c9585eb3a2866ffb2b9020db9779b11f287264cf43adef898e198cb8c661749c5c082ba0ef6b9bd71666130fde27d72bd873208911fdb62278445b7fd1be8a03801f319c"}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000001980)={0x41424344, 0x41424344}, 0x7, 0x7fffffff) (async) syz_emit_ethernet(0x101, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa31bbbbbbbbbbbb8847000000000000020000000a00e6ff030000e5ffffff0000000000000000000f000000000000000000530d2c112193963dd637b60626f392a4be43191c23972df7766269fa7e6e1a1b5c01d08bab3ca79999c3ac3601c9ec7cc30fe0e3aa938b2d215705463c7c41d88190e67244a1c8cc4964979c3827283cd55c5b18a3591fd327a65e5fb4db34f17b59ec72d6623811b3232f26f4f8de3f082753c70401e381e5f97d79f6dc57509967786b2bdbb5871c8682700cc78fafaaf9e4a55b184b3b5701ce16f6fb28154ffb174d61c125b37e11114a630ba343301d296ee82ab03c5cef33c11affdb460b732bfb86a839ef641a64f6ad45621bd200000000000000009bbb00008000"], &(0x7f0000000140)={0x0, 0x1, [0xdb3, 0x88a, 0x53a, 0xf8f]}) syz_emit_ethernet(0x87, &(0x7f00000002c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@llc={0x4, {@llc={0xe, 0x80, '(m', "7f7bbda4f96bb8777e443a27e64694e88c5aa36bcb96d1ab9bb0bbf83ee6d94150849866b9301624b71cc39b32dc82923d6d76676235128127ffcd82cc09e79fdaee3ccea6453df1a88650166149d2ea9f16af6d49279882cd7a4263d3343a435cc56b8778edc5b7faad3e93a806204e81"}}}}}, 0x0) syz_emit_ethernet(0x2eb, &(0x7f0000000540)={@remote, @random="75b2d3048143", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0xd, 0x6, "fca6d0", 0x2b1, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x5c, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x2, [0x7, 0x0, 0x8, 0x2, 0x9566, 0x100000001, 0x0, 0x3]}}]}, @dstopts={0x89, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0x4, 0x1, [0x3, 0xfffffffffffffe01, 0x1, 0x1f, 0x8, 0x4, 0x5, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x33, 0x13, '\x00', [@jumbo, @ra={0x5, 0x2, 0x7ff}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x81, 0x83, "a7e2007135bf42e1c726451ff10358c0d64c6c221cba8141737a7e8762651749011ffe252d870d20e60c806e8ace499dcd315bb355adc3e993ef238654e1d288112ea5dfa5445b2243977da772c79aed450e6bba93117a8f263a5a6eff04dae54cd370854e2716abcb383ee9b9fe3765603ecaf68762db984709a1de24ca3c8c1de3bc"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x62}, @routing={0x84, 0x8, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @dstopts={0x0, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9e}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x3, 0xe, 0x1, 0x0, [0x7, 0x7, 0x2, 0xffffffffffff7fff, 0x100, 0x6, 0x10000]}}]}, @routing={0x2e, 0x8, 0x0, 0x2, 0x0, [@mcast2, @mcast2, @mcast2, @empty]}], @payload_mcast={{{{{{0x31, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0xf800, 0x0, 0x1, 0xb, 0x4, 0x1, 0x4, 0x8, 0x3, 0x4e21, 0x4e22}, 0x2, 0x1}, 0x1, 0x1}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) (async) syz_emit_ethernet(0x101a, &(0x7f0000000840)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x9100, 0x6, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x3f, 0x0, 0x1}], @generic="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"}}}}, &(0x7f0000001880)={0x1, 0x1, [0xd90, 0xec1, 0x1ae, 0x22c]}) syz_emit_ethernet(0x112, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @multicast, @void, {@mpls_mc={0x8848, {[{0x81}], @ipv4=@tcp={{0x19, 0x4, 0x0, 0x1, 0x100, 0x67, 0x0, 0x5, 0x6, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x4c, 0x1, [{0x7, 0x7, "b6d5ac6b92"}, {0x1, 0x7, "b5bda46ea7"}, {0x7, 0x9, "251a40c31be879"}, {0x1, 0x10, "08fff0f548fa31053bc10aaef659"}, {0x5, 0xa, "8aab90d09d7c8c6e"}, {0x5, 0x10, "f0dac85ce010d1ef897359838cdc"}, {0x7, 0x5, "ab5dcb"}]}, @end]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0xc2, 0x1ff, 0x0, 0xffc0, {[@mptcp=@syn={0x1e, 0xc, 0xe, 0x1, 0x1, 0x800, 0x7}, @exp_smc={0xfe, 0x6}]}}, {"e0dac3fd73782ae43ee275981d12b37e3788989e935949e0e769ea15c6074b1b8ed176310e88e9a351329891c4b533c43313c81dc91912e1093142e245194bddc432d7fdd0cb7ef15cda7dd9ab8e7e535a495075bb5c056a6b387c3dfedba47c0882bd515e6f49b59a428e72cc06873bf03c66d7"}}}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x935, 0xf1e, 0xe78, 0xbf8]}) (async) syz_emit_ethernet(0xbe, &(0x7f00000019c0)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf4, 0x1, "9981", "c1c47fc09fd57614405e0194b71d65bbc9be6c3a7aefb477b2c7216be8eff3fe02a9e27994e5a0f10195014c0c8ccf5b0a5e059b5ac5712799c08f11f647ef61270aac3ac24a11cef11b47bee4530bd82e0c62185dd161341b9a0000123039920dc51211a6c8f5b7840aa83302bb9409fcaf9664c06946d03fd0fb81f7d6405fd7d53d45303ea10fc06b874c4b019597768199ae7de4bdb127abaac8a858f0cdbfd5864d"}}}}}, &(0x7f0000001940)={0x0, 0x2, [0xd94, 0x199, 0xf19, 0x6dd]}) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x11, 0x0, @remote, @local, {[], {{0x0, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x5, "21a46d"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xb, 0xf989, "825d64015449fe"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xf9, &(0x7f0000001a80)={@multicast, @multicast, @val={@val={0x9100, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}], @ipv6=@tcp={0x9, 0x6, "906688", 0xaf, 0x6, 0x0, @remote, @private2, {[@fragment={0x87, 0x0, 0x20, 0x1, 0x0, 0x16, 0x64}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x1b, 0x67}, @srh={0xea, 0x6, 0x4, 0x3, 0x9, 0x40, 0xd2, [@empty, @private1, @mcast1]}, @routing={0x5c, 0x6, 0x1, 0x81, 0x0, [@mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x4e21, 0x4e22, r1, r0, 0x1, 0x0, 0x6, 0xde, 0x8, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3}]}}, {"4ab4bb4d7a86aee09aa8318f87710420fa0e75284522cd"}}}}}}}}, &(0x7f00000018c0)={0x1, 0x2, [0xd00, 0x65a, 0x30d, 0x8f2]}) 16:09:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x64, 0x58, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x4008000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00e1ff0f000104004755ffffffffffbf000000", @ANYRES32=r10, @ANYRESHEX=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20022000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="e75e21706035bdb52f22c83c529444a10d2f91daaacfc0ca0e5fb106c0311f4247f946007e526edbae1bdbab5796f3dae5494cc40e6474a4298d73d78bedd29a5ef8fa671a6e35a74c5df9d84b30ceb398136910d4235b927a65ab1114c2584bee5fdb033fd52a71ab823b67450c1e0a329d189b2b6a49aa42494367145689a25e50aed2dd55c92fa24d8975073f812e8d0e9b32ce668b245a60dd08280b88688be42b152796038c66327f1cb8b3361638cdb2a285a24000466fa72069513afe7b2556577a"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 16:09:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 277.028371][ T5220] Memory cgroup stats for /syz1: [ 277.048234][ T5220] anon 0 [ 277.048234][ T5220] file 24576 [ 277.048234][ T5220] kernel_stack 0 [ 277.048234][ T5220] pagetables 0 [ 277.048234][ T5220] percpu 0 [ 277.048234][ T5220] sock 0 [ 277.048234][ T5220] vmalloc 0 [ 277.048234][ T5220] shmem 24576 [ 277.048234][ T5220] file_mapped 24576 [ 277.048234][ T5220] file_dirty 0 [ 277.048234][ T5220] file_writeback 0 [ 277.048234][ T5220] swapcached 0 [ 277.048234][ T5220] inactive_anon 0 [ 277.048234][ T5220] active_anon 24576 [ 277.048234][ T5220] inactive_file 0 [ 277.048234][ T5220] active_file 0 [ 277.048234][ T5220] unevictable 0 [ 277.048234][ T5220] slab_reclaimable 4400 [ 277.048234][ T5220] slab_unreclaimable 13400 [ 277.048234][ T5220] slab 17800 [ 277.048234][ T5220] workingset_refault_anon 0 [ 277.048234][ T5220] workingset_refault_file 1 [ 277.048234][ T5220] workingset_activate_anon 0 [ 277.048234][ T5220] workingset_activate_file 0 [ 277.048234][ T5220] workingset_restore_anon 0 [ 277.141920][ T5220] Out of memory and no killable processes... 16:09:00 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x2f, 0x1, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0xe8, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@llc={0x4, {@snap={0xab, 0xaa, "daff", "d8af2e", 0x8884, "c6736d412efbef9096a45551af3ee49506d4261e215ea36ddaf10efd6354be9a4f5a9c99c0f37f8b0ae57919af93a2a61781cb18577e2f07169692f7c3e1f5fd150d2b5e1f64b97220124986b52ce1a1ad81bb314b7a07c04e87ae9ad03e5568f8c9c45f4e7be54e9a9fa776f79afdf8d0416eaf98f206426ed420f8d2dbe8ae68f13e436730501cb9c9585eb3a2866ffb2b9020db9779b11f287264cf43adef898e198cb8c661749c5c082ba0ef6b9bd71666130fde27d72bd873208911fdb62278445b7fd1be8a03801f319c"}}}}}, 0x0) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000001980)={0x41424344, 0x41424344}, 0x7, 0x7fffffff) (async) syz_emit_ethernet(0x101, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x1, [0xdb3, 0x88a, 0x53a, 0xf8f]}) syz_emit_ethernet(0x87, &(0x7f00000002c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@llc={0x4, {@llc={0xe, 0x80, '(m', "7f7bbda4f96bb8777e443a27e64694e88c5aa36bcb96d1ab9bb0bbf83ee6d94150849866b9301624b71cc39b32dc82923d6d76676235128127ffcd82cc09e79fdaee3ccea6453df1a88650166149d2ea9f16af6d49279882cd7a4263d3343a435cc56b8778edc5b7faad3e93a806204e81"}}}}}, 0x0) (async) syz_emit_ethernet(0x2eb, &(0x7f0000000540)={@remote, @random="75b2d3048143", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0xd, 0x6, "fca6d0", 0x2b1, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x5c, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x2, [0x7, 0x0, 0x8, 0x2, 0x9566, 0x100000001, 0x0, 0x3]}}]}, @dstopts={0x89, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0x4, 0x1, [0x3, 0xfffffffffffffe01, 0x1, 0x1f, 0x8, 0x4, 0x5, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x33, 0x13, '\x00', [@jumbo, @ra={0x5, 0x2, 0x7ff}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x81, 0x83, "a7e2007135bf42e1c726451ff10358c0d64c6c221cba8141737a7e8762651749011ffe252d870d20e60c806e8ace499dcd315bb355adc3e993ef238654e1d288112ea5dfa5445b2243977da772c79aed450e6bba93117a8f263a5a6eff04dae54cd370854e2716abcb383ee9b9fe3765603ecaf68762db984709a1de24ca3c8c1de3bc"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x62}, @routing={0x84, 0x8, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @dstopts={0x0, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9e}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x3, 0xe, 0x1, 0x0, [0x7, 0x7, 0x2, 0xffffffffffff7fff, 0x100, 0x6, 0x10000]}}]}, @routing={0x2e, 0x8, 0x0, 0x2, 0x0, [@mcast2, @mcast2, @mcast2, @empty]}], @payload_mcast={{{{{{0x31, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0xf800, 0x0, 0x1, 0xb, 0x4, 0x1, 0x4, 0x8, 0x3, 0x4e21, 0x4e22}, 0x2, 0x1}, 0x1, 0x1}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_emit_ethernet(0x101a, &(0x7f0000000840)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x9100, 0x6, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x3f, 0x0, 0x1}], @generic="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"}}}}, &(0x7f0000001880)={0x1, 0x1, [0xd90, 0xec1, 0x1ae, 0x22c]}) syz_emit_ethernet(0x112, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @multicast, @void, {@mpls_mc={0x8848, {[{0x81}], @ipv4=@tcp={{0x19, 0x4, 0x0, 0x1, 0x100, 0x67, 0x0, 0x5, 0x6, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x4c, 0x1, [{0x7, 0x7, "b6d5ac6b92"}, {0x1, 0x7, "b5bda46ea7"}, {0x7, 0x9, "251a40c31be879"}, {0x1, 0x10, "08fff0f548fa31053bc10aaef659"}, {0x5, 0xa, "8aab90d09d7c8c6e"}, {0x5, 0x10, "f0dac85ce010d1ef897359838cdc"}, {0x7, 0x5, "ab5dcb"}]}, @end]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0xc2, 0x1ff, 0x0, 0xffc0, {[@mptcp=@syn={0x1e, 0xc, 0xe, 0x1, 0x1, 0x800, 0x7}, @exp_smc={0xfe, 0x6}]}}, {"e0dac3fd73782ae43ee275981d12b37e3788989e935949e0e769ea15c6074b1b8ed176310e88e9a351329891c4b533c43313c81dc91912e1093142e245194bddc432d7fdd0cb7ef15cda7dd9ab8e7e535a495075bb5c056a6b387c3dfedba47c0882bd515e6f49b59a428e72cc06873bf03c66d7"}}}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x935, 0xf1e, 0xe78, 0xbf8]}) (async) syz_emit_ethernet(0xbe, &(0x7f00000019c0)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf4, 0x1, "9981", "c1c47fc09fd57614405e0194b71d65bbc9be6c3a7aefb477b2c7216be8eff3fe02a9e27994e5a0f10195014c0c8ccf5b0a5e059b5ac5712799c08f11f647ef61270aac3ac24a11cef11b47bee4530bd82e0c62185dd161341b9a0000123039920dc51211a6c8f5b7840aa83302bb9409fcaf9664c06946d03fd0fb81f7d6405fd7d53d45303ea10fc06b874c4b019597768199ae7de4bdb127abaac8a858f0cdbfd5864d"}}}}}, &(0x7f0000001940)={0x0, 0x2, [0xd94, 0x199, 0xf19, 0x6dd]}) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x11, 0x0, @remote, @local, {[], {{0x0, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x5, "21a46d"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xb, 0xf989, "825d64015449fe"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xf9, &(0x7f0000001a80)={@multicast, @multicast, @val={@val={0x9100, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}], @ipv6=@tcp={0x9, 0x6, "906688", 0xaf, 0x6, 0x0, @remote, @private2, {[@fragment={0x87, 0x0, 0x20, 0x1, 0x0, 0x16, 0x64}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x1b, 0x67}, @srh={0xea, 0x6, 0x4, 0x3, 0x9, 0x40, 0xd2, [@empty, @private1, @mcast1]}, @routing={0x5c, 0x6, 0x1, 0x81, 0x0, [@mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x4e21, 0x4e22, r1, r0, 0x1, 0x0, 0x6, 0xde, 0x8, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3}]}}, {"4ab4bb4d7a86aee09aa8318f87710420fa0e75284522cd"}}}}}}}}, &(0x7f00000018c0)={0x1, 0x2, [0xd00, 0x65a, 0x30d, 0x8f2]}) [ 277.154054][ T5224] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 277.154672][ T5223] loop2: detected capacity change from 0 to 4 [ 277.162198][ T5224] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 277.174576][ T5223] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:09:00 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket(0x10, 0x804, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000140)="376974e38fa8c95bde2624c2cff6d58fee2fae67da5923c7587109544accdd4911c86e0799705e25112d9cac814e45062cffe9311fbb7e360e23d078e3b7cf3549a2fdd08dda832be52fe0e5bf05d90cae69cf312005393fda76d9cebb9d4eea4bee32a46bdc2dd68e1052321e9d0fafcc7eec96945e9f743d4fe3951c02e3a9aed1a2cc5115f44ae6a6f17f793161", 0x8f) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x20, 0x0, 0x0, 0x19, @dev, @local}}) (rerun: 32) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000080)=0x47c, 0x4) 16:09:00 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:00 executing program 3: syz_emit_ethernet(0x102, &(0x7f0000000000)={@local, @multicast, @void, {@generic={0x9, "34f6e7bda6d06bcc248cdc5ed7d3967d23ca770ce1e0821dc252c518093619df547476a6a4879911ba2111df439e4c855e6bc9e915351ab5b7c7ea32aae87bb3ccfafe113f98a33706c9d9aac414c0a11ba279e79389bb7e6c9b9c438cb7418bae9033599fb071ad237d3cb5b6449457be13fcbe7276df0fb26c0d13420f3ca9f331840bba6097e3212800cbb00275742fd17e5a618678756449a429f3e27a56227db202c985b80597845a7c621f7df18d010e51b799eb4c3343416f87566bfb1846d126a06bf741db27bf62c934d11e831d172f79f2934ce82f7a7c3fc60cd75525982a5ceb2258157b3f7b05a81a3f80cc132a"}}}, 0x0) [ 277.229105][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5224 comm=syz-executor.4 16:09:00 executing program 3: syz_emit_ethernet(0x102, &(0x7f0000000000)={@local, @multicast, @void, {@generic={0x9, "34f6e7bda6d06bcc248cdc5ed7d3967d23ca770ce1e0821dc252c518093619df547476a6a4879911ba2111df439e4c855e6bc9e915351ab5b7c7ea32aae87bb3ccfafe113f98a33706c9d9aac414c0a11ba279e79389bb7e6c9b9c438cb7418bae9033599fb071ad237d3cb5b6449457be13fcbe7276df0fb26c0d13420f3ca9f331840bba6097e3212800cbb00275742fd17e5a618678756449a429f3e27a56227db202c985b80597845a7c621f7df18d010e51b799eb4c3343416f87566bfb1846d126a06bf741db27bf62c934d11e831d172f79f2934ce82f7a7c3fc60cd75525982a5ceb2258157b3f7b05a81a3f80cc132a"}}}, 0x0) 16:09:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x64, 0x58, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x4008000) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00e1ff0f000104004755ffffffffffbf000000", @ANYRES32=r10, @ANYRESHEX=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20022000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="e75e21706035bdb52f22c83c529444a10d2f91daaacfc0ca0e5fb106c0311f4247f946007e526edbae1bdbab5796f3dae5494cc40e6474a4298d73d78bedd29a5ef8fa671a6e35a74c5df9d84b30ceb398136910d4235b927a65ab1114c2584bee5fdb033fd52a71ab823b67450c1e0a329d189b2b6a49aa42494367145689a25e50aed2dd55c92fa24d8975073f812e8d0e9b32ce668b245a60dd08280b88688be42b152796038c66327f1cb8b3361638cdb2a285a24000466fa72069513afe7b2556577a"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 277.283418][ T5244] loop2: detected capacity change from 0 to 4 [ 277.314134][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5250 comm=syz-executor.4 16:09:00 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 277.337147][ T5252] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 277.345288][ T5252] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 277.356941][ T5244] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 277.376830][ T5256] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 277.387158][ T5256] CPU: 1 PID: 5256 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 277.398167][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.408222][ T5256] Call Trace: [ 277.411585][ T5256] [ 277.414516][ T5256] dump_stack_lvl+0xd6/0x122 [ 277.419110][ T5256] dump_stack+0x11/0x1b [ 277.423308][ T5256] dump_header+0x98/0x410 [ 277.427663][ T5256] out_of_memory+0x65c/0x8c0 [ 277.432256][ T5256] memory_max_write+0x32c/0x3d0 [ 277.437110][ T5256] ? memory_max_show+0x70/0x70 [ 277.441932][ T5256] cgroup_file_write+0x161/0x300 [ 277.446895][ T5256] ? __check_object_size+0x22a/0x2d0 [ 277.452188][ T5256] ? cgroup_seqfile_stop+0x70/0x70 [ 277.457358][ T5256] kernfs_fop_write_iter+0x1d3/0x2d0 [ 277.462645][ T5256] do_iter_readv_writev+0x2de/0x380 [ 277.467906][ T5256] do_iter_write+0x192/0x5c0 [ 277.472545][ T5256] ? splice_from_pipe_next+0x34f/0x3b0 [ 277.478111][ T5256] ? kmalloc_array+0x2d/0x40 [ 277.482719][ T5256] vfs_iter_write+0x4c/0x70 [ 277.487228][ T5256] iter_file_splice_write+0x43a/0x790 [ 277.492700][ T5256] ? splice_from_pipe+0xd0/0xd0 [ 277.497560][ T5256] direct_splice_actor+0x80/0xa0 [ 277.502516][ T5256] splice_direct_to_actor+0x345/0x650 [ 277.507900][ T5256] ? do_splice_direct+0x190/0x190 [ 277.513025][ T5256] do_splice_direct+0x106/0x190 [ 277.517981][ T5256] do_sendfile+0x675/0xc40 [ 277.522403][ T5256] __x64_sys_sendfile64+0x102/0x140 [ 277.527615][ T5256] do_syscall_64+0x44/0xd0 [ 277.532142][ T5256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.538047][ T5256] RIP: 0033:0x7f8a9bb9b059 [ 277.542461][ T5256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 277.562056][ T5256] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 277.570457][ T5256] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 277.578411][ T5256] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 277.586470][ T5256] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 277.594430][ T5256] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 277.602384][ T5256] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 277.610407][ T5256] [ 277.613678][ T5256] memory: usage 44kB, limit 0kB, failcnt 325 [ 277.619672][ T5256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 277.626535][ T5256] Memory cgroup stats for /syz1: [ 277.643779][ T5256] anon 0 [ 277.643779][ T5256] file 24576 [ 277.643779][ T5256] kernel_stack 0 [ 277.643779][ T5256] pagetables 0 [ 277.643779][ T5256] percpu 0 [ 277.643779][ T5256] sock 0 [ 277.643779][ T5256] vmalloc 0 [ 277.643779][ T5256] shmem 24576 [ 277.643779][ T5256] file_mapped 24576 [ 277.643779][ T5256] file_dirty 0 [ 277.643779][ T5256] file_writeback 0 [ 277.643779][ T5256] swapcached 0 [ 277.643779][ T5256] inactive_anon 0 [ 277.643779][ T5256] active_anon 24576 [ 277.643779][ T5256] inactive_file 0 [ 277.643779][ T5256] active_file 0 [ 277.643779][ T5256] unevictable 0 [ 277.643779][ T5256] slab_reclaimable 4400 [ 277.643779][ T5256] slab_unreclaimable 13400 [ 277.643779][ T5256] slab 17800 [ 277.643779][ T5256] workingset_refault_anon 0 [ 277.643779][ T5256] workingset_refault_file 1 [ 277.643779][ T5256] workingset_activate_anon 0 [ 277.643779][ T5256] workingset_activate_file 0 [ 277.643779][ T5256] workingset_restore_anon 0 [ 277.737311][ T5256] Out of memory and no killable processes... [ 277.926758][ T2501] device hsr_slave_0 left promiscuous mode [ 277.932943][ T2501] device hsr_slave_1 left promiscuous mode [ 277.939608][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.947030][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.954607][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.962027][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.969733][ T2501] device bridge_slave_1 left promiscuous mode [ 277.975989][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.983421][ T2501] device bridge_slave_0 left promiscuous mode [ 277.989598][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.998836][ T2501] device veth1_macvtap left promiscuous mode [ 278.004838][ T2501] device veth0_macvtap left promiscuous mode [ 278.010820][ T2501] device veth1_vlan left promiscuous mode [ 278.016636][ T2501] device veth0_vlan left promiscuous mode [ 278.100730][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 278.110448][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 278.120768][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.131912][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.159941][ T2501] bond0 (unregistering): Released all slaves [ 278.863629][ T5258] chnl_net:caif_netlink_parms(): no params data found [ 278.892423][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.899669][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.907306][ T5258] device bridge_slave_0 entered promiscuous mode [ 278.915017][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.922182][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.929861][ T5258] device bridge_slave_1 entered promiscuous mode [ 278.945132][ T5258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.955306][ T5258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.973797][ T5258] team0: Port device team_slave_0 added [ 278.980370][ T5258] team0: Port device team_slave_1 added [ 278.994209][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.001176][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.027176][ T5258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.038131][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.045066][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.070993][ T5258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.092241][ T5258] device hsr_slave_0 entered promiscuous mode [ 279.099125][ T5258] device hsr_slave_1 entered promiscuous mode [ 279.105443][ T5258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.112969][ T5258] Cannot create hsr debugfs directory [ 279.141497][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.148538][ T5258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.155792][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.162833][ T5258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.191863][ T5258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.203668][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.211896][ T1891] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.219869][ T1891] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.232017][ T5258] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.240322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.249533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.257907][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.264927][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.275369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.283954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.293295][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.300347][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.315139][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.323711][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.332731][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.341274][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.350236][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.358768][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.367770][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.376109][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.386229][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.396151][ T5258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.407019][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.415327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.423555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.436270][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.443611][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.453885][ T5258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.529129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.538827][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.575720][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.583917][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.593346][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.601188][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.609130][ T5258] device veth0_vlan entered promiscuous mode [ 279.619030][ T5258] device veth1_vlan entered promiscuous mode [ 279.632586][ T5258] device veth0_macvtap entered promiscuous mode [ 279.640605][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.648740][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.656740][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.665516][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.674082][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.683078][ T5258] device veth1_macvtap entered promiscuous mode [ 279.695265][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.705789][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.715627][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.726080][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.735882][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.746365][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.756162][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.766587][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.776418][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.786821][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.797828][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.806827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.814970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.823366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.833807][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.844309][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.854177][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.864588][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.874393][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.884801][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.894626][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.905062][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.914953][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.925411][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.937071][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.945341][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.954138][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:09:03 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:03 executing program 3: syz_emit_ethernet(0x102, &(0x7f0000000000)={@local, @multicast, @void, {@generic={0x9, "34f6e7bda6d06bcc248cdc5ed7d3967d23ca770ce1e0821dc252c518093619df547476a6a4879911ba2111df439e4c855e6bc9e915351ab5b7c7ea32aae87bb3ccfafe113f98a33706c9d9aac414c0a11ba279e79389bb7e6c9b9c438cb7418bae9033599fb071ad237d3cb5b6449457be13fcbe7276df0fb26c0d13420f3ca9f331840bba6097e3212800cbb00275742fd17e5a618678756449a429f3e27a56227db202c985b80597845a7c621f7df18d010e51b799eb4c3343416f87566bfb1846d126a06bf741db27bf62c934d11e831d172f79f2934ce82f7a7c3fc60cd75525982a5ceb2258157b3f7b05a81a3f80cc132a"}}}, 0x0) 16:09:03 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket(0x10, 0x804, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000140)="376974e38fa8c95bde2624c2cff6d58fee2fae67da5923c7587109544accdd4911c86e0799705e25112d9cac814e45062cffe9311fbb7e360e23d078e3b7cf3549a2fdd08dda832be52fe0e5bf05d90cae69cf312005393fda76d9cebb9d4eea4bee32a46bdc2dd68e1052321e9d0fafcc7eec96945e9f743d4fe3951c02e3a9aed1a2cc5115f44ae6a6f17f793161", 0x8f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x20, 0x0, 0x0, 0x19, @dev, @local}}) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000080)=0x47c, 0x4) 16:09:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x64, 0x58, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x4008000) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r9 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00e1ff0f000104004755ffffffffffbf000000", @ANYRES32=r10, @ANYRESHEX=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20022000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="e75e21706035bdb52f22c83c529444a10d2f91daaacfc0ca0e5fb106c0311f4247f946007e526edbae1bdbab5796f3dae5494cc40e6474a4298d73d78bedd29a5ef8fa671a6e35a74c5df9d84b30ceb398136910d4235b927a65ab1114c2584bee5fdb033fd52a71ab823b67450c1e0a329d189b2b6a49aa42494367145689a25e50aed2dd55c92fa24d8975073f812e8d0e9b32ce668b245a60dd08280b88688be42b152796038c66327f1cb8b3361638cdb2a285a24000466fa72069513afe7b2556577a"], 0x4c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) (rerun: 32) 16:09:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:03 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 280.176673][ T5300] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 280.185017][ T5300] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 280.196060][ T5310] loop2: detected capacity change from 0 to 4 [ 280.212314][ T5300] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000934916b37efa904d8020dbb8dc73b8f400000000000000aa0000883e000c907801100000a3eb2fefee80eeff52c418905e7accca89a08b4199eef42369bdd9c0501a655bedd6fbe748a46098cce8ecf0d4d51df5063191c97d989bafe5fc5fb1851e0208260c5aef1bc8a0dbffdab49e2b118e435aa87a6fdf0805bd6449600b83d52695fb8ea6559e883218be9f"], 0x0) [ 280.220594][ T5300] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 280.228990][ T5310] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 280.248397][ T5305] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 280.258611][ T5305] CPU: 0 PID: 5305 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000934916b37efa904d8020dbb8dc73b8f400000000000000aa0000883e000c907801100000a3eb2fefee80eeff52c418905e7accca89a08b4199eef42369bdd9c0501a655bedd6fbe748a46098cce8ecf0d4d51df5063191c97d989bafe5fc5fb1851e0208260c5aef1bc8a0dbffdab49e2b118e435aa87a6fdf0805bd6449600b83d52695fb8ea6559e883218be9f"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000934916b37efa904d8020dbb8dc73b8f400000000000000aa0000883e000c907801100000a3eb2fefee80eeff52c418905e7accca89a08b4199eef42369bdd9c0501a655bedd6fbe748a46098cce8ecf0d4d51df5063191c97d989bafe5fc5fb1851e0208260c5aef1bc8a0dbffdab49e2b118e435aa87a6fdf0805bd6449600b83d52695fb8ea6559e883218be9f"], 0x0) (async) 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000934916b37efa904d8020dbb8dc73b8f400000000000000aa0000883e000c907801100000a3eb2fefee80eeff52c418905e7accca89a08b4199eef42369bdd9c0501a655bedd6fbe748a46098cce8ecf0d4d51df5063191c97d989bafe5fc5fb1851e0208260c5aef1bc8a0dbffdab49e2b118e435aa87a6fdf0805bd6449600b83d52695fb8ea6559e883218be9f"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000934916b37efa904d8020dbb8dc73b8f400000000000000aa0000883e000c907801100000a3eb2fefee80eeff52c418905e7accca89a08b4199eef42369bdd9c0501a655bedd6fbe748a46098cce8ecf0d4d51df5063191c97d989bafe5fc5fb1851e0208260c5aef1bc8a0dbffdab49e2b118e435aa87a6fdf0805bd6449600b83d52695fb8ea6559e883218be9f"], 0x0) (async) [ 280.269550][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.279636][ T5305] Call Trace: [ 280.282932][ T5305] [ 280.285861][ T5305] dump_stack_lvl+0xd6/0x122 [ 280.290461][ T5305] dump_stack+0x11/0x1b [ 280.294621][ T5305] dump_header+0x98/0x410 [ 280.298948][ T5305] oom_kill_process+0x18e/0x4a0 [ 280.303894][ T5305] out_of_memory+0x61d/0x8c0 [ 280.305510][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.308490][ T5305] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 280.308516][ T5305] memory_max_write+0x32c/0x3d0 [ 280.332033][ T5305] ? memory_max_show+0x70/0x70 [ 280.336822][ T5305] cgroup_file_write+0x161/0x300 [ 280.338927][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.341775][ T5305] ? __check_object_size+0x22a/0x2d0 [ 280.341803][ T5305] ? cgroup_seqfile_stop+0x70/0x70 [ 280.363725][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.364792][ T5305] kernfs_fop_write_iter+0x1d3/0x2d0 [ 280.364819][ T5305] do_iter_readv_writev+0x2de/0x380 [ 280.364843][ T5305] do_iter_write+0x192/0x5c0 [ 280.364910][ T5305] ? splice_from_pipe_next+0x34f/0x3b0 [ 280.379192][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.382927][ T5305] ? kmalloc_array+0x2d/0x40 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) [ 280.389835][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.393381][ T5305] vfs_iter_write+0x4c/0x70 [ 280.393405][ T5305] iter_file_splice_write+0x43a/0x790 [ 280.393443][ T5305] ? splice_from_pipe+0xd0/0xd0 [ 280.393465][ T5305] direct_splice_actor+0x80/0xa0 [ 280.393488][ T5305] splice_direct_to_actor+0x345/0x650 [ 280.393523][ T5305] ? do_splice_direct+0x190/0x190 [ 280.400676][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.411746][ T5305] do_splice_direct+0x106/0x190 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) 16:09:03 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) [ 280.418390][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.429018][ T5305] do_sendfile+0x675/0xc40 [ 280.433906][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5299 comm=syz-executor.4 [ 280.438903][ T5305] __x64_sys_sendfile64+0x102/0x140 [ 280.511490][ T5305] do_syscall_64+0x44/0xd0 [ 280.515956][ T5305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.521920][ T5305] RIP: 0033:0x7f8a9bb9b059 [ 280.526452][ T5305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 280.546045][ T5305] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.554602][ T5305] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 280.562585][ T5305] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 280.570534][ T5305] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 280.578485][ T5305] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 280.586489][ T5305] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 280.594504][ T5305] [ 280.597729][ T5305] memory: usage 6536kB, limit 0kB, failcnt 344 [ 280.603890][ T5305] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 280.610801][ T5305] Memory cgroup stats for /syz1: [ 280.611309][ T5305] anon 139264 [ 280.611309][ T5305] file 24576 [ 280.611309][ T5305] kernel_stack 32768 [ 280.611309][ T5305] pagetables 98304 [ 280.611309][ T5305] percpu 0 [ 280.611309][ T5305] sock 0 [ 280.611309][ T5305] vmalloc 0 [ 280.611309][ T5305] shmem 24576 [ 280.611309][ T5305] file_mapped 24576 [ 280.611309][ T5305] file_dirty 0 [ 280.611309][ T5305] file_writeback 0 [ 280.611309][ T5305] swapcached 0 [ 280.611309][ T5305] inactive_anon 139264 [ 280.611309][ T5305] active_anon 24576 [ 280.611309][ T5305] inactive_file 0 [ 280.611309][ T5305] active_file 0 [ 280.611309][ T5305] unevictable 0 [ 280.611309][ T5305] slab_reclaimable 17624 [ 280.611309][ T5305] slab_unreclaimable 56272 [ 280.611309][ T5305] slab 73896 [ 280.611309][ T5305] workingset_refault_anon 0 [ 280.611309][ T5305] workingset_refault_file 1 [ 280.611309][ T5305] workingset_activate_anon 0 [ 280.611309][ T5305] workingset_activate_file 0 [ 280.611309][ T5305] workingset_restore_anon 0 [ 280.706245][ T5305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5293,uid=0 [ 280.721440][ T5305] Memory cgroup out of memory: Killed process 5293 (syz-executor.1) total-vm:54476kB, anon-rss:376kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 280.740264][ T26] oom_reaper: reaped process 5293 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 280.751330][ T5305] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 280.759014][ T5300] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 280.761617][ T5305] CPU: 0 PID: 5305 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 280.769563][ T5300] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 280.780423][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.780434][ T5305] Call Trace: [ 280.780439][ T5305] [ 280.780445][ T5305] dump_stack_lvl+0xd6/0x122 [ 280.809539][ T5305] dump_stack+0x11/0x1b [ 280.813705][ T5305] dump_header+0x98/0x410 [ 280.818103][ T5305] oom_kill_process+0x18e/0x4a0 [ 280.822979][ T5305] out_of_memory+0x61d/0x8c0 [ 280.827565][ T5305] memory_max_write+0x32c/0x3d0 [ 280.832420][ T5305] ? memory_max_show+0x70/0x70 [ 280.837231][ T5305] cgroup_file_write+0x161/0x300 [ 280.842163][ T5305] ? __check_object_size+0x22a/0x2d0 [ 280.847484][ T5305] ? cgroup_seqfile_stop+0x70/0x70 [ 280.852759][ T5305] kernfs_fop_write_iter+0x1d3/0x2d0 [ 280.858052][ T5305] do_iter_readv_writev+0x2de/0x380 [ 280.863293][ T5305] do_iter_write+0x192/0x5c0 [ 280.867942][ T5305] ? splice_from_pipe_next+0x34f/0x3b0 [ 280.873398][ T5305] ? kmalloc_array+0x2d/0x40 [ 280.878053][ T5305] vfs_iter_write+0x4c/0x70 [ 280.882550][ T5305] iter_file_splice_write+0x43a/0x790 [ 280.887924][ T5305] ? splice_from_pipe+0xd0/0xd0 [ 280.892803][ T5305] direct_splice_actor+0x80/0xa0 [ 280.897842][ T5305] splice_direct_to_actor+0x345/0x650 [ 280.903224][ T5305] ? do_splice_direct+0x190/0x190 [ 280.908306][ T5305] do_splice_direct+0x106/0x190 [ 280.913161][ T5305] do_sendfile+0x675/0xc40 [ 280.917576][ T5305] __x64_sys_sendfile64+0x102/0x140 [ 280.922805][ T5305] do_syscall_64+0x44/0xd0 [ 280.927217][ T5305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.933110][ T5305] RIP: 0033:0x7f8a9bb9b059 [ 280.937522][ T5305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 280.957122][ T5305] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.965533][ T5305] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 280.973538][ T5305] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 280.981501][ T5305] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 280.989464][ T5305] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 280.997435][ T5305] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 281.005582][ T5305] [ 281.008655][ T5305] memory: usage 6416kB, limit 0kB, failcnt 500 [ 281.014901][ T5305] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.021786][ T5305] Memory cgroup stats for /syz1: [ 281.027315][ T5305] anon 36864 [ 281.027315][ T5305] file 24576 [ 281.027315][ T5305] kernel_stack 16384 [ 281.027315][ T5305] pagetables 98304 [ 281.027315][ T5305] percpu 0 [ 281.027315][ T5305] sock 0 [ 281.027315][ T5305] vmalloc 0 [ 281.027315][ T5305] shmem 24576 [ 281.027315][ T5305] file_mapped 24576 [ 281.027315][ T5305] file_dirty 0 [ 281.027315][ T5305] file_writeback 0 [ 281.027315][ T5305] swapcached 0 [ 281.027315][ T5305] inactive_anon 36864 [ 281.027315][ T5305] active_anon 24576 [ 281.027315][ T5305] inactive_file 0 [ 281.027315][ T5305] active_file 0 [ 281.027315][ T5305] unevictable 0 [ 281.027315][ T5305] slab_reclaimable 12048 [ 281.027315][ T5305] slab_unreclaimable 58384 [ 281.027315][ T5305] slab 70432 [ 281.027315][ T5305] workingset_refault_anon 0 [ 281.027315][ T5305] workingset_refault_file 1 [ 281.027315][ T5305] workingset_activate_anon 0 [ 281.027315][ T5305] workingset_activate_file 0 [ 281.027315][ T5305] workingset_restore_anon 0 [ 281.122193][ T5305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5258,uid=0 [ 281.137400][ T5305] Memory cgroup out of memory: Killed process 5258 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 281.156252][ T26] oom_reaper: reaped process 5258 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB 16:09:04 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:04 executing program 3: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0xc2d1}) syz_emit_ethernet(0xbf, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f100892f00fe800000000000000000000000000000fe8000000000000000000000000000aa6c040109000000000000000000000000000000000000000100000000070000000000ffff7f0000010000883e0061907801100000bae907ff63232209e1e5a5e39a03f3bdacce0376ad3b3a8f413c6f4c4631de6d154a0aea28fc3d483a20eb03c68e9712001cf3059eea32d3e2dd2fa2b64405543b54c84342b92a2235c13d8e61a944a384f150d9c4"], 0x0) 16:09:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, 0x0) 16:09:04 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:04 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:04 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, 0x0) 16:09:04 executing program 3: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0xc2d1}) (async) syz_emit_ethernet(0xbf, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f100892f00fe800000000000000000000000000000fe8000000000000000000000000000aa6c040109000000000000000000000000000000000000000100000000070000000000ffff7f0000010000883e0061907801100000bae907ff63232209e1e5a5e39a03f3bdacce0376ad3b3a8f413c6f4c4631de6d154a0aea28fc3d483a20eb03c68e9712001cf3059eea32d3e2dd2fa2b64405543b54c84342b92a2235c13d8e61a944a384f150d9c4"], 0x0) [ 281.416785][ T5331] loop2: detected capacity change from 0 to 4 [ 281.436752][ T5336] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 281.447014][ T5336] CPU: 0 PID: 5336 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 16:09:04 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:04 executing program 3: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0xc2d1}) syz_emit_ethernet(0xbf, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f100892f00fe800000000000000000000000000000fe8000000000000000000000000000aa6c040109000000000000000000000000000000000000000100000000070000000000ffff7f0000010000883e0061907801100000bae907ff63232209e1e5a5e39a03f3bdacce0376ad3b3a8f413c6f4c4631de6d154a0aea28fc3d483a20eb03c68e9712001cf3059eea32d3e2dd2fa2b64405543b54c84342b92a2235c13d8e61a944a384f150d9c4"], 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0xc2d1}) (async) syz_emit_ethernet(0xbf, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f100892f00fe800000000000000000000000000000fe8000000000000000000000000000aa6c040109000000000000000000000000000000000000000100000000070000000000ffff7f0000010000883e0061907801100000bae907ff63232209e1e5a5e39a03f3bdacce0376ad3b3a8f413c6f4c4631de6d154a0aea28fc3d483a20eb03c68e9712001cf3059eea32d3e2dd2fa2b64405543b54c84342b92a2235c13d8e61a944a384f150d9c4"], 0x0) (async) [ 281.457982][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.468065][ T5336] Call Trace: [ 281.471508][ T5336] [ 281.474431][ T5336] dump_stack_lvl+0xd6/0x122 [ 281.479066][ T5336] dump_stack+0x11/0x1b [ 281.483284][ T5336] dump_header+0x98/0x410 [ 281.487635][ T5336] out_of_memory+0x65c/0x8c0 [ 281.492312][ T5336] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 281.498140][ T5336] memory_max_write+0x32c/0x3d0 [ 281.503009][ T5336] ? memory_max_show+0x70/0x70 [ 281.507781][ T5336] cgroup_file_write+0x161/0x300 [ 281.512725][ T5336] ? __check_object_size+0x22a/0x2d0 [ 281.518085][ T5336] ? cgroup_seqfile_stop+0x70/0x70 [ 281.523196][ T5336] kernfs_fop_write_iter+0x1d3/0x2d0 [ 281.528550][ T5336] do_iter_readv_writev+0x2de/0x380 [ 281.533775][ T5336] do_iter_write+0x192/0x5c0 [ 281.538412][ T5336] ? splice_from_pipe_next+0x34f/0x3b0 [ 281.543906][ T5336] ? kmalloc_array+0x2d/0x40 [ 281.548521][ T5336] vfs_iter_write+0x4c/0x70 [ 281.553027][ T5336] iter_file_splice_write+0x43a/0x790 [ 281.558440][ T5336] ? splice_from_pipe+0xd0/0xd0 [ 281.563344][ T5336] direct_splice_actor+0x80/0xa0 [ 281.568285][ T5336] splice_direct_to_actor+0x345/0x650 [ 281.573716][ T5336] ? do_splice_direct+0x190/0x190 [ 281.578756][ T5336] do_splice_direct+0x106/0x190 [ 281.583619][ T5336] do_sendfile+0x675/0xc40 [ 281.588071][ T5336] __x64_sys_sendfile64+0x102/0x140 [ 281.593275][ T5336] do_syscall_64+0x44/0xd0 [ 281.597731][ T5336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.603670][ T5336] RIP: 0033:0x7f8a9bb9b059 [ 281.608150][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 281.627770][ T5336] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 281.636185][ T5336] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 281.644214][ T5336] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 281.652182][ T5336] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 281.660149][ T5336] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 16:09:05 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x154, 0xab, "eab8", "f3d587", 0x886c, "86fe0c7b7acab2ef80605a71701d404677b27104ae571431c0744a649b93024ac7ee19016bd573d75150661359dc4309a080b73d3d8dd73b3c698f78875c40422a126fcc692957fa6675420966cd2b63541ba3e1bd33fe79c49dcaded6841b1092a7d689e7e1a6e089ec4adfd848a1ad8de88af2c46c8017977e26e51077a5ab91ba504b2c3b79e758b16991a06c2122b99b3dd35e21061829cc425f68c2308be2bc72f954147c9c1d76e536071b6253d55ecabf693b5914b738ac2b6f0b91400124b4b74cb3e234da2e037f5927"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0x406, 0x398, 0x47d, 0xbaa]}) [ 281.668117][ T5336] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 281.676110][ T5336] [ 281.679233][ T5336] memory: usage 48kB, limit 0kB, failcnt 894 [ 281.685219][ T5336] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.692055][ T5336] Memory cgroup stats for /syz1: [ 281.698991][ T5336] anon 0 [ 281.698991][ T5336] file 24576 [ 281.698991][ T5336] kernel_stack 0 [ 281.698991][ T5336] pagetables 0 [ 281.698991][ T5336] percpu 0 [ 281.698991][ T5336] sock 0 [ 281.698991][ T5336] vmalloc 0 [ 281.698991][ T5336] shmem 24576 [ 281.698991][ T5336] file_mapped 24576 [ 281.698991][ T5336] file_dirty 0 [ 281.698991][ T5336] file_writeback 0 [ 281.698991][ T5336] swapcached 0 [ 281.698991][ T5336] inactive_anon 0 [ 281.698991][ T5336] active_anon 24576 [ 281.698991][ T5336] inactive_file 0 [ 281.698991][ T5336] active_file 0 [ 281.698991][ T5336] unevictable 0 [ 281.698991][ T5336] slab_reclaimable 5744 [ 281.698991][ T5336] slab_unreclaimable 13640 [ 281.698991][ T5336] slab 19384 [ 281.698991][ T5336] workingset_refault_anon 0 [ 281.698991][ T5336] workingset_refault_file 1 [ 281.698991][ T5336] workingset_activate_anon 0 [ 281.698991][ T5336] workingset_activate_file 0 [ 281.698991][ T5336] workingset_restore_anon 0 [ 281.792220][ T5336] Out of memory and no killable processes... [ 281.809717][ T5335] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 281.819951][ T5335] CPU: 1 PID: 5335 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 281.830940][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.840984][ T5335] Call Trace: [ 281.844247][ T5335] [ 281.847157][ T5335] dump_stack_lvl+0xd6/0x122 [ 281.851765][ T5335] dump_stack+0x11/0x1b [ 281.855987][ T5335] dump_header+0x98/0x410 [ 281.860298][ T5335] out_of_memory+0x65c/0x8c0 [ 281.864941][ T5335] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 281.870734][ T5335] memory_max_write+0x32c/0x3d0 [ 281.875572][ T5335] ? memory_max_show+0x70/0x70 [ 281.880394][ T5335] cgroup_file_write+0x161/0x300 [ 281.885322][ T5335] ? __check_object_size+0x22a/0x2d0 [ 281.890592][ T5335] ? cgroup_seqfile_stop+0x70/0x70 [ 281.895711][ T5335] kernfs_fop_write_iter+0x1d3/0x2d0 [ 281.900983][ T5335] do_iter_readv_writev+0x2de/0x380 [ 281.906178][ T5335] do_iter_write+0x192/0x5c0 [ 281.910750][ T5335] ? splice_from_pipe_next+0x34f/0x3b0 [ 281.916206][ T5335] ? kmalloc_array+0x2d/0x40 [ 281.920782][ T5335] vfs_iter_write+0x4c/0x70 [ 281.925317][ T5335] iter_file_splice_write+0x43a/0x790 [ 281.930678][ T5335] ? splice_from_pipe+0xd0/0xd0 [ 281.935568][ T5335] direct_splice_actor+0x80/0xa0 [ 281.940528][ T5335] splice_direct_to_actor+0x345/0x650 [ 281.945898][ T5335] ? do_splice_direct+0x190/0x190 [ 281.950988][ T5335] do_splice_direct+0x106/0x190 [ 281.955854][ T5335] do_sendfile+0x675/0xc40 [ 281.960685][ T5335] __x64_sys_sendfile64+0x102/0x140 [ 281.965872][ T5335] do_syscall_64+0x44/0xd0 [ 281.970275][ T5335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.976229][ T5335] RIP: 0033:0x7efc3b498059 [ 281.980626][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 282.000281][ T5335] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 282.008702][ T5335] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 16:09:05 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x154, 0xab, "eab8", "f3d587", 0x886c, "86fe0c7b7acab2ef80605a71701d404677b27104ae571431c0744a649b93024ac7ee19016bd573d75150661359dc4309a080b73d3d8dd73b3c698f78875c40422a126fcc692957fa6675420966cd2b63541ba3e1bd33fe79c49dcaded6841b1092a7d689e7e1a6e089ec4adfd848a1ad8de88af2c46c8017977e26e51077a5ab91ba504b2c3b79e758b16991a06c2122b99b3dd35e21061829cc425f68c2308be2bc72f954147c9c1d76e536071b6253d55ecabf693b5914b738ac2b6f0b91400124b4b74cb3e234da2e037f5927"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0x406, 0x398, 0x47d, 0xbaa]}) [ 282.016653][ T5335] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 282.024606][ T5335] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 282.032558][ T5335] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 282.040558][ T5335] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 282.048516][ T5335] [ 282.051556][ T5335] memory: usage 44kB, limit 0kB, failcnt 894 [ 282.057589][ T5335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:09:05 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x154, 0xab, "eab8", "f3d587", 0x886c, "86fe0c7b7acab2ef80605a71701d404677b27104ae571431c0744a649b93024ac7ee19016bd573d75150661359dc4309a080b73d3d8dd73b3c698f78875c40422a126fcc692957fa6675420966cd2b63541ba3e1bd33fe79c49dcaded6841b1092a7d689e7e1a6e089ec4adfd848a1ad8de88af2c46c8017977e26e51077a5ab91ba504b2c3b79e758b16991a06c2122b99b3dd35e21061829cc425f68c2308be2bc72f954147c9c1d76e536071b6253d55ecabf693b5914b738ac2b6f0b91400124b4b74cb3e234da2e037f5927"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0x406, 0x398, 0x47d, 0xbaa]}) 16:09:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:05 executing program 3: syz_emit_ethernet(0xa5, &(0x7f0000000000)={@random="aa66ad9d95cd", @random="76717b9b40f5", @val={@val, {0x8100, 0x3, 0x1, 0x4}}, {@x25={0x805, {0x2, 0x3, 0xf, "42167cfb5ea6f2a44980816d103724ee9edeaae48ee91601a9210a7ff6b932754a3818763b9059489538b79cb21676818ac44772ceb4fa06f95b5efcb4a6d76aa48274ea8f41434b3cbada8aa47fba6c6472c2d5b705cd371652ce26308948d6a116dc50650b375f9c6e6f33ef8abd4ef2a876c053038ee007850e95f70bbf55069f4882e8e7fbfb061d2941"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x554, 0x77c, 0xfd0, 0x82e]}) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0xa, 0x2, 0x0, 0x0, "679a24b05f3365e38ca02c7b21c006f1156ba4246d1bb2940c37abd35920d72ed2f88f9dfa8c0b443869532ea9c323d3defff6abd696f5fd4471995ac8a69496"}}}}, 0x0) syz_emit_ethernet(0x2c2, &(0x7f00000001c0)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x14, 0x4, 0x1, 0xb, 0x2b0, 0x65, 0x0, 0xff, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x13, 0x1a, [@multicast1, @empty, @rand_addr=0x64010102, @loopback]}, @noop, @rr={0x7, 0x27, 0x73, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @multicast2, @broadcast, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf1, 0x0, [0x8, 0x20], "55257dc80000390ee87a0f8d4e529aeb651a7b73a8644dbcc052923bf3b2059f4e5a8265699bbcfb4af69516dae59f4a38185cb0c56c993fdc4ebd403e51bcecd8364fc0e9ec79159f2891f94ced2aecb410c240447a9871af73a43d098b809e4edbae50619788a196caa2b03fedd3e88d929838da8c7520d0fa536169780a15d929c638ee3c1e32fc4f1ca63ce6b0a2663441559ca895da218d8568dd07c48dabcb4c4d8396002b6b2bdfbd37130565ea4f6e47771f6f870424149ee3874f71b01359ef5c221a39f0a8233d06ec08d509c50d42df82b3f4011723cad7688f97562a3b6312a2350bc778389774433aa860"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x8, 0x3f], "4a5181951c6cc9f35aa651cb4a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3], "3722c353bdf05ea0076b99ba086af4004eec146f5e"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x5, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x7, 0x20}, 0x2, {0x3d1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "690fc672b6a4d4d2179867f379c9998ea67d203d88c72228bcdf91c11b9f612c3cebe99391f325207b0a209b8f316ab9a139de5a7effeab2cbb3ed67e4472c20d144778dda093b69c04b286b89eb577be54e4941fa850d0aea85d3cf8a0a851715f413171987c5ed00418246465c9743ac94fdeed41e30cf3f70d420000000c6cae7493fc08cc9751aca15eb5f7a244689c1fbe764548a6eadebb01aab38ba78f6ee92aab790f0d4a545a978bf6d8e944f86dd6cebd2a6cbf68fdb66d58ac0c4ef22b93725fa27550b8b2ec1e803f1cf843097598a1f6ebbfd8945020efaeeb60f61822ecc0e8079451495b3e37bb2c30731b87c000000000000000000"}}}}}}, &(0x7f0000000180)={0x1, 0x20004, [0x1d0, 0x4f9, 0x64b, 0xec2]}) 16:09:05 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:05 executing program 3: syz_emit_ethernet(0xa5, &(0x7f0000000000)={@random="aa66ad9d95cd", @random="76717b9b40f5", @val={@val, {0x8100, 0x3, 0x1, 0x4}}, {@x25={0x805, {0x2, 0x3, 0xf, "42167cfb5ea6f2a44980816d103724ee9edeaae48ee91601a9210a7ff6b932754a3818763b9059489538b79cb21676818ac44772ceb4fa06f95b5efcb4a6d76aa48274ea8f41434b3cbada8aa47fba6c6472c2d5b705cd371652ce26308948d6a116dc50650b375f9c6e6f33ef8abd4ef2a876c053038ee007850e95f70bbf55069f4882e8e7fbfb061d2941"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x554, 0x77c, 0xfd0, 0x82e]}) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0xa, 0x2, 0x0, 0x0, "679a24b05f3365e38ca02c7b21c006f1156ba4246d1bb2940c37abd35920d72ed2f88f9dfa8c0b443869532ea9c323d3defff6abd696f5fd4471995ac8a69496"}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2c2, &(0x7f00000001c0)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x14, 0x4, 0x1, 0xb, 0x2b0, 0x65, 0x0, 0xff, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x13, 0x1a, [@multicast1, @empty, @rand_addr=0x64010102, @loopback]}, @noop, @rr={0x7, 0x27, 0x73, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @multicast2, @broadcast, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf1, 0x0, [0x8, 0x20], "55257dc80000390ee87a0f8d4e529aeb651a7b73a8644dbcc052923bf3b2059f4e5a8265699bbcfb4af69516dae59f4a38185cb0c56c993fdc4ebd403e51bcecd8364fc0e9ec79159f2891f94ced2aecb410c240447a9871af73a43d098b809e4edbae50619788a196caa2b03fedd3e88d929838da8c7520d0fa536169780a15d929c638ee3c1e32fc4f1ca63ce6b0a2663441559ca895da218d8568dd07c48dabcb4c4d8396002b6b2bdfbd37130565ea4f6e47771f6f870424149ee3874f71b01359ef5c221a39f0a8233d06ec08d509c50d42df82b3f4011723cad7688f97562a3b6312a2350bc778389774433aa860"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x8, 0x3f], "4a5181951c6cc9f35aa651cb4a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3], "3722c353bdf05ea0076b99ba086af4004eec146f5e"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x5, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x7, 0x20}, 0x2, {0x3d1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "690fc672b6a4d4d2179867f379c9998ea67d203d88c72228bcdf91c11b9f612c3cebe99391f325207b0a209b8f316ab9a139de5a7effeab2cbb3ed67e4472c20d144778dda093b69c04b286b89eb577be54e4941fa850d0aea85d3cf8a0a851715f413171987c5ed00418246465c9743ac94fdeed41e30cf3f70d420000000c6cae7493fc08cc9751aca15eb5f7a244689c1fbe764548a6eadebb01aab38ba78f6ee92aab790f0d4a545a978bf6d8e944f86dd6cebd2a6cbf68fdb66d58ac0c4ef22b93725fa27550b8b2ec1e803f1cf843097598a1f6ebbfd8945020efaeeb60f61822ecc0e8079451495b3e37bb2c30731b87c000000000000000000"}}}}}}, &(0x7f0000000180)={0x1, 0x20004, [0x1d0, 0x4f9, 0x64b, 0xec2]}) (rerun: 32) [ 282.064457][ T5335] Memory cgroup stats for /syz1: [ 282.311871][ T4756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 282.326044][ T5361] loop2: detected capacity change from 0 to 4 [ 282.342354][ T5335] anon 0 [ 282.342354][ T5335] file 24576 [ 282.342354][ T5335] kernel_stack 0 [ 282.342354][ T5335] pagetables 0 [ 282.342354][ T5335] percpu 0 [ 282.342354][ T5335] sock 0 [ 282.342354][ T5335] vmalloc 0 [ 282.342354][ T5335] shmem 24576 [ 282.342354][ T5335] file_mapped 24576 [ 282.342354][ T5335] file_dirty 0 [ 282.342354][ T5335] file_writeback 0 [ 282.342354][ T5335] swapcached 0 [ 282.342354][ T5335] inactive_anon 0 [ 282.342354][ T5335] active_anon 24576 [ 282.342354][ T5335] inactive_file 0 [ 282.342354][ T5335] active_file 0 [ 282.342354][ T5335] unevictable 0 [ 282.342354][ T5335] slab_reclaimable 4400 [ 282.342354][ T5335] slab_unreclaimable 13400 [ 282.342354][ T5335] slab 17800 [ 282.342354][ T5335] workingset_refault_anon 0 [ 282.342354][ T5335] workingset_refault_file 1 [ 282.342354][ T5335] workingset_activate_anon 0 [ 282.342354][ T5335] workingset_activate_file 0 [ 282.342354][ T5335] workingset_restore_anon 0 [ 282.356623][ T4756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.430620][ T5335] Out of memory and no killable processes... [ 282.430656][ T5351] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 282.439763][ T4756] Buffer I/O error on dev loop2, logical block 0, async page read [ 282.445884][ T5351] CPU: 1 PID: 5351 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 282.475747][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.485799][ T5351] Call Trace: [ 282.489141][ T5351] [ 282.492072][ T5351] dump_stack_lvl+0xd6/0x122 [ 282.496673][ T5351] dump_stack+0x11/0x1b [ 282.500837][ T5351] dump_header+0x98/0x410 [ 282.505177][ T5351] out_of_memory+0x65c/0x8c0 [ 282.509868][ T5351] memory_max_write+0x32c/0x3d0 [ 282.514742][ T5351] ? memory_max_show+0x70/0x70 [ 282.519512][ T5351] cgroup_file_write+0x161/0x300 [ 282.524531][ T5351] ? __check_object_size+0x22a/0x2d0 [ 282.529824][ T5351] ? cgroup_seqfile_stop+0x70/0x70 [ 282.534947][ T5351] kernfs_fop_write_iter+0x1d3/0x2d0 [ 282.540240][ T5351] do_iter_readv_writev+0x2de/0x380 [ 282.545454][ T5351] do_iter_write+0x192/0x5c0 [ 282.550052][ T5351] ? splice_from_pipe_next+0x34f/0x3b0 [ 282.555584][ T5351] ? kmalloc_array+0x2d/0x40 [ 282.560240][ T5351] vfs_iter_write+0x4c/0x70 [ 282.564745][ T5351] iter_file_splice_write+0x43a/0x790 [ 282.570215][ T5351] ? splice_from_pipe+0xd0/0xd0 [ 282.575159][ T5351] direct_splice_actor+0x80/0xa0 [ 282.580185][ T5351] splice_direct_to_actor+0x345/0x650 [ 282.585570][ T5351] ? do_splice_direct+0x190/0x190 [ 282.590630][ T5351] do_splice_direct+0x106/0x190 [ 282.595553][ T5351] do_sendfile+0x675/0xc40 [ 282.599975][ T5351] __x64_sys_sendfile64+0x102/0x140 [ 282.605179][ T5351] do_syscall_64+0x44/0xd0 [ 282.609599][ T5351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.615496][ T5351] RIP: 0033:0x7f8a9bb9b059 [ 282.619906][ T5351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 282.639614][ T5351] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 282.648098][ T5351] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 282.656161][ T5351] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 282.664150][ T5351] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 282.666548][ T4756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.672181][ T5351] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 282.672195][ T5351] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 282.672212][ T5351] [ 282.681306][ T4756] Buffer I/O error on dev loop2, logical block 0, async page read [ 282.689487][ T5351] memory: usage 44kB, limit 0kB, failcnt 894 [ 282.714175][ T5351] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 282.721123][ T5351] Memory cgroup stats for /syz1: [ 282.728246][ T5351] anon 0 [ 282.728246][ T5351] file 24576 [ 282.728246][ T5351] kernel_stack 0 [ 282.728246][ T5351] pagetables 0 [ 282.728246][ T5351] percpu 0 [ 282.728246][ T5351] sock 0 [ 282.728246][ T5351] vmalloc 0 [ 282.728246][ T5351] shmem 24576 [ 282.728246][ T5351] file_mapped 24576 [ 282.728246][ T5351] file_dirty 0 [ 282.728246][ T5351] file_writeback 0 [ 282.728246][ T5351] swapcached 0 [ 282.728246][ T5351] inactive_anon 0 [ 282.728246][ T5351] active_anon 24576 [ 282.728246][ T5351] inactive_file 0 [ 282.728246][ T5351] active_file 0 [ 282.728246][ T5351] unevictable 0 [ 282.728246][ T5351] slab_reclaimable 4400 [ 282.728246][ T5351] slab_unreclaimable 13400 [ 282.728246][ T5351] slab 17800 [ 282.728246][ T5351] workingset_refault_anon 0 [ 282.728246][ T5351] workingset_refault_file 1 [ 282.728246][ T5351] workingset_activate_anon 0 16:09:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:06 executing program 3: syz_emit_ethernet(0xa5, &(0x7f0000000000)={@random="aa66ad9d95cd", @random="76717b9b40f5", @val={@val, {0x8100, 0x3, 0x1, 0x4}}, {@x25={0x805, {0x2, 0x3, 0xf, "42167cfb5ea6f2a44980816d103724ee9edeaae48ee91601a9210a7ff6b932754a3818763b9059489538b79cb21676818ac44772ceb4fa06f95b5efcb4a6d76aa48274ea8f41434b3cbada8aa47fba6c6472c2d5b705cd371652ce26308948d6a116dc50650b375f9c6e6f33ef8abd4ef2a876c053038ee007850e95f70bbf55069f4882e8e7fbfb061d2941"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x554, 0x77c, 0xfd0, 0x82e]}) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0xa, 0x2, 0x0, 0x0, "679a24b05f3365e38ca02c7b21c006f1156ba4246d1bb2940c37abd35920d72ed2f88f9dfa8c0b443869532ea9c323d3defff6abd696f5fd4471995ac8a69496"}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2c2, &(0x7f00000001c0)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x14, 0x4, 0x1, 0xb, 0x2b0, 0x65, 0x0, 0xff, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x13, 0x1a, [@multicast1, @empty, @rand_addr=0x64010102, @loopback]}, @noop, @rr={0x7, 0x27, 0x73, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @multicast2, @broadcast, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf1, 0x0, [0x8, 0x20], "55257dc80000390ee87a0f8d4e529aeb651a7b73a8644dbcc052923bf3b2059f4e5a8265699bbcfb4af69516dae59f4a38185cb0c56c993fdc4ebd403e51bcecd8364fc0e9ec79159f2891f94ced2aecb410c240447a9871af73a43d098b809e4edbae50619788a196caa2b03fedd3e88d929838da8c7520d0fa536169780a15d929c638ee3c1e32fc4f1ca63ce6b0a2663441559ca895da218d8568dd07c48dabcb4c4d8396002b6b2bdfbd37130565ea4f6e47771f6f870424149ee3874f71b01359ef5c221a39f0a8233d06ec08d509c50d42df82b3f4011723cad7688f97562a3b6312a2350bc778389774433aa860"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x8, 0x3f], "4a5181951c6cc9f35aa651cb4a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3], "3722c353bdf05ea0076b99ba086af4004eec146f5e"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x5, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x7, 0x20}, 0x2, {0x3d1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}, &(0x7f0000000180)={0x1, 0x20004, [0x1d0, 0x4f9, 0x64b, 0xec2]}) (rerun: 32) 16:09:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, 0x0) [ 282.728246][ T5351] workingset_activate_file 0 [ 282.728246][ T5351] workingset_restore_anon 0 [ 282.821544][ T5351] Out of memory and no killable processes... [ 282.865766][ T5367] loop2: detected capacity change from 0 to 4 [ 282.880845][ T5369] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 282.891151][ T5369] CPU: 0 PID: 5369 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 282.902368][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.912424][ T5369] Call Trace: [ 282.915699][ T5369] [ 282.918621][ T5369] dump_stack_lvl+0xd6/0x122 [ 282.923240][ T5369] dump_stack+0x11/0x1b [ 282.927456][ T5369] dump_header+0x98/0x410 [ 282.931780][ T5369] out_of_memory+0x65c/0x8c0 [ 282.936545][ T5369] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 282.942379][ T5369] memory_max_write+0x32c/0x3d0 [ 282.947295][ T5369] ? memory_max_show+0x70/0x70 [ 282.952068][ T5369] cgroup_file_write+0x161/0x300 [ 282.957005][ T5369] ? __check_object_size+0x22a/0x2d0 [ 282.962291][ T5369] ? cgroup_seqfile_stop+0x70/0x70 [ 282.967423][ T5369] kernfs_fop_write_iter+0x1d3/0x2d0 [ 282.972830][ T5369] do_iter_readv_writev+0x2de/0x380 [ 282.978031][ T5369] do_iter_write+0x192/0x5c0 [ 282.982618][ T5369] ? splice_from_pipe_next+0x34f/0x3b0 [ 282.988084][ T5369] ? kmalloc_array+0x2d/0x40 [ 282.992709][ T5369] vfs_iter_write+0x4c/0x70 [ 282.997245][ T5369] iter_file_splice_write+0x43a/0x790 [ 283.002630][ T5369] ? splice_from_pipe+0xd0/0xd0 [ 283.007519][ T5369] direct_splice_actor+0x80/0xa0 [ 283.012462][ T5369] splice_direct_to_actor+0x345/0x650 [ 283.017894][ T5369] ? do_splice_direct+0x190/0x190 [ 283.022925][ T5369] do_splice_direct+0x106/0x190 [ 283.027813][ T5369] do_sendfile+0x675/0xc40 [ 283.032228][ T5369] __x64_sys_sendfile64+0x102/0x140 [ 283.037426][ T5369] do_syscall_64+0x44/0xd0 [ 283.041840][ T5369] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 283.047829][ T5369] RIP: 0033:0x7efc3b498059 [ 283.052236][ T5369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 283.071839][ T5369] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 283.080251][ T5369] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 283.088242][ T5369] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 283.096209][ T5369] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 283.104173][ T5369] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 283.112140][ T5369] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 283.120114][ T5369] [ 283.123146][ T5369] memory: usage 44kB, limit 0kB, failcnt 894 [ 283.129128][ T5369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.136012][ T5369] Memory cgroup stats for /syz1: [ 283.144137][ T5369] anon 0 [ 283.144137][ T5369] file 24576 [ 283.144137][ T5369] kernel_stack 0 [ 283.144137][ T5369] pagetables 0 [ 283.144137][ T5369] percpu 0 [ 283.144137][ T5369] sock 0 [ 283.144137][ T5369] vmalloc 0 [ 283.144137][ T5369] shmem 24576 [ 283.144137][ T5369] file_mapped 24576 [ 283.144137][ T5369] file_dirty 0 [ 283.144137][ T5369] file_writeback 0 [ 283.144137][ T5369] swapcached 0 [ 283.144137][ T5369] inactive_anon 0 [ 283.144137][ T5369] active_anon 24576 [ 283.144137][ T5369] inactive_file 0 [ 283.144137][ T5369] active_file 0 [ 283.144137][ T5369] unevictable 0 [ 283.144137][ T5369] slab_reclaimable 4400 [ 283.144137][ T5369] slab_unreclaimable 13400 [ 283.144137][ T5369] slab 17800 [ 283.144137][ T5369] workingset_refault_anon 0 [ 283.144137][ T5369] workingset_refault_file 1 [ 283.144137][ T5369] workingset_activate_anon 0 [ 283.144137][ T5369] workingset_activate_file 0 [ 283.144137][ T5369] workingset_restore_anon 0 [ 283.237339][ T5369] Out of memory and no killable processes... [ 283.276284][ T4756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 283.326164][ T2501] device hsr_slave_0 left promiscuous mode [ 283.332203][ T2501] device hsr_slave_1 left promiscuous mode [ 283.338748][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.346233][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.353768][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.361168][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.369465][ T2501] device bridge_slave_1 left promiscuous mode [ 283.375608][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.383156][ T2501] device bridge_slave_0 left promiscuous mode [ 283.389412][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.398760][ T2501] device veth1_macvtap left promiscuous mode [ 283.404905][ T2501] device veth0_macvtap left promiscuous mode [ 283.410916][ T2501] device veth1_vlan left promiscuous mode [ 283.416688][ T2501] device veth0_vlan left promiscuous mode [ 283.497734][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 283.508189][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 283.518131][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.529167][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.558522][ T2501] bond0 (unregistering): Released all slaves [ 283.836533][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 283.873992][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.881097][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.890046][ T5371] device bridge_slave_0 entered promiscuous mode [ 283.897427][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.904475][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.913350][ T5371] device bridge_slave_1 entered promiscuous mode [ 283.931408][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.941702][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.965679][ T5371] team0: Port device team_slave_0 added [ 283.972090][ T5371] team0: Port device team_slave_1 added [ 283.989605][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.996573][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.022566][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.033793][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.040774][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.066719][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.089901][ T5371] device hsr_slave_0 entered promiscuous mode [ 284.096506][ T5371] device hsr_slave_1 entered promiscuous mode [ 284.102780][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.110333][ T5371] Cannot create hsr debugfs directory [ 284.137941][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.144984][ T5371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.152235][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.159325][ T5371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.189044][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.199596][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.207741][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.215717][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.227738][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.237615][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.245986][ T2009] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.253023][ T2009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.263176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.271672][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.278710][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.296737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.305287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.313661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.325327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.333079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.341884][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.354107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.361516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.371304][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.444058][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.485903][ T5371] device veth0_vlan entered promiscuous mode [ 284.494292][ T5371] device veth1_vlan entered promiscuous mode [ 284.501797][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.510238][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.518139][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.525844][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.541194][ T5371] device veth0_macvtap entered promiscuous mode [ 284.548422][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.556764][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.565388][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.574517][ T5371] device veth1_macvtap entered promiscuous mode [ 284.586128][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.596580][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.606419][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.616874][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.626722][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.637207][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.647131][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.657543][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.667374][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.677789][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.689040][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.698291][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.708877][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.719419][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.729227][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.739702][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.749502][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.759928][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.769728][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.780209][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.790009][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.800416][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.811435][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.819985][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.828726][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:09:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:08 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="52a4785e7e8a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "a81ded6f6dfa56b5"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x8, 0xf6e, 0x956, 0xfbb]}) 16:09:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:08 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:08 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 285.051788][ T5412] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 285.062137][ T5412] CPU: 0 PID: 5412 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 285.073071][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.083154][ T5412] Call Trace: [ 285.086430][ T5412] [ 285.089358][ T5412] dump_stack_lvl+0xd6/0x122 [ 285.094004][ T5412] dump_stack+0x11/0x1b [ 285.098176][ T5412] dump_header+0x98/0x410 [ 285.102509][ T5412] oom_kill_process+0x18e/0x4a0 [ 285.107364][ T5412] out_of_memory+0x61d/0x8c0 [ 285.112014][ T5412] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 285.117830][ T5412] memory_max_write+0x32c/0x3d0 [ 285.122710][ T5412] ? memory_max_show+0x70/0x70 [ 285.127481][ T5412] cgroup_file_write+0x161/0x300 [ 285.132421][ T5412] ? __check_object_size+0x22a/0x2d0 [ 285.137846][ T5412] ? cgroup_seqfile_stop+0x70/0x70 [ 285.142956][ T5412] kernfs_fop_write_iter+0x1d3/0x2d0 [ 285.148243][ T5412] do_iter_readv_writev+0x2de/0x380 [ 285.153489][ T5412] do_iter_write+0x192/0x5c0 [ 285.158117][ T5412] ? splice_from_pipe_next+0x34f/0x3b0 [ 285.163588][ T5412] ? kmalloc_array+0x2d/0x40 [ 285.168203][ T5412] vfs_iter_write+0x4c/0x70 [ 285.172765][ T5412] iter_file_splice_write+0x43a/0x790 [ 285.178258][ T5412] ? splice_from_pipe+0xd0/0xd0 [ 285.183112][ T5412] direct_splice_actor+0x80/0xa0 [ 285.188095][ T5412] splice_direct_to_actor+0x345/0x650 [ 285.193486][ T5412] ? do_splice_direct+0x190/0x190 [ 285.198527][ T5412] do_splice_direct+0x106/0x190 [ 285.203380][ T5412] do_sendfile+0x675/0xc40 [ 285.207801][ T5412] __x64_sys_sendfile64+0x102/0x140 [ 285.213042][ T5412] do_syscall_64+0x44/0xd0 [ 285.217526][ T5412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 285.223495][ T5412] RIP: 0033:0x7f8a9bb9b059 [ 285.227907][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 285.247508][ T5412] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.255923][ T5412] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 285.263888][ T5412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 285.271852][ T5412] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 285.279820][ T5412] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 285.287783][ T5412] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 285.295818][ T5412] 16:09:08 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="52a4785e7e8a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "a81ded6f6dfa56b5"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x8, 0xf6e, 0x956, 0xfbb]}) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="52a4785e7e8a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "a81ded6f6dfa56b5"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x8, 0xf6e, 0x956, 0xfbb]}) (async) 16:09:08 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="52a4785e7e8a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "a81ded6f6dfa56b5"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x8, 0xf6e, 0x956, 0xfbb]}) 16:09:08 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffc, &(0x7f0000000300)={[0xa5a2]}, 0x8) r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @random="e96cbec7a39d"}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = memfd_create(&(0x7f0000000140)='ns/user\x00', 0x4) ppoll(&(0x7f0000000180)=[{r1, 0x8001}, {r0, 0x12}, {r0, 0x261}, {r7}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x4000]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x40002000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x1000}, {r3}, {r5, 0x2000}, {r1}, {0xffffffffffffffff, 0x10}], 0x6, &(0x7f0000000280), &(0x7f00000002c0)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x18}) 16:09:08 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffc, &(0x7f0000000300)={[0xa5a2]}, 0x8) r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @random="e96cbec7a39d"}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = memfd_create(&(0x7f0000000140)='ns/user\x00', 0x4) ppoll(&(0x7f0000000180)=[{r1, 0x8001}, {r0, 0x12}, {r0, 0x261}, {r7}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x4000]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x40002000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x1000}, {r3}, {r5, 0x2000}, {r1}, {0xffffffffffffffff, 0x10}], 0x6, &(0x7f0000000280), &(0x7f00000002c0)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x18}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffc, &(0x7f0000000300)={[0xa5a2]}, 0x8) (async) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @random="e96cbec7a39d"}, 0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) memfd_create(&(0x7f0000000140)='ns/user\x00', 0x4) (async) ppoll(&(0x7f0000000180)=[{r1, 0x8001}, {r0, 0x12}, {r0, 0x261}, {r7}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x4000]}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x40002000}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x1000}, {r3}, {r5, 0x2000}, {r1}, {0xffffffffffffffff, 0x10}], 0x6, &(0x7f0000000280), &(0x7f00000002c0)={[0x7]}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x18}) (async) [ 285.298976][ T5412] memory: usage 6268kB, limit 0kB, failcnt 901 [ 285.305177][ T5412] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.312027][ T5412] Memory cgroup stats for /syz1: [ 285.314837][ T5412] anon 32768 [ 285.314837][ T5412] file 24576 [ 285.314837][ T5412] kernel_stack 0 [ 285.314837][ T5412] pagetables 8192 [ 285.314837][ T5412] percpu 0 [ 285.314837][ T5412] sock 0 [ 285.314837][ T5412] vmalloc 0 [ 285.314837][ T5412] shmem 24576 [ 285.314837][ T5412] file_mapped 24576 [ 285.314837][ T5412] file_dirty 0 [ 285.314837][ T5412] file_writeback 0 [ 285.314837][ T5412] swapcached 0 [ 285.314837][ T5412] inactive_anon 32768 [ 285.314837][ T5412] active_anon 24576 [ 285.314837][ T5412] inactive_file 0 [ 285.314837][ T5412] active_file 0 [ 285.314837][ T5412] unevictable 0 [ 285.314837][ T5412] slab_reclaimable 10384 [ 285.314837][ T5412] slab_unreclaimable 15000 [ 285.314837][ T5412] slab 25384 [ 285.314837][ T5412] workingset_refault_anon 0 [ 285.314837][ T5412] workingset_refault_file 1 [ 285.314837][ T5412] workingset_activate_anon 0 [ 285.314837][ T5412] workingset_activate_file 0 [ 285.314837][ T5412] workingset_restore_anon 0 [ 285.409163][ T5412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5371,uid=0 [ 285.424587][ T5412] Memory cgroup out of memory: Killed process 5371 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 285.455442][ T26] oom_reaper: reaped process 5371 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB [ 285.467917][ T5411] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 285.478128][ T5411] CPU: 1 PID: 5411 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 285.489066][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.499198][ T5411] Call Trace: [ 285.502471][ T5411] [ 285.505439][ T5411] dump_stack_lvl+0xd6/0x122 [ 285.510038][ T5411] dump_stack+0x11/0x1b [ 285.514230][ T5411] dump_header+0x98/0x410 [ 285.518564][ T5411] out_of_memory+0x65c/0x8c0 [ 285.523166][ T5411] memory_max_write+0x32c/0x3d0 [ 285.528104][ T5411] ? memory_max_show+0x70/0x70 [ 285.532908][ T5411] cgroup_file_write+0x161/0x300 [ 285.537848][ T5411] ? __check_object_size+0x22a/0x2d0 [ 285.543138][ T5411] ? cgroup_seqfile_stop+0x70/0x70 [ 285.548273][ T5411] kernfs_fop_write_iter+0x1d3/0x2d0 [ 285.553614][ T5411] do_iter_readv_writev+0x2de/0x380 [ 285.558821][ T5411] do_iter_write+0x192/0x5c0 [ 285.563444][ T5411] ? splice_from_pipe_next+0x34f/0x3b0 [ 285.568902][ T5411] ? kmalloc_array+0x2d/0x40 [ 285.573547][ T5411] vfs_iter_write+0x4c/0x70 [ 285.578223][ T5411] iter_file_splice_write+0x43a/0x790 [ 285.583630][ T5411] ? splice_from_pipe+0xd0/0xd0 [ 285.588481][ T5411] direct_splice_actor+0x80/0xa0 [ 285.593420][ T5411] splice_direct_to_actor+0x345/0x650 [ 285.598802][ T5411] ? do_splice_direct+0x190/0x190 [ 285.603843][ T5411] do_splice_direct+0x106/0x190 [ 285.608698][ T5411] do_sendfile+0x675/0xc40 [ 285.613117][ T5411] __x64_sys_sendfile64+0x102/0x140 [ 285.618322][ T5411] do_syscall_64+0x44/0xd0 [ 285.622739][ T5411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 285.628700][ T5411] RIP: 0033:0x7ff1ebc4a059 [ 285.633123][ T5411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 285.652733][ T5411] RSP: 002b:00007ff1eadc0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 285.661143][ T5411] RAX: ffffffffffffffda RBX: 00007ff1ebd5cf60 RCX: 00007ff1ebc4a059 [ 285.669114][ T5411] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 285.677084][ T5411] RBP: 00007ff1ebca408d R08: 0000000000000000 R09: 0000000000000000 [ 285.685076][ T5411] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 285.693041][ T5411] R13: 00007fff676614af R14: 00007ff1eadc0300 R15: 0000000000022000 [ 285.701035][ T5411] [ 285.704113][ T5411] memory: usage 52kB, limit 0kB, failcnt 930 [ 285.710113][ T5411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.717033][ T5411] Memory cgroup stats for /syz1: [ 285.719666][ T5411] anon 0 [ 285.719666][ T5411] file 24576 [ 285.719666][ T5411] kernel_stack 0 [ 285.719666][ T5411] pagetables 0 [ 285.719666][ T5411] percpu 0 [ 285.719666][ T5411] sock 0 [ 285.719666][ T5411] vmalloc 0 [ 285.719666][ T5411] shmem 24576 [ 285.719666][ T5411] file_mapped 24576 [ 285.719666][ T5411] file_dirty 0 [ 285.719666][ T5411] file_writeback 0 [ 285.719666][ T5411] swapcached 0 [ 285.719666][ T5411] inactive_anon 0 [ 285.719666][ T5411] active_anon 24576 [ 285.719666][ T5411] inactive_file 0 [ 285.719666][ T5411] active_file 0 [ 285.719666][ T5411] unevictable 0 [ 285.719666][ T5411] slab_reclaimable 5744 [ 285.719666][ T5411] slab_unreclaimable 13664 [ 285.719666][ T5411] slab 19408 [ 285.719666][ T5411] workingset_refault_anon 0 [ 285.719666][ T5411] workingset_refault_file 1 [ 285.719666][ T5411] workingset_activate_anon 0 16:09:09 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffc, &(0x7f0000000300)={[0xa5a2]}, 0x8) (async) r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @random="e96cbec7a39d"}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = memfd_create(&(0x7f0000000140)='ns/user\x00', 0x4) ppoll(&(0x7f0000000180)=[{r1, 0x8001}, {r0, 0x12}, {r0, 0x261}, {r7}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x4000]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x40002000}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x1000}, {r3}, {r5, 0x2000}, {r1}, {0xffffffffffffffff, 0x10}], 0x6, &(0x7f0000000280), &(0x7f00000002c0)={[0x7]}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x18}) 16:09:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 1) [ 285.719666][ T5411] workingset_activate_file 0 [ 285.719666][ T5411] workingset_restore_anon 0 [ 285.813077][ T5411] Out of memory and no killable processes... [ 285.819104][ T5412] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 285.829306][ T5412] CPU: 0 PID: 5412 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 285.840244][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.850303][ T5412] Call Trace: [ 285.853575][ T5412] [ 285.856527][ T5412] dump_stack_lvl+0xd6/0x122 [ 285.861177][ T5412] dump_stack+0x11/0x1b [ 285.865340][ T5412] dump_header+0x98/0x410 [ 285.869646][ T5412] out_of_memory+0x65c/0x8c0 [ 285.874214][ T5412] memory_max_write+0x32c/0x3d0 [ 285.879053][ T5412] ? memory_max_show+0x70/0x70 [ 285.883888][ T5412] cgroup_file_write+0x161/0x300 [ 285.888832][ T5412] ? __check_object_size+0x22a/0x2d0 [ 285.894188][ T5412] ? cgroup_seqfile_stop+0x70/0x70 [ 285.899319][ T5412] kernfs_fop_write_iter+0x1d3/0x2d0 [ 285.904585][ T5412] do_iter_readv_writev+0x2de/0x380 [ 285.909793][ T5412] do_iter_write+0x192/0x5c0 [ 285.914361][ T5412] ? splice_from_pipe_next+0x34f/0x3b0 [ 285.919799][ T5412] ? kmalloc_array+0x2d/0x40 [ 285.924367][ T5412] vfs_iter_write+0x4c/0x70 [ 285.928850][ T5412] iter_file_splice_write+0x43a/0x790 [ 285.934253][ T5412] ? splice_from_pipe+0xd0/0xd0 [ 285.939082][ T5412] direct_splice_actor+0x80/0xa0 [ 285.944195][ T5412] splice_direct_to_actor+0x345/0x650 [ 285.949728][ T5412] ? do_splice_direct+0x190/0x190 [ 285.954838][ T5412] do_splice_direct+0x106/0x190 [ 285.959691][ T5412] do_sendfile+0x675/0xc40 [ 285.964208][ T5412] __x64_sys_sendfile64+0x102/0x140 [ 285.969487][ T5412] do_syscall_64+0x44/0xd0 [ 285.973900][ T5412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 285.979790][ T5412] RIP: 0033:0x7f8a9bb9b059 [ 285.984203][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.003862][ T5412] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.012255][ T5412] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 286.020221][ T5412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 286.028172][ T5412] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 286.036180][ T5412] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 286.044150][ T5412] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 286.052108][ T5412] [ 286.055146][ T5412] memory: usage 52kB, limit 0kB, failcnt 930 [ 286.061227][ T5412] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 286.068084][ T5412] Memory cgroup stats for /syz1: [ 286.070322][ T5412] anon 0 [ 286.070322][ T5412] file 24576 [ 286.070322][ T5412] kernel_stack 0 [ 286.070322][ T5412] pagetables 0 [ 286.070322][ T5412] percpu 0 [ 286.070322][ T5412] sock 0 [ 286.070322][ T5412] vmalloc 0 [ 286.070322][ T5412] shmem 24576 [ 286.070322][ T5412] file_mapped 24576 [ 286.070322][ T5412] file_dirty 0 [ 286.070322][ T5412] file_writeback 0 [ 286.070322][ T5412] swapcached 0 [ 286.070322][ T5412] inactive_anon 0 [ 286.070322][ T5412] active_anon 24576 [ 286.070322][ T5412] inactive_file 0 [ 286.070322][ T5412] active_file 0 [ 286.070322][ T5412] unevictable 0 [ 286.070322][ T5412] slab_reclaimable 5744 [ 286.070322][ T5412] slab_unreclaimable 13664 [ 286.070322][ T5412] slab 19408 [ 286.070322][ T5412] workingset_refault_anon 0 [ 286.070322][ T5412] workingset_refault_file 1 [ 286.070322][ T5412] workingset_activate_anon 0 [ 286.070322][ T5412] workingset_activate_file 0 [ 286.070322][ T5412] workingset_restore_anon 0 [ 286.163540][ T5412] Out of memory and no killable processes... [ 286.189488][ T5452] FAULT_INJECTION: forcing a failure. [ 286.189488][ T5452] name failslab, interval 1, probability 0, space 0, times 0 [ 286.202141][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 286.213078][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.223145][ T5452] Call Trace: [ 286.226421][ T5452] [ 286.229364][ T5452] dump_stack_lvl+0xd6/0x122 [ 286.233956][ T5452] dump_stack+0x11/0x1b [ 286.238133][ T5452] should_fail+0x23c/0x250 [ 286.242531][ T5452] ? __se_sys_memfd_create+0xe9/0x350 [ 286.247883][ T5452] __should_failslab+0x81/0x90 [ 286.252626][ T5452] should_failslab+0x5/0x20 [ 286.257182][ T5452] __kmalloc+0x6f/0x370 [ 286.261326][ T5452] ? strnlen_user+0x137/0x1c0 [ 286.265983][ T5452] __se_sys_memfd_create+0xe9/0x350 [ 286.271201][ T5452] __x64_sys_memfd_create+0x2d/0x40 [ 286.276379][ T5452] do_syscall_64+0x44/0xd0 [ 286.280839][ T5452] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.286738][ T5452] RIP: 0033:0x7ff1ebc4a059 [ 286.291131][ T5452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.310716][ T5452] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 286.319149][ T5452] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 286.327108][ T5452] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 286.335122][ T5452] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 286.343136][ T5452] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 286.351088][ T5452] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 16:09:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 16:09:09 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000017}, 0x44840) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffeaa94a4fff81002400884700000300000000000000000025c8dddd0b1045c75753a9ecda3f4782ee3b14aa7c7775f66adbd70367b3836de539bcc1c997346f1896e01e0f39d16c730306ccbad588"], &(0x7f0000000080)={0x1, 0x2, [0x91b, 0x94c, 0xfeb, 0x31b]}) 16:09:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 286.359045][ T5452] 16:09:09 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000017}, 0x44840) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffeaa94a4fff81002400884700000300000000000000000025c8dddd0b1045c75753a9ecda3f4782ee3b14aa7c7775f66adbd70367b3836de539bcc1c997346f1896e01e0f39d16c730306ccbad588"], &(0x7f0000000080)={0x1, 0x2, [0x91b, 0x94c, 0xfeb, 0x31b]}) 16:09:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 2) 16:09:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) [ 286.414061][ T5458] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 286.424314][ T5458] CPU: 0 PID: 5458 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 286.435248][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.445301][ T5458] Call Trace: [ 286.448578][ T5458] [ 286.451508][ T5458] dump_stack_lvl+0xd6/0x122 [ 286.456110][ T5458] dump_stack+0x11/0x1b [ 286.460279][ T5458] dump_header+0x98/0x410 [ 286.464614][ T5458] out_of_memory+0x65c/0x8c0 [ 286.469217][ T5458] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 286.475085][ T5458] memory_max_write+0x32c/0x3d0 [ 286.479952][ T5458] ? memory_max_show+0x70/0x70 [ 286.484733][ T5458] cgroup_file_write+0x161/0x300 [ 286.489681][ T5458] ? __check_object_size+0x22a/0x2d0 [ 286.494985][ T5458] ? cgroup_seqfile_stop+0x70/0x70 [ 286.500121][ T5458] kernfs_fop_write_iter+0x1d3/0x2d0 [ 286.505411][ T5458] do_iter_readv_writev+0x2de/0x380 [ 286.510617][ T5458] do_iter_write+0x192/0x5c0 [ 286.515210][ T5458] ? splice_from_pipe_next+0x34f/0x3b0 [ 286.520685][ T5458] ? kmalloc_array+0x2d/0x40 [ 286.525339][ T5458] vfs_iter_write+0x4c/0x70 [ 286.529853][ T5458] iter_file_splice_write+0x43a/0x790 [ 286.535262][ T5458] ? splice_from_pipe+0xd0/0xd0 [ 286.540123][ T5458] direct_splice_actor+0x80/0xa0 [ 286.545176][ T5458] splice_direct_to_actor+0x345/0x650 [ 286.550590][ T5458] ? do_splice_direct+0x190/0x190 [ 286.555699][ T5458] do_splice_direct+0x106/0x190 [ 286.560561][ T5458] do_sendfile+0x675/0xc40 [ 286.565037][ T5458] __x64_sys_sendfile64+0x102/0x140 [ 286.570268][ T5458] do_syscall_64+0x44/0xd0 [ 286.574687][ T5458] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.580641][ T5458] RIP: 0033:0x7fdafc148059 [ 286.585065][ T5458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.604703][ T5458] RSP: 002b:00007fdafb2be168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.613160][ T5458] RAX: ffffffffffffffda RBX: 00007fdafc25af60 RCX: 00007fdafc148059 [ 286.621140][ T5458] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 286.629121][ T5458] RBP: 00007fdafc1a208d R08: 0000000000000000 R09: 0000000000000000 [ 286.637163][ T5458] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 286.645142][ T5458] R13: 00007ffd8ec620bf R14: 00007fdafb2be300 R15: 0000000000022000 [ 286.653223][ T5458] [ 286.656361][ T5458] memory: usage 44kB, limit 0kB, failcnt 930 [ 286.662338][ T5458] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 286.669269][ T5458] Memory cgroup stats for /syz1: [ 286.680744][ T5464] FAULT_INJECTION: forcing a failure. [ 286.680744][ T5464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.698804][ T5464] CPU: 0 PID: 5464 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 286.709748][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.719861][ T5464] Call Trace: [ 286.723141][ T5464] [ 286.726072][ T5464] dump_stack_lvl+0xd6/0x122 [ 286.730716][ T5464] dump_stack+0x11/0x1b [ 286.734877][ T5464] should_fail+0x23c/0x250 [ 286.739329][ T5464] should_fail_usercopy+0x16/0x20 [ 286.744394][ T5464] _copy_from_user+0x1c/0xd0 [ 286.748990][ T5464] __se_sys_memfd_create+0x125/0x350 [ 286.754293][ T5464] __x64_sys_memfd_create+0x2d/0x40 [ 286.759558][ T5464] do_syscall_64+0x44/0xd0 16:09:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) [ 286.763984][ T5464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.769955][ T5464] RIP: 0033:0x7ff1ebc4a059 [ 286.774367][ T5464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.793983][ T5464] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 286.802435][ T5464] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 286.810457][ T5464] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 286.818434][ T5464] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 286.826424][ T5464] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 286.834403][ T5464] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 [ 286.842385][ T5464] [ 286.859259][ T5458] anon 0 [ 286.859259][ T5458] file 24576 [ 286.859259][ T5458] kernel_stack 0 [ 286.859259][ T5458] pagetables 0 [ 286.859259][ T5458] percpu 0 [ 286.859259][ T5458] sock 0 [ 286.859259][ T5458] vmalloc 0 [ 286.859259][ T5458] shmem 24576 [ 286.859259][ T5458] file_mapped 24576 [ 286.859259][ T5458] file_dirty 0 [ 286.859259][ T5458] file_writeback 0 [ 286.859259][ T5458] swapcached 0 [ 286.859259][ T5458] inactive_anon 0 [ 286.859259][ T5458] active_anon 24576 [ 286.859259][ T5458] inactive_file 0 [ 286.859259][ T5458] active_file 0 [ 286.859259][ T5458] unevictable 0 16:09:10 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:10 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000017}, 0x44840) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffeaa94a4fff81002400884700000300000000000000000025c8dddd0b1045c75753a9ecda3f4782ee3b14aa7c7775f66adbd70367b3836de539bcc1c997346f1896e01e0f39d16c730306ccbad588"], &(0x7f0000000080)={0x1, 0x2, [0x91b, 0x94c, 0xfeb, 0x31b]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000017}, 0x44840) (async) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0xc, 0x2f, 0x0, @dev, @local, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x10, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffeaa94a4fff81002400884700000300000000000000000025c8dddd0b1045c75753a9ecda3f4782ee3b14aa7c7775f66adbd70367b3836de539bcc1c997346f1896e01e0f39d16c730306ccbad588"], &(0x7f0000000080)={0x1, 0x2, [0x91b, 0x94c, 0xfeb, 0x31b]}) (async) 16:09:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) [ 286.859259][ T5458] slab_reclaimable 4400 [ 286.859259][ T5458] slab_unreclaimable 13400 [ 286.859259][ T5458] slab 17800 [ 286.859259][ T5458] workingset_refault_anon 0 [ 286.859259][ T5458] workingset_refault_file 1 [ 286.859259][ T5458] workingset_activate_anon 0 [ 286.859259][ T5458] workingset_activate_file 0 [ 286.859259][ T5458] workingset_restore_anon 0 [ 286.947581][ T5458] Out of memory and no killable processes... 16:09:10 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60281400142f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c9078011000"/76], 0x0) 16:09:10 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:10 executing program 0: set_mempolicy(0x1, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x58}, 0x0) [ 287.041600][ T5486] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 287.051847][ T5486] CPU: 0 PID: 5486 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 287.062836][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.072991][ T5486] Call Trace: [ 287.076274][ T5486] [ 287.079216][ T5486] dump_stack_lvl+0xd6/0x122 [ 287.083820][ T5486] dump_stack+0x11/0x1b [ 287.087986][ T5486] dump_header+0x98/0x410 [ 287.092399][ T5486] out_of_memory+0x65c/0x8c0 [ 287.097006][ T5486] memory_max_write+0x32c/0x3d0 [ 287.101936][ T5486] ? memory_max_show+0x70/0x70 [ 287.106717][ T5486] cgroup_file_write+0x161/0x300 [ 287.111713][ T5486] ? __check_object_size+0x22a/0x2d0 [ 287.117085][ T5486] ? cgroup_seqfile_stop+0x70/0x70 [ 287.122348][ T5486] kernfs_fop_write_iter+0x1d3/0x2d0 [ 287.127660][ T5486] do_iter_readv_writev+0x2de/0x380 [ 287.132929][ T5486] do_iter_write+0x192/0x5c0 [ 287.137548][ T5486] ? splice_from_pipe_next+0x34f/0x3b0 [ 287.142988][ T5486] ? kmalloc_array+0x2d/0x40 [ 287.147618][ T5486] vfs_iter_write+0x4c/0x70 [ 287.152115][ T5486] iter_file_splice_write+0x43a/0x790 [ 287.157549][ T5486] ? splice_from_pipe+0xd0/0xd0 [ 287.162536][ T5486] direct_splice_actor+0x80/0xa0 [ 287.167512][ T5486] splice_direct_to_actor+0x345/0x650 [ 287.172907][ T5486] ? do_splice_direct+0x190/0x190 [ 287.177923][ T5486] do_splice_direct+0x106/0x190 [ 287.182830][ T5486] do_sendfile+0x675/0xc40 [ 287.187225][ T5486] __x64_sys_sendfile64+0x102/0x140 [ 287.192464][ T5486] do_syscall_64+0x44/0xd0 [ 287.196923][ T5486] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 287.202816][ T5486] RIP: 0033:0x7f8a9bb9b059 [ 287.207206][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.226831][ T5486] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.235324][ T5486] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 287.243277][ T5486] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 287.251264][ T5486] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 287.259214][ T5486] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 287.267178][ T5486] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 287.275132][ T5486] [ 287.278181][ T5486] memory: usage 44kB, limit 0kB, failcnt 930 [ 287.284153][ T5486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.291019][ T5486] Memory cgroup stats for /syz1: [ 287.296844][ T5486] anon 0 [ 287.296844][ T5486] file 24576 [ 287.296844][ T5486] kernel_stack 0 [ 287.296844][ T5486] pagetables 0 [ 287.296844][ T5486] percpu 0 [ 287.296844][ T5486] sock 0 [ 287.296844][ T5486] vmalloc 0 [ 287.296844][ T5486] shmem 24576 [ 287.296844][ T5486] file_mapped 24576 [ 287.296844][ T5486] file_dirty 0 [ 287.296844][ T5486] file_writeback 0 [ 287.296844][ T5486] swapcached 0 [ 287.296844][ T5486] inactive_anon 0 [ 287.296844][ T5486] active_anon 24576 [ 287.296844][ T5486] inactive_file 0 [ 287.296844][ T5486] active_file 0 [ 287.296844][ T5486] unevictable 0 [ 287.296844][ T5486] slab_reclaimable 4400 [ 287.296844][ T5486] slab_unreclaimable 13400 [ 287.296844][ T5486] slab 17800 [ 287.296844][ T5486] workingset_refault_anon 0 [ 287.296844][ T5486] workingset_refault_file 1 [ 287.296844][ T5486] workingset_activate_anon 0 [ 287.296844][ T5486] workingset_activate_file 0 [ 287.296844][ T5486] workingset_restore_anon 0 [ 287.390252][ T5486] Out of memory and no killable processes... [ 287.646455][ T2501] device hsr_slave_0 left promiscuous mode [ 287.652501][ T2501] device hsr_slave_1 left promiscuous mode [ 287.658632][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.666069][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.673708][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.681104][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.688709][ T2501] device bridge_slave_1 left promiscuous mode [ 287.694857][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.702530][ T2501] device bridge_slave_0 left promiscuous mode [ 287.708737][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.718181][ T2501] device veth1_macvtap left promiscuous mode [ 287.724207][ T2501] device veth0_macvtap left promiscuous mode [ 287.730307][ T2501] device veth1_vlan left promiscuous mode [ 287.736076][ T2501] device veth0_vlan left promiscuous mode [ 287.819888][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 287.829931][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 287.839460][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.850691][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.879448][ T2501] bond0 (unregistering): Released all slaves [ 288.293520][ T5490] chnl_net:caif_netlink_parms(): no params data found [ 288.327198][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.334257][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.342175][ T5490] device bridge_slave_0 entered promiscuous mode [ 288.351326][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.358385][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.366041][ T5490] device bridge_slave_1 entered promiscuous mode [ 288.383477][ T5490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.393982][ T5490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.414123][ T5490] team0: Port device team_slave_0 added [ 288.420523][ T5490] team0: Port device team_slave_1 added [ 288.434414][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.441369][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.467266][ T5490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.478291][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.485254][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.511236][ T5490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.532873][ T5490] device hsr_slave_0 entered promiscuous mode [ 288.540655][ T5490] device hsr_slave_1 entered promiscuous mode [ 288.546931][ T5490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.554450][ T5490] Cannot create hsr debugfs directory [ 288.582099][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.589177][ T5490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.596501][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.603516][ T5490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.633072][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.644080][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.653495][ T2009] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.661372][ T2009] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.672558][ T5490] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.682375][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.690698][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.697793][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.708054][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.717331][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.724379][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.745684][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.754143][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.763539][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.771771][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.781845][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.789307][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.802556][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.810017][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.819893][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.896213][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.943423][ T5490] device veth0_vlan entered promiscuous mode [ 288.950146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.959179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.969570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.977559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.986588][ T5490] device veth1_vlan entered promiscuous mode [ 288.998584][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.007603][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.015789][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.024257][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.034602][ T5490] device veth0_macvtap entered promiscuous mode [ 289.043000][ T5490] device veth1_macvtap entered promiscuous mode [ 289.054531][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.064985][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.074802][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.085219][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.095081][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.105585][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.115396][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.125811][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.135649][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.146048][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.158357][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.166527][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.174690][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.182638][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.191256][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.200649][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.211166][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.220971][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.231471][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.241281][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.251733][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.261531][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.272003][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.281800][ T5490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.292258][ T5490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.303312][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.311580][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.320300][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:09:13 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r5 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) 16:09:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 3) 16:09:13 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60281400142f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c9078011000"/76], 0x0) 16:09:13 executing program 0: set_mempolicy(0x1, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x58}, 0x0) 16:09:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 289.536428][ T5530] FAULT_INJECTION: forcing a failure. [ 289.536428][ T5530] name failslab, interval 1, probability 0, space 0, times 0 [ 289.544499][ T5527] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 289.549200][ T5530] CPU: 1 PID: 5530 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 289.570268][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.580311][ T5530] Call Trace: [ 289.583590][ T5530] [ 289.586506][ T5530] dump_stack_lvl+0xd6/0x122 [ 289.591098][ T5530] dump_stack+0x11/0x1b [ 289.595257][ T5530] should_fail+0x23c/0x250 [ 289.599663][ T5530] ? shmem_alloc_inode+0x22/0x30 [ 289.604682][ T5530] __should_failslab+0x81/0x90 [ 289.609438][ T5530] ? shmem_match+0xa0/0xa0 [ 289.613840][ T5530] should_failslab+0x5/0x20 [ 289.618360][ T5530] kmem_cache_alloc+0x4f/0x320 [ 289.623184][ T5530] ? shmem_match+0xa0/0xa0 [ 289.627747][ T5530] shmem_alloc_inode+0x22/0x30 [ 289.632541][ T5530] new_inode_pseudo+0x38/0x190 [ 289.637361][ T5530] new_inode+0x21/0x100 [ 289.641663][ T5530] shmem_get_inode+0xb7/0x490 [ 289.646327][ T5530] __shmem_file_setup+0xf1/0x1d0 [ 289.651251][ T5530] shmem_file_setup+0x37/0x40 [ 289.655922][ T5530] __se_sys_memfd_create+0x1c1/0x350 [ 289.661243][ T5530] __x64_sys_memfd_create+0x2d/0x40 [ 289.666499][ T5530] do_syscall_64+0x44/0xd0 [ 289.670909][ T5530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 289.676831][ T5530] RIP: 0033:0x7ff1ebc4a059 [ 289.681226][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 289.700902][ T5530] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 289.709310][ T5530] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 289.717264][ T5530] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 289.725221][ T5530] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 16:09:13 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60281400142f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c9078011000"/76], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60281400142f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e000c9078011000"/76], 0x0) (async) 16:09:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) [ 289.733173][ T5530] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 289.741146][ T5530] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 [ 289.749161][ T5530] [ 289.752165][ T5527] CPU: 0 PID: 5527 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 289.763215][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.773264][ T5527] Call Trace: [ 289.776537][ T5527] [ 289.779463][ T5527] dump_stack_lvl+0xd6/0x122 16:09:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 4) 16:09:13 executing program 0: set_mempolicy(0x1, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x58}, 0x0) [ 289.784086][ T5527] dump_stack+0x11/0x1b [ 289.788241][ T5527] dump_header+0x98/0x410 [ 289.792569][ T5527] oom_kill_process+0x18e/0x4a0 [ 289.797457][ T5527] out_of_memory+0x61d/0x8c0 [ 289.802121][ T5527] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 289.807933][ T5527] memory_max_write+0x32c/0x3d0 [ 289.812794][ T5527] ? memory_max_show+0x70/0x70 [ 289.817636][ T5527] cgroup_file_write+0x161/0x300 [ 289.822586][ T5527] ? __check_object_size+0x22a/0x2d0 [ 289.827949][ T5527] ? cgroup_seqfile_stop+0x70/0x70 [ 289.830746][ T5543] FAULT_INJECTION: forcing a failure. [ 289.830746][ T5543] name failslab, interval 1, probability 0, space 0, times 0 [ 289.833061][ T5527] kernfs_fop_write_iter+0x1d3/0x2d0 [ 289.833088][ T5527] do_iter_readv_writev+0x2de/0x380 [ 289.856104][ T5527] do_iter_write+0x192/0x5c0 [ 289.860688][ T5527] ? splice_from_pipe_next+0x34f/0x3b0 [ 289.866191][ T5527] ? kmalloc_array+0x2d/0x40 [ 289.870769][ T5527] vfs_iter_write+0x4c/0x70 [ 289.875256][ T5527] iter_file_splice_write+0x43a/0x790 [ 289.880646][ T5527] ? splice_from_pipe+0xd0/0xd0 [ 289.885488][ T5527] direct_splice_actor+0x80/0xa0 [ 289.890414][ T5527] splice_direct_to_actor+0x345/0x650 [ 289.895900][ T5527] ? do_splice_direct+0x190/0x190 [ 289.900911][ T5527] do_splice_direct+0x106/0x190 [ 289.905919][ T5527] do_sendfile+0x675/0xc40 [ 289.910390][ T5527] __x64_sys_sendfile64+0x102/0x140 [ 289.915578][ T5527] do_syscall_64+0x44/0xd0 [ 289.919979][ T5527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 289.925930][ T5527] RIP: 0033:0x7f8a9bb9b059 [ 289.930383][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 289.950007][ T5527] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 289.958510][ T5527] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 289.966480][ T5527] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 289.974444][ T5527] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 289.982400][ T5527] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 289.990358][ T5527] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 289.998315][ T5527] [ 290.001417][ T5543] CPU: 1 PID: 5543 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 290.001565][ T5527] memory: usage 128kB, limit 0kB, failcnt 949 [ 290.012368][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.012379][ T5543] Call Trace: [ 290.012384][ T5543] [ 290.012390][ T5543] dump_stack_lvl+0xd6/0x122 [ 290.018444][ T5527] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.018463][ T5527] Memory cgroup stats for /syz1: [ 290.024129][ T5527] anon 36864 [ 290.024129][ T5527] file 24576 [ 290.024129][ T5527] kernel_stack 0 [ 290.024129][ T5527] pagetables 8192 [ 290.024129][ T5527] percpu 0 [ 290.024129][ T5527] sock 0 [ 290.024129][ T5527] vmalloc 0 [ 290.024129][ T5527] shmem 24576 [ 290.024129][ T5527] file_mapped 24576 [ 290.024129][ T5527] file_dirty 0 [ 290.024129][ T5527] file_writeback 0 [ 290.024129][ T5527] swapcached 0 [ 290.024129][ T5527] inactive_anon 36864 [ 290.024129][ T5527] active_anon 24576 [ 290.024129][ T5527] inactive_file 0 [ 290.024129][ T5527] active_file 0 [ 290.024129][ T5527] unevictable 0 [ 290.024129][ T5527] slab_reclaimable 11776 [ 290.024129][ T5527] slab_unreclaimable 17472 [ 290.024129][ T5527] slab 29248 [ 290.024129][ T5527] workingset_refault_anon 0 [ 290.024129][ T5527] workingset_refault_file 1 [ 290.024129][ T5527] workingset_activate_anon 0 [ 290.024129][ T5527] workingset_activate_file 0 [ 290.024129][ T5527] workingset_restore_anon 0 [ 290.028539][ T5543] dump_stack+0x11/0x1b [ 290.028565][ T5543] should_fail+0x23c/0x250 [ 290.028584][ T5543] ? security_inode_alloc+0x30/0x180 [ 290.031854][ T5527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 290.034766][ T5543] __should_failslab+0x81/0x90 [ 290.034792][ T5543] should_failslab+0x5/0x20 [ 290.039397][ T5527] ,cpuset=syz5 [ 290.046218][ T5543] kmem_cache_alloc+0x4f/0x320 [ 290.051163][ T5527] ,mems_allowed=0 [ 290.140257][ T5543] security_inode_alloc+0x30/0x180 [ 290.140285][ T5543] inode_init_always+0x214/0x3e0 [ 290.140306][ T5543] ? shmem_match+0xa0/0xa0 [ 290.144465][ T5527] ,oom_memcg=/syz1 [ 290.148853][ T5543] new_inode_pseudo+0x6f/0x190 [ 290.154130][ T5527] ,task_memcg= [ 290.160934][ T5543] new_inode+0x21/0x100 [ 290.160958][ T5543] shmem_get_inode+0xb7/0x490 [ 290.165709][ T5527] /syz1,task=syz-executor.1,pid=5490,uid=0 [ 290.165745][ T5527] Memory cgroup out of memory: Killed process 5490 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 290.167966][ T26] oom_reaper: reaped process 5490 (syz-executor.1), now anon-rss:0kB, file-rss:13480kB, shmem-rss:0kB [ 290.170245][ T5543] __shmem_file_setup+0xf1/0x1d0 [ 290.173698][ T5527] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 290.178390][ T5543] shmem_file_setup+0x37/0x40 [ 290.178413][ T5543] __se_sys_memfd_create+0x1c1/0x350 [ 290.178438][ T5543] __x64_sys_memfd_create+0x2d/0x40 [ 290.280748][ T5543] do_syscall_64+0x44/0xd0 [ 290.285188][ T5543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 290.291070][ T5543] RIP: 0033:0x7ff1ebc4a059 [ 290.295482][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 290.315158][ T5543] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 290.323554][ T5543] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 290.331511][ T5543] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 290.339480][ T5543] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 290.347435][ T5543] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 290.355504][ T5543] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 [ 290.363544][ T5543] [ 290.366549][ T5527] CPU: 0 PID: 5527 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 290.377482][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 16:09:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:09:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0x5, 0x4, 0xe, 0x7fff, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x76}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) [ 290.387538][ T5527] Call Trace: [ 290.390816][ T5527] [ 290.393756][ T5527] dump_stack_lvl+0xd6/0x122 [ 290.398355][ T5527] dump_stack+0x11/0x1b [ 290.402525][ T5527] dump_header+0x98/0x410 [ 290.406910][ T5527] out_of_memory+0x65c/0x8c0 [ 290.411603][ T5527] memory_max_write+0x32c/0x3d0 [ 290.416526][ T5527] ? memory_max_show+0x70/0x70 [ 290.421300][ T5527] cgroup_file_write+0x161/0x300 [ 290.426248][ T5527] ? __check_object_size+0x22a/0x2d0 [ 290.431551][ T5527] ? cgroup_seqfile_stop+0x70/0x70 [ 290.436690][ T5527] kernfs_fop_write_iter+0x1d3/0x2d0 [ 290.441982][ T5527] do_iter_readv_writev+0x2de/0x380 [ 290.447267][ T5527] do_iter_write+0x192/0x5c0 [ 290.451857][ T5527] ? splice_from_pipe_next+0x34f/0x3b0 [ 290.457326][ T5527] ? kmalloc_array+0x2d/0x40 [ 290.461922][ T5527] vfs_iter_write+0x4c/0x70 [ 290.466505][ T5527] iter_file_splice_write+0x43a/0x790 [ 290.471934][ T5527] ? splice_from_pipe+0xd0/0xd0 [ 290.476813][ T5527] direct_splice_actor+0x80/0xa0 [ 290.481783][ T5527] splice_direct_to_actor+0x345/0x650 [ 290.487141][ T5527] ? do_splice_direct+0x190/0x190 [ 290.492181][ T5527] do_splice_direct+0x106/0x190 [ 290.497049][ T5527] do_sendfile+0x675/0xc40 [ 290.501924][ T5527] __x64_sys_sendfile64+0x102/0x140 [ 290.507123][ T5527] do_syscall_64+0x44/0xd0 [ 290.511518][ T5527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 290.517510][ T5527] RIP: 0033:0x7f8a9bb9b059 [ 290.521910][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 290.541524][ T5527] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 290.549910][ T5527] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 290.557857][ T5527] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 290.565808][ T5527] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 290.573757][ T5527] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 290.581721][ T5527] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 290.589673][ T5527] [ 290.592833][ T5527] memory: usage 76kB, limit 0kB, failcnt 966 [ 290.598826][ T5527] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.605696][ T5527] Memory cgroup stats for /syz1: [ 290.609789][ T5527] anon 0 [ 290.609789][ T5527] file 24576 [ 290.609789][ T5527] kernel_stack 0 [ 290.609789][ T5527] pagetables 0 [ 290.609789][ T5527] percpu 0 [ 290.609789][ T5527] sock 0 [ 290.609789][ T5527] vmalloc 0 [ 290.609789][ T5527] shmem 24576 [ 290.609789][ T5527] file_mapped 24576 [ 290.609789][ T5527] file_dirty 0 [ 290.609789][ T5527] file_writeback 0 [ 290.609789][ T5527] swapcached 0 [ 290.609789][ T5527] inactive_anon 0 [ 290.609789][ T5527] active_anon 24576 [ 290.609789][ T5527] inactive_file 0 [ 290.609789][ T5527] active_file 0 [ 290.609789][ T5527] unevictable 0 [ 290.609789][ T5527] slab_reclaimable 8472 [ 290.609789][ T5527] slab_unreclaimable 16152 [ 290.609789][ T5527] slab 24624 [ 290.609789][ T5527] workingset_refault_anon 0 [ 290.609789][ T5527] workingset_refault_file 1 [ 290.609789][ T5527] workingset_activate_anon 0 [ 290.609789][ T5527] workingset_activate_file 0 [ 290.609789][ T5527] workingset_restore_anon 0 [ 290.703150][ T5527] Out of memory and no killable processes... 16:09:14 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r5 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 5) 16:09:14 executing program 3: syz_emit_ethernet(0xd1, &(0x7f0000000100)={@local, @local, @val={@val={0x9100, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0x93, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @local, {[], {0x0, 0x883e, 0x93, 0x0, @opaque="e9a003c9a9c95bece78c7139ebdd2ffcd7927cfbff03bc8948ac96e16ad096790dc5e8b24da31d4a78d92afa905b98172fcb8304819a27a98d6c7fdfa6944ce5a549187f9b2dc088b0ef5cc242e062e5ae6e31acb0faa9c61ea0d06a7f3fe9ab9e765ada0b7ee4179f841ce3036cee9b3ac8d4c8201b73f19c0b4483e9734d4a5952c2da90759cbc4b5af6"}}}}}}, 0x0) 16:09:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0x5, 0x4, 0xe, 0x7fff, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) (async) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x76}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) 16:09:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:09:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:09:14 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r5 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 290.797065][ T5553] FAULT_INJECTION: forcing a failure. [ 290.797065][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 290.809747][ T5553] CPU: 1 PID: 5553 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 290.820718][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.829082][ T5563] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 290.830835][ T5553] Call Trace: [ 290.830843][ T5553] [ 290.830886][ T5553] dump_stack_lvl+0xd6/0x122 [ 290.830922][ T5553] dump_stack+0x11/0x1b [ 290.830942][ T5553] should_fail+0x23c/0x250 [ 290.860348][ T5553] ? __d_alloc+0x36/0x370 [ 290.864668][ T5553] __should_failslab+0x81/0x90 [ 290.869559][ T5553] should_failslab+0x5/0x20 [ 290.874053][ T5553] kmem_cache_alloc+0x4f/0x320 [ 290.878892][ T5553] ? security_inode_alloc+0x138/0x180 [ 290.884254][ T5553] ? __init_rwsem+0x59/0x70 [ 290.888742][ T5553] __d_alloc+0x36/0x370 [ 290.892889][ T5553] ? debug_smp_processor_id+0x18/0x20 [ 290.898251][ T5553] d_alloc_pseudo+0x1a/0x50 [ 290.902789][ T5553] alloc_file_pseudo+0x77/0x150 [ 290.907629][ T5553] __shmem_file_setup+0x14c/0x1d0 [ 290.912707][ T5553] shmem_file_setup+0x37/0x40 [ 290.917370][ T5553] __se_sys_memfd_create+0x1c1/0x350 [ 290.922675][ T5553] __x64_sys_memfd_create+0x2d/0x40 [ 290.927978][ T5553] do_syscall_64+0x44/0xd0 [ 290.932398][ T5553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 290.938292][ T5553] RIP: 0033:0x7ff1ebc4a059 [ 290.942770][ T5553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 290.962443][ T5553] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 290.970878][ T5553] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 290.978836][ T5553] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 290.986895][ T5553] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 290.994863][ T5553] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 291.002818][ T5553] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 [ 291.010777][ T5553] [ 291.013785][ T5563] CPU: 0 PID: 5563 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 291.024781][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.034831][ T5563] Call Trace: [ 291.038110][ T5563] [ 291.041042][ T5563] dump_stack_lvl+0xd6/0x122 [ 291.045642][ T5563] dump_stack+0x11/0x1b [ 291.049868][ T5563] dump_header+0x98/0x410 [ 291.054276][ T5563] out_of_memory+0x65c/0x8c0 [ 291.058872][ T5563] memory_max_write+0x32c/0x3d0 [ 291.063728][ T5563] ? memory_max_show+0x70/0x70 [ 291.068503][ T5563] cgroup_file_write+0x161/0x300 [ 291.073465][ T5563] ? __check_object_size+0x22a/0x2d0 [ 291.078837][ T5563] ? cgroup_seqfile_stop+0x70/0x70 [ 291.083955][ T5563] kernfs_fop_write_iter+0x1d3/0x2d0 [ 291.089248][ T5563] do_iter_readv_writev+0x2de/0x380 16:09:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0x5, 0x4, 0xe, 0x7fff, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x76}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) 16:09:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 6) [ 291.094512][ T5563] do_iter_write+0x192/0x5c0 [ 291.099135][ T5563] ? splice_from_pipe_next+0x34f/0x3b0 [ 291.104674][ T5563] ? kmalloc_array+0x2d/0x40 [ 291.109273][ T5563] vfs_iter_write+0x4c/0x70 [ 291.113828][ T5563] iter_file_splice_write+0x43a/0x790 [ 291.119214][ T5563] ? splice_from_pipe+0xd0/0xd0 [ 291.122727][ T5566] FAULT_INJECTION: forcing a failure. [ 291.122727][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 291.124067][ T5563] direct_splice_actor+0x80/0xa0 [ 291.124096][ T5563] splice_direct_to_actor+0x345/0x650 [ 291.146940][ T5563] ? do_splice_direct+0x190/0x190 [ 291.151960][ T5563] do_splice_direct+0x106/0x190 [ 291.156853][ T5563] do_sendfile+0x675/0xc40 [ 291.161256][ T5563] __x64_sys_sendfile64+0x102/0x140 [ 291.166509][ T5563] do_syscall_64+0x44/0xd0 [ 291.170910][ T5563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.176791][ T5563] RIP: 0033:0x7f8a9bb9b059 [ 291.181190][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 291.200848][ T5563] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.209347][ T5563] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 291.217323][ T5563] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 291.225279][ T5563] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 291.233251][ T5563] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 291.241278][ T5563] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 291.249236][ T5563] [ 291.252346][ T5563] memory: usage 44kB, limit 0kB, failcnt 966 [ 291.252314][ T5566] CPU: 1 PID: 5566 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 291.252404][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.252414][ T5566] Call Trace: [ 291.258392][ T5563] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.269303][ T5566] [ 291.269314][ T5566] dump_stack_lvl+0xd6/0x122 [ 291.269341][ T5566] dump_stack+0x11/0x1b [ 291.279410][ T5563] Memory cgroup stats for [ 291.282673][ T5566] should_fail+0x23c/0x250 [ 291.289521][ T5563] /syz1 [ 291.292413][ T5566] ? __alloc_file+0x2e/0x1a0 [ 291.296988][ T5563] : [ 291.301105][ T5566] __should_failslab+0x81/0x90 [ 291.324432][ T5566] should_failslab+0x5/0x20 [ 291.328943][ T5566] kmem_cache_alloc+0x4f/0x320 [ 291.333804][ T5566] __alloc_file+0x2e/0x1a0 [ 291.334314][ T5563] anon 0 [ 291.334314][ T5563] file 24576 [ 291.334314][ T5563] kernel_stack 0 [ 291.334314][ T5563] pagetables 0 [ 291.334314][ T5563] percpu 0 [ 291.334314][ T5563] sock 0 [ 291.334314][ T5563] vmalloc 0 [ 291.334314][ T5563] shmem 24576 [ 291.334314][ T5563] file_mapped 24576 [ 291.334314][ T5563] file_dirty 0 [ 291.334314][ T5563] file_writeback 0 [ 291.334314][ T5563] swapcached 0 [ 291.334314][ T5563] inactive_anon 0 [ 291.334314][ T5563] active_anon 24576 [ 291.334314][ T5563] inactive_file 0 [ 291.334314][ T5563] active_file 0 [ 291.334314][ T5563] unevictable 0 [ 291.334314][ T5563] slab_reclaimable 5544 [ 291.334314][ T5563] slab_unreclaimable 13400 [ 291.334314][ T5563] slab 18944 [ 291.334314][ T5563] workingset_refault_anon 0 [ 291.334314][ T5563] workingset_refault_file 1 [ 291.334314][ T5563] workingset_activate_anon 0 [ 291.334314][ T5563] workingset_activate_file 0 [ 291.334314][ T5563] workingset_restore_anon 0 [ 291.338302][ T5566] alloc_empty_file+0xcd/0x1c0 [ 291.338339][ T5566] alloc_file+0x3a/0x280 [ 291.338359][ T5566] alloc_file_pseudo+0xfa/0x150 [ 291.426537][ T5563] Out of memory and no killable processes... [ 291.431173][ T5566] __shmem_file_setup+0x14c/0x1d0 [ 291.431219][ T5566] shmem_file_setup+0x37/0x40 [ 291.455930][ T5566] __se_sys_memfd_create+0x1c1/0x350 [ 291.461354][ T5566] __x64_sys_memfd_create+0x2d/0x40 [ 291.466636][ T5566] do_syscall_64+0x44/0xd0 [ 291.471083][ T5566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.476987][ T5566] RIP: 0033:0x7ff1ebc4a059 [ 291.481515][ T5566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 291.501183][ T5566] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 291.509599][ T5566] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 291.517577][ T5566] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 291.525672][ T5566] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 291.533645][ T5566] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 291.541616][ T5566] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 16:09:14 executing program 3: syz_emit_ethernet(0xd1, &(0x7f0000000100)={@local, @local, @val={@val={0x9100, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0x93, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @local, {[], {0x0, 0x883e, 0x93, 0x0, @opaque="e9a003c9a9c95bece78c7139ebdd2ffcd7927cfbff03bc8948ac96e16ad096790dc5e8b24da31d4a78d92afa905b98172fcb8304819a27a98d6c7fdfa6944ce5a549187f9b2dc088b0ef5cc242e062e5ae6e31acb0faa9c61ea0d06a7f3fe9ab9e765ada0b7ee4179f841ce3036cee9b3ac8d4c8201b73f19c0b4483e9734d4a5952c2da90759cbc4b5af6"}}}}}}, 0x0) 16:09:15 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000) [ 291.549591][ T5566] 16:09:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:15 executing program 3: syz_emit_ethernet(0xd1, &(0x7f0000000100)={@local, @local, @val={@val={0x9100, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0x93, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @local, {[], {0x0, 0x883e, 0x93, 0x0, @opaque="e9a003c9a9c95bece78c7139ebdd2ffcd7927cfbff03bc8948ac96e16ad096790dc5e8b24da31d4a78d92afa905b98172fcb8304819a27a98d6c7fdfa6944ce5a549187f9b2dc088b0ef5cc242e062e5ae6e31acb0faa9c61ea0d06a7f3fe9ab9e765ada0b7ee4179f841ce3036cee9b3ac8d4c8201b73f19c0b4483e9734d4a5952c2da90759cbc4b5af6"}}}}}}, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000000100)={@local, @local, @val={@val={0x9100, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2863f1", 0x93, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @local, {[], {0x0, 0x883e, 0x93, 0x0, @opaque="e9a003c9a9c95bece78c7139ebdd2ffcd7927cfbff03bc8948ac96e16ad096790dc5e8b24da31d4a78d92afa905b98172fcb8304819a27a98d6c7fdfa6944ce5a549187f9b2dc088b0ef5cc242e062e5ae6e31acb0faa9c61ea0d06a7f3fe9ab9e765ada0b7ee4179f841ce3036cee9b3ac8d4c8201b73f19c0b4483e9734d4a5952c2da90759cbc4b5af6"}}}}}}, 0x0) (async) 16:09:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 7) [ 291.628974][ T5578] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 291.639219][ T5578] CPU: 1 PID: 5578 Comm: syz-executor.5 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 291.650183][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.660242][ T5578] Call Trace: [ 291.663520][ T5578] [ 291.666444][ T5578] dump_stack_lvl+0xd6/0x122 [ 291.671044][ T5578] dump_stack+0x11/0x1b [ 291.675203][ T5578] dump_header+0x98/0x410 [ 291.679590][ T5578] out_of_memory+0x65c/0x8c0 [ 291.684203][ T5578] memory_max_write+0x32c/0x3d0 [ 291.689136][ T5578] ? memory_max_show+0x70/0x70 [ 291.694007][ T5578] cgroup_file_write+0x161/0x300 [ 291.698949][ T5578] ? __check_object_size+0x22a/0x2d0 [ 291.704357][ T5578] ? cgroup_seqfile_stop+0x70/0x70 [ 291.709487][ T5578] kernfs_fop_write_iter+0x1d3/0x2d0 [ 291.714844][ T5578] do_iter_readv_writev+0x2de/0x380 [ 291.720046][ T5578] do_iter_write+0x192/0x5c0 16:09:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:15 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000) [ 291.724637][ T5578] ? splice_from_pipe_next+0x34f/0x3b0 [ 291.730212][ T5578] ? kmalloc_array+0x2d/0x40 [ 291.734817][ T5578] vfs_iter_write+0x4c/0x70 [ 291.739327][ T5578] iter_file_splice_write+0x43a/0x790 [ 291.744718][ T5578] ? splice_from_pipe+0xd0/0xd0 [ 291.749648][ T5578] direct_splice_actor+0x80/0xa0 [ 291.754664][ T5578] splice_direct_to_actor+0x345/0x650 [ 291.760104][ T5578] ? do_splice_direct+0x190/0x190 [ 291.765191][ T5578] do_splice_direct+0x106/0x190 [ 291.770060][ T5578] do_sendfile+0x675/0xc40 [ 291.774537][ T5578] __x64_sys_sendfile64+0x102/0x140 [ 291.779771][ T5578] do_syscall_64+0x44/0xd0 [ 291.784199][ T5578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.790100][ T5578] RIP: 0033:0x7f8a9bb9b059 [ 291.794523][ T5578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 291.814154][ T5578] RSP: 002b:00007f8a9ad11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.822571][ T5578] RAX: ffffffffffffffda RBX: 00007f8a9bcadf60 RCX: 00007f8a9bb9b059 [ 291.830542][ T5578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 291.838570][ T5578] RBP: 00007f8a9bbf508d R08: 0000000000000000 R09: 0000000000000000 [ 291.846641][ T5578] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 291.854677][ T5578] R13: 00007ffe3d70739f R14: 00007f8a9ad11300 R15: 0000000000022000 [ 291.862655][ T5578] [ 291.865735][ T5578] memory: usage 44kB, limit 0kB, failcnt 966 [ 291.871708][ T5578] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:09:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 291.878576][ T5578] Memory cgroup stats for /syz1: [ 291.880293][ T5585] FAULT_INJECTION: forcing a failure. [ 291.880293][ T5585] name failslab, interval 1, probability 0, space 0, times 0 [ 291.897941][ T5585] CPU: 1 PID: 5585 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 291.908879][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.918978][ T5585] Call Trace: [ 291.922256][ T5585] [ 291.925186][ T5585] dump_stack_lvl+0xd6/0x122 16:09:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 291.929783][ T5585] dump_stack+0x11/0x1b [ 291.934011][ T5585] should_fail+0x23c/0x250 [ 291.938447][ T5585] ? security_file_alloc+0x30/0x190 [ 291.943703][ T5585] __should_failslab+0x81/0x90 [ 291.948477][ T5585] should_failslab+0x5/0x20 [ 291.952999][ T5585] kmem_cache_alloc+0x4f/0x320 [ 291.957772][ T5585] security_file_alloc+0x30/0x190 [ 291.962818][ T5585] __alloc_file+0x83/0x1a0 [ 291.967244][ T5585] alloc_empty_file+0xcd/0x1c0 [ 291.972083][ T5585] alloc_file+0x3a/0x280 [ 291.976364][ T5585] alloc_file_pseudo+0xfa/0x150 [ 291.981247][ T5585] __shmem_file_setup+0x14c/0x1d0 [ 291.986374][ T5585] shmem_file_setup+0x37/0x40 [ 291.991082][ T5585] __se_sys_memfd_create+0x1c1/0x350 [ 291.996378][ T5585] __x64_sys_memfd_create+0x2d/0x40 [ 292.001666][ T5585] do_syscall_64+0x44/0xd0 [ 292.006137][ T5585] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 292.012036][ T5585] RIP: 0033:0x7ff1ebc4a059 [ 292.016508][ T5585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 292.036113][ T5585] RSP: 002b:00007ff1eadbff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 292.044569][ T5585] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff1ebc4a059 [ 292.052671][ T5585] RDX: 00000000000009c0 RSI: 0000000000000000 RDI: 00007ff1ebca31e0 [ 292.060641][ T5585] RBP: 0000000000000002 R08: 00000000000004e0 R09: 00007ff1eadc01d0 [ 292.068607][ T5585] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 292.076674][ T5585] R13: 0000000020000100 R14: 00000000000009c0 R15: 0000000020014d00 [ 292.084655][ T5585] [ 292.094098][ T5578] anon 0 [ 292.094098][ T5578] file 24576 [ 292.094098][ T5578] kernel_stack 0 [ 292.094098][ T5578] pagetables 0 [ 292.094098][ T5578] percpu 0 [ 292.094098][ T5578] sock 0 [ 292.094098][ T5578] vmalloc 0 [ 292.094098][ T5578] shmem 24576 [ 292.094098][ T5578] file_mapped 24576 [ 292.094098][ T5578] file_dirty 0 [ 292.094098][ T5578] file_writeback 0 [ 292.094098][ T5578] swapcached 0 [ 292.094098][ T5578] inactive_anon 0 [ 292.094098][ T5578] active_anon 24576 [ 292.094098][ T5578] inactive_file 0 [ 292.094098][ T5578] active_file 0 [ 292.094098][ T5578] unevictable 0 [ 292.094098][ T5578] slab_reclaimable 4400 [ 292.094098][ T5578] slab_unreclaimable 13400 [ 292.094098][ T5578] slab 17800 [ 292.094098][ T5578] workingset_refault_anon 0 [ 292.094098][ T5578] workingset_refault_file 1 [ 292.094098][ T5578] workingset_activate_anon 0 [ 292.094098][ T5578] workingset_activate_file 0 [ 292.094098][ T5578] workingset_restore_anon 0 [ 292.182385][ T5578] Out of memory and no killable processes... [ 292.567142][ T2501] device hsr_slave_0 left promiscuous mode [ 292.573184][ T2501] device hsr_slave_1 left promiscuous mode [ 292.579605][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.587007][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.594850][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.602230][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.610046][ T2501] device bridge_slave_1 left promiscuous mode [ 292.616264][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.623692][ T2501] device bridge_slave_0 left promiscuous mode [ 292.629923][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.639203][ T2501] device veth1_macvtap left promiscuous mode [ 292.645218][ T2501] device veth0_macvtap left promiscuous mode [ 292.651242][ T2501] device veth1_vlan left promiscuous mode [ 292.657004][ T2501] device veth0_vlan left promiscuous mode [ 292.737948][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 292.748623][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 292.758476][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.770249][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.799099][ T2501] bond0 (unregistering): Released all slaves [ 293.343186][ T5592] chnl_net:caif_netlink_parms(): no params data found [ 293.373661][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.380876][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.388556][ T5592] device bridge_slave_0 entered promiscuous mode [ 293.395981][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.403036][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.410808][ T5592] device bridge_slave_1 entered promiscuous mode [ 293.426570][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.436943][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.455136][ T5592] team0: Port device team_slave_0 added [ 293.461812][ T5592] team0: Port device team_slave_1 added [ 293.475477][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.482438][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.508355][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.519533][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.526509][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.552421][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.573997][ T5592] device hsr_slave_0 entered promiscuous mode [ 293.580527][ T5592] device hsr_slave_1 entered promiscuous mode [ 293.588038][ T5592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.595595][ T5592] Cannot create hsr debugfs directory [ 293.622876][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.629936][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.637244][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.644282][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.674238][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.684844][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.692717][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.702150][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.713418][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.723950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.732482][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.739549][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.756853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.765236][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.772252][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.780996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.789778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.800872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.808854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.819958][ T5592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.830967][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.840413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.855620][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.863065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.870564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.934989][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.943837][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.981001][ T5592] device veth0_vlan entered promiscuous mode [ 293.987942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.996240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.005922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.013722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.023592][ T5592] device veth1_vlan entered promiscuous mode [ 294.036221][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.044175][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.052392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.060821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.070992][ T5592] device veth0_macvtap entered promiscuous mode [ 294.079467][ T5592] device veth1_macvtap entered promiscuous mode [ 294.090192][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.100679][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.110520][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.120989][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.130792][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.141207][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.151012][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.161485][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.171295][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.181743][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.192719][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.200979][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.209124][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.217873][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.226604][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.236491][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.246915][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.256728][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.267206][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.277056][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.287460][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.297329][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.307801][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.317683][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.328087][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.339242][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.346827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.356138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:09:18 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:18 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 16:09:18 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:18 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="041ebd127ff913441c5a4d3f4f0ea77d52a9023cd322a3b9c3ac2c983307073097efa2227626a49c5ddc86ff9d3f5645414b0ce5e801e0082657f2187e387c445cc21780f2a0b1bfe8f973527244893125c6d7f873e8babf8ad810d200b700a1d498cb02b06a69c67bd2c5617ca6305d88171c6a154700f35b1be715d3583ee2e01d228e020465d9e4468e6bbb821a57f09b06dcfab4792b7b618bcbca0cbfc655868244d1c65e") 16:09:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 8) 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 294.572573][ T5636] FAULT_INJECTION: forcing a failure. [ 294.572573][ T5636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.581604][ T5634] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 294.585906][ T5636] CPU: 1 PID: 5636 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 294.585930][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.617074][ T5636] Call Trace: [ 294.620421][ T5636] [ 294.623335][ T5636] dump_stack_lvl+0xd6/0x122 [ 294.627918][ T5636] dump_stack+0x11/0x1b [ 294.632096][ T5636] should_fail+0x23c/0x250 [ 294.636497][ T5636] __alloc_pages+0x102/0x330 [ 294.641070][ T5636] alloc_pages_vma+0x67e/0x810 [ 294.645857][ T5636] shmem_getpage_gfp+0x8b4/0x12c0 [ 294.650913][ T5636] shmem_write_begin+0x7e/0x100 [ 294.655753][ T5636] generic_perform_write+0x1c8/0x400 [ 294.661025][ T5636] ? current_time+0xed/0x1a0 [ 294.665606][ T5636] __generic_file_write_iter+0xf7/0x2b0 [ 294.671141][ T5636] ? generic_write_checks+0x250/0x290 [ 294.676503][ T5636] generic_file_write_iter+0x75/0x130 [ 294.681935][ T5636] vfs_write+0x7f5/0x950 [ 294.686205][ T5636] __x64_sys_pwrite64+0xf5/0x150 [ 294.691131][ T5636] do_syscall_64+0x44/0xd0 [ 294.695534][ T5636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 294.701476][ T5636] RIP: 0033:0x7ff1ebbfd027 [ 294.705892][ T5636] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 294.725481][ T5636] RSP: 002b:00007ff1eadbff00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 294.733875][ T5636] RAX: ffffffffffffffda RBX: 00007ff1ebc939c8 RCX: 00007ff1ebbfd027 [ 294.741921][ T5636] RDX: 0000000000000063 RSI: 0000000020010000 RDI: 0000000000000004 [ 294.749875][ T5636] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007ff1eadc01d0 [ 294.757877][ T5636] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 16:09:18 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 294.765870][ T5636] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 294.773831][ T5636] [ 294.776836][ T5634] CPU: 0 PID: 5634 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 294.787775][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.797832][ T5634] Call Trace: [ 294.801106][ T5634] [ 294.804110][ T5634] dump_stack_lvl+0xd6/0x122 [ 294.808744][ T5634] dump_stack+0x11/0x1b [ 294.813036][ T5634] dump_header+0x98/0x410 [ 294.817432][ T5634] oom_kill_process+0x18e/0x4a0 [ 294.818685][ T5636] loop2: detected capacity change from 0 to 4 [ 294.822303][ T5634] out_of_memory+0x61d/0x8c0 [ 294.822327][ T5634] memory_max_write+0x32c/0x3d0 [ 294.837769][ T5634] ? memory_max_show+0x70/0x70 [ 294.842645][ T5634] cgroup_file_write+0x161/0x300 [ 294.847576][ T5634] ? __check_object_size+0x22a/0x2d0 [ 294.852848][ T5634] ? cgroup_seqfile_stop+0x70/0x70 [ 294.857943][ T5634] kernfs_fop_write_iter+0x1d3/0x2d0 [ 294.863246][ T5634] do_iter_readv_writev+0x2de/0x380 [ 294.868481][ T5634] do_iter_write+0x192/0x5c0 [ 294.873095][ T5634] ? splice_from_pipe_next+0x34f/0x3b0 [ 294.878544][ T5634] ? kmalloc_array+0x2d/0x40 [ 294.883220][ T5634] vfs_iter_write+0x4c/0x70 [ 294.887710][ T5634] iter_file_splice_write+0x43a/0x790 [ 294.893076][ T5634] ? splice_from_pipe+0xd0/0xd0 [ 294.897959][ T5634] direct_splice_actor+0x80/0xa0 [ 294.902885][ T5634] splice_direct_to_actor+0x345/0x650 [ 294.908259][ T5634] ? do_splice_direct+0x190/0x190 [ 294.913313][ T5634] do_splice_direct+0x106/0x190 [ 294.918219][ T5634] do_sendfile+0x675/0xc40 [ 294.922654][ T5634] __x64_sys_sendfile64+0x102/0x140 [ 294.927918][ T5634] do_syscall_64+0x44/0xd0 [ 294.932326][ T5634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 294.938223][ T5634] RIP: 0033:0x7efc3b498059 [ 294.942625][ T5634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 294.962289][ T5634] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 294.970699][ T5634] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 294.978691][ T5634] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 294.986648][ T5634] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 294.994623][ T5634] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 295.002579][ T5634] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 295.010561][ T5634] [ 295.013667][ T5634] memory: usage 100kB, limit 0kB, failcnt 985 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 295.013954][ T5636] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 295.019761][ T5634] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 295.019773][ T5634] Memory cgroup stats for /syz1: [ 295.042064][ T5634] anon 24576 [ 295.042064][ T5634] file 24576 [ 295.042064][ T5634] kernel_stack 0 [ 295.042064][ T5634] pagetables 8192 [ 295.042064][ T5634] percpu 0 [ 295.042064][ T5634] sock 0 [ 295.042064][ T5634] vmalloc 0 [ 295.042064][ T5634] shmem 24576 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 295.042064][ T5634] file_mapped 24576 [ 295.042064][ T5634] file_dirty 0 [ 295.042064][ T5634] file_writeback 0 [ 295.042064][ T5634] swapcached 0 [ 295.042064][ T5634] inactive_anon 24576 [ 295.042064][ T5634] active_anon 24576 [ 295.042064][ T5634] inactive_file 0 [ 295.042064][ T5634] active_file 0 [ 295.042064][ T5634] unevictable 0 [ 295.042064][ T5634] slab_reclaimable 12672 [ 295.042064][ T5634] slab_unreclaimable 13640 [ 295.042064][ T5634] slab 26312 [ 295.042064][ T5634] workingset_refault_anon 0 [ 295.042064][ T5634] workingset_refault_file 1 [ 295.042064][ T5634] workingset_activate_anon 0 [ 295.042064][ T5634] workingset_activate_file 0 [ 295.042064][ T5634] workingset_restore_anon 0 [ 295.136333][ T5634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5592,uid=0 [ 295.151573][ T5634] Memory cgroup out of memory: Killed process 5592 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 295.170430][ T26] oom_reaper: reaped process 5592 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB [ 295.189246][ T5634] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 295.199487][ T5634] CPU: 1 PID: 5634 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 295.210470][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.220551][ T5634] Call Trace: [ 295.223814][ T5634] [ 295.226725][ T5634] dump_stack_lvl+0xd6/0x122 [ 295.231296][ T5634] dump_stack+0x11/0x1b [ 295.235438][ T5634] dump_header+0x98/0x410 [ 295.239761][ T5634] out_of_memory+0x65c/0x8c0 [ 295.244333][ T5634] memory_max_write+0x32c/0x3d0 [ 295.249176][ T5634] ? memory_max_show+0x70/0x70 [ 295.253919][ T5634] cgroup_file_write+0x161/0x300 [ 295.258834][ T5634] ? __check_object_size+0x22a/0x2d0 [ 295.264098][ T5634] ? cgroup_seqfile_stop+0x70/0x70 [ 295.269188][ T5634] kernfs_fop_write_iter+0x1d3/0x2d0 [ 295.274533][ T5634] do_iter_readv_writev+0x2de/0x380 [ 295.279713][ T5634] do_iter_write+0x192/0x5c0 [ 295.284283][ T5634] ? splice_from_pipe_next+0x34f/0x3b0 [ 295.289759][ T5634] ? kmalloc_array+0x2d/0x40 [ 295.294363][ T5634] vfs_iter_write+0x4c/0x70 [ 295.298975][ T5634] iter_file_splice_write+0x43a/0x790 [ 295.304330][ T5634] ? splice_from_pipe+0xd0/0xd0 [ 295.309163][ T5634] direct_splice_actor+0x80/0xa0 [ 295.314226][ T5634] splice_direct_to_actor+0x345/0x650 [ 295.319586][ T5634] ? do_splice_direct+0x190/0x190 [ 295.324652][ T5634] do_splice_direct+0x106/0x190 [ 295.329516][ T5634] do_sendfile+0x675/0xc40 [ 295.333925][ T5634] __x64_sys_sendfile64+0x102/0x140 [ 295.339104][ T5634] do_syscall_64+0x44/0xd0 [ 295.343526][ T5634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 295.349405][ T5634] RIP: 0033:0x7efc3b498059 [ 295.353800][ T5634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 295.373392][ T5634] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.381805][ T5634] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 295.389759][ T5634] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 295.397726][ T5634] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 295.405678][ T5634] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 295.413687][ T5634] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 295.421656][ T5634] [ 295.424792][ T5634] memory: usage 48kB, limit 0kB, failcnt 1002 [ 295.430851][ T5634] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 295.437704][ T5634] Memory cgroup stats for /syz1: [ 295.438037][ T5634] anon 0 [ 295.438037][ T5634] file 24576 [ 295.438037][ T5634] kernel_stack 0 [ 295.438037][ T5634] pagetables 0 [ 295.438037][ T5634] percpu 0 [ 295.438037][ T5634] sock 0 [ 295.438037][ T5634] vmalloc 0 [ 295.438037][ T5634] shmem 24576 [ 295.438037][ T5634] file_mapped 24576 [ 295.438037][ T5634] file_dirty 0 [ 295.438037][ T5634] file_writeback 0 [ 295.438037][ T5634] swapcached 0 [ 295.438037][ T5634] inactive_anon 0 [ 295.438037][ T5634] active_anon 24576 [ 295.438037][ T5634] inactive_file 0 [ 295.438037][ T5634] active_file 0 [ 295.438037][ T5634] unevictable 0 [ 295.438037][ T5634] slab_reclaimable 5544 [ 295.438037][ T5634] slab_unreclaimable 13400 [ 295.438037][ T5634] slab 18944 [ 295.438037][ T5634] workingset_refault_anon 0 [ 295.438037][ T5634] workingset_refault_file 1 [ 295.438037][ T5634] workingset_activate_anon 0 [ 295.438037][ T5634] workingset_activate_file 0 [ 295.438037][ T5634] workingset_restore_anon 0 [ 295.531204][ T5634] Out of memory and no killable processes... [ 295.538461][ T5641] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 295.548671][ T5641] CPU: 0 PID: 5641 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 295.559636][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.569884][ T5641] Call Trace: [ 295.574377][ T5641] [ 295.577337][ T5641] dump_stack_lvl+0xd6/0x122 [ 295.582199][ T5641] dump_stack+0x11/0x1b [ 295.586479][ T5641] dump_header+0x98/0x410 [ 295.590834][ T5641] out_of_memory+0x65c/0x8c0 [ 295.595478][ T5641] memory_max_write+0x32c/0x3d0 [ 295.600364][ T5641] ? memory_max_show+0x70/0x70 [ 295.605124][ T5641] cgroup_file_write+0x161/0x300 [ 295.610042][ T5641] ? __check_object_size+0x22a/0x2d0 [ 295.615392][ T5641] ? cgroup_seqfile_stop+0x70/0x70 [ 295.620492][ T5641] kernfs_fop_write_iter+0x1d3/0x2d0 [ 295.625835][ T5641] do_iter_readv_writev+0x2de/0x380 [ 295.631014][ T5641] do_iter_write+0x192/0x5c0 [ 295.635579][ T5641] ? splice_from_pipe_next+0x34f/0x3b0 [ 295.641111][ T5641] ? kmalloc_array+0x2d/0x40 [ 295.645712][ T5641] vfs_iter_write+0x4c/0x70 [ 295.650192][ T5641] iter_file_splice_write+0x43a/0x790 [ 295.655568][ T5641] ? splice_from_pipe+0xd0/0xd0 [ 295.660417][ T5641] direct_splice_actor+0x80/0xa0 [ 295.665346][ T5641] splice_direct_to_actor+0x345/0x650 [ 295.670716][ T5641] ? do_splice_direct+0x190/0x190 [ 295.675743][ T5641] do_splice_direct+0x106/0x190 [ 295.680572][ T5641] do_sendfile+0x675/0xc40 [ 295.684969][ T5641] __x64_sys_sendfile64+0x102/0x140 [ 295.690148][ T5641] do_syscall_64+0x44/0xd0 [ 295.694579][ T5641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 295.700549][ T5641] RIP: 0033:0x7fdafc148059 [ 295.704959][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 295.724659][ T5641] RSP: 002b:00007fdafb2be168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.733068][ T5641] RAX: ffffffffffffffda RBX: 00007fdafc25af60 RCX: 00007fdafc148059 [ 295.741050][ T5641] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 295.749056][ T5641] RBP: 00007fdafc1a208d R08: 0000000000000000 R09: 0000000000000000 [ 295.757015][ T5641] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 295.764970][ T5641] R13: 00007ffd8ec620bf R14: 00007fdafb2be300 R15: 0000000000022000 [ 295.773010][ T5641] [ 295.776111][ T5641] memory: usage 48kB, limit 0kB, failcnt 1002 [ 295.782186][ T5641] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 295.789077][ T5641] Memory cgroup stats for /syz1: [ 295.790311][ T5641] anon 0 [ 295.790311][ T5641] file 24576 [ 295.790311][ T5641] kernel_stack 0 [ 295.790311][ T5641] pagetables 0 [ 295.790311][ T5641] percpu 0 [ 295.790311][ T5641] sock 0 [ 295.790311][ T5641] vmalloc 0 [ 295.790311][ T5641] shmem 24576 [ 295.790311][ T5641] file_mapped 24576 [ 295.790311][ T5641] file_dirty 0 [ 295.790311][ T5641] file_writeback 0 [ 295.790311][ T5641] swapcached 0 [ 295.790311][ T5641] inactive_anon 0 [ 295.790311][ T5641] active_anon 24576 [ 295.790311][ T5641] inactive_file 0 [ 295.790311][ T5641] active_file 0 [ 295.790311][ T5641] unevictable 0 [ 295.790311][ T5641] slab_reclaimable 5544 [ 295.790311][ T5641] slab_unreclaimable 13400 [ 295.790311][ T5641] slab 18944 [ 295.790311][ T5641] workingset_refault_anon 0 [ 295.790311][ T5641] workingset_refault_file 1 [ 295.790311][ T5641] workingset_activate_anon 0 [ 295.790311][ T5641] workingset_activate_file 0 16:09:19 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) (fail_nth: 9) 16:09:19 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="041ebd127ff913441c5a4d3f4f0ea77d52a9023cd322a3b9c3ac2c983307073097efa2227626a49c5ddc86ff9d3f5645414b0ce5e801e0082657f2187e387c445cc21780f2a0b1bfe8f973527244893125c6d7f873e8babf8ad810d200b700a1d498cb02b06a69c67bd2c5617ca6305d88171c6a154700f35b1be715d3583ee2e01d228e020465d9e4468e6bbb821a57f09b06dcfab4792b7b618bcbca0cbfc655868244d1c65e") pipe(&(0x7f0000000240)) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="041ebd127ff913441c5a4d3f4f0ea77d52a9023cd322a3b9c3ac2c983307073097efa2227626a49c5ddc86ff9d3f5645414b0ce5e801e0082657f2187e387c445cc21780f2a0b1bfe8f973527244893125c6d7f873e8babf8ad810d200b700a1d498cb02b06a69c67bd2c5617ca6305d88171c6a154700f35b1be715d3583ee2e01d228e020465d9e4468e6bbb821a57f09b06dcfab4792b7b618bcbca0cbfc655868244d1c65e") (async) 16:09:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 295.790311][ T5641] workingset_restore_anon 0 [ 295.883504][ T5641] Out of memory and no killable processes... 16:09:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:19 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) [ 295.941995][ T5652] FAULT_INJECTION: forcing a failure. [ 295.941995][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.955206][ T5652] CPU: 1 PID: 5652 Comm: syz-executor.2 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 295.966199][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.976255][ T5652] Call Trace: [ 295.979613][ T5652] [ 295.982540][ T5652] dump_stack_lvl+0xd6/0x122 [ 295.987138][ T5652] dump_stack+0x11/0x1b [ 295.991299][ T5652] should_fail+0x23c/0x250 [ 295.995719][ T5652] should_fail_usercopy+0x16/0x20 [ 296.000769][ T5652] copy_page_from_iter_atomic+0x2f1/0xcd0 [ 296.006499][ T5652] ? shmem_write_begin+0x7e/0x100 [ 296.011530][ T5652] generic_perform_write+0x211/0x400 [ 296.016846][ T5652] ? current_time+0xed/0x1a0 [ 296.021444][ T5652] __generic_file_write_iter+0xf7/0x2b0 [ 296.027066][ T5652] ? generic_write_checks+0x250/0x290 [ 296.032463][ T5652] generic_file_write_iter+0x75/0x130 [ 296.037841][ T5652] vfs_write+0x7f5/0x950 [ 296.042160][ T5652] __x64_sys_pwrite64+0xf5/0x150 [ 296.047099][ T5652] do_syscall_64+0x44/0xd0 [ 296.051585][ T5652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.057561][ T5652] RIP: 0033:0x7ff1ebbfd027 [ 296.062017][ T5652] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 296.081626][ T5652] RSP: 002b:00007ff1eadbff00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 296.090039][ T5652] RAX: ffffffffffffffda RBX: 00007ff1ebc939c8 RCX: 00007ff1ebbfd027 [ 296.098062][ T5652] RDX: 0000000000000063 RSI: 0000000020010000 RDI: 0000000000000004 [ 296.106089][ T5652] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007ff1eadc01d0 [ 296.114273][ T5652] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 296.122248][ T5652] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 296.130229][ T5652] [ 296.147279][ T5664] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 296.153616][ T5652] loop2: detected capacity change from 0 to 4 [ 296.157572][ T5664] CPU: 0 PID: 5664 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 296.174468][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.184548][ T5664] Call Trace: [ 296.187826][ T5664] [ 296.190746][ T5664] dump_stack_lvl+0xd6/0x122 [ 296.195432][ T5664] dump_stack+0x11/0x1b [ 296.199642][ T5664] dump_header+0x98/0x410 [ 296.203980][ T5664] out_of_memory+0x65c/0x8c0 [ 296.208557][ T5664] memory_max_write+0x32c/0x3d0 [ 296.213424][ T5664] ? memory_max_show+0x70/0x70 [ 296.218175][ T5664] cgroup_file_write+0x161/0x300 [ 296.223167][ T5664] ? __check_object_size+0x22a/0x2d0 [ 296.228440][ T5664] ? cgroup_seqfile_stop+0x70/0x70 [ 296.233583][ T5664] kernfs_fop_write_iter+0x1d3/0x2d0 [ 296.238852][ T5664] do_iter_readv_writev+0x2de/0x380 [ 296.244047][ T5664] do_iter_write+0x192/0x5c0 [ 296.248623][ T5664] ? splice_from_pipe_next+0x34f/0x3b0 [ 296.254074][ T5664] ? kmalloc_array+0x2d/0x40 [ 296.258664][ T5664] vfs_iter_write+0x4c/0x70 [ 296.263154][ T5664] iter_file_splice_write+0x43a/0x790 [ 296.268518][ T5664] ? splice_from_pipe+0xd0/0xd0 [ 296.273384][ T5664] direct_splice_actor+0x80/0xa0 [ 296.278308][ T5664] splice_direct_to_actor+0x345/0x650 [ 296.283751][ T5664] ? do_splice_direct+0x190/0x190 [ 296.288848][ T5664] do_splice_direct+0x106/0x190 [ 296.293751][ T5664] do_sendfile+0x675/0xc40 [ 296.298169][ T5664] __x64_sys_sendfile64+0x102/0x140 [ 296.303426][ T5664] do_syscall_64+0x44/0xd0 [ 296.307827][ T5664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.313722][ T5664] RIP: 0033:0x7efc3b498059 [ 296.318135][ T5664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 296.337725][ T5664] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 296.346122][ T5664] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 296.354092][ T5664] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 296.362044][ T5664] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 296.370072][ T5664] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 296.378071][ T5664] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 296.386206][ T5664] [ 296.389289][ T5664] memory: usage 44kB, limit 0kB, failcnt 1002 [ 296.393737][ T5652] EXT4-fs (loop2): Unsupported encryption level 116 [ 296.395379][ T5664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 296.395391][ T5664] Memory cgroup stats for /syz1: [ 296.409349][ T5664] anon 0 [ 296.409349][ T5664] file 24576 [ 296.409349][ T5664] kernel_stack 0 [ 296.409349][ T5664] pagetables 0 [ 296.409349][ T5664] percpu 0 [ 296.409349][ T5664] sock 0 [ 296.409349][ T5664] vmalloc 0 [ 296.409349][ T5664] shmem 24576 [ 296.409349][ T5664] file_mapped 24576 [ 296.409349][ T5664] file_dirty 0 [ 296.409349][ T5664] file_writeback 0 [ 296.409349][ T5664] swapcached 0 [ 296.409349][ T5664] inactive_anon 0 [ 296.409349][ T5664] active_anon 24576 [ 296.409349][ T5664] inactive_file 0 [ 296.409349][ T5664] active_file 0 [ 296.409349][ T5664] unevictable 0 [ 296.409349][ T5664] slab_reclaimable 4400 [ 296.409349][ T5664] slab_unreclaimable 13400 [ 296.409349][ T5664] slab 17800 [ 296.409349][ T5664] workingset_refault_anon 0 [ 296.409349][ T5664] workingset_refault_file 1 [ 296.409349][ T5664] workingset_activate_anon 0 [ 296.409349][ T5664] workingset_activate_file 0 16:09:20 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 296.409349][ T5664] workingset_restore_anon 0 [ 296.502533][ T5664] Out of memory and no killable processes... [ 296.534024][ T5668] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 296.544319][ T5668] CPU: 0 PID: 5668 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 296.555260][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.565394][ T5668] Call Trace: [ 296.568712][ T5668] [ 296.571649][ T5668] dump_stack_lvl+0xd6/0x122 [ 296.576330][ T5668] dump_stack+0x11/0x1b [ 296.580514][ T5668] dump_header+0x98/0x410 [ 296.584892][ T5668] out_of_memory+0x65c/0x8c0 [ 296.589540][ T5668] memory_max_write+0x32c/0x3d0 [ 296.594409][ T5668] ? memory_max_show+0x70/0x70 [ 296.599189][ T5668] cgroup_file_write+0x161/0x300 [ 296.604164][ T5668] ? __check_object_size+0x22a/0x2d0 [ 296.609468][ T5668] ? cgroup_seqfile_stop+0x70/0x70 [ 296.614587][ T5668] kernfs_fop_write_iter+0x1d3/0x2d0 [ 296.619959][ T5668] do_iter_readv_writev+0x2de/0x380 [ 296.625238][ T5668] do_iter_write+0x192/0x5c0 [ 296.629838][ T5668] ? splice_from_pipe_next+0x34f/0x3b0 [ 296.635360][ T5668] ? kmalloc_array+0x2d/0x40 [ 296.639969][ T5668] vfs_iter_write+0x4c/0x70 [ 296.644488][ T5668] iter_file_splice_write+0x43a/0x790 [ 296.649933][ T5668] ? splice_from_pipe+0xd0/0xd0 [ 296.654794][ T5668] direct_splice_actor+0x80/0xa0 [ 296.659745][ T5668] splice_direct_to_actor+0x345/0x650 [ 296.665192][ T5668] ? do_splice_direct+0x190/0x190 [ 296.670234][ T5668] do_splice_direct+0x106/0x190 [ 296.675101][ T5668] do_sendfile+0x675/0xc40 [ 296.679603][ T5668] __x64_sys_sendfile64+0x102/0x140 [ 296.684969][ T5668] do_syscall_64+0x44/0xd0 [ 296.689395][ T5668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.695335][ T5668] RIP: 0033:0x7fdafc148059 [ 296.699758][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 296.719452][ T5668] RSP: 002b:00007fdafb2be168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 296.727873][ T5668] RAX: ffffffffffffffda RBX: 00007fdafc25af60 RCX: 00007fdafc148059 [ 296.735852][ T5668] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 296.743836][ T5668] RBP: 00007fdafc1a208d R08: 0000000000000000 R09: 0000000000000000 [ 296.751889][ T5668] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 296.759868][ T5668] R13: 00007ffd8ec620bf R14: 00007fdafb2be300 R15: 0000000000022000 [ 296.767854][ T5668] [ 296.770924][ T5668] memory: usage 44kB, limit 0kB, failcnt 1002 [ 296.777011][ T5668] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 296.783851][ T5668] Memory cgroup stats for /syz1: [ 296.794501][ T5668] anon 0 [ 296.794501][ T5668] file 24576 [ 296.794501][ T5668] kernel_stack 0 [ 296.794501][ T5668] pagetables 0 [ 296.794501][ T5668] percpu 0 [ 296.794501][ T5668] sock 0 [ 296.794501][ T5668] vmalloc 0 [ 296.794501][ T5668] shmem 24576 [ 296.794501][ T5668] file_mapped 24576 [ 296.794501][ T5668] file_dirty 0 [ 296.794501][ T5668] file_writeback 0 [ 296.794501][ T5668] swapcached 0 [ 296.794501][ T5668] inactive_anon 0 [ 296.794501][ T5668] active_anon 24576 [ 296.794501][ T5668] inactive_file 0 16:09:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:20 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="041ebd127ff913441c5a4d3f4f0ea77d52a9023cd322a3b9c3ac2c983307073097efa2227626a49c5ddc86ff9d3f5645414b0ce5e801e0082657f2187e387c445cc21780f2a0b1bfe8f973527244893125c6d7f873e8babf8ad810d200b700a1d498cb02b06a69c67bd2c5617ca6305d88171c6a154700f35b1be715d3583ee2e01d228e020465d9e4468e6bbb821a57f09b06dcfab4792b7b618bcbca0cbfc655868244d1c65e") 16:09:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:09:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 296.794501][ T5668] active_file 0 [ 296.794501][ T5668] unevictable 0 [ 296.794501][ T5668] slab_reclaimable 4400 [ 296.794501][ T5668] slab_unreclaimable 13400 [ 296.794501][ T5668] slab 17800 [ 296.794501][ T5668] workingset_refault_anon 0 [ 296.794501][ T5668] workingset_refault_file 1 [ 296.794501][ T5668] workingset_activate_anon 0 [ 296.794501][ T5668] workingset_activate_file 0 [ 296.794501][ T5668] workingset_restore_anon 0 [ 296.864221][ T5672] loop2: detected capacity change from 0 to 4 [ 296.887729][ T5668] Out of memory and no killable processes... 16:09:20 executing program 0: unshare(0x0) unshare(0x40040400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000000140)=ANY=[], 0xd8, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1c) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x78, 0x2000000, 0x50, @remote, @private1, 0x10, 0x700, 0xfffff000, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0xf0, 0x29, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xf, 0x1}, {0x6, 0x7}, {0x0, 0x8}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x8, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0x0, 0x99}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff9, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x5, 0xd1}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xe66, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10000, 0x98d7, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x1d5b, 0x0, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffff, 0x9, 0xe78}}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 16:09:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 296.915753][ T5672] EXT4-fs (loop2): Unsupported encryption level 116 [ 296.933814][ T5676] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 296.944215][ T5676] CPU: 1 PID: 5676 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 296.955152][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.965303][ T5676] Call Trace: [ 296.968561][ T5676] [ 296.971473][ T5676] dump_stack_lvl+0xd6/0x122 [ 296.976122][ T5676] dump_stack+0x11/0x1b [ 296.980267][ T5676] dump_header+0x98/0x410 [ 296.984578][ T5676] out_of_memory+0x65c/0x8c0 [ 296.989162][ T5676] memory_max_write+0x32c/0x3d0 [ 296.994021][ T5676] ? memory_max_show+0x70/0x70 [ 296.998781][ T5676] cgroup_file_write+0x161/0x300 [ 297.003714][ T5676] ? __check_object_size+0x22a/0x2d0 [ 297.008998][ T5676] ? cgroup_seqfile_stop+0x70/0x70 [ 297.014134][ T5676] kernfs_fop_write_iter+0x1d3/0x2d0 [ 297.019431][ T5676] do_iter_readv_writev+0x2de/0x380 [ 297.024609][ T5676] do_iter_write+0x192/0x5c0 [ 297.029175][ T5676] ? splice_from_pipe_next+0x34f/0x3b0 [ 297.034618][ T5676] ? kmalloc_array+0x2d/0x40 [ 297.039264][ T5676] vfs_iter_write+0x4c/0x70 [ 297.045220][ T5676] iter_file_splice_write+0x43a/0x790 [ 297.050578][ T5676] ? splice_from_pipe+0xd0/0xd0 [ 297.055472][ T5676] direct_splice_actor+0x80/0xa0 [ 297.060557][ T5676] splice_direct_to_actor+0x345/0x650 [ 297.066274][ T5676] ? do_splice_direct+0x190/0x190 [ 297.071295][ T5676] do_splice_direct+0x106/0x190 [ 297.076173][ T5676] do_sendfile+0x675/0xc40 [ 297.080574][ T5676] __x64_sys_sendfile64+0x102/0x140 [ 297.085834][ T5676] do_syscall_64+0x44/0xd0 [ 297.090235][ T5676] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 297.096115][ T5676] RIP: 0033:0x7efc3b498059 [ 297.100584][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 297.120174][ T5676] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 297.128575][ T5676] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 297.136575][ T5676] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 297.144539][ T5676] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 297.152489][ T5676] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 297.160510][ T5676] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 297.168532][ T5676] [ 297.171567][ T5676] memory: usage 44kB, limit 0kB, failcnt 1002 [ 297.177646][ T5676] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 297.184488][ T5676] Memory cgroup stats for /syz1: [ 297.186391][ T5676] anon 0 [ 297.186391][ T5676] file 24576 [ 297.186391][ T5676] kernel_stack 0 [ 297.186391][ T5676] pagetables 0 [ 297.186391][ T5676] percpu 0 [ 297.186391][ T5676] sock 0 [ 297.186391][ T5676] vmalloc 0 [ 297.186391][ T5676] shmem 24576 [ 297.186391][ T5676] file_mapped 24576 [ 297.186391][ T5676] file_dirty 0 [ 297.186391][ T5676] file_writeback 0 [ 297.186391][ T5676] swapcached 0 [ 297.186391][ T5676] inactive_anon 0 [ 297.186391][ T5676] active_anon 24576 [ 297.186391][ T5676] inactive_file 0 [ 297.186391][ T5676] active_file 0 [ 297.186391][ T5676] unevictable 0 [ 297.186391][ T5676] slab_reclaimable 4400 [ 297.186391][ T5676] slab_unreclaimable 13400 [ 297.186391][ T5676] slab 17800 [ 297.186391][ T5676] workingset_refault_anon 0 [ 297.186391][ T5676] workingset_refault_file 1 16:09:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 297.186391][ T5676] workingset_activate_anon 0 [ 297.186391][ T5676] workingset_activate_file 0 [ 297.186391][ T5676] workingset_restore_anon 0 [ 297.237029][ T5681] loop0: detected capacity change from 0 to 4096 [ 297.279634][ T5676] Out of memory and no killable processes... 16:09:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 297.319644][ T5686] loop2: detected capacity change from 0 to 4 [ 297.334555][ T5686] EXT4-fs (loop2): Unsupported encryption level 116 [ 297.341171][ T5681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.350966][ T24] audit: type=1400 audit(1645805360.815:162): avc: denied { setattr } for pid=5680 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.360070][ T5681] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 297.586596][ T2411] device hsr_slave_0 left promiscuous mode [ 297.592825][ T2411] device hsr_slave_1 left promiscuous mode [ 297.598995][ T2411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.606410][ T2411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.614054][ T2411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.621465][ T2411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.629625][ T2411] device bridge_slave_1 left promiscuous mode [ 297.635757][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.643390][ T2411] device bridge_slave_0 left promiscuous mode [ 297.649566][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.659055][ T2411] device veth1_macvtap left promiscuous mode [ 297.665054][ T2411] device veth0_macvtap left promiscuous mode [ 297.671039][ T2411] device veth1_vlan left promiscuous mode [ 297.676770][ T2411] device veth0_vlan left promiscuous mode [ 297.763118][ T2411] team0 (unregistering): Port device team_slave_1 removed [ 297.772748][ T2411] team0 (unregistering): Port device team_slave_0 removed [ 297.782288][ T2411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.793791][ T2411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.819674][ T2411] bond0 (unregistering): Released all slaves [ 298.123392][ T5694] chnl_net:caif_netlink_parms(): no params data found [ 298.155670][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.162731][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.170602][ T5694] device bridge_slave_0 entered promiscuous mode [ 298.180462][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.187565][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.195344][ T5694] device bridge_slave_1 entered promiscuous mode [ 298.212961][ T5694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.223677][ T5694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.242190][ T5694] team0: Port device team_slave_0 added [ 298.248809][ T5694] team0: Port device team_slave_1 added [ 298.264277][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.271263][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.297199][ T5694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.308921][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.315900][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.341814][ T5694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.364479][ T5694] device hsr_slave_0 entered promiscuous mode [ 298.370879][ T5694] device hsr_slave_1 entered promiscuous mode [ 298.377463][ T5694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.385321][ T5694] Cannot create hsr debugfs directory [ 298.412690][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.419743][ T5694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.426954][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.434021][ T5694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.462585][ T5694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.472825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.481107][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.489325][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.501681][ T5694] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.511288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.519771][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.526796][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.546049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.554381][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.561419][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.570091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.578859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.588980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.598751][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.610049][ T5694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.620983][ T5694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.629347][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.644884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.652357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.661150][ T5694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.736972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.777573][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.786540][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.794181][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.804144][ T5694] device veth0_vlan entered promiscuous mode [ 298.814016][ T5694] device veth1_vlan entered promiscuous mode [ 298.828068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.836044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.844285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.854088][ T5694] device veth0_macvtap entered promiscuous mode [ 298.862316][ T5694] device veth1_macvtap entered promiscuous mode [ 298.873848][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.884271][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.894116][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.904535][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.914351][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.924846][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.934627][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.945175][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.955006][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.965470][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.977334][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.985044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.995471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.006438][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.016928][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.026856][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.037354][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.047159][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.057677][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.067552][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.078080][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.087875][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.098307][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.109169][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.117655][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.126273][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.301680][ T5728] ================================================================== [ 299.309757][ T5728] BUG: KCSAN: data-race in get_cpu_idle_time_us / tick_irq_enter [ 299.317482][ T5728] [ 299.319783][ T5728] write to 0xffff888237c1e0f8 of 8 bytes by interrupt on cpu 0: [ 299.327384][ T5728] tick_irq_enter+0x14a/0x240 [ 299.332043][ T5728] sysvec_apic_timer_interrupt+0x80/0xb0 [ 299.337692][ T5728] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 299.343651][ T5728] acpi_idle_enter+0x282/0x300 [ 299.348399][ T5728] cpuidle_enter_state+0x2b4/0x7d0 [ 299.353497][ T5728] cpuidle_enter+0x3c/0x60 [ 299.357902][ T5728] do_idle+0x1b2/0x250 [ 299.361956][ T5728] cpu_startup_entry+0x15/0x20 [ 299.366703][ T5728] rest_init+0xfa/0x100 [ 299.370842][ T5728] arch_call_rest_init+0xa/0xb [ 299.375596][ T5728] start_kernel+0x5e4/0x669 [ 299.380101][ T5728] secondary_startup_64_no_verify+0xc4/0xcb [ 299.385971][ T5728] [ 299.388278][ T5728] read to 0xffff888237c1e0f8 of 8 bytes by task 5728 on cpu 1: [ 299.395816][ T5728] get_cpu_idle_time_us+0x1dd/0x1f0 [ 299.401009][ T5728] show_stat+0x8bf/0xdd0 [ 299.405245][ T5728] seq_read_iter+0x2e1/0x930 [ 299.409816][ T5728] proc_reg_read_iter+0xd6/0x170 [ 299.414736][ T5728] io_issue_sqe+0xb34/0x9610 [ 299.419312][ T5728] __io_queue_sqe+0x20/0x6a0 [ 299.423879][ T5728] io_queue_sqe+0x46/0x550 [ 299.428274][ T5728] io_submit_sqe+0x796/0x4b34 [ 299.432949][ T5728] io_submit_sqes+0x25f/0x560 [ 299.437608][ T5728] __se_sys_io_uring_enter+0x212/0xb00 [ 299.443061][ T5728] __x64_sys_io_uring_enter+0x74/0x80 [ 299.448411][ T5728] do_syscall_64+0x44/0xd0 [ 299.452803][ T5728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.458763][ T5728] [ 299.461063][ T5728] value changed: 0x000000306f81e356 -> 0x000000306f82f05c [ 299.468139][ T5728] [ 299.470440][ T5728] Reported by Kernel Concurrency Sanitizer on: [ 299.476581][ T5728] CPU: 1 PID: 5728 Comm: syz-executor.1 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 299.487505][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.497540][ T5728] ================================================================== 16:09:23 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:23 executing program 0: unshare(0x0) unshare(0x40040400) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) (async) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000000140)=ANY=[], 0xd8, 0x0) (async, rerun: 32) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1c) (async, rerun: 32) chroot(&(0x7f00000001c0)='./file0\x00') (async) umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x78, 0x2000000, 0x50, @remote, @private1, 0x10, 0x700, 0xfffff000, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0xf0, 0x29, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xf, 0x1}, {0x6, 0x7}, {0x0, 0x8}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x8, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0x0, 0x99}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff9, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x5, 0xd1}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xe66, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10000, 0x98d7, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x1d5b, 0x0, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffff, 0x9, 0xe78}}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 16:09:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:23 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe0ca8eed1f15f3ff8ec0b76fe8000000000000000000000000000aa0000883e8448470c7ca2f212"], 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x6, "cec0e7d71c0d3b7f6f9ac40083e86ae68069a5ce3650974ce725cf98f931805e5d2553b707343a236ff442dfa654fd01b3102204432b618046d46d9748e529b4576e6e255b533fd3d5fae075f6ccbc693d27e2c9b272e4ffff821f702c9650ae9fad27e8ebc4730ee707e2630213dcf4e8cf708b6e69b72080fffe"}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e, 0xb76, 0xdd7, 0x1a0]}) syz_emit_ethernet(0x8b, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x80, 0x0, 0x1}, {0x400}, {0x2}, {0x2}, {0x7343}], @ipv4=@tipc={{0x10, 0x4, 0x1, 0x2d, 0x69, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x1, 0x7fff, 0x3, 0x8, 0x8, 0x4, 0xde22]}, @rr={0x7, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8fb, 0x0, 0x1, 0xc, 0x0, 0x2, 0x8, 0x69b1, 0x1, 0x4e22, 0x4e20}, 0x0, 0x2}}}, [0x0]}}}}}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x2a, 0xfe, ')4', "e32e540aadb2744b41017b67434f32e0233084086eac7f1f4ebcd1c3b72e447b049606663322bc0cde7b22a69b65ea82494f18686fa81996833c95447eb816df9be276e354e286eb26eac25ab68eb44027768864c0a15720d5b129a211a699763c0b403499e52c0087c5f1de13439e7abd6be65e551dffd1eb279795b2a0ca8e8f9b47e4fb18665f2d90e0dec51d5cda6a47b177f95d6586b750a26897bb0bdb65b89fb5e1afe38cbd598d5170b0cbacfedd0b30a1e3ac0c1f9a597bd5196a54b82fc56409c487cba0001f5bc7a11bd60cdb644ba9694dfc1202efd23828edf175c897ecfba76868c62f"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xda8, 0xe1f, 0x3e6, 0x2ca]}) 16:09:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:23 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe0ca8eed1f15f3ff8ec0b76fe8000000000000000000000000000aa0000883e8448470c7ca2f212"], 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x6, "cec0e7d71c0d3b7f6f9ac40083e86ae68069a5ce3650974ce725cf98f931805e5d2553b707343a236ff442dfa654fd01b3102204432b618046d46d9748e529b4576e6e255b533fd3d5fae075f6ccbc693d27e2c9b272e4ffff821f702c9650ae9fad27e8ebc4730ee707e2630213dcf4e8cf708b6e69b72080fffe"}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e, 0xb76, 0xdd7, 0x1a0]}) syz_emit_ethernet(0x8b, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x80, 0x0, 0x1}, {0x400}, {0x2}, {0x2}, {0x7343}], @ipv4=@tipc={{0x10, 0x4, 0x1, 0x2d, 0x69, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x1, 0x7fff, 0x3, 0x8, 0x8, 0x4, 0xde22]}, @rr={0x7, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8fb, 0x0, 0x1, 0xc, 0x0, 0x2, 0x8, 0x69b1, 0x1, 0x4e22, 0x4e20}, 0x0, 0x2}}}, [0x0]}}}}}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x2a, 0xfe, ')4', "e32e540aadb2744b41017b67434f32e0233084086eac7f1f4ebcd1c3b72e447b049606663322bc0cde7b22a69b65ea82494f18686fa81996833c95447eb816df9be276e354e286eb26eac25ab68eb44027768864c0a15720d5b129a211a699763c0b403499e52c0087c5f1de13439e7abd6be65e551dffd1eb279795b2a0ca8e8f9b47e4fb18665f2d90e0dec51d5cda6a47b177f95d6586b750a26897bb0bdb65b89fb5e1afe38cbd598d5170b0cbacfedd0b30a1e3ac0c1f9a597bd5196a54b82fc56409c487cba0001f5bc7a11bd60cdb644ba9694dfc1202efd23828edf175c897ecfba76868c62f"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xda8, 0xe1f, 0x3e6, 0x2ca]}) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe0ca8eed1f15f3ff8ec0b76fe8000000000000000000000000000aa0000883e8448470c7ca2f212"], 0x0) (async) syz_emit_ethernet(0x8d, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x6, "cec0e7d71c0d3b7f6f9ac40083e86ae68069a5ce3650974ce725cf98f931805e5d2553b707343a236ff442dfa654fd01b3102204432b618046d46d9748e529b4576e6e255b533fd3d5fae075f6ccbc693d27e2c9b272e4ffff821f702c9650ae9fad27e8ebc4730ee707e2630213dcf4e8cf708b6e69b72080fffe"}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e, 0xb76, 0xdd7, 0x1a0]}) (async) syz_emit_ethernet(0x8b, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x80, 0x0, 0x1}, {0x400}, {0x2}, {0x2}, {0x7343}], @ipv4=@tipc={{0x10, 0x4, 0x1, 0x2d, 0x69, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x1, 0x7fff, 0x3, 0x8, 0x8, 0x4, 0xde22]}, @rr={0x7, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8fb, 0x0, 0x1, 0xc, 0x0, 0x2, 0x8, 0x69b1, 0x1, 0x4e22, 0x4e20}, 0x0, 0x2}}}, [0x0]}}}}}}, 0x0) (async) syz_emit_ethernet(0x104, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x2a, 0xfe, ')4', "e32e540aadb2744b41017b67434f32e0233084086eac7f1f4ebcd1c3b72e447b049606663322bc0cde7b22a69b65ea82494f18686fa81996833c95447eb816df9be276e354e286eb26eac25ab68eb44027768864c0a15720d5b129a211a699763c0b403499e52c0087c5f1de13439e7abd6be65e551dffd1eb279795b2a0ca8e8f9b47e4fb18665f2d90e0dec51d5cda6a47b177f95d6586b750a26897bb0bdb65b89fb5e1afe38cbd598d5170b0cbacfedd0b30a1e3ac0c1f9a597bd5196a54b82fc56409c487cba0001f5bc7a11bd60cdb644ba9694dfc1202efd23828edf175c897ecfba76868c62f"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xda8, 0xe1f, 0x3e6, 0x2ca]}) (async) 16:09:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 299.630587][ T5734] loop2: detected capacity change from 0 to 4 [ 299.641981][ T5737] loop0: detected capacity change from 0 to 4096 [ 299.663540][ T5734] EXT4-fs (loop2): Unsupported encryption level 116 [ 299.720982][ T5758] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 299.731248][ T5758] CPU: 1 PID: 5758 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 299.742184][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.752264][ T5758] Call Trace: [ 299.755538][ T5758] [ 299.758462][ T5758] dump_stack_lvl+0xd6/0x122 [ 299.763130][ T5758] dump_stack+0x11/0x1b 16:09:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:23 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe0ca8eed1f15f3ff8ec0b76fe8000000000000000000000000000aa0000883e8448470c7ca2f212"], 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x6, "cec0e7d71c0d3b7f6f9ac40083e86ae68069a5ce3650974ce725cf98f931805e5d2553b707343a236ff442dfa654fd01b3102204432b618046d46d9748e529b4576e6e255b533fd3d5fae075f6ccbc693d27e2c9b272e4ffff821f702c9650ae9fad27e8ebc4730ee707e2630213dcf4e8cf708b6e69b72080fffe"}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e, 0xb76, 0xdd7, 0x1a0]}) syz_emit_ethernet(0x8b, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x80, 0x0, 0x1}, {0x400}, {0x2}, {0x2}, {0x7343}], @ipv4=@tipc={{0x10, 0x4, 0x1, 0x2d, 0x69, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x1, 0x7fff, 0x3, 0x8, 0x8, 0x4, 0xde22]}, @rr={0x7, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8fb, 0x0, 0x1, 0xc, 0x0, 0x2, 0x8, 0x69b1, 0x1, 0x4e22, 0x4e20}, 0x0, 0x2}}}, [0x0]}}}}}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x2a, 0xfe, ')4', "e32e540aadb2744b41017b67434f32e0233084086eac7f1f4ebcd1c3b72e447b049606663322bc0cde7b22a69b65ea82494f18686fa81996833c95447eb816df9be276e354e286eb26eac25ab68eb44027768864c0a15720d5b129a211a699763c0b403499e52c0087c5f1de13439e7abd6be65e551dffd1eb279795b2a0ca8e8f9b47e4fb18665f2d90e0dec51d5cda6a47b177f95d6586b750a26897bb0bdb65b89fb5e1afe38cbd598d5170b0cbacfedd0b30a1e3ac0c1f9a597bd5196a54b82fc56409c487cba0001f5bc7a11bd60cdb644ba9694dfc1202efd23828edf175c897ecfba76868c62f"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xda8, 0xe1f, 0x3e6, 0x2ca]}) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602863f1000c2f00fe800000000000000000000000000000fe0ca8eed1f15f3ff8ec0b76fe8000000000000000000000000000aa0000883e8448470c7ca2f212"], 0x0) (async) syz_emit_ethernet(0x8d, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x6, "cec0e7d71c0d3b7f6f9ac40083e86ae68069a5ce3650974ce725cf98f931805e5d2553b707343a236ff442dfa654fd01b3102204432b618046d46d9748e529b4576e6e255b533fd3d5fae075f6ccbc693d27e2c9b272e4ffff821f702c9650ae9fad27e8ebc4730ee707e2630213dcf4e8cf708b6e69b72080fffe"}}}, &(0x7f0000000140)={0x1, 0x3, [0x8e, 0xb76, 0xdd7, 0x1a0]}) (async) syz_emit_ethernet(0x8b, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x80, 0x0, 0x1}, {0x400}, {0x2}, {0x2}, {0x7343}], @ipv4=@tipc={{0x10, 0x4, 0x1, 0x2d, 0x69, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x1, 0x7fff, 0x3, 0x8, 0x8, 0x4, 0xde22]}, @rr={0x7, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8fb, 0x0, 0x1, 0xc, 0x0, 0x2, 0x8, 0x69b1, 0x1, 0x4e22, 0x4e20}, 0x0, 0x2}}}, [0x0]}}}}}}, 0x0) (async) syz_emit_ethernet(0x104, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x2a, 0xfe, ')4', "e32e540aadb2744b41017b67434f32e0233084086eac7f1f4ebcd1c3b72e447b049606663322bc0cde7b22a69b65ea82494f18686fa81996833c95447eb816df9be276e354e286eb26eac25ab68eb44027768864c0a15720d5b129a211a699763c0b403499e52c0087c5f1de13439e7abd6be65e551dffd1eb279795b2a0ca8e8f9b47e4fb18665f2d90e0dec51d5cda6a47b177f95d6586b750a26897bb0bdb65b89fb5e1afe38cbd598d5170b0cbacfedd0b30a1e3ac0c1f9a597bd5196a54b82fc56409c487cba0001f5bc7a11bd60cdb644ba9694dfc1202efd23828edf175c897ecfba76868c62f"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xda8, 0xe1f, 0x3e6, 0x2ca]}) (async) [ 299.765971][ T5737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.767373][ T5758] dump_header+0x98/0x410 [ 299.767399][ T5758] oom_kill_process+0x18e/0x4a0 [ 299.785369][ T5758] out_of_memory+0x61d/0x8c0 [ 299.789967][ T5758] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 299.795786][ T5758] memory_max_write+0x32c/0x3d0 [ 299.800648][ T5758] ? memory_max_show+0x70/0x70 [ 299.805440][ T5758] cgroup_file_write+0x161/0x300 [ 299.810383][ T5758] ? __check_object_size+0x22a/0x2d0 [ 299.815676][ T5758] ? cgroup_seqfile_stop+0x70/0x70 [ 299.820789][ T5758] kernfs_fop_write_iter+0x1d3/0x2d0 [ 299.826059][ T5758] do_iter_readv_writev+0x2de/0x380 [ 299.831330][ T5758] do_iter_write+0x192/0x5c0 [ 299.835972][ T5758] ? splice_from_pipe_next+0x34f/0x3b0 [ 299.841420][ T5758] ? kmalloc_array+0x2d/0x40 [ 299.846027][ T5758] vfs_iter_write+0x4c/0x70 [ 299.850526][ T5758] iter_file_splice_write+0x43a/0x790 [ 299.855970][ T5758] ? splice_from_pipe+0xd0/0xd0 [ 299.860827][ T5758] direct_splice_actor+0x80/0xa0 [ 299.865753][ T5758] splice_direct_to_actor+0x345/0x650 [ 299.871224][ T5758] ? do_splice_direct+0x190/0x190 [ 299.876242][ T5758] do_splice_direct+0x106/0x190 [ 299.881130][ T5758] do_sendfile+0x675/0xc40 [ 299.885537][ T5758] __x64_sys_sendfile64+0x102/0x140 [ 299.890797][ T5758] do_syscall_64+0x44/0xd0 [ 299.895211][ T5758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.901103][ T5758] RIP: 0033:0x7efc3b498059 [ 299.905495][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 299.925114][ T5758] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.933522][ T5758] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 299.941474][ T5758] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 299.949453][ T5758] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 299.957476][ T5758] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 299.965463][ T5758] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 299.973625][ T5758] [ 299.976706][ T5758] memory: usage 6524kB, limit 0kB, failcnt 1021 [ 299.982940][ T5758] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 299.989799][ T5758] Memory cgroup stats for /syz1: [ 299.992442][ T5758] anon 131072 [ 299.992442][ T5758] file 24576 [ 299.992442][ T5758] kernel_stack 32768 [ 299.992442][ T5758] pagetables 98304 [ 299.992442][ T5758] percpu 0 [ 299.992442][ T5758] sock 0 [ 299.992442][ T5758] vmalloc 0 [ 299.992442][ T5758] shmem 24576 [ 299.992442][ T5758] file_mapped 24576 [ 299.992442][ T5758] file_dirty 0 [ 299.992442][ T5758] file_writeback 0 [ 299.992442][ T5758] swapcached 0 [ 299.992442][ T5758] inactive_anon 131072 [ 299.992442][ T5758] active_anon 24576 [ 299.992442][ T5758] inactive_file 0 [ 299.992442][ T5758] active_file 0 [ 299.992442][ T5758] unevictable 0 [ 299.992442][ T5758] slab_reclaimable 17624 [ 299.992442][ T5758] slab_unreclaimable 52048 [ 299.992442][ T5758] slab 69672 [ 299.992442][ T5758] workingset_refault_anon 0 [ 299.992442][ T5758] workingset_refault_file 1 [ 299.992442][ T5758] workingset_activate_anon 0 [ 299.992442][ T5758] workingset_activate_file 0 [ 299.992442][ T5758] workingset_restore_anon 0 [ 300.087482][ T5758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5744,uid=0 [ 300.102849][ T5758] Memory cgroup out of memory: Killed process 5744 (syz-executor.1) total-vm:54476kB, anon-rss:376kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 300.122994][ T26] oom_reaper: reaped process 5744 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 300.163635][ T5758] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 300.173964][ T5758] CPU: 0 PID: 5758 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 300.184977][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.195030][ T5758] Call Trace: [ 300.198414][ T5758] [ 300.201333][ T5758] dump_stack_lvl+0xd6/0x122 [ 300.206016][ T5758] dump_stack+0x11/0x1b [ 300.210175][ T5758] dump_header+0x98/0x410 [ 300.214503][ T5758] oom_kill_process+0x18e/0x4a0 [ 300.219453][ T5758] out_of_memory+0x61d/0x8c0 [ 300.224046][ T5758] memory_max_write+0x32c/0x3d0 [ 300.228896][ T5758] ? memory_max_show+0x70/0x70 [ 300.233706][ T5758] cgroup_file_write+0x161/0x300 [ 300.238646][ T5758] ? __check_object_size+0x22a/0x2d0 [ 300.244004][ T5758] ? cgroup_seqfile_stop+0x70/0x70 [ 300.249135][ T5758] kernfs_fop_write_iter+0x1d3/0x2d0 [ 300.254422][ T5758] do_iter_readv_writev+0x2de/0x380 [ 300.259628][ T5758] do_iter_write+0x192/0x5c0 [ 300.264221][ T5758] ? splice_from_pipe_next+0x34f/0x3b0 [ 300.269724][ T5758] ? kmalloc_array+0x2d/0x40 [ 300.274368][ T5758] vfs_iter_write+0x4c/0x70 [ 300.278903][ T5758] iter_file_splice_write+0x43a/0x790 [ 300.284347][ T5758] ? splice_from_pipe+0xd0/0xd0 [ 300.289259][ T5758] direct_splice_actor+0x80/0xa0 [ 300.294201][ T5758] splice_direct_to_actor+0x345/0x650 [ 300.299609][ T5758] ? do_splice_direct+0x190/0x190 [ 300.304713][ T5758] do_splice_direct+0x106/0x190 [ 300.309572][ T5758] do_sendfile+0x675/0xc40 [ 300.314027][ T5758] __x64_sys_sendfile64+0x102/0x140 [ 300.319232][ T5758] do_syscall_64+0x44/0xd0 [ 300.323710][ T5758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 300.329615][ T5758] RIP: 0033:0x7efc3b498059 [ 300.334022][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 300.353638][ T5758] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.362052][ T5758] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 300.370021][ T5758] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 300.377985][ T5758] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 300.385978][ T5758] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 300.393991][ T5758] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 300.401961][ T5758] [ 300.405004][ T5758] memory: usage 6408kB, limit 0kB, failcnt 1274 [ 300.411231][ T5758] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 300.418098][ T5758] Memory cgroup stats for /syz1: [ 300.434240][ T5758] anon 32768 [ 300.434240][ T5758] file 24576 [ 300.434240][ T5758] kernel_stack 16384 [ 300.434240][ T5758] pagetables 98304 [ 300.434240][ T5758] percpu 0 [ 300.434240][ T5758] sock 0 [ 300.434240][ T5758] vmalloc 0 [ 300.434240][ T5758] shmem 24576 [ 300.434240][ T5758] file_mapped 24576 [ 300.434240][ T5758] file_dirty 0 [ 300.434240][ T5758] file_writeback 0 [ 300.434240][ T5758] swapcached 0 [ 300.434240][ T5758] inactive_anon 32768 [ 300.434240][ T5758] active_anon 24576 [ 300.434240][ T5758] inactive_file 0 [ 300.434240][ T5758] active_file 0 [ 300.434240][ T5758] unevictable 0 [ 300.434240][ T5758] slab_reclaimable 12048 [ 300.434240][ T5758] slab_unreclaimable 54160 [ 300.434240][ T5758] slab 66208 [ 300.434240][ T5758] workingset_refault_anon 0 [ 300.434240][ T5758] workingset_refault_file 1 [ 300.434240][ T5758] workingset_activate_anon 0 [ 300.434240][ T5758] workingset_activate_file 0 [ 300.434240][ T5758] workingset_restore_anon 0 [ 300.528899][ T5758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5694,uid=0 [ 300.544096][ T5758] Memory cgroup out of memory: Killed process 5694 (syz-executor.1) total-vm:48480kB, anon-rss:364kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 300.564633][ T26] oom_reaper: reaped process 5694 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB 16:09:24 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:24 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:24 executing program 0: unshare(0x0) unshare(0x40040400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000000140)=ANY=[], 0xd8, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1c) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x78, 0x2000000, 0x50, @remote, @private1, 0x10, 0x700, 0xfffff000, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0xf0, 0x29, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xf, 0x1}, {0x6, 0x7}, {0x0, 0x8}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x8, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0x0, 0x99}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff9, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x5, 0xd1}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xe66, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10000, 0x98d7, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x1d5b, 0x0, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffff, 0x9, 0xe78}}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) unshare(0x0) (async) unshare(0x40040400) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f01000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) (async) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000000140)=ANY=[], 0xd8, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1c) (async) chroot(&(0x7f00000001c0)='./file0\x00') (async) umount2(&(0x7f0000000180)='./file0\x00', 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x78, 0x2000000, 0x50, @remote, @private1, 0x10, 0x700, 0xfffff000, 0x6}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0xf0, 0x29, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xf, 0x1}, {0x6, 0x7}, {0x0, 0x8}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x8, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0x0, 0x99}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff9, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x5, 0xd1}}, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xe66, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x10000, 0x98d7, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x1d5b, 0x0, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffff, 0x9, 0xe78}}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) (async) 16:09:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40100000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020074756e6c300000000000000000000000141003800400010008000200ff7f0000041004"], 0x1040}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x254, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x4018015}, 0x40080) 16:09:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:09:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 300.786410][ T5768] loop2: detected capacity change from 0 to 4 [ 300.796262][ T5768] EXT4-fs (loop2): Unsupported encryption level 116 [ 300.808068][ T5770] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 300.818295][ T5770] CPU: 1 PID: 5770 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 16:09:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40100000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020074756e6c300000000000000000000000141003800400010008000200ff7f0000041004"], 0x1040}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x254, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x4018015}, 0x40080) [ 300.829227][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.839362][ T5770] Call Trace: [ 300.842642][ T5770] [ 300.843968][ T5776] loop0: detected capacity change from 0 to 4096 [ 300.845562][ T5770] dump_stack_lvl+0xd6/0x122 [ 300.845592][ T5770] dump_stack+0x11/0x1b [ 300.845612][ T5770] dump_header+0x98/0x410 [ 300.865005][ T5770] out_of_memory+0x65c/0x8c0 [ 300.869649][ T5770] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 300.875461][ T5770] memory_max_write+0x32c/0x3d0 [ 300.880337][ T5770] ? memory_max_show+0x70/0x70 [ 300.885164][ T5770] cgroup_file_write+0x161/0x300 [ 300.890103][ T5770] ? __check_object_size+0x22a/0x2d0 [ 300.895404][ T5770] ? cgroup_seqfile_stop+0x70/0x70 [ 300.900560][ T5770] kernfs_fop_write_iter+0x1d3/0x2d0 [ 300.905845][ T5770] do_iter_readv_writev+0x2de/0x380 [ 300.911081][ T5770] do_iter_write+0x192/0x5c0 [ 300.915713][ T5770] ? splice_from_pipe_next+0x34f/0x3b0 [ 300.921272][ T5770] ? kmalloc_array+0x2d/0x40 [ 300.925851][ T5770] vfs_iter_write+0x4c/0x70 [ 300.930340][ T5770] iter_file_splice_write+0x43a/0x790 [ 300.935706][ T5770] ? splice_from_pipe+0xd0/0xd0 [ 300.940547][ T5770] direct_splice_actor+0x80/0xa0 [ 300.945555][ T5770] splice_direct_to_actor+0x345/0x650 [ 300.950944][ T5770] ? do_splice_direct+0x190/0x190 [ 300.955959][ T5770] do_splice_direct+0x106/0x190 [ 300.960801][ T5770] do_sendfile+0x675/0xc40 [ 300.965260][ T5770] __x64_sys_sendfile64+0x102/0x140 [ 300.970457][ T5770] do_syscall_64+0x44/0xd0 [ 300.974862][ T5770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 300.980756][ T5770] RIP: 0033:0x7efc3b498059 [ 300.985161][ T5770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 301.004841][ T5770] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 301.013287][ T5770] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 301.021281][ T5770] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 301.029237][ T5770] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 16:09:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 301.037212][ T5770] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 301.045169][ T5770] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 301.053167][ T5770] [ 301.056214][ T5770] memory: usage 68kB, limit 0kB, failcnt 1571 [ 301.062276][ T5770] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:09:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 301.069142][ T5770] Memory cgroup stats for /syz1: [ 301.088107][ T5770] anon 0 [ 301.088107][ T5770] file 24576 [ 301.088107][ T5770] kernel_stack 0 [ 301.088107][ T5770] pagetables 0 [ 301.088107][ T5770] percpu 0 [ 301.088107][ T5770] sock 0 [ 301.088107][ T5770] vmalloc 0 [ 301.088107][ T5770] shmem 24576 [ 301.088107][ T5770] file_mapped 24576 [ 301.088107][ T5770] file_dirty 0 [ 301.088107][ T5770] file_writeback 0 [ 301.088107][ T5770] swapcached 0 [ 301.088107][ T5770] inactive_anon 0 [ 301.088107][ T5770] active_anon 24576 16:09:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40100000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020074756e6c300000000000000000000000141003800400010008000200ff7f0000041004"], 0x1040}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x254, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x4018015}, 0x40080) 16:09:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 301.088107][ T5770] inactive_file 0 [ 301.088107][ T5770] active_file 0 [ 301.088107][ T5770] unevictable 0 [ 301.088107][ T5770] slab_reclaimable 5952 [ 301.088107][ T5770] slab_unreclaimable 13640 [ 301.088107][ T5770] slab 19592 [ 301.088107][ T5770] workingset_refault_anon 0 [ 301.088107][ T5770] workingset_refault_file 1 [ 301.088107][ T5770] workingset_activate_anon 0 [ 301.088107][ T5770] workingset_activate_file 0 [ 301.088107][ T5770] workingset_restore_anon 0 [ 301.181509][ T5770] Out of memory and no killable processes... 16:09:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 301.236104][ T5797] loop2: detected capacity change from 0 to 4 [ 301.257448][ T5797] EXT4-fs (loop2): Unsupported encryption level 116 [ 301.313464][ T5776] EXT4-fs: failed to create workqueue [ 301.318896][ T5776] EXT4-fs (loop0): mount failed [ 302.137071][ T2501] device hsr_slave_0 left promiscuous mode [ 302.143430][ T2501] device hsr_slave_1 left promiscuous mode [ 302.150162][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.157620][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.165557][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.172945][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.180678][ T2501] device bridge_slave_1 left promiscuous mode [ 302.186827][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.195316][ T2501] device bridge_slave_0 left promiscuous mode [ 302.201420][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.211597][ T2501] device veth1_macvtap left promiscuous mode [ 302.217712][ T2501] device veth0_macvtap left promiscuous mode [ 302.223698][ T2501] device veth1_vlan left promiscuous mode [ 302.229445][ T2501] device veth0_vlan left promiscuous mode [ 302.314824][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 302.325974][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 302.336075][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.347493][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.375981][ T2501] bond0 (unregistering): Released all slaves [ 302.765082][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 302.797072][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.804376][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.811931][ T5803] device bridge_slave_0 entered promiscuous mode [ 302.819125][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.826301][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.833932][ T5803] device bridge_slave_1 entered promiscuous mode [ 302.852005][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.862220][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.883456][ T5803] team0: Port device team_slave_0 added [ 302.889874][ T5803] team0: Port device team_slave_1 added [ 302.913308][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.920288][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.946220][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.957264][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.964999][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.990949][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.012731][ T5803] device hsr_slave_0 entered promiscuous mode [ 303.019246][ T5803] device hsr_slave_1 entered promiscuous mode [ 303.025927][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.033483][ T5803] Cannot create hsr debugfs directory [ 303.060150][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.067233][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.074474][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.081651][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.111120][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.122074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.130370][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.139128][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.150342][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.160063][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.168546][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.175620][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.196043][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.204445][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.211519][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.220273][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.228981][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.237490][ T1891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.247999][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.259793][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.268370][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.276366][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.290234][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.297822][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.305363][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.373924][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.417106][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.425909][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.433489][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.442610][ T5803] device veth0_vlan entered promiscuous mode [ 303.452053][ T5803] device veth1_vlan entered promiscuous mode [ 303.467259][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.475538][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.484130][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.493909][ T5803] device veth0_macvtap entered promiscuous mode [ 303.502489][ T5803] device veth1_macvtap entered promiscuous mode [ 303.513956][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.524391][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.534223][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.544657][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.555147][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.565556][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.575499][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.585951][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.595896][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.606326][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.617965][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.625732][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.635225][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.644655][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.655106][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.665001][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.675449][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.685267][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.695700][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.705551][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.715962][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.725784][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.736207][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.749278][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.757898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:09:27 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r7, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:27 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001900), 0x400040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='blkio.bfq.empty_time\x00', 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001980), 0x5, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1, 0xf, &(0x7f00000016c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @generic={0x81, 0xc, 0x0, 0x7, 0x1000}, @ldst={0x1, 0x3, 0x2, 0x4, 0x3, 0xffffffffffffffcc, 0xc}, @alu={0x4, 0x0, 0x4, 0x6, 0x4, 0x80}, @generic={0xcf, 0xb, 0x9, 0x3, 0x5}, @generic={0x7f, 0x7, 0x0, 0x2, 0xfe0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000001740)='GPL\x00', 0x7fffffff, 0x64, &(0x7f0000001780)=""/100, 0x40f00, 0x1, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x0, 0x1, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[r1, r2, r3, 0xffffffffffffffff]}, 0x80) r4 = socket$inet(0x2, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='f2fs_destroy_extent_tree\x00', r0}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) r11 = dup3(r0, r5, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1b, 0x8, &(0x7f0000001480)=@raw=[@func, @map_fd={0x18, 0x5, 0x1, 0x0, r9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2f}], &(0x7f00000014c0)='GPL\x00', 0xa3d2, 0x55, &(0x7f0000001500)=""/85, 0x40f00, 0x1d, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x1, 0x3f, 0x10001}, 0x10, 0x0, r10, 0x0, &(0x7f0000001600)=[r11]}, 0x80) sendmsg(r6, &(0x7f0000001a00)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x57, 0x0, "9ac25a8480c730641fca5a49ef1ae1a2724367859f8ad75298e646622e7854f28b2d2940f26485351465a4ab0eaebacb319f5c8ec67e7600b0b762e37949bc", 0x2d}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="a58bff7833ec9e0bdba4e908ec45f02490150af9053697db47", 0x19}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="21fea6abe6f84ce9546563c92170f06e1f97db3f8d224e0cb5ce7e2ecca387a312f408427406fa0a5fecb915587cd9a274fd85708b4d5d1125a06378f0d7f4bb6bd666f2b5002aa452e2e7fe9ebf4cda2d26be850211dcabe88661358938e7bfaddce38fc454a7ba835c7313cf772e2bd61cd6e4", 0x74}, {&(0x7f0000000480)="0e730b1e09854a716165357ee65aff7cbbba05e2d5b76329ba9cbecd70d7ee10b3e3603686ca2c5d6ff7f55ec4fc6bf7f428647ca8bb365bf8ce7af171d24746aa04e6b78b319e536f63217ca010a5cba8d5322a280826564bc3298e999646ce9cbf224e9ef146bf96a49ad48a9ee8f16331a164a333c6e8105b7a0d8f0f47fc40f244d341fdadbf9bdda4f94e73ad44c8bfd445b352e2abb40c074508da5f4d3f75828fa3bc86f62583843c874d3bdc1a3e542a0cf44b1a8754c956ecbbbec3882fb5e8a7eb3df522e18da21170048049af307b0861f9c439ab8f677cfcaf05613c2e2a76b69cf36c3eedaad2723d80da2b986398ca83680550c2e820df876c28b2a34e2a0e3f87f4e68aa29d2f378bcc7d02df741e2efa71a5af3d5e72b46b4f09a7440cf9813f54cd28eee339f29a132403ef0b767a12f5ba7e836ac20437794536267246766ea9c2c49366e3539ce9a31e43eb8101de408f58fb5edfb8f44b74e259910d52639b8b57070b6969eeb328e4695b2ac58255b549d05ab0afaf147a761ae4d9dce7e2bc3eee3404b50bd4946e61518b4d7d6590b3deb6b0ce3ab1e3186546a737c958da1b0d2d2d0c07a5a01a2bfbddf16adea81a5e313dd24d67dc69a7c9e1d0527132e56fefb0e3174501eb32cd3622facfc2e712367496501227dce4d2dcc36de538513b4d7549985ac79ff84be7a60b12041a2c38f5c14936a8a9c6303b51277af959045d26da91cb146cb9a6a7e7e1fbf16bfa2eea8d49b06ce17bd04b13e966470ca1f25e9d59be32f0a6e2cc455b6c7b8baef0f4169e829a853978435e3ac0d29e0e48bf69bfbbd6b949f6e975a145c598a9636390610ff4c128c835f26244750e3f565e5c73ae5157b811f4370c005959c8def97a1dd1135e6b348888357a4b140eccc5a8a3d779f71fd61b35d4b65daeafc07b4b6010bb4bfa93efdebce1870c54ee5c7c770fe30d406d6cfd828d8268b4a473fca9c7c7eeb81d419c880f787da4fd192f367f09400cdb90cae1adec40757e37ac230a8ad52c2f7af5bdd773bc3685e4b95e10e66c9037b588777aed7d5a15adc2880ddc5643b4d1ddcc8e9640a27a73d2dc888ad3b5bb7b55d87b444f45bf1ce963c081fc13a5e39d0ac389947c6b326bd7f8e1e8e9ddc9104c95f5ae899da264ff96ec5c675c7ec0b29a5a265e202d75f0c91bfe1e03fcab638a82babeedcf2b91725e24e35836706987cf6736d99aee5dde11d33647f7306408f3b36cb20ac9ac7d559563b193338cd929483c01d1938e41d40269e1af9b7deff8ce7ed0d1fd22e90d9f69654c8ade977bf11493131734032efe377c94ce1f4b3a826b33a650c7ebf23d9f4ec0cf990ee489741e0d61b0d1ac314ae3e2c3f13e5848d755adc944b0f52425e6b778ad9eebda747a334281b778ec26b77df85a4d8b5173e6541e6a41284cb3386e7fe05295fbaa8822b5682827085120a63cbc75a8f571e04cc13ab8f1329d978bcdc70b61b33ef5a2332f64abb3ca4ac7de6cccab9bcaf001837dffd5c5bbc5a037f585e730fcfee63abec636e4a84e028ad3b6b5865e54e277ab9972e22e595423265de48617e5c860f7a5de17cb8a40186c5bf3ca952166e49fc9c08da4825ae096ab1495a6ca4f6488df6efb7730f7efa00765d73831186f1628c70d7bad40e95b508d07173e3a91b8f8a2579553dbeecfa33024547724742629c456c76d6ff712945979d8c9901afe1842ab4f9385ccd0f368ac676e982b32c4301766d36c173e3d5266159dfd51a0bda715fb411b8c2e0a4c9a9af0c593523c03737f159639dae25adf40cf63cc2e4e4f68b91f36f10c62bb4a9f1e84cb7c3017e02593bc2f4c35f24cf38b10824144f9fd0d2d626d7ab34bd63176a2c63db93ad8e3453f85b6e089e121aea95f93646b65fd704d17b1e3024246a9c16f489b1d7a997a2cce186af65701d227beff366c289da9af2d9e6aad2a4534cf2b2178a2f2bdaf274adbf5ef6f35c88d3ddc81b1a96a6d92a6768c5a9d33482f4ffb743bd557f6f1aa89fa2dc4f866a608383227e5107759a474dd0a4cf4e669cc03171d85b0cbc444759f0b66fdef66815338fdfb9dbe9dd3ff0648c62be3933c9854ada65ce2c711a6f93ba5ae3802276c07c79af9156eea07360cd137e79b203aae5c117a47cbf924a9fb602ead08fa96813b3aef13e4b5851464c613e61f2ab7208ceeb779efcf00f0eb2f68ad80349d296262c40857ae6da47ecaa2a054543337681fe3c5a50f0b668dc05065b8237eb6a66090603e9ad34132fcc876cc14a1bbb01f9e6bef2e6a47deadca695f299870a46e9a40b7e943c06068374d936177f06809c029777738ff1eec1fe867fe8fcd2c6d3c858d94178791b960374b0a3cb2466c6f0aa5882c5ebd579b1a83ed153159e4245a80c4603f818b18dadd52a1ab14553f659a7f0158632232bc476171e22ee90ff0e330a0686aa18764d3054b13c5a17df79f347f139cee907b481b1b065025d754d167190bd074d7c6a8194f341442473affc93a953d230f71795418dc06f26456359b9d54ce50d852222e235bd702a85e0bf74adf8e3d8fa3001e42facbdb823c46bfc2699d539d01d8b3f8ce41c835302095ecc00b9468a0f1f511db4c6460fe51d41a570128b016f80b6081292576269a187c2e2072cb2b42fb63f0246a3ed45dfb9025917dcc4e35dc5ab051ca02576f031e360d53f447d0d5a670ed76372396f22b84d64f62c2aea4b8caa50fb27b0a4374a068b2680a97df6fa81843ddbd22576b2ea003015d89cc8933abf35f5129992e5797825d3f99dd880ed4b2ffef9239eaae83a95601e768d914d4eb98373bbf268fd8a06914a2b087fdbd300f0f9e15c1dab0cf37bfca439057dca71cc8fe5b6246cfc9da7dcfe14b771925b9a1de73a644e2320a793d7c6b3661b6be299aab3aa9bbcb3f3ed37567215774c046320afd92a5ba2123e09872f0a028be494eecb8fd0e4c8ca02845bac0683bdda41a28ccf891427b03c02ba46eecc7ab2cf8757e16b82fd5b8108f8c9bbc19395bdb1f2de1f43358eb56f91befdfdce42da35eec7b55f92b4c83d205bc1216d25a06dda79c01b0f4499c030c0f90d13bdc33a158b84426b51ae52d5a5e2a3570f116de84a79d3128351f389b1fc7b6afcdeb8c9e49dc6a6d6086223c2da24633163a6d5a8fbfced0f1a110cdf11894db7667cb39099aa391be0077360582117125cb5346b74938d7b51fdf62ce692c3ab497ca737e314ce9baade075ea3c00029d8c5e9ae3d2e8a3b8d0708c5fcc598a5421e0cc0a6714ef51daaf5f991f71a6a2593a14a54a433012441e892dc2d46c607ab11e9a8135356a3ffb9fc216777c8fb067f88971e51334b97879ce02b075dc6d54bd0a1ca1b4f457d807aa61511de1c796ca4c669081f7e734eb649d6478445225febb1f84d6590998f3e7cb61192aec65c78acff3fa04ff7ca047844847f3eff29db3306950e53eaede5973f1cf8db14df959e0f53dad2646ae8484a15c0a0a920ca519685d6a308229c08a068a0dc97bb22fc7a8b9a23ce0d28ef7a49da31959a468e2b416a0c74781bb674fb87269924f0f58fd654062b841db15348c7b6940f3af6ab1436e958f887b1247e95d0b02f9138132a97386361320dd9b522c36bbb6326530283d95587f6111cc491c8e0b8f4fb3be15d7bab4c43485b7a8e16180caed45b357d2c2cb1b465dd2e40a753b8bcf69b8f500adcf537b6a32407beb12aec7524c63e21604ef93f3bc51545014999f3c261af271c30f69611f7ab88c023f8518a6cf556d4f5642d95eabaa4f4fb8a37641a7b6f27c89941089aa6717a563d6d75b932349b93c098261ec611bbbea2ff6ac6d1011e21cca201e1dc8032f64b189b6ae4d3db3e16b9dbdfc3729377301d87253b3644c72089c6e342d6cb5f70729f2f43c74429ce5a4cafea380c1f5a518d7fdb3a3d356118da32ceb14c14a94360d184b6dbd176c118526a35aede790e192e762a630af5031c214d4eaaa4cd57eef923096c364b56711b18c99904a76003622c94d624997f6ed43b0e7c8142af2457c154ff0b94645f7dd7434a83813261c6977b1259a857298867cd5e9babd1c5373a3e122b98f7c6dcfcdda86f680aff6043353a264bced7d1072351c1f01b32c78f5a1d15d2eda07c2d4f3a1a789c848b81474f67c181745be255c6eea39d9ababe6b2913f9f0c8d195bcf0f2ed5bbea904c9bc3883fb9f83d5ab6d9c607d1aaa1c5e9198d7e1c3e00e55ecd7ccb420bae958229187fd015024e5d28f39285afcb5d4b58333d69b59921933340c6fb24f7f4b91589212debbeee961e75260f68bd3b61812dc9035c30dd390d1b2b8973bb3e911c429c0e6d903035679300f93efd17e4cff13956bccfdd4f9dd9137d3791cf1168515c5a04b4cae53ef92d2a17d6e911ce1eb1e6ae60ac4237d86d275886dfce91ccce7bd27246b42858a2c5698bfe0739a0accd5bf6927fcefd3befc5c6fadaf443972ace99068890b85cb1d833998cd2037688369a9f7ec46cd2bfc90333a96605e3e583e92355bd8eed3d201a7be0903cdaebfc503461e83d53f2cfac58b6050daad24c08046d7dd781211fcca6518b577cfb0a4d8d6e5078022eec9d1288f882ee9d97f68ce89d52947111601ce4d86bf1de7bc0529e15cb69d32d66bed9d5ec44c6141db1c6f60917218e4740adf61e0b82194dd9aa814e6bd27c78ce1e7d4c4ee82125330c9dbfa4e237c1f9f27287e05a0ba5b968a9686b734cf1616356d88da88ae93b9347a4020671740511ae4ef62659a8358cdbe3110527cb79bd68e0ab54129a746e8dcb0e7b3fa3f39ce6fddd54a175cd349cb93935accb322fb689d26ee22fe03ccba37b2b82f65dbd3eaaaaa8db5b3397d306b992d3a181fcd669f964cbe6816793ee5f183bde522463ac4adac2f71ecc8dd1b409a698cca07a16af737178251e1ba55aa765728d7b6f958a17a219e28a63fe877725532048b64744fa0c7d82aa8d512c2fa6e13fe3e5265df6606bea2e8f271bdd2926d51261f183379da11dc0884fa5157f1319501975f9d1df6fecc0f4cbc502b1dbe3043635d804c07304b270881f16734262e8acfc688ce8068300886902af91cd44220af258f65c5a02e25b3cee1b3ea93dba9794414341ab7d6fd30da027fd652d1b9acf7be2e4473e540101f279c2632cfbea32e40884efd38289b95482377e3410df820c4be4d2aa34c79db37733c4b00120efe08e3dbf7f7d16de20b2bc5107c50f9a05af5da64171900131d168bcb3501b874fa8c47829b93f0016b79e1aade4f032281c4c09ab472530971d95a59f054126e40a6904f7f31b57951f6e5f4d82bf07bf58b1a8a27343bfaf5fabbedff24c2ccf7b94abfb47176010f532d98ba5e9c80ce0e084c0a7bc7c643bf8a506664f3cdc7f87d10305fedc4274c1d8c91f5dc34745d9e4dd6a9776ece5cf582d6e5cb330e3514ee2542b73b60bb386cb5a6a9a99ff8375ee21531dda1310adb11c8efcd0d3b6aef818aec5101b82fd8312a6db5a5660f3727379eb2f2f6e3e13233aa6519430bef1bfa26dd46ff29081aa47381b052eb8fc71422e9b8b443170a798bfdc17f09e3a549c3310ff68952707daad986a787953c62219e49226c263b51406c15e5792331c55a106589ce2791b30c6db624238e6b6844e7c555b91b793e2ce86ca921a3d47015e6644e9c7d4558f1394c63a4a41c39796821715cb1d8c2d6aaf9bb4e53f7679fc5282012cbbb65c46", 0x1000}], 0x4, &(0x7f0000001800)=ANY=[@ANYRES32=r0], 0x570}, 0x2402c800) dup3(r4, r5, 0x0) 16:09:27 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fd8068b6725e2de}, 0x240040d0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x80) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250c000000050030002f163384b061d3c7000000000000000000", @ANYRES32=r3, @ANYBLOB="08003c000008000005002e000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000900000008000b00af0000000500370001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) truncate(&(0x7f0000000480)='./file0\x00', 0x59c) r4 = syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x6, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0xfef2}, {&(0x7f0000000a00)="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"/280, 0x118, 0x600}, {0x0, 0x0, 0x5}], 0x28104c0, &(0x7f0000000e40)={[{@utf8}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@numtail}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@uni_xlate}, {@shortname_lower}, {@shortname_mixed}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x221d) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000640)={'wlan0\x00', {0x2, 0x0, @initdev}}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @multicast}, 0xfffffffffffffef8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r3, @ANYBLOB="01850010000200009a79ee4b51e6c5ffd8ffffffff88863107ad144d035a"], 0x34}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000001080)=ANY=[@ANYBLOB="b348cd03000000ab", @ANYRESOCT, @ANYBLOB="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"/343], 0x150}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000840)=""/27, 0x1b}], 0x3) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="230394db4511ad2007000000000000004773ef137b44eb720b32c5081a3291310c5d4c9e98baf06da91264d9f3df89c5851fd062027361301e436880e5ff91334ea9f242c362df0d2ebbaefb1437064c0000000000fe9fb2a5a505332100000000000000", 0x64}, {&(0x7f0000000bc0)="1731eca503d6bd4c15cda171aa8b3cf9bad4755ec89188d13e2b07d9da183b9eb65f8d03fc015b73334ca584acad878ea1ead30238e440df48aba540cb1c4745427392ec4e748343ba6e6104c4baa711f736fc82cd834cbf5ff68b1e43bfb0b6eafc8273ef171119dc71a1fa71f8bcb2c09ad117c045bc63127185ca44f3d8e1d4e358ae29bd96e0f4de676a22ac499636e24989a5ef3af1fa41392b80c6aa151e19792707b58e8152071aa700"/182, 0xb6}, {&(0x7f0000000f00)="65c3f0d4bca8abf1f5eaace161f1ad93807fb901005370b461e5f7b28c5639ce73872680fb666e8ad5833d04bcef50337ae49aa3bcef1e08ea0d873c1c4a16f1460a7c7ff4100b8763ed5fe575b6838eb606c650e9e2a54bd6a55c6d5ec777b5968c0b04da295a254686000000000000c349d238168680b9cb32408f29253e5adb61a071dd2941cd75f9a7caaa572ced06a9c600649f7fbe0048a8a765b52bd4c9e6f7f055d5bbfaf0000000ffffffef0000000000007e3d331d1f1bfa876f277152b4a00000000000000000000000000095b500"/225, 0xe1}], 0x3, &(0x7f0000001540)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0e973444e56c238d83b9fd2452b2f5bff03f392a4c664bcc1704da0ddfb0afd47f44f7670c02755fc13122fbfd1a984a12e44f94f7f233d01f6b9b97d1e4a4732c46f073d61c0e38daaff5bb25a2340a47591efd30e477141918d1b9bc88926e2688fc3a55d758a806536e2a79201ada2194165654ce42ff8fe2291f97f5b739b9756b143f59eaa4b40c1ad046089282a31866a783c795d9e10dfc0217dc198e299ee45b3685a804bb4a995497b76f774c988322bef6917dc52a634e7f11bbcd34", @ANYRES16=r3, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="02fca5cb8a4ce57b9a80a6f1b63cfe2bc8262714fbcc9f3f4721ca264027782b40426ca539abb483b962f6a013af13c51bbcbd1149cfab0733723fbc4a6da7c42b2161c51e3da6f8789a69c847be49bf41228fd668497a4388a756fb037fc54bfb22c8d561d5ec573f6fa016f66acf08135675db59e33b386fcf2f9560f12d61f9c13939c22365cd1b7dc7e2e8f5b144ec32c033af83ae083a80ffed1fe863eef578ffcc81d052c461ded9a6dc96b9aae67ea70ddc0203b0e5eeb6657a3d0d05cb2bb52fc2f33ec4", @ANYRESDEC=r1], 0x58, 0x24000801}, 0x40000) 16:09:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:27 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 303.964063][ T5844] loop2: detected capacity change from 0 to 4 [ 303.979567][ T5847] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 303.989894][ T5847] CPU: 0 PID: 5847 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 303.990316][ T5844] EXT4-fs (loop2): Unsupported encryption level 116 [ 304.000839][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.000853][ T5847] Call Trace: [ 304.000859][ T5847] [ 304.000864][ T5847] dump_stack_lvl+0xd6/0x122 [ 304.000898][ T5847] dump_stack+0x11/0x1b [ 304.000918][ T5847] dump_header+0x98/0x410 [ 304.036745][ T5847] oom_kill_process+0x18e/0x4a0 [ 304.041588][ T5847] out_of_memory+0x61d/0x8c0 [ 304.046233][ T5847] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 304.052191][ T5847] memory_max_write+0x32c/0x3d0 [ 304.057061][ T5847] ? memory_max_show+0x70/0x70 [ 304.061807][ T5847] cgroup_file_write+0x161/0x300 [ 304.066760][ T5847] ? __check_object_size+0x22a/0x2d0 [ 304.072031][ T5847] ? cgroup_seqfile_stop+0x70/0x70 [ 304.077128][ T5847] kernfs_fop_write_iter+0x1d3/0x2d0 [ 304.082415][ T5847] do_iter_readv_writev+0x2de/0x380 [ 304.087601][ T5847] do_iter_write+0x192/0x5c0 [ 304.092278][ T5847] ? splice_from_pipe_next+0x34f/0x3b0 [ 304.097736][ T5847] ? kmalloc_array+0x2d/0x40 [ 304.102351][ T5847] vfs_iter_write+0x4c/0x70 [ 304.106893][ T5847] iter_file_splice_write+0x43a/0x790 [ 304.112298][ T5847] ? splice_from_pipe+0xd0/0xd0 [ 304.117139][ T5847] direct_splice_actor+0x80/0xa0 [ 304.122137][ T5847] splice_direct_to_actor+0x345/0x650 [ 304.127495][ T5847] ? do_splice_direct+0x190/0x190 [ 304.132510][ T5847] do_splice_direct+0x106/0x190 [ 304.137350][ T5847] do_sendfile+0x675/0xc40 [ 304.141758][ T5847] __x64_sys_sendfile64+0x102/0x140 [ 304.146943][ T5847] do_syscall_64+0x44/0xd0 [ 304.151391][ T5847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 304.157273][ T5847] RIP: 0033:0x7efc3b498059 [ 304.161841][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 304.181526][ T5847] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.189931][ T5847] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 304.197885][ T5847] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 304.205916][ T5847] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 304.213868][ T5847] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 304.221823][ T5847] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 304.229874][ T5847] [ 304.232913][ T5847] memory: usage 6320kB, limit 0kB, failcnt 1590 [ 304.233900][ T5849] loop0: detected capacity change from 0 to 127 [ 304.239242][ T5847] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 304.239257][ T5847] Memory cgroup stats for /syz1: [ 304.245424][ T5847] anon 36864 [ 304.245424][ T5847] file 24576 [ 304.245424][ T5847] kernel_stack 16384 [ 304.245424][ T5847] pagetables 24576 [ 304.245424][ T5847] percpu 0 [ 304.245424][ T5847] sock 0 [ 304.245424][ T5847] vmalloc 0 [ 304.245424][ T5847] shmem 24576 [ 304.245424][ T5847] file_mapped 24576 [ 304.245424][ T5847] file_dirty 0 [ 304.245424][ T5847] file_writeback 0 [ 304.245424][ T5847] swapcached 0 [ 304.245424][ T5847] inactive_anon 36864 [ 304.245424][ T5847] active_anon 24576 [ 304.245424][ T5847] inactive_file 0 [ 304.245424][ T5847] active_file 0 [ 304.245424][ T5847] unevictable 0 [ 304.245424][ T5847] slab_reclaimable 16056 [ 304.245424][ T5847] slab_unreclaimable 30624 [ 304.245424][ T5847] slab 46680 [ 304.245424][ T5847] workingset_refault_anon 0 [ 304.245424][ T5847] workingset_refault_file 1 [ 304.245424][ T5847] workingset_activate_anon 0 [ 304.245424][ T5847] workingset_activate_file 0 [ 304.245424][ T5847] workingset_restore_anon 0 16:09:27 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 304.261816][ T24] audit: type=1400 audit(1645805367.735:163): avc: denied { mount } for pid=5840 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 304.347091][ T5847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5803,uid=0 [ 304.384493][ T5847] Memory cgroup out of memory: Killed process 5803 (syz-executor.1) total-vm:48480kB, anon-rss:360kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 304.402246][ T26] oom_reaper: reaped process 5803 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:28kB [ 304.416294][ T5847] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 304.425710][ T5848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.426592][ T5847] CPU: 0 PID: 5847 Comm: syz-executor.4 Not tainted 5.17.0-rc5-syzkaller-00189-g53ab78cd6d5a-dirty #0 [ 304.426616][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.426626][ T5847] Call Trace: [ 304.426631][ T5847] 16:09:27 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) [ 304.426637][ T5847] dump_stack_lvl+0xd6/0x122 [ 304.426665][ T5847] dump_stack+0x11/0x1b [ 304.436493][ T5848] device bridge_slave_1 left promiscuous mode [ 304.446871][ T5847] dump_header+0x98/0x410 [ 304.446907][ T5847] out_of_memory+0x65c/0x8c0 [ 304.446926][ T5847] memory_max_write+0x32c/0x3d0 [ 304.446963][ T5847] ? memory_max_show+0x70/0x70 [ 304.446983][ T5847] cgroup_file_write+0x161/0x300 [ 304.457735][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.460427][ T5847] ? __check_object_size+0x22a/0x2d0 [ 304.460456][ T5847] ? cgroup_seqfile_stop+0x70/0x70 [ 304.460477][ T5847] kernfs_fop_write_iter+0x1d3/0x2d0 [ 304.460499][ T5847] do_iter_readv_writev+0x2de/0x380 [ 304.529428][ T5847] do_iter_write+0x192/0x5c0 [ 304.534002][ T5847] ? splice_from_pipe_next+0x34f/0x3b0 [ 304.539551][ T5847] ? kmalloc_array+0x2d/0x40 [ 304.544191][ T5847] vfs_iter_write+0x4c/0x70 [ 304.548762][ T5847] iter_file_splice_write+0x43a/0x790 [ 304.554141][ T5847] ? splice_from_pipe+0xd0/0xd0 [ 304.558972][ T5847] direct_splice_actor+0x80/0xa0 [ 304.563942][ T5847] splice_direct_to_actor+0x345/0x650 [ 304.569327][ T5847] ? do_splice_direct+0x190/0x190 [ 304.574426][ T5847] do_splice_direct+0x106/0x190 [ 304.579286][ T5847] do_sendfile+0x675/0xc40 [ 304.583696][ T5847] __x64_sys_sendfile64+0x102/0x140 [ 304.588934][ T5847] do_syscall_64+0x44/0xd0 [ 304.593330][ T5847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 304.599296][ T5847] RIP: 0033:0x7efc3b498059 [ 304.603818][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 304.623428][ T5847] RSP: 002b:00007efc3a60e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.631832][ T5847] RAX: ffffffffffffffda RBX: 00007efc3b5aaf60 RCX: 00007efc3b498059 [ 304.639823][ T5847] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 304.647803][ T5847] RBP: 00007efc3b4f208d R08: 0000000000000000 R09: 0000000000000000 [ 304.655860][ T5847] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 304.663846][ T5847] R13: 00007ffd6aed181f R14: 00007efc3a60e300 R15: 0000000000022000 [ 304.671808][ T5847] [ 304.675046][ T5847] memory: usage 48kB, limit 0kB, failcnt 1607 [ 304.679526][ T24] audit: type=1400 audit(1645805368.145:164): avc: denied { append } for pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.681105][ T5847] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 304.681119][ T5847] Memory cgroup stats for /syz1 [ 304.703664][ T24] audit: type=1400 audit(1645805368.145:165): avc: denied { open } for pid=1421 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.710350][ T5847] : [ 304.714539][ T5847] anon 0 [ 304.714539][ T5847] file 24576 [ 304.714539][ T5847] kernel_stack 0 [ 304.714539][ T5847] pagetables 0 [ 304.714539][ T5847] percpu 0 [ 304.714539][ T5847] sock 0 [ 304.714539][ T5847] vmalloc 0 [ 304.714539][ T5847] shmem 24576 [ 304.714539][ T5847] file_mapped 24576 [ 304.714539][ T5847] file_dirty 0 [ 304.714539][ T5847] file_writeback 0 [ 304.714539][ T5847] swapcached 0 [ 304.714539][ T5847] inactive_anon 0 [ 304.714539][ T5847] active_anon 24576 [ 304.714539][ T5847] inactive_file 0 [ 304.714539][ T5847] active_file 0 [ 304.714539][ T5847] unevictable 0 [ 304.714539][ T5847] slab_reclaimable 5544 [ 304.714539][ T5847] slab_unreclaimable 13400 [ 304.714539][ T5847] slab 18944 [ 304.714539][ T5847] workingset_refault_anon 0 [ 304.714539][ T5847] workingset_refault_file 1 16:09:28 executing program 4: mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) [ 304.714539][ T5847] workingset_activate_anon 0 [ 304.714539][ T5847] workingset_activate_file 0 [ 304.714539][ T5847] workingset_restore_anon 0 [ 304.715248][ T24] audit: type=1400 audit(1645805368.145:166): avc: denied { getattr } for pid=1421 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.737784][ T5847] Out of memory and no killable processes... [ 304.740121][ T24] audit: type=1400 audit(1645805368.145:167): avc: denied { rename } for pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.740158][ T24] audit: type=1400 audit(1645805368.145:168): avc: denied { unlink } for pid=1421 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 16:09:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) 16:09:28 executing program 4: mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 304.740177][ T24] audit: type=1400 audit(1645805368.145:169): avc: denied { create } for pid=1421 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.869728][ T5855] loop2: detected capacity change from 0 to 4 [ 304.929300][ T5848] device bridge_slave_0 left promiscuous mode [ 304.935519][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.952940][ T5855] EXT4-fs (loop2): Unsupported encryption level 116 16:09:28 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r4 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r4, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:28 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001900), 0x400040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='blkio.bfq.empty_time\x00', 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001980), 0x5, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1, 0xf, &(0x7f00000016c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @generic={0x81, 0xc, 0x0, 0x7, 0x1000}, @ldst={0x1, 0x3, 0x2, 0x4, 0x3, 0xffffffffffffffcc, 0xc}, @alu={0x4, 0x0, 0x4, 0x6, 0x4, 0x80}, @generic={0xcf, 0xb, 0x9, 0x3, 0x5}, @generic={0x7f, 0x7, 0x0, 0x2, 0xfe0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000001740)='GPL\x00', 0x7fffffff, 0x64, &(0x7f0000001780)=""/100, 0x40f00, 0x1, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x0, 0x1, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=[r1, r2, r3, 0xffffffffffffffff]}, 0x80) (async) r4 = socket$inet(0x2, 0x3, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='f2fs_destroy_extent_tree\x00', r0}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) (async) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) r11 = dup3(r0, r5, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1b, 0x8, &(0x7f0000001480)=@raw=[@func, @map_fd={0x18, 0x5, 0x1, 0x0, r9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2f}], &(0x7f00000014c0)='GPL\x00', 0xa3d2, 0x55, &(0x7f0000001500)=""/85, 0x40f00, 0x1d, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x1, 0x3f, 0x10001}, 0x10, 0x0, r10, 0x0, &(0x7f0000001600)=[r11]}, 0x80) (async) sendmsg(r6, &(0x7f0000001a00)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x57, 0x0, "9ac25a8480c730641fca5a49ef1ae1a2724367859f8ad75298e646622e7854f28b2d2940f26485351465a4ab0eaebacb319f5c8ec67e7600b0b762e37949bc", 0x2d}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="a58bff7833ec9e0bdba4e908ec45f02490150af9053697db47", 0x19}, {&(0x7f0000000300)="332064bf8414ed3b6ffd7fafdd3794fa2f1d90140b3c4fc21780f81ff1b6fb6f0fc5bab386c74b688e1f6f8fd45514a8b000444908df8c5a6bd24ded3e2a23cadb2b138c2f15c91bac03701f8ed4f0afe5974a868d0cfd07cc81500ec1f59dba384dcaf51874728154a2f8195c34f6d040ed20f5d9e13ea74f7fcc0c2766e54a3d454094dd7dd0d2a7e48b25470d8bd43b961fa435852611c6221644798036a921f9ace2732675a6c3d8537c1d7d4a4fd0a6f4d63abd615b8c6c1a599000f4e4e6ac260e06e82431a85860a4a96c3934e4e78396daf5b684128bc12a539ed5dc0757aa91a598c328588278bc7ce58e36bdd99f05849363254c91de2db357", 0xfe}, {&(0x7f0000000400)="21fea6abe6f84ce9546563c92170f06e1f97db3f8d224e0cb5ce7e2ecca387a312f408427406fa0a5fecb915587cd9a274fd85708b4d5d1125a06378f0d7f4bb6bd666f2b5002aa452e2e7fe9ebf4cda2d26be850211dcabe88661358938e7bfaddce38fc454a7ba835c7313cf772e2bd61cd6e4", 0x74}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f0000001800)=ANY=[@ANYRES32=r0], 0x570}, 0x2402c800) dup3(r4, r5, 0x0) 16:09:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) 16:09:28 executing program 4: mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000240)="0000000100050000000000000094b1934f5491a26265ae1707930100400000736fd2f4c7cc52fcf95c068a291044a6626c1b94a4fa6bf0ecb11378e954da5a3e0a0eaffb96ce6ea869ffbad077a688257b1087a777641fd63fe9f81ae9db0801edd4ae0f2b59617d2a43839cb48602dde8a0a67abbb939441d46e6c6d24fb424308ca9e111f4f7a6047cb2758fbe26e5365f7034f30074", 0x97, 0x4e0}], 0x0, &(0x7f0000014d00)) 16:09:28 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fd8068b6725e2de}, 0x240040d0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x80) (async) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250c000000050030002f163384b061d3c7000000000000000000", @ANYRES32=r3, @ANYBLOB="08003c000008000005002e000000000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000900000008000b00af0000000500370001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) truncate(&(0x7f0000000480)='./file0\x00', 0x59c) r4 = syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x6, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0xfef2}, {&(0x7f0000000a00)="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"/280, 0x118, 0x600}, {0x0, 0x0, 0x5}], 0x28104c0, &(0x7f0000000e40)={[{@utf8}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@numtail}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@uni_xlate}, {@shortname_lower}, {@shortname_mixed}]}) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x221d) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000640)={'wlan0\x00', {0x2, 0x0, @initdev}}) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @multicast}, 0xfffffffffffffef8) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r3, @ANYBLOB="01850010000200009a79ee4b51e6c5ffd8ffffffff88863107ad144d035a"], 0x34}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000001080)=ANY=[@ANYBLOB="b348cd03000000ab", @ANYRESOCT, @ANYBLOB="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"/343], 0x150}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000840)=""/27, 0x1b}], 0x3) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="230394db4511ad2007000000000000004773ef137b44eb720b32c5081a3291310c5d4c9e98baf06da91264d9f3df89c5851fd062027361301e436880e5ff91334ea9f242c362df0d2ebbaefb1437064c0000000000fe9fb2a5a505332100000000000000", 0x64}, {&(0x7f0000000bc0)="1731eca503d6bd4c15cda171aa8b3cf9bad4755ec89188d13e2b07d9da183b9eb65f8d03fc015b73334ca584acad878ea1ead30238e440df48aba540cb1c4745427392ec4e748343ba6e6104c4baa711f736fc82cd834cbf5ff68b1e43bfb0b6eafc8273ef171119dc71a1fa71f8bcb2c09ad117c045bc63127185ca44f3d8e1d4e358ae29bd96e0f4de676a22ac499636e24989a5ef3af1fa41392b80c6aa151e19792707b58e8152071aa700"/182, 0xb6}, {&(0x7f0000000f00)="65c3f0d4bca8abf1f5eaace161f1ad93807fb901005370b461e5f7b28c5639ce73872680fb666e8ad5833d04bcef50337ae49aa3bcef1e08ea0d873c1c4a16f1460a7c7ff4100b8763ed5fe575b6838eb606c650e9e2a54bd6a55c6d5ec777b5968c0b04da295a254686000000000000c349d238168680b9cb32408f29253e5adb61a071dd2941cd75f9a7caaa572ced06a9c600649f7fbe0048a8a765b52bd4c9e6f7f055d5bbfaf0000000ffffffef0000000000007e3d331d1f1bfa876f277152b4a00000000000000000000000000095b500"/225, 0xe1}], 0x3, &(0x7f0000001540)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0e973444e56c238d83b9fd2452b2f5bff03f392a4c664bcc1704da0ddfb0afd47f44f7670c02755fc13122fbfd1a984a12e44f94f7f233d01f6b9b97d1e4a4732c46f073d61c0e38daaff5bb25a2340a47591efd30e477141918d1b9bc88926e2688fc3a55d758a806536e2a79201ada2194165654ce42ff8fe2291f97f5b739b9756b143f59eaa4b40c1ad046089282a31866a783c795d9e10dfc0217dc198e299ee45b3685a804bb4a995497b76f774c988322bef6917dc52a634e7f11bbcd34", @ANYRES16=r3, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="02fca5cb8a4ce57b9a80a6f1b63cfe2bc8262714fbcc9f3f4721ca264027782b40426ca539abb483b962f6a013af13c51bbcbd1149cfab0733723fbc4a6da7c42b2161c51e3da6f8789a69c847be49bf41228fd668497a4388a756fb037fc54bfb22c8d561d5ec573f6fa016f66acf08135675db59e33b386fcf2f9560f12d61f9c13939c22365cd1b7dc7e2e8f5b144ec32c033af83ae083a80ffed1fe863eef578ffcc81d052c461ded9a6dc96b9aae67ea70ddc0203b0e5eeb6657a3d0d05cb2bb52fc2f33ec4", @ANYRESDEC=r1], 0x58, 0x24000801}, 0x40000) 16:09:28 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r4 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r4, 0x0, &(0x7f00000000c0)='./file0\x00', 0x188, 0x82400, 0x12345}, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1400000, 0x0, 0x0, 0x0) 16:09:28 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:09:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(0x7f0000000540)='memory.max\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3) 16:09:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x832000, &(