000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1114.475115][T18852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18852,uid=0 [ 1114.509104][ T4362] loop5: unable to read partition table [ 1114.518795][T18863] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x8000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4201}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:15 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 1114.527850][T18852] Memory cgroup out of memory: Killed process 18852 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1114.626259][T18858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1114.661350][T18863] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080005520000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x9000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1114.666255][T18877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1114.702844][ T3640] EXT4-fs (loop5): unmounting filesystem. [ 1114.723147][T18863] FAT-fs (loop4): Filesystem has been set read-only [ 1114.731865][T18875] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1114.764202][T18875] CPU: 1 PID: 18875 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1114.774827][T18875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1114.784872][T18875] Call Trace: [ 1114.788135][T18875] [ 1114.791057][T18875] dump_stack_lvl+0xcd/0x134 [ 1114.795645][T18875] dump_header+0x10b/0x7f9 [ 1114.800056][T18875] oom_kill_process.cold+0x10/0x15 [ 1114.805163][T18875] out_of_memory+0x358/0x14a0 [ 1114.809835][T18875] ? find_held_lock+0x2d/0x110 [ 1114.814587][T18875] ? oom_killer_disable+0x270/0x270 [ 1114.819783][T18875] ? find_held_lock+0x2d/0x110 [ 1114.824550][T18875] mem_cgroup_out_of_memory+0x206/0x270 [ 1114.830095][T18875] ? mem_cgroup_margin+0x130/0x130 [ 1114.835196][T18875] ? lock_downgrade+0x6e0/0x6e0 [ 1114.840049][T18875] try_charge_memcg+0xf67/0x13f0 [ 1114.844981][T18875] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1114.850956][T18875] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1114.856664][T18875] ? lock_downgrade+0x6e0/0x6e0 [ 1114.861504][T18875] ? lock_downgrade+0x6e0/0x6e0 [ 1114.866352][T18875] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1114.871896][T18875] __alloc_pages+0x1ef/0x510 [ 1114.876487][T18875] ? page_remove_rmap+0x135/0x1480 [ 1114.881589][T18875] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1114.888346][T18875] ? lock_chain_count+0x20/0x20 [ 1114.893196][T18875] ? __lock_acquire+0xbc3/0x56d0 [ 1114.898125][T18875] alloc_pages+0x1a6/0x270 [ 1114.902537][T18875] pte_alloc_one+0x16/0x230 [ 1114.907035][T18875] __pte_alloc+0x69/0x250 [ 1114.911355][T18875] ? pmd_install+0x150/0x150 [ 1114.915932][T18875] ? hugepage_vma_check+0x44e/0x780 [ 1114.921131][T18875] __handle_mm_fault+0x310b/0x39b0 [ 1114.926245][T18875] ? vm_iomap_memory+0x190/0x190 [ 1114.931192][T18875] handle_mm_fault+0x1c8/0x780 [ 1114.935948][T18875] do_user_addr_fault+0x475/0x1210 [ 1114.941060][T18875] exc_page_fault+0x94/0x170 [ 1114.945646][T18875] asm_exc_page_fault+0x22/0x30 [ 1114.950484][T18875] RIP: 0033:0x7fe688434e7d [ 1114.954888][T18875] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1114.974486][T18875] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1114.980543][T18875] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1114.988503][T18875] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1114.996463][T18875] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1115.004509][T18875] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1115.012469][T18875] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1115.020449][T18875] 22:05:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x6, 0x4400}], 0x0, &(0x7f0000011100)) [ 1115.094475][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.106955][T18875] memory: usage 307200kB, limit 307200kB, failcnt 5406 [ 1115.109281][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.115345][T18875] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1115.138048][T18875] Memory cgroup stats for /syz1: [ 1115.138237][T18875] anon 102400 [ 1115.138237][T18875] file 184320 [ 1115.138237][T18875] kernel 314286080 [ 1115.138237][T18875] kernel_stack 65536 [ 1115.138237][T18875] pagetables 65536 [ 1115.138237][T18875] percpu 5372992 [ 1115.138237][T18875] sock 0 [ 1115.138237][T18875] vmalloc 8192 [ 1115.138237][T18875] shmem 180224 [ 1115.138237][T18875] zswap 0 [ 1115.138237][T18875] zswapped 0 [ 1115.138237][T18875] file_mapped 180224 [ 1115.138237][T18875] file_dirty 4096 [ 1115.138237][T18875] file_writeback 0 [ 1115.138237][T18875] swapcached 0 22:05:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1115.138237][T18875] anon_thp 0 [ 1115.138237][T18875] file_thp 0 [ 1115.138237][T18875] shmem_thp 0 [ 1115.138237][T18875] inactive_anon 102400 [ 1115.138237][T18875] active_anon 180224 [ 1115.138237][T18875] inactive_file 0 [ 1115.138237][T18875] active_file 4096 [ 1115.138237][T18875] unevictable 0 [ 1115.138237][T18875] slab_reclaimable 15280 [ 1115.138237][T18875] slab_unreclaimable 308718208 [ 1115.138237][T18875] slab 308733488 22:05:16 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0024000b0f00000000000000e42df17c67bf95bf27587890a18fcd0000000000", @ANYRES32=r3, @ANYBLOB="00000b00ffffffff000000000900010068667363000000001400020010000300"/44], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1115.293929][T18898] loop5: detected capacity change from 0 to 512 [ 1115.308908][T18900] loop4: detected capacity change from 0 to 68 22:05:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xe000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1115.341543][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1115.353645][T18898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1115.363822][T18900] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080006020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1115.382897][T18875] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18875,uid=0 [ 1115.454865][ T3640] EXT4-fs (loop5): unmounting filesystem. [ 1115.456729][T18875] Memory cgroup out of memory: Killed process 18875 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1115.493007][T18900] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:16 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0024000b0f00000000000000e42df17c67bf95bf27587890a18fcd0000000000", @ANYRES32=r3, @ANYBLOB="00000b00ffffffff000000000900010068667363000000001400020010000300"/44], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0024000b0f00000000000000e42df17c67bf95bf27587890a18fcd0000000000", @ANYRES32=r3, @ANYBLOB="00000b00ffffffff000000000900010068667363000000001400020010000300"/44], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 1115.493060][T18909] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.539013][T18900] FAT-fs (loop4): Filesystem has been set read-only 22:05:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4800}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x7, 0x4400}], 0x0, &(0x7f0000011100)) [ 1115.612894][T18913] loop5: detected capacity change from 0 to 512 [ 1115.632249][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1115.692135][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1115.696883][T18916] loop4: detected capacity change from 0 to 68 [ 1115.733351][T18916] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1115.734374][T18917] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1115.773345][ T4362] loop5: unable to read partition table 22:05:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xf000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1115.781924][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1115.813399][T18917] CPU: 0 PID: 18917 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1115.823840][T18917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1115.833885][T18917] Call Trace: [ 1115.837151][T18917] [ 1115.840073][T18917] dump_stack_lvl+0xcd/0x134 [ 1115.844669][T18917] dump_header+0x10b/0x7f9 [ 1115.849086][T18917] oom_kill_process.cold+0x10/0x15 [ 1115.854200][T18917] out_of_memory+0x358/0x14a0 [ 1115.858871][T18917] ? find_held_lock+0x2d/0x110 [ 1115.863628][T18917] ? oom_killer_disable+0x270/0x270 [ 1115.868821][T18917] ? find_held_lock+0x2d/0x110 [ 1115.873576][T18917] mem_cgroup_out_of_memory+0x206/0x270 [ 1115.879118][T18917] ? mem_cgroup_margin+0x130/0x130 [ 1115.884224][T18917] ? lock_downgrade+0x6e0/0x6e0 [ 1115.889079][T18917] try_charge_memcg+0xf67/0x13f0 [ 1115.894023][T18917] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1115.899997][T18917] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1115.905712][T18917] ? lock_downgrade+0x6e0/0x6e0 [ 1115.910561][T18917] ? lock_downgrade+0x6e0/0x6e0 [ 1115.915412][T18917] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1115.920952][T18917] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1115.927104][T18917] copy_process+0x145a/0x7090 [ 1115.931776][T18917] ? __lock_acquire+0xbc3/0x56d0 [ 1115.936798][T18917] ? __cleanup_sighand+0xb0/0xb0 [ 1115.941740][T18917] kernel_clone+0xe7/0xab0 [ 1115.946146][T18917] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1115.952382][T18917] ? create_io_thread+0xe0/0xe0 [ 1115.957228][T18917] ? find_held_lock+0x2d/0x110 [ 1115.961987][T18917] ? __ct_user_exit+0xff/0x150 [ 1115.966746][T18917] __do_sys_clone+0xba/0x100 [ 1115.971333][T18917] ? kernel_clone+0xab0/0xab0 [ 1115.976010][T18917] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1115.981896][T18917] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1115.987786][T18917] do_syscall_64+0x35/0xb0 [ 1115.992195][T18917] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1115.998081][T18917] RIP: 0033:0x7fe68848a6a1 [ 1116.002490][T18917] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1116.022095][T18917] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1116.030501][T18917] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1116.038473][T18917] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1116.046435][T18917] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1116.054488][T18917] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1116.062540][T18917] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1116.070516][T18917] [ 1116.104859][T18916] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1116.125297][T18916] FAT-fs (loop4): Filesystem has been set read-only [ 1116.125485][T18917] memory: usage 307164kB, limit 307200kB, failcnt 5453 [ 1116.139845][T18913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. 22:05:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000fe20000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1116.142769][T18917] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1116.195122][T18917] Memory cgroup stats for /syz1: [ 1116.195340][T18917] anon 98304 [ 1116.195340][T18917] file 184320 [ 1116.195340][T18917] kernel 314253312 [ 1116.195340][T18917] kernel_stack 32768 [ 1116.195340][T18917] pagetables 65536 [ 1116.195340][T18917] percpu 5372992 [ 1116.195340][T18917] sock 0 [ 1116.195340][T18917] vmalloc 8192 [ 1116.195340][T18917] shmem 180224 [ 1116.195340][T18917] zswap 0 [ 1116.195340][T18917] zswapped 0 [ 1116.195340][T18917] file_mapped 180224 [ 1116.195340][T18917] file_dirty 4096 [ 1116.195340][T18917] file_writeback 0 [ 1116.195340][T18917] swapcached 0 [ 1116.195340][T18917] anon_thp 0 [ 1116.195340][T18917] file_thp 0 [ 1116.195340][T18917] shmem_thp 0 [ 1116.195340][T18917] inactive_anon 98304 [ 1116.195340][T18917] active_anon 180224 [ 1116.195340][T18917] inactive_file 0 [ 1116.195340][T18917] active_file 4096 [ 1116.195340][T18917] unevictable 0 [ 1116.195340][T18917] slab_reclaimable 15280 [ 1116.195340][T18917] slab_unreclaimable 308706344 [ 1116.195340][T18917] slab 308721624 22:05:17 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0024000b0f00000000000000e42df17c67bf95bf27587890a18fcd0000000000", @ANYRES32=r3, @ANYBLOB="00000b00ffffffff000000000900010068667363000000001400020010000300"/44], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1116.271354][T18937] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.311537][T18917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18917,uid=0 22:05:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x8, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4c00}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1116.337770][T18917] Memory cgroup out of memory: Killed process 18917 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1116.366590][ T3640] EXT4-fs (loop5): unmounting filesystem. [ 1116.447034][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1116.462812][T18946] loop4: detected capacity change from 0 to 68 [ 1116.464456][ T4362] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1116.549085][T18949] loop5: detected capacity change from 0 to 512 [ 1116.551827][ T4362] Buffer I/O error on dev loop4, logical block 0, async page read [ 1116.578810][T18947] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1116.593578][ T4362] loop4: unable to read partition table 22:05:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000025000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1116.601680][T18947] CPU: 1 PID: 18947 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1116.605704][T18949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1116.612081][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1116.612095][T18947] Call Trace: [ 1116.612102][T18947] [ 1116.612110][T18947] dump_stack_lvl+0xcd/0x134 [ 1116.612140][T18947] dump_header+0x10b/0x7f9 [ 1116.612165][T18947] oom_kill_process.cold+0x10/0x15 [ 1116.651068][T18947] out_of_memory+0x358/0x14a0 [ 1116.655776][T18947] ? find_held_lock+0x2d/0x110 [ 1116.660655][T18947] ? oom_killer_disable+0x270/0x270 [ 1116.665892][T18947] ? find_held_lock+0x2d/0x110 [ 1116.670689][T18947] mem_cgroup_out_of_memory+0x206/0x270 [ 1116.676266][T18947] ? mem_cgroup_margin+0x130/0x130 [ 1116.681416][T18947] ? lock_downgrade+0x6e0/0x6e0 [ 1116.686402][T18947] try_charge_memcg+0xf67/0x13f0 [ 1116.691367][T18947] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1116.697397][T18947] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1116.703142][T18947] ? lock_downgrade+0x6e0/0x6e0 [ 1116.708014][T18947] ? lock_downgrade+0x6e0/0x6e0 [ 1116.712909][T18947] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1116.718486][T18947] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1116.724672][T18947] copy_process+0x607/0x7090 [ 1116.729304][T18947] ? __lock_acquire+0xbc3/0x56d0 [ 1116.734281][T18947] ? __cleanup_sighand+0xb0/0xb0 [ 1116.739258][T18947] kernel_clone+0xe7/0xab0 [ 1116.743699][T18947] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1116.749706][T18947] ? create_io_thread+0xe0/0xe0 [ 1116.754592][T18947] ? find_held_lock+0x2d/0x110 [ 1116.757766][T18946] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1116.759374][T18947] ? __ct_user_exit+0xff/0x150 [ 1116.759411][T18947] __do_sys_clone+0xba/0x100 [ 1116.759435][T18947] ? kernel_clone+0xab0/0xab0 [ 1116.759463][T18947] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1116.759486][T18947] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1116.759515][T18947] do_syscall_64+0x35/0xb0 [ 1116.759535][T18947] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1116.759556][T18947] RIP: 0033:0x7fe68848a6a1 [ 1116.759574][T18947] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1116.759594][T18947] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1116.759614][T18947] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1116.759627][T18947] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1116.759641][T18947] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1116.759654][T18947] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1116.759667][T18947] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 22:05:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5865}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1116.759694][T18947] [ 1116.782756][T18947] memory: usage 307200kB, limit 307200kB, failcnt 5494 [ 1116.826022][T18946] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1116.846208][T18947] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1116.846232][T18947] Memory cgroup stats for /syz1: [ 1116.846393][T18947] anon 98304 [ 1116.846393][T18947] file 184320 [ 1116.846393][T18947] kernel 314261504 [ 1116.846393][T18947] kernel_stack 32768 [ 1116.846393][T18947] pagetables 65536 [ 1116.846393][T18947] percpu 5372992 [ 1116.846393][T18947] sock 0 [ 1116.846393][T18947] vmalloc 8192 [ 1116.846393][T18947] shmem 180224 [ 1116.846393][T18947] zswap 0 [ 1116.846393][T18947] zswapped 0 [ 1116.846393][T18947] file_mapped 180224 [ 1116.846393][T18947] file_dirty 4096 [ 1116.846393][T18947] file_writeback 0 [ 1116.846393][T18947] swapcached 0 [ 1116.846393][T18947] anon_thp 0 [ 1116.846393][T18947] file_thp 0 [ 1116.846393][T18947] shmem_thp 0 [ 1116.846393][T18947] inactive_anon 98304 [ 1116.846393][T18947] active_anon 180224 [ 1116.846393][T18947] inactive_file 0 [ 1116.846393][T18947] active_file 4096 [ 1116.846393][T18947] unevictable 0 [ 1116.846393][T18947] slab_reclaimable 18240 [ 1116.846393][T18947] slab_unreclaimable 308709744 [ 1116.846393][T18947] slab 308727984 [ 1116.846448][T18947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18947,uid=0 22:05:17 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/152, 0x98}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1116.846567][T18947] Memory cgroup out of memory: Killed process 18947 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1116.901358][T18952] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1116.940379][ T3640] EXT4-fs (loop5): unmounting filesystem. [ 1117.054919][T18952] CPU: 1 PID: 18952 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1117.087391][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1117.097467][T18952] Call Trace: [ 1117.100753][T18952] [ 1117.103689][T18952] dump_stack_lvl+0xcd/0x134 [ 1117.108297][T18952] dump_header+0x10b/0x7f9 [ 1117.112723][T18952] oom_kill_process.cold+0x10/0x15 [ 1117.117837][T18952] out_of_memory+0x358/0x14a0 [ 1117.122519][T18952] ? find_held_lock+0x2d/0x110 [ 1117.127279][T18952] ? oom_killer_disable+0x270/0x270 [ 1117.132477][T18952] ? find_held_lock+0x2d/0x110 [ 1117.137238][T18952] mem_cgroup_out_of_memory+0x206/0x270 [ 1117.142781][T18952] ? mem_cgroup_margin+0x130/0x130 [ 1117.147888][T18952] ? lock_downgrade+0x6e0/0x6e0 [ 1117.152745][T18952] try_charge_memcg+0xf67/0x13f0 [ 1117.157685][T18952] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1117.163666][T18952] ? lock_downgrade+0x6e0/0x6e0 [ 1117.168520][T18952] charge_memcg+0x31/0x320 [ 1117.172933][T18952] __mem_cgroup_charge+0x27/0x90 [ 1117.177871][T18952] ? _compound_head+0x5d/0x150 [ 1117.182636][T18952] wp_page_copy+0x27c/0x1b60 [ 1117.187227][T18952] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1117.192683][T18952] ? lock_downgrade+0x6e0/0x6e0 [ 1117.197531][T18952] ? vm_normal_page+0x146/0x2a0 [ 1117.202387][T18952] do_wp_page+0x52c/0x1910 [ 1117.206805][T18952] __handle_mm_fault+0x1813/0x39b0 [ 1117.211917][T18952] ? vm_iomap_memory+0x190/0x190 [ 1117.216865][T18952] handle_mm_fault+0x1c8/0x780 [ 1117.221631][T18952] do_user_addr_fault+0x475/0x1210 [ 1117.226752][T18952] exc_page_fault+0x94/0x170 [ 1117.231343][T18952] asm_exc_page_fault+0x22/0x30 [ 1117.236191][T18952] RIP: 0033:0x7fe688458241 [ 1117.240600][T18952] Code: 11 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 3a e2 09 00 e8 [ 1117.260205][T18952] RSP: 002b:00007ffffbe4a880 EFLAGS: 00010206 [ 1117.266268][T18952] RAX: 00000000000206e1 RBX: 00007fe6885705e0 RCX: 0000555555811920 [ 1117.274236][T18952] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 1117.282199][T18952] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007fe688570640 [ 1117.290166][T18952] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 1117.298131][T18952] R13: 0000000000000120 R14: 0000000000000012 R15: 0000555555811800 [ 1117.306110][T18952] 22:05:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1117.341089][T18946] FAT-fs (loop4): Filesystem has been set read-only [ 1117.361339][T18954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1117.361857][T18952] memory: usage 307152kB, limit 307200kB, failcnt 5540 22:05:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x9, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x33050000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1117.387120][T18952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1117.436203][T18952] Memory cgroup stats for /syz1: [ 1117.436382][T18952] anon 94208 [ 1117.436382][T18952] file 184320 [ 1117.436382][T18952] kernel 314245120 [ 1117.436382][T18952] kernel_stack 32768 [ 1117.436382][T18952] pagetables 65536 [ 1117.436382][T18952] percpu 5372992 [ 1117.436382][T18952] sock 0 [ 1117.436382][T18952] vmalloc 8192 [ 1117.436382][T18952] shmem 180224 [ 1117.436382][T18952] zswap 0 [ 1117.436382][T18952] zswapped 0 [ 1117.436382][T18952] file_mapped 180224 [ 1117.436382][T18952] file_dirty 4096 [ 1117.436382][T18952] file_writeback 0 [ 1117.436382][T18952] swapcached 0 [ 1117.436382][T18952] anon_thp 0 [ 1117.436382][T18952] file_thp 0 [ 1117.436382][T18952] shmem_thp 0 [ 1117.436382][T18952] inactive_anon 94208 [ 1117.436382][T18952] active_anon 180224 [ 1117.436382][T18952] inactive_file 0 [ 1117.436382][T18952] active_file 4096 [ 1117.436382][T18952] unevictable 0 [ 1117.436382][T18952] slab_reclaimable 15280 [ 1117.436382][T18952] slab_unreclaimable 308710184 [ 1117.436382][T18952] slab 308725464 22:05:18 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/152, 0x98}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1117.594959][T18962] loop4: detected capacity change from 0 to 68 [ 1117.604375][T18952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18952,uid=0 22:05:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3f000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1117.644108][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1117.654549][T18962] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1117.655370][T18962] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1117.713325][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1117.726272][T18952] Memory cgroup out of memory: Killed process 18952 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1117.731397][T18970] loop5: detected capacity change from 0 to 512 [ 1117.762274][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1117.779604][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1117.782389][T18962] FAT-fs (loop4): Filesystem has been set read-only [ 1117.787653][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x6000}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x5c210000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:18 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/152, 0x98}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1117.816277][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1117.838555][T18972] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 1117.896093][ T4362] loop5: unable to read partition table [ 1117.915232][T18972] CPU: 0 PID: 18972 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1117.925894][T18972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1117.936216][T18972] Call Trace: [ 1117.937615][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1117.939487][T18972] [ 1117.939498][T18972] dump_stack_lvl+0xcd/0x134 [ 1117.939528][T18972] dump_header+0x10b/0x7f9 [ 1117.939559][T18972] oom_kill_process.cold+0x10/0x15 [ 1117.939586][T18972] out_of_memory+0x358/0x14a0 [ 1117.939613][T18972] ? find_held_lock+0x2d/0x110 [ 1117.939633][T18972] ? oom_killer_disable+0x270/0x270 [ 1117.939656][T18972] ? find_held_lock+0x2d/0x110 [ 1117.939677][T18972] mem_cgroup_out_of_memory+0x206/0x270 [ 1117.939698][T18972] ? mem_cgroup_margin+0x130/0x130 [ 1117.939715][T18972] ? lock_downgrade+0x6e0/0x6e0 [ 1117.939747][T18972] try_charge_memcg+0xf67/0x13f0 [ 1117.939774][T18972] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1117.939795][T18972] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1117.939815][T18972] ? lock_downgrade+0x6e0/0x6e0 [ 1117.939835][T18972] ? lock_downgrade+0x6e0/0x6e0 [ 1117.939854][T18972] ? rcu_read_unlock+0x9/0x60 [ 1117.939885][T18972] obj_cgroup_charge+0x2ab/0x5e0 [ 1117.939908][T18972] ? copy_process+0x4ce/0x7090 [ 1117.939928][T18972] kmem_cache_alloc_node+0x92/0x3f0 [ 1117.939948][T18972] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1117.939970][T18972] copy_process+0x4ce/0x7090 [ 1117.939995][T18972] ? __lock_acquire+0xbc3/0x56d0 [ 1117.940023][T18972] ? __cleanup_sighand+0xb0/0xb0 [ 1117.940055][T18972] kernel_clone+0xe7/0xab0 [ 1117.940075][T18972] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1117.940096][T18972] ? create_io_thread+0xe0/0xe0 [ 1117.940122][T18972] ? find_held_lock+0x2d/0x110 [ 1117.940143][T18972] ? __ct_user_exit+0xff/0x150 [ 1117.940169][T18972] __do_sys_clone+0xba/0x100 [ 1117.940190][T18972] ? kernel_clone+0xab0/0xab0 [ 1117.940221][T18972] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1117.940243][T18972] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1117.940270][T18972] do_syscall_64+0x35/0xb0 [ 1117.940290][T18972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1117.940310][T18972] RIP: 0033:0x7fe68848a6a1 [ 1117.940330][T18972] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1117.940350][T18972] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1117.940369][T18972] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1117.940382][T18972] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1117.940395][T18972] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1117.940407][T18972] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1117.940420][T18972] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1117.940446][T18972] [ 1117.966800][T18972] memory: usage 307156kB, limit 307200kB, failcnt 5573 [ 1118.080355][T18970] EXT4-fs (loop5): inodes count not valid: 32 vs 37 [ 1118.083891][T18972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1118.276492][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1118.288296][T18972] Memory cgroup stats for /syz1: [ 1118.288482][T18972] anon 98304 [ 1118.288482][T18972] file 184320 [ 1118.288482][T18972] kernel 314245120 [ 1118.288482][T18972] kernel_stack 32768 [ 1118.288482][T18972] pagetables 65536 [ 1118.288482][T18972] percpu 5372992 [ 1118.288482][T18972] sock 0 [ 1118.288482][T18972] vmalloc 8192 [ 1118.288482][T18972] shmem 180224 [ 1118.288482][T18972] zswap 0 [ 1118.288482][T18972] zswapped 0 [ 1118.288482][T18972] file_mapped 180224 [ 1118.288482][T18972] file_dirty 4096 [ 1118.288482][T18972] file_writeback 0 [ 1118.288482][T18972] swapcached 0 [ 1118.288482][T18972] anon_thp 0 [ 1118.288482][T18972] file_thp 0 [ 1118.288482][T18972] shmem_thp 0 [ 1118.288482][T18972] inactive_anon 98304 [ 1118.288482][T18972] active_anon 180224 [ 1118.288482][T18972] inactive_file 0 [ 1118.288482][T18972] active_file 4096 [ 1118.288482][T18972] unevictable 0 [ 1118.288482][T18972] slab_reclaimable 15280 [ 1118.288482][T18972] slab_unreclaimable 308710184 [ 1118.288482][T18972] slab 308725464 [ 1118.409842][T18972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18972,uid=0 [ 1118.436695][T18972] Memory cgroup out of memory: Killed process 18972 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:19 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_delroute={0x90, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x5, 0xfe, 0x4, 0xfd, 0x11, 0x2b00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x4d, r6}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 22:05:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000026000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xa, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x60000000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x6558}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1118.506847][T18990] loop4: detected capacity change from 0 to 68 [ 1118.511344][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.567783][T18990] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1118.572873][T18999] loop5: detected capacity change from 0 to 512 [ 1118.611650][T18990] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1118.626126][T18999] EXT4-fs (loop5): inodes count not valid: 32 vs 38 [ 1118.630890][T18996] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1118.646282][T18996] CPU: 0 PID: 18996 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1118.656701][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1118.666742][T18996] Call Trace: [ 1118.667131][T18990] FAT-fs (loop4): Filesystem has been set read-only [ 1118.669998][T18996] [ 1118.670009][T18996] dump_stack_lvl+0xcd/0x134 [ 1118.670037][T18996] dump_header+0x10b/0x7f9 [ 1118.670062][T18996] oom_kill_process.cold+0x10/0x15 [ 1118.670089][T18996] out_of_memory+0x358/0x14a0 [ 1118.670115][T18996] ? find_held_lock+0x2d/0x110 [ 1118.670135][T18996] ? oom_killer_disable+0x270/0x270 [ 1118.670159][T18996] ? find_held_lock+0x2d/0x110 [ 1118.670181][T18996] mem_cgroup_out_of_memory+0x206/0x270 [ 1118.670202][T18996] ? mem_cgroup_margin+0x130/0x130 [ 1118.670220][T18996] ? lock_downgrade+0x6e0/0x6e0 [ 1118.670252][T18996] try_charge_memcg+0xf67/0x13f0 [ 1118.670278][T18996] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1118.670299][T18996] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1118.670319][T18996] ? lock_downgrade+0x6e0/0x6e0 [ 1118.670340][T18996] ? lock_downgrade+0x6e0/0x6e0 [ 1118.670370][T18996] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1118.670394][T18996] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1118.670421][T18996] copy_process+0x145a/0x7090 [ 1118.670446][T18996] ? __lock_acquire+0xbc3/0x56d0 [ 1118.670474][T18996] ? __cleanup_sighand+0xb0/0xb0 [ 1118.670508][T18996] kernel_clone+0xe7/0xab0 [ 1118.670535][T18996] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1118.670557][T18996] ? create_io_thread+0xe0/0xe0 [ 1118.670583][T18996] ? find_held_lock+0x2d/0x110 [ 1118.670605][T18996] ? __ct_user_exit+0xff/0x150 [ 1118.670631][T18996] __do_sys_clone+0xba/0x100 [ 1118.670652][T18996] ? kernel_clone+0xab0/0xab0 [ 1118.670682][T18996] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1118.670705][T18996] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1118.670733][T18996] do_syscall_64+0x35/0xb0 [ 1118.670752][T18996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1118.670771][T18996] RIP: 0033:0x7fe68848a6a1 [ 1118.670788][T18996] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1118.670805][T18996] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1118.670825][T18996] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1118.670839][T18996] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1118.670852][T18996] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1118.670865][T18996] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1118.670878][T18996] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1118.670903][T18996] 22:05:19 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) (async) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_delroute={0x90, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x5, 0xfe, 0x4, 0xfd, 0x11, 0x2b00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x4d, r6}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) [ 1118.676286][T18996] memory: usage 307192kB, limit 307200kB, failcnt 5624 [ 1118.724437][T18994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1118.988315][T18996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1118.998935][T18996] Memory cgroup stats for /syz1: [ 1119.000869][T18996] anon 98304 [ 1119.000869][T18996] file 184320 [ 1119.000869][T18996] kernel 314265600 [ 1119.000869][T18996] kernel_stack 32768 [ 1119.000869][T18996] pagetables 65536 [ 1119.000869][T18996] percpu 5372992 [ 1119.000869][T18996] sock 0 [ 1119.000869][T18996] vmalloc 8192 [ 1119.000869][T18996] shmem 180224 [ 1119.000869][T18996] zswap 0 [ 1119.000869][T18996] zswapped 0 [ 1119.000869][T18996] file_mapped 180224 [ 1119.000869][T18996] file_dirty 4096 [ 1119.000869][T18996] file_writeback 0 [ 1119.000869][T18996] swapcached 0 [ 1119.000869][T18996] anon_thp 0 [ 1119.000869][T18996] file_thp 0 [ 1119.000869][T18996] shmem_thp 0 [ 1119.000869][T18996] inactive_anon 98304 [ 1119.000869][T18996] active_anon 180224 [ 1119.000869][T18996] inactive_file 0 [ 1119.000869][T18996] active_file 4096 [ 1119.000869][T18996] unevictable 0 [ 1119.000869][T18996] slab_reclaimable 15280 [ 1119.000869][T18996] slab_unreclaimable 308707296 [ 1119.000869][T18996] slab 308722576 22:05:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002f000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xc, 0x4400}], 0x0, &(0x7f0000011100)) [ 1119.127846][T18996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18996,uid=0 [ 1119.147603][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x9effffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1119.230584][T18996] Memory cgroup out of memory: Killed process 18996 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1119.231311][T19012] loop5: detected capacity change from 0 to 512 22:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x6800}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:20 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_delroute={0x90, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x5, 0xfe, 0x4, 0xfd, 0x11, 0x2b00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x4d, r6}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) (async) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r7, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_delroute={0x90, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x5, 0xfe, 0x4, 0xfd, 0x11, 0x2b00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x4d, r6}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) [ 1119.297210][T19016] loop4: detected capacity change from 0 to 68 22:05:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1119.361531][T19016] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1119.375954][T19012] EXT4-fs (loop5): inodes count not valid: 32 vs 47 [ 1119.376123][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1119.397531][T19016] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1119.417961][T19016] FAT-fs (loop4): Filesystem has been set read-only 22:05:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000003d000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xd, 0x4400}], 0x0, &(0x7f0000011100)) [ 1119.536788][T19020] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1119.572881][T19039] loop4: detected capacity change from 0 to 68 22:05:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xf0ffffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1119.573532][T19020] CPU: 0 PID: 19020 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1119.584486][T19040] loop5: detected capacity change from 0 to 512 [ 1119.589439][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1119.589453][T19020] Call Trace: [ 1119.589459][T19020] [ 1119.589467][T19020] dump_stack_lvl+0xcd/0x134 [ 1119.589496][T19020] dump_header+0x10b/0x7f9 [ 1119.589528][T19020] oom_kill_process.cold+0x10/0x15 [ 1119.589555][T19020] out_of_memory+0x358/0x14a0 [ 1119.589583][T19020] ? find_held_lock+0x2d/0x110 [ 1119.589602][T19020] ? oom_killer_disable+0x270/0x270 [ 1119.589626][T19020] ? find_held_lock+0x2d/0x110 [ 1119.589648][T19020] mem_cgroup_out_of_memory+0x206/0x270 [ 1119.589669][T19020] ? mem_cgroup_margin+0x130/0x130 [ 1119.589686][T19020] ? lock_downgrade+0x6e0/0x6e0 [ 1119.589718][T19020] try_charge_memcg+0xf67/0x13f0 [ 1119.589744][T19020] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1119.589765][T19020] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1119.589785][T19020] ? lock_downgrade+0x6e0/0x6e0 [ 1119.589806][T19020] ? lock_downgrade+0x6e0/0x6e0 [ 1119.589836][T19020] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1119.589859][T19020] __alloc_pages+0x1ef/0x510 [ 1119.589881][T19020] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1119.589904][T19020] ? lock_chain_count+0x20/0x20 [ 1119.589933][T19020] ? __lock_acquire+0xbc3/0x56d0 [ 1119.589955][T19020] alloc_pages+0x1a6/0x270 [ 1119.589977][T19020] pte_alloc_one+0x16/0x230 [ 1119.589996][T19020] __pte_alloc+0x69/0x250 [ 1119.590014][T19020] ? pmd_install+0x150/0x150 [ 1119.590030][T19020] ? hugepage_vma_check+0x44e/0x780 [ 1119.590057][T19020] __handle_mm_fault+0x310b/0x39b0 [ 1119.590082][T19020] ? vm_iomap_memory+0x190/0x190 [ 1119.590119][T19020] handle_mm_fault+0x1c8/0x780 [ 1119.590142][T19020] do_user_addr_fault+0x475/0x1210 [ 1119.590172][T19020] exc_page_fault+0x94/0x170 22:05:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xfffff000}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1119.590197][T19020] asm_exc_page_fault+0x22/0x30 [ 1119.590216][T19020] RIP: 0033:0x7fe688434e7d [ 1119.590233][T19020] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1119.590251][T19020] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1119.590268][T19020] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1119.590281][T19020] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1119.590294][T19020] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1119.590307][T19020] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1119.590319][T19020] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1119.590346][T19020] [ 1119.656954][T19020] memory: usage 307200kB, limit 307200kB, failcnt 5707 [ 1119.715497][T19040] EXT4-fs (loop5): inodes count not valid: 32 vs 61 [ 1119.723739][T19020] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1119.723756][T19020] Memory cgroup stats for /syz1: [ 1119.723928][T19020] anon 102400 [ 1119.723928][T19020] file 184320 [ 1119.723928][T19020] kernel 314286080 [ 1119.723928][T19020] kernel_stack 65536 [ 1119.723928][T19020] pagetables 65536 [ 1119.723928][T19020] percpu 5372992 [ 1119.723928][T19020] sock 0 [ 1119.723928][T19020] vmalloc 8192 [ 1119.723928][T19020] shmem 180224 [ 1119.723928][T19020] zswap 0 [ 1119.723928][T19020] zswapped 0 [ 1119.723928][T19020] file_mapped 180224 [ 1119.723928][T19020] file_dirty 4096 [ 1119.723928][T19020] file_writeback 0 [ 1119.723928][T19020] swapcached 0 [ 1119.723928][T19020] anon_thp 0 [ 1119.723928][T19020] file_thp 0 [ 1119.723928][T19020] shmem_thp 0 [ 1119.723928][T19020] inactive_anon 102400 [ 1119.723928][T19020] active_anon 180224 [ 1119.723928][T19020] inactive_file 0 [ 1119.723928][T19020] active_file 4096 [ 1119.723928][T19020] unevictable 0 [ 1119.723928][T19020] slab_reclaimable 15280 [ 1119.723928][T19020] slab_unreclaimable 308718208 [ 1119.723928][T19020] slab 308733488 22:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x6c00}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:20 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000005c0)={0x0, 0xfb, 0xb1, 0x1, 0x6, "d5c24a2b1055881b5d240bd75039b5d2", "9b15fa3c4b942b394aa7ad14659a429b632f55b4747eeee5b82bea5bf18289379edc49a3122f48c8106de4ad01dbd3cd8111271ff9750649bd37330cc35ff05a602e7dd5cbd5e90cc03fede237f548ab36c42ff2cce5c8c47a213825449c8a1c9a025b6f84f33644146fc4c170dc74baaefe262e88782d5923d2bf7f2f8606e264870b20575042015bf80310e37dc22138af68cbc2fa06b9d3685f76"}, 0xb1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:05:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffff7f}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1119.723983][T19020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19020,uid=0 [ 1119.725273][T19020] Memory cgroup out of memory: Killed process 19020 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1119.986066][T19039] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000040000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1120.071204][T19039] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x28}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1120.123508][T19039] FAT-fs (loop4): Filesystem has been set read-only [ 1120.135694][T19050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1120.158395][T19052] loop5: detected capacity change from 0 to 512 [ 1120.177393][T19052] EXT4-fs (loop5): inodes count not valid: 32 vs 64 22:05:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xe, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000046000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1120.298601][T19055] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffff9e}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1120.339426][T19055] CPU: 0 PID: 19055 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1120.349973][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1120.360029][T19055] Call Trace: [ 1120.363307][T19055] [ 1120.366238][T19055] dump_stack_lvl+0xcd/0x134 [ 1120.370859][T19055] dump_header+0x10b/0x7f9 [ 1120.375299][T19055] oom_kill_process.cold+0x10/0x15 [ 1120.380434][T19055] out_of_memory+0x358/0x14a0 [ 1120.385128][T19055] ? find_held_lock+0x2d/0x110 22:05:21 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000005c0)={0x0, 0xfb, 0xb1, 0x1, 0x6, "d5c24a2b1055881b5d240bd75039b5d2", "9b15fa3c4b942b394aa7ad14659a429b632f55b4747eeee5b82bea5bf18289379edc49a3122f48c8106de4ad01dbd3cd8111271ff9750649bd37330cc35ff05a602e7dd5cbd5e90cc03fede237f548ab36c42ff2cce5c8c47a213825449c8a1c9a025b6f84f33644146fc4c170dc74baaefe262e88782d5923d2bf7f2f8606e264870b20575042015bf80310e37dc22138af68cbc2fa06b9d3685f76"}, 0xb1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000005c0)={0x0, 0xfb, 0xb1, 0x1, 0x6, "d5c24a2b1055881b5d240bd75039b5d2", "9b15fa3c4b942b394aa7ad14659a429b632f55b4747eeee5b82bea5bf18289379edc49a3122f48c8106de4ad01dbd3cd8111271ff9750649bd37330cc35ff05a602e7dd5cbd5e90cc03fede237f548ab36c42ff2cce5c8c47a213825449c8a1c9a025b6f84f33644146fc4c170dc74baaefe262e88782d5923d2bf7f2f8606e264870b20575042015bf80310e37dc22138af68cbc2fa06b9d3685f76"}, 0xb1, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 1120.386841][T19062] loop4: detected capacity change from 0 to 68 [ 1120.389881][T19055] ? oom_killer_disable+0x270/0x270 [ 1120.389913][T19055] ? find_held_lock+0x2d/0x110 [ 1120.389935][T19055] mem_cgroup_out_of_memory+0x206/0x270 [ 1120.389958][T19055] ? mem_cgroup_margin+0x130/0x130 [ 1120.389977][T19055] ? lock_downgrade+0x6e0/0x6e0 [ 1120.390012][T19055] try_charge_memcg+0xf67/0x13f0 [ 1120.390039][T19055] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1120.390063][T19055] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1120.390085][T19055] ? lock_downgrade+0x6e0/0x6e0 [ 1120.390109][T19055] ? lock_downgrade+0x6e0/0x6e0 [ 1120.390142][T19055] obj_cgroup_charge+0x2ab/0x5e0 [ 1120.390169][T19055] kmem_cache_alloc_lru+0x13e/0x720 [ 1120.390192][T19055] ? sock_alloc_inode+0x23/0x1d0 [ 1120.390219][T19055] sock_alloc_inode+0x23/0x1d0 [ 1120.390239][T19055] ? sock_free_inode+0x20/0x20 [ 1120.390257][T19055] alloc_inode+0x61/0x230 [ 1120.390282][T19055] new_inode_pseudo+0x13/0x80 [ 1120.390302][T19055] sock_alloc+0x3c/0x260 [ 1120.390322][T19055] __sock_create+0xb9/0x790 [ 1120.390344][T19055] ? lock_downgrade+0x6e0/0x6e0 [ 1120.390367][T19055] __sys_socket+0x12f/0x240 [ 1120.390387][T19055] ? __sys_socket_file+0x1f0/0x1f0 [ 1120.390411][T19055] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1120.390441][T19055] __x64_sys_socket+0x6f/0xb0 [ 1120.390463][T19055] do_syscall_64+0x35/0xb0 [ 1120.390483][T19055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1120.390505][T19055] RIP: 0033:0x7fe688489279 [ 1120.390529][T19055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1120.390548][T19055] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1120.390568][T19055] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1120.390581][T19055] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1120.390594][T19055] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1120.390607][T19055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.390620][T19055] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1120.390647][T19055] [ 1120.408099][T19060] loop5: detected capacity change from 0 to 512 [ 1120.471445][T19055] memory: usage 307200kB, limit 307200kB, failcnt 5796 [ 1120.517096][T19062] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1120.543731][T19055] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1120.586930][T19062] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1120.606671][T19055] Memory cgroup stats for [ 1120.618434][T19062] FAT-fs (loop4): Filesystem has been set read-only [ 1120.627933][T19055] /syz1 [ 1120.634563][T19060] EXT4-fs (loop5): inodes count not valid: 32 vs 70 [ 1120.646764][T19055] : [ 1120.707139][T19055] anon 102400 [ 1120.707139][T19055] file 184320 [ 1120.707139][T19055] kernel 314269696 [ 1120.707139][T19055] kernel_stack 65536 [ 1120.707139][T19055] pagetables 65536 [ 1120.707139][T19055] percpu 5372992 [ 1120.707139][T19055] sock 0 [ 1120.707139][T19055] vmalloc 8192 [ 1120.707139][T19055] shmem 180224 [ 1120.707139][T19055] zswap 0 [ 1120.707139][T19055] zswapped 0 [ 1120.707139][T19055] file_mapped 180224 [ 1120.707139][T19055] file_dirty 4096 [ 1120.707139][T19055] file_writeback 0 [ 1120.707139][T19055] swapcached 0 [ 1120.707139][T19055] anon_thp 0 [ 1120.707139][T19055] file_thp 0 [ 1120.707139][T19055] shmem_thp 0 [ 1120.707139][T19055] inactive_anon 102400 [ 1120.707139][T19055] active_anon 180224 [ 1120.707139][T19055] inactive_file 0 [ 1120.707139][T19055] active_file 4096 [ 1120.707139][T19055] unevictable 0 [ 1120.707139][T19055] slab_reclaimable 15280 [ 1120.707139][T19055] slab_unreclaimable 308706808 22:05:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xf, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:21 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000005c0)={0x0, 0xfb, 0xb1, 0x1, 0x6, "d5c24a2b1055881b5d240bd75039b5d2", "9b15fa3c4b942b394aa7ad14659a429b632f55b4747eeee5b82bea5bf18289379edc49a3122f48c8106de4ad01dbd3cd8111271ff9750649bd37330cc35ff05a602e7dd5cbd5e90cc03fede237f548ab36c42ff2cce5c8c47a213825449c8a1c9a025b6f84f33644146fc4c170dc74baaefe262e88782d5923d2bf7f2f8606e264870b20575042015bf80310e37dc22138af68cbc2fa06b9d3685f76"}, 0xb1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1120.707139][T19055] slab 308722088 [ 1120.868908][T19055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19048,uid=0 [ 1120.912169][T19087] loop4: detected capacity change from 0 to 68 [ 1120.935633][T19087] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000060000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x7400}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xfffffff0}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:21 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f00000005c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d2014fe93e1dafb901294fc4196c525bb4ac22ca31a2bc76f51499ec74fe7b445fd92646669192a0041cc43343f75372dcb23cac1f793bee53b34b2ca5b8e0bd217ba22ca69aae02a29f79e43c337cdf85c0344bfdcd1f555a7f0daabba6586c016259db2dacc5edff61be8b21eef0105980d64919424b592e97f2ab28fbe8886be7273280af84030bafbed9db75b0cb00b898a0672e0136b39dac7a7f422e8ab2d17d8c4642473e28c700fc423abd2f7c0787f2c43487bf305146b1b34a", 0xbe}, {&(0x7f0000000100)="67a4f7bd203615", 0x7}, {&(0x7f0000000700)="15f21a28e4dcc47a748078ebc68699fac610def348ca1d9c44bc618166a72cd024c49b238515c0ca7692a306b4dfadd8d3d4c56d569a21ab6a1e56a1dce950804f823a4b128540e313d2da22aa93bb05970cacb8f5578ff98924c975e8968ebba7c03765145b8d99264fdf790f92e0c2d49e091189d5a69589276533cc541df9a2fde9459bb2773d7328164ca9ee42392ad0017d7aac3f284a20c60c06be41a27f721d67a33803987057b8a159abd5c93c11f6b03b3b69d65e65766757307ed1a87dd598849d662373c7ace8cfaab9c323731e1113fa556d0d1f5513b9619df89efd097acd66fc758fbb8e", 0xeb}, {&(0x7f0000000800)="0c7401d815083f41a3268068ca7e44f7635d0910a3a52942853c70cca72df7545011220b3bc65ea90bb64659493d65e7bebe3e629bfa8d4a268d2137f2a596d66bee41013856d2833cef52eec0fd2a879e2d0759daa7d2dea64203ba6157fcd4ed6164cd455b84c1ee0ba50ed893f513f231c39b6e7b44794c0dbdc84de8fb90dff92f9895d26efc7ef90d1d982a1350e00f0c9a3885a1c7474a198f217f7c341b0c80a70ba7179d01607b", 0xab}, {&(0x7f00000008c0)="4ed33d075296225c3127ce0a59ecdd3c021a572e177ded62c67d5f49fe02e959a6756f080d3465698cee7715f6d8a065ba0b7caa76605e93b9004092ca0e75af8b6f249eff57f0fe96d42ea16ada3eab6e386e48b44555767c2fbfd8a33c817b0ab96a9795f0c82661bf17ed3fc3b324acdce90f8605f92c101069b8bd1f51ab39a71229ed97bc06c61742ac1d745a7ff00294393e819125ac5fc8b2d3647e31cd5dd668307bbf68d2d90a2eb387767f2d7bcd50e05221eeaf39839dff24f176bb2cbf03547ef52a38483b628c1ef99f", 0xd0}], 0x5, &(0x7f0000000ac0)=[{0xc8, 0x10b, 0xd3d, "8f286003bdcbbc1ae82ec7f58bb0244d09c028b3e3d1078f1fc372b1697030fe69cdb46b8ebbf21d2d5880153355b3826409d8d413fe4e18b4c121582e2362c6d390d5ffee4ee301bd54178699de7bf9eb863844a71745ee3f3383013d5b0b6db9d7051ea75fa5f946313eb4bae15a1f9dcea94e6e01d46babd5fc79c230e74469afdaeebad2adf9af7fc8302f5bddda27df83a6a98ca00362cb967653b62a0b552aae928c5c9d7dca7734dd8069072155f26a"}, {0xe0, 0x116, 0x1, "738814e18dfb333648fc5e8ca8d4586d626fd6dddad2d8404684fea976ff8b977e05bb7691d9d76084f74b303576f36aa751e9cb0b3de20e904554d343fe81bbd55b5e86d84d4c1bdd9c1d016cf037c8bcc4e089fb16a104f6228f9d241e19e34cad4ed4a8ed300cbd78d96dc605766ccac82cd3562e1839d41777de1b6325230be9a896563b9c708279939101cede207b0b5e56b2890598842151fe3c4d24a431088e49cc9544dfdf9ce7b5867e9c905edb87a1d5e486c6b307bd964892b94592b2a8f2dad5fbe5905e0592"}], 0x1a8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1120.995756][T19087] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1121.016303][T19055] Memory cgroup out of memory: Killed process 19048 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1121.037920][T19087] FAT-fs (loop4): Filesystem has been set read-only 22:05:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x10, 0x4400}], 0x0, &(0x7f0000011100)) [ 1121.094506][T19092] loop5: detected capacity change from 0 to 512 [ 1121.142134][T19092] EXT4-fs (loop5): inodes count not valid: 32 vs 96 [ 1121.206130][T19101] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1121.208313][T19102] loop4: detected capacity change from 0 to 68 [ 1121.224639][T19101] CPU: 0 PID: 19101 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1121.224669][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1121.224681][T19101] Call Trace: [ 1121.224687][T19101] [ 1121.224696][T19101] dump_stack_lvl+0xcd/0x134 [ 1121.224724][T19101] dump_header+0x10b/0x7f9 [ 1121.224750][T19101] oom_kill_process.cold+0x10/0x15 [ 1121.224775][T19101] out_of_memory+0x358/0x14a0 [ 1121.224801][T19101] ? find_held_lock+0x2d/0x110 [ 1121.224822][T19101] ? oom_killer_disable+0x270/0x270 [ 1121.224846][T19101] ? find_held_lock+0x2d/0x110 [ 1121.224868][T19101] mem_cgroup_out_of_memory+0x206/0x270 [ 1121.224889][T19101] ? mem_cgroup_margin+0x130/0x130 [ 1121.224907][T19101] ? lock_downgrade+0x6e0/0x6e0 [ 1121.224938][T19101] try_charge_memcg+0xf67/0x13f0 [ 1121.224964][T19101] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1121.224987][T19101] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1121.225007][T19101] ? lock_downgrade+0x6e0/0x6e0 [ 1121.225029][T19101] ? lock_downgrade+0x6e0/0x6e0 [ 1121.225058][T19101] obj_cgroup_charge+0x2ab/0x5e0 22:05:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f00000005c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d2014fe93e1dafb901294fc4196c525bb4ac22ca31a2bc76f51499ec74fe7b445fd92646669192a0041cc43343f75372dcb23cac1f793bee53b34b2ca5b8e0bd217ba22ca69aae02a29f79e43c337cdf85c0344bfdcd1f555a7f0daabba6586c016259db2dacc5edff61be8b21eef0105980d64919424b592e97f2ab28fbe8886be7273280af84030bafbed9db75b0cb00b898a0672e0136b39dac7a7f422e8ab2d17d8c4642473e28c700fc423abd2f7c0787f2c43487bf305146b1b34a", 0xbe}, {&(0x7f0000000100)="67a4f7bd203615", 0x7}, {&(0x7f0000000700)="15f21a28e4dcc47a748078ebc68699fac610def348ca1d9c44bc618166a72cd024c49b238515c0ca7692a306b4dfadd8d3d4c56d569a21ab6a1e56a1dce950804f823a4b128540e313d2da22aa93bb05970cacb8f5578ff98924c975e8968ebba7c03765145b8d99264fdf790f92e0c2d49e091189d5a69589276533cc541df9a2fde9459bb2773d7328164ca9ee42392ad0017d7aac3f284a20c60c06be41a27f721d67a33803987057b8a159abd5c93c11f6b03b3b69d65e65766757307ed1a87dd598849d662373c7ace8cfaab9c323731e1113fa556d0d1f5513b9619df89efd097acd66fc758fbb8e", 0xeb}, {&(0x7f0000000800)="0c7401d815083f41a3268068ca7e44f7635d0910a3a52942853c70cca72df7545011220b3bc65ea90bb64659493d65e7bebe3e629bfa8d4a268d2137f2a596d66bee41013856d2833cef52eec0fd2a879e2d0759daa7d2dea64203ba6157fcd4ed6164cd455b84c1ee0ba50ed893f513f231c39b6e7b44794c0dbdc84de8fb90dff92f9895d26efc7ef90d1d982a1350e00f0c9a3885a1c7474a198f217f7c341b0c80a70ba7179d01607b", 0xab}, {&(0x7f00000008c0)="4ed33d075296225c3127ce0a59ecdd3c021a572e177ded62c67d5f49fe02e959a6756f080d3465698cee7715f6d8a065ba0b7caa76605e93b9004092ca0e75af8b6f249eff57f0fe96d42ea16ada3eab6e386e48b44555767c2fbfd8a33c817b0ab96a9795f0c82661bf17ed3fc3b324acdce90f8605f92c101069b8bd1f51ab39a71229ed97bc06c61742ac1d745a7ff00294393e819125ac5fc8b2d3647e31cd5dd668307bbf68d2d90a2eb387767f2d7bcd50e05221eeaf39839dff24f176bb2cbf03547ef52a38483b628c1ef99f", 0xd0}], 0x5, &(0x7f0000000ac0)=[{0xc8, 0x10b, 0xd3d, "8f286003bdcbbc1ae82ec7f58bb0244d09c028b3e3d1078f1fc372b1697030fe69cdb46b8ebbf21d2d5880153355b3826409d8d413fe4e18b4c121582e2362c6d390d5ffee4ee301bd54178699de7bf9eb863844a71745ee3f3383013d5b0b6db9d7051ea75fa5f946313eb4bae15a1f9dcea94e6e01d46babd5fc79c230e74469afdaeebad2adf9af7fc8302f5bddda27df83a6a98ca00362cb967653b62a0b552aae928c5c9d7dca7734dd8069072155f26a"}, {0xe0, 0x116, 0x1, "738814e18dfb333648fc5e8ca8d4586d626fd6dddad2d8404684fea976ff8b977e05bb7691d9d76084f74b303576f36aa751e9cb0b3de20e904554d343fe81bbd55b5e86d84d4c1bdd9c1d016cf037c8bcc4e089fb16a104f6228f9d241e19e34cad4ed4a8ed300cbd78d96dc605766ccac82cd3562e1839d41777de1b6325230be9a896563b9c708279939101cede207b0b5e56b2890598842151fe3c4d24a431088e49cc9544dfdf9ce7b5867e9c905edb87a1d5e486c6b307bd964892b94592b2a8f2dad5fbe5905e0592"}], 0x1a8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1121.225084][T19101] kmem_cache_alloc_lru+0x13e/0x720 [ 1121.225104][T19101] ? sock_alloc_inode+0x23/0x1d0 [ 1121.225129][T19101] sock_alloc_inode+0x23/0x1d0 [ 1121.225149][T19101] ? sock_free_inode+0x20/0x20 [ 1121.225167][T19101] alloc_inode+0x61/0x230 [ 1121.225191][T19101] new_inode_pseudo+0x13/0x80 [ 1121.225210][T19101] sock_alloc+0x3c/0x260 [ 1121.225231][T19101] __sock_create+0xb9/0x790 [ 1121.225251][T19101] ? lock_downgrade+0x6e0/0x6e0 [ 1121.225274][T19101] __sys_socket+0x12f/0x240 [ 1121.225294][T19101] ? __sys_socket_file+0x1f0/0x1f0 [ 1121.225318][T19101] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1121.225349][T19101] __x64_sys_socket+0x6f/0xb0 [ 1121.225372][T19101] do_syscall_64+0x35/0xb0 [ 1121.225393][T19101] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.225414][T19101] RIP: 0033:0x7fe688489279 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg(r0, &(0x7f00000001c0)={&(0x7f00000005c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d2014fe93e1dafb901294fc4196c525bb4ac22ca31a2bc76f51499ec74fe7b445fd92646669192a0041cc43343f75372dcb23cac1f793bee53b34b2ca5b8e0bd217ba22ca69aae02a29f79e43c337cdf85c0344bfdcd1f555a7f0daabba6586c016259db2dacc5edff61be8b21eef0105980d64919424b592e97f2ab28fbe8886be7273280af84030bafbed9db75b0cb00b898a0672e0136b39dac7a7f422e8ab2d17d8c4642473e28c700fc423abd2f7c0787f2c43487bf305146b1b34a", 0xbe}, {&(0x7f0000000100)="67a4f7bd203615", 0x7}, {&(0x7f0000000700)="15f21a28e4dcc47a748078ebc68699fac610def348ca1d9c44bc618166a72cd024c49b238515c0ca7692a306b4dfadd8d3d4c56d569a21ab6a1e56a1dce950804f823a4b128540e313d2da22aa93bb05970cacb8f5578ff98924c975e8968ebba7c03765145b8d99264fdf790f92e0c2d49e091189d5a69589276533cc541df9a2fde9459bb2773d7328164ca9ee42392ad0017d7aac3f284a20c60c06be41a27f721d67a33803987057b8a159abd5c93c11f6b03b3b69d65e65766757307ed1a87dd598849d662373c7ace8cfaab9c323731e1113fa556d0d1f5513b9619df89efd097acd66fc758fbb8e", 0xeb}, {&(0x7f0000000800)="0c7401d815083f41a3268068ca7e44f7635d0910a3a52942853c70cca72df7545011220b3bc65ea90bb64659493d65e7bebe3e629bfa8d4a268d2137f2a596d66bee41013856d2833cef52eec0fd2a879e2d0759daa7d2dea64203ba6157fcd4ed6164cd455b84c1ee0ba50ed893f513f231c39b6e7b44794c0dbdc84de8fb90dff92f9895d26efc7ef90d1d982a1350e00f0c9a3885a1c7474a198f217f7c341b0c80a70ba7179d01607b", 0xab}, {&(0x7f00000008c0)="4ed33d075296225c3127ce0a59ecdd3c021a572e177ded62c67d5f49fe02e959a6756f080d3465698cee7715f6d8a065ba0b7caa76605e93b9004092ca0e75af8b6f249eff57f0fe96d42ea16ada3eab6e386e48b44555767c2fbfd8a33c817b0ab96a9795f0c82661bf17ed3fc3b324acdce90f8605f92c101069b8bd1f51ab39a71229ed97bc06c61742ac1d745a7ff00294393e819125ac5fc8b2d3647e31cd5dd668307bbf68d2d90a2eb387767f2d7bcd50e05221eeaf39839dff24f176bb2cbf03547ef52a38483b628c1ef99f", 0xd0}], 0x5, &(0x7f0000000ac0)=[{0xc8, 0x10b, 0xd3d, "8f286003bdcbbc1ae82ec7f58bb0244d09c028b3e3d1078f1fc372b1697030fe69cdb46b8ebbf21d2d5880153355b3826409d8d413fe4e18b4c121582e2362c6d390d5ffee4ee301bd54178699de7bf9eb863844a71745ee3f3383013d5b0b6db9d7051ea75fa5f946313eb4bae15a1f9dcea94e6e01d46babd5fc79c230e74469afdaeebad2adf9af7fc8302f5bddda27df83a6a98ca00362cb967653b62a0b552aae928c5c9d7dca7734dd8069072155f26a"}, {0xe0, 0x116, 0x1, "738814e18dfb333648fc5e8ca8d4586d626fd6dddad2d8404684fea976ff8b977e05bb7691d9d76084f74b303576f36aa751e9cb0b3de20e904554d343fe81bbd55b5e86d84d4c1bdd9c1d016cf037c8bcc4e089fb16a104f6228f9d241e19e34cad4ed4a8ed300cbd78d96dc605766ccac82cd3562e1839d41777de1b6325230be9a896563b9c708279939101cede207b0b5e56b2890598842151fe3c4d24a431088e49cc9544dfdf9ce7b5867e9c905edb87a1d5e486c6b307bd964892b94592b2a8f2dad5fbe5905e0592"}], 0x1a8}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1121.225431][T19101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1121.225450][T19101] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1121.225471][T19101] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1121.225485][T19101] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1121.225497][T19101] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1121.225511][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800001fc000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r4, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b6b40aabc3355d8fb203d29dfe3858d91080da51d5f73835a8aecf0e530e1d168b7519835352e1454d93625f4763bd1663888c930ca261b65f140418c3694294c5818934bcc5678558c114273134c0", @ANYRES32=r3, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0xb30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x32}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@challenge={0x10, 0x1, 0xab}, @cf={0x4, 0x6, {0x2, 0x81, 0x504}}]}, @NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x70, 0x2, "16f01cf615554b611a128ccead03497cca1ec39c47ee923d6063471dc35ef468a853d2a15acbdbc9a2f8ce822eab2813f063059a5e418358925982972ffe4fbf1a7df0431cab0337a30f7e3f0039bff6a89298fe6a2f9b86b6b547d1559e0980c531d9d5c87e124f717f7916"}]}, @NL80211_ATTR_PROBE_RESP={0x7b4, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xcd, 0x80, [@chsw_timing={0x68, 0x4, {0xd9b, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4b, 0xe, 0xb6}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x7f, 0x8, @device_b, 0x2000000, 0x6, 0x1}}, @mic={0x8c, 0x18, {0xf4f, "9cc91471f323", @long="28a3dcbd311bac44be91d820106f6e83"}}, @measure_req={0x26, 0x7e, {0x20, 0x1, 0xd6, "cc14babcdf8d03497024e8cc8f0954afb34a9b3dd9b95d4cc52f7267cc18c0640799885ab1086df73d8d5b29a9948a8cc8cf8b695ea35aa01baba97aa0ac91ba123900ec6c6363d157e442c272e41f7912e4c40b30769b1b1e67142b3f69db279142236858d2961b5d31bd4ef474baa2e88f537f9dbf5a648df96c"}}, @dsss={0x3, 0x1, 0xad}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x40}}, @ibss={0x6, 0x2, 0x101}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13b, 0x7f, [@challenge={0x10, 0x1, 0xce}, @random={0x66, 0xf6, "3f76a7ce89e9f008878d1359cfb184029036ec4ff7ba184ef139974a3c094156b50fb3e57b6edb576aeb7132b2ea0fd607759e38a11c4a0a234126a89ad92a42c8fef466f8d273a2c180cca26e8fea910fc7dea8a755ec7a094741638c96cc0e001d144d3a4e796496b4716b935cb124efa09a42660e574de62a2c40cae0a98dae0eaa581f81341e9964b002d105d8947a6eb221feab1c5be9b8b04884731891a553c85d1ae1d297db08ed1e00a12bc2019bf09d8eaaf88da26ececac89531b2f00b6c62fdd7e0ca63847e2e97937f0203c9c02a616b384343f1a67e7ec11832c19b668e454c6906e964a7b13563b8e40f21a623ea7c"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4, 0x5, @broadcast, 0xff, 0x7, 0x2}}, @mic={0x8c, 0x18, {0x8a, "f2ff0000ff56", @long="c024661a57f04f9502077d66bccc3c1d"}}, @channel_switch={0x25, 0x3, {0x0, 0xb1, 0x1f}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_IE={0x8d, 0x2a, [@cf={0x4, 0x6, {0x3, 0x9, 0x8001, 0x9}}, @mic={0x8c, 0x10, {0x8f9, "c596e2c48fc8", @short="c2e75e3f3624661f"}}, @challenge={0x10, 0x1, 0xce}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xb2, 0x1}}, @fast_bss_trans={0x37, 0x64, {0x80, 0x2, "f77fa798f772b054765e3f74aafadb6f", "3be78a2c9dcb3b4abc74cff5146d268d2e12b8235b4f8d6c2763850287e4ecbd", "39d35133ad08c9f116a34e48abd78bd0af769ca91a521cbe069a68b8bfe64a42", [{0x1, 0x7, "5f1147195edbd5"}, {0x1, 0x7, "ad4d3a426a7775"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb, 0x2, "849737f4dfa4b0"}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x3, @device_a, 0xfffff31c, "", 0x2, 0x6, @broadcast, 0x7}}]}]}, 0xb30}}, 0x4004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r5, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@deltaction={0xec, 0x31, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) fgetxattr(r5, &(0x7f0000000540)=@random={'user.', 'hfsc\x00'}, &(0x7f00000005c0)=""/102, 0x66) [ 1121.225524][T19101] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1121.225558][T19101] [ 1121.227144][T19101] memory: usage 307200kB, limit 307200kB, failcnt 5860 [ 1121.268738][T19102] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1121.394444][T19101] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1121.450726][T19102] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1121.633775][T19122] loop5: detected capacity change from 0 to 512 [ 1121.658306][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1121.674046][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1121.683699][T19101] Memory cgroup stats for /syz1: [ 1121.683897][T19101] anon 102400 [ 1121.683897][T19101] file 184320 [ 1121.683897][T19101] kernel 314269696 [ 1121.683897][T19101] kernel_stack 65536 [ 1121.683897][T19101] pagetables 65536 [ 1121.683897][T19101] percpu 5372992 [ 1121.683897][T19101] sock 0 [ 1121.683897][T19101] vmalloc 8192 [ 1121.683897][T19101] shmem 180224 [ 1121.683897][T19101] zswap 0 [ 1121.683897][T19101] zswapped 0 [ 1121.683897][T19101] file_mapped 180224 [ 1121.683897][T19101] file_dirty 4096 [ 1121.683897][T19101] file_writeback 0 [ 1121.683897][T19101] swapcached 0 [ 1121.683897][T19101] anon_thp 0 [ 1121.683897][T19101] file_thp 0 [ 1121.683897][T19101] shmem_thp 0 [ 1121.683897][T19101] inactive_anon 102400 [ 1121.683897][T19101] active_anon 180224 [ 1121.683897][T19101] inactive_file 0 [ 1121.683897][T19101] active_file 4096 [ 1121.683897][T19101] unevictable 0 [ 1121.683897][T19101] slab_reclaimable 15280 [ 1121.683897][T19101] slab_unreclaimable 308706808 [ 1121.683897][T19101] slab 308722088 [ 1121.688620][T19102] FAT-fs (loop4): Filesystem has been set read-only [ 1121.689200][T19101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1121.807741][ T2970] loop5: unable to read partition table [ 1121.830585][T19101] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19096,uid=0 22:05:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x7a00}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async, rerun: 32) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 32) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async, rerun: 32) sendmmsg(r4, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b6b40aabc3355d8fb203d29dfe3858d91080da51d5f73835a8aecf0e530e1d168b7519835352e1454d93625f4763bd1663888c930ca261b65f140418c3694294c5818934bcc5678558c114273134c0", @ANYRES32=r3, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0xb30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x32}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@challenge={0x10, 0x1, 0xab}, @cf={0x4, 0x6, {0x2, 0x81, 0x504}}]}, @NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x70, 0x2, "16f01cf615554b611a128ccead03497cca1ec39c47ee923d6063471dc35ef468a853d2a15acbdbc9a2f8ce822eab2813f063059a5e418358925982972ffe4fbf1a7df0431cab0337a30f7e3f0039bff6a89298fe6a2f9b86b6b547d1559e0980c531d9d5c87e124f717f7916"}]}, @NL80211_ATTR_PROBE_RESP={0x7b4, 0x91, "445456417341b8d03415165dc50ff81516b2cbafe9fa33a812c7b4d20e79c866407a35c0cc414ea9f2c88e9562a5ad11a10a88db90a821fc356174db1ee85a61d4bd1cef7c8497e43588bcbec4e04515b56139c8fe6c61f8b614a0a88020114f88a6283e908125856df8567cafd372c9055913ee1bf5690ccfb15437b7f57956f7dc46f22dbb7ad77a8090776e9c1bdea87dfb14d238229a9727f165bc907e2a36d95d4e48d4cb0c8ff251228c260b1dcc6c1039a38da1c1086b6833ea50a616426da27a58527a79dc5d89e4ceacec470d8e96756813dd84d293be9c39c69f7b31dc84f02b5bdc1d3b2ce6e05a55c24ab9969d58ba3ef3e43c2e9edf1525831753ba3da18c378fc0dc82b19fa4b2d5ed309b836f7b47592faf50793c81d1f9a1ab6ded68206c74c73a139593f3898526bcf3043b585062a0a72e16b33994ad3c5b6da0cdba704408b2bbdf116c7dc3e202aaa1a2b52f8c557a7e1a76045693ee08903635ad8fca678b30f3f70e208efbaf49841aaa38b699fc7cc11eafc889f5199c42a4ca29eb97fda992e086ab105f6dc9b06be517aad1558589906264b4ae6f220e65a16043613ec6e5e18fc7ae757786af0cc6d493449bdb72c9b77b0485ae14de7802acfb877fc9cfa78235f358aea30d0257b20383d5764bbcf78bfe77d8ebc4c2ef33a9e8f0e883da924f1beadd4cee10bed85e259a054aaa7ca14454881af9e4767d9de84ce581708070f15ee1f6b20b24bbe2b7d4cde6b73902f45846c3f50607aa46a8efcace69809e7cfcd84f7d6ba720a534bde2a62e915db920ad73a84c0daeef6b206d60ef890212bf8bcced19e4a1df01b4dbf3c61e2dda083759ec14e46e00c16a91dbe086fc6ca9a0d33f2030e138dd2e3f020171d786cf76e40a505bf9e1a8618b1124c35cda2a00a278d34ceb2621f87284b0c8e10ce51c89b92df07dfbe05a11444e71a87a6a0fa8ea0dd20359f975df6f6602a017371c9fc43f8eeb5a013cf157229c29450adfc103f96d6cb8ca38d300869cfc8ceb34f5953abed1897d0366eeb9581269a6f5d3ff97fa11ce4110e24e3f6a117951c33a9a36e589e5ee17eb28d7d088bf10c098539d72183fa554b4196cc1278633cc84700b5d9f34bf145db1b563264a01e7dd385d19e42e183cad66072f1f19add85c3fa8c7833ee161a3c2008353a872b64bcb628b01922b99be4c76150c19667ac86e7a507362bb84667a9779f31b0ba3bbc9675c3e9eaf11e3ce5db17f9e17178e3b608ca5a873f1c4d3f58bf6fe42c27b2063a0bd9989d7783f4bb870993598a070334391f4d9dcd783f12e8cc30f90bd2c6e5d7cd2765e748748a5049682fb46de989d9d6be52969d67d86909bc681a0b96e784485567efe1006eb261f5fa62266cd235903b573cab48731ad5bf9b4e5607a5269a3df038df6511e0dc0d8c80339a1f73e720d08f6c4dd071986f0d77246600b79cd80c98ab4e053d40d6e259f1155496d9fbf6e235c9ba1b57f35d6d986c7be60220a365f1aa840629e22ecaba02791c3cd1f01bf88f8574b0af6fac76dfe8126a9d8e6ab4d3fa2c7a8318db03042e028eade101b2fcce7066bfb5c2dd49335332a36886a1db49a6d4c61ce98c1d011a2e78e7adf4d4ffb2d7c766794fae38032da665597f364534517abb56bc72d118f28b9f63867c84dcb30250285b954d42292a8b4d09ea21e0894fb697cd211dd5d3e3c083a540d4511ae37563a660f79d57a9a252c6b48540c5f12ab8bf0146759ede7e29023d363c5501f021ff5b2b84a7afb27f77b7d683e9378836d1251f74e49fdf147dc67f99878d081b3110ba45137e7ed775cc67e1e51a2909cb2d54c657a0a7221ad510998dfed3028987ec10138d8936faaf9982ea1b32b6c14449947de2670241972bba90993f6eb429a396005dd024ffff309d19cce3094fe53876714c0c40f831ec762d869cae04da35a20ce3e932987f1f36d3a377fcd38323269f23e943a2080dae46e343f07f6dab540bb233be0e77d6f14db55d3a63dc166be133b09189876b8fcb7cdf781ce532ea3bbc27842ae7dd46731abed71ff0ac737de160e2f6717963a1338b632e32e4f7c0d4f20d798068de329c5c5929af3b522486c5ff821f63e524f228dccee91d100e2c55f21dbdb44fdfbe8bf72523844ac2357d3abe9a90a2c4e2336b0dc70cecac5a8727990816b901b7316604baea810366151c4f4e25719e5d243490a2a1ad2bcf8098228987729f8860f96f5bcd7c5b7aba247f6dca6f42755988ce767ae3d27e2b4667538807b81d297308d3ad9ab6d0dd3c72c070c90c1744077f509cc55e7dd4b78f0d7f3d5d0fd08db369611f9df3c61efc529a673a310110695f7935574289eaee260e378065be0df2e889e8260bde2c3d93ec8790bd51c41a4bfe80f97fae757583a3e602d447d27c3ae7b1882ccdda70f958340638ed8c204343df16e67812be30185e29ce2d07702f5d1360a872f6e269333095a905ac0751b258f889e03525c753b55fe048d54f90020fab9d9fdc7e929a67522fd6e79c7265bd655d827714e08b29e27b7a008c1bacd0c06cde3c687d6931ac871ae7d6fc58323aa5c8ebc0c49eeb62c915d335d718407b99e882c558b5ec848faa50449ae0652c0dfa31ec55f1a3a6daac3abdddfb5f73a182a90cd6fd0f94c0285a83b328b10935b84308daa255e335110f34d426f465f59fff8cafa70d2c20026a159f89749d172ac0ce85e574726ce7d264b2f3e717ce44db8219d09ec0cfd"}, @NL80211_ATTR_IE_ASSOC_RESP={0xcd, 0x80, [@chsw_timing={0x68, 0x4, {0xd9b, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4b, 0xe, 0xb6}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x7f, 0x8, @device_b, 0x2000000, 0x6, 0x1}}, @mic={0x8c, 0x18, {0xf4f, "9cc91471f323", @long="28a3dcbd311bac44be91d820106f6e83"}}, @measure_req={0x26, 0x7e, {0x20, 0x1, 0xd6, "cc14babcdf8d03497024e8cc8f0954afb34a9b3dd9b95d4cc52f7267cc18c0640799885ab1086df73d8d5b29a9948a8cc8cf8b695ea35aa01baba97aa0ac91ba123900ec6c6363d157e442c272e41f7912e4c40b30769b1b1e67142b3f69db279142236858d2961b5d31bd4ef474baa2e88f537f9dbf5a648df96c"}}, @dsss={0x3, 0x1, 0xad}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x40}}, @ibss={0x6, 0x2, 0x101}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13b, 0x7f, [@challenge={0x10, 0x1, 0xce}, @random={0x66, 0xf6, "3f76a7ce89e9f008878d1359cfb184029036ec4ff7ba184ef139974a3c094156b50fb3e57b6edb576aeb7132b2ea0fd607759e38a11c4a0a234126a89ad92a42c8fef466f8d273a2c180cca26e8fea910fc7dea8a755ec7a094741638c96cc0e001d144d3a4e796496b4716b935cb124efa09a42660e574de62a2c40cae0a98dae0eaa581f81341e9964b002d105d8947a6eb221feab1c5be9b8b04884731891a553c85d1ae1d297db08ed1e00a12bc2019bf09d8eaaf88da26ececac89531b2f00b6c62fdd7e0ca63847e2e97937f0203c9c02a616b384343f1a67e7ec11832c19b668e454c6906e964a7b13563b8e40f21a623ea7c"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4, 0x5, @broadcast, 0xff, 0x7, 0x2}}, @mic={0x8c, 0x18, {0x8a, "f2ff0000ff56", @long="c024661a57f04f9502077d66bccc3c1d"}}, @channel_switch={0x25, 0x3, {0x0, 0xb1, 0x1f}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_IE={0x8d, 0x2a, [@cf={0x4, 0x6, {0x3, 0x9, 0x8001, 0x9}}, @mic={0x8c, 0x10, {0x8f9, "c596e2c48fc8", @short="c2e75e3f3624661f"}}, @challenge={0x10, 0x1, 0xce}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xb2, 0x1}}, @fast_bss_trans={0x37, 0x64, {0x80, 0x2, "f77fa798f772b054765e3f74aafadb6f", "3be78a2c9dcb3b4abc74cff5146d268d2e12b8235b4f8d6c2763850287e4ecbd", "39d35133ad08c9f116a34e48abd78bd0af769ca91a521cbe069a68b8bfe64a42", [{0x1, 0x7, "5f1147195edbd5"}, {0x1, 0x7, "ad4d3a426a7775"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb, 0x2, "849737f4dfa4b0"}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x3, @device_a, 0xfffff31c, "", 0x2, 0x6, @broadcast, 0x7}}]}]}, 0xb30}}, 0x4004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async, rerun: 32) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) sendmmsg(r5, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@deltaction={0xec, 0x31, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async, rerun: 64) fgetxattr(r5, &(0x7f0000000540)=@random={'user.', 'hfsc\x00'}, &(0x7f00000005c0)=""/102, 0x66) (rerun: 64) 22:05:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1121.845962][T19122] EXT4-fs (loop5): inodes count not valid: 32 vs 252 [ 1121.873250][T19101] Memory cgroup out of memory: Killed process 19096 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x11, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000fffe000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) sendmmsg(r4, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b6b40aabc3355d8fb203d29dfe3858d91080da51d5f73835a8aecf0e530e1d168b7519835352e1454d93625f4763bd1663888c930ca261b65f140418c3694294c5818934bcc5678558c114273134c0", @ANYRES32=r3, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0xb30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x32}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@challenge={0x10, 0x1, 0xab}, @cf={0x4, 0x6, {0x2, 0x81, 0x504}}]}, @NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x70, 0x2, "16f01cf615554b611a128ccead03497cca1ec39c47ee923d6063471dc35ef468a853d2a15acbdbc9a2f8ce822eab2813f063059a5e418358925982972ffe4fbf1a7df0431cab0337a30f7e3f0039bff6a89298fe6a2f9b86b6b547d1559e0980c531d9d5c87e124f717f7916"}]}, @NL80211_ATTR_PROBE_RESP={0x7b4, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xcd, 0x80, [@chsw_timing={0x68, 0x4, {0xd9b, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4b, 0xe, 0xb6}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x7f, 0x8, @device_b, 0x2000000, 0x6, 0x1}}, @mic={0x8c, 0x18, {0xf4f, "9cc91471f323", @long="28a3dcbd311bac44be91d820106f6e83"}}, @measure_req={0x26, 0x7e, {0x20, 0x1, 0xd6, "cc14babcdf8d03497024e8cc8f0954afb34a9b3dd9b95d4cc52f7267cc18c0640799885ab1086df73d8d5b29a9948a8cc8cf8b695ea35aa01baba97aa0ac91ba123900ec6c6363d157e442c272e41f7912e4c40b30769b1b1e67142b3f69db279142236858d2961b5d31bd4ef474baa2e88f537f9dbf5a648df96c"}}, @dsss={0x3, 0x1, 0xad}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x40}}, @ibss={0x6, 0x2, 0x101}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13b, 0x7f, [@challenge={0x10, 0x1, 0xce}, @random={0x66, 0xf6, "3f76a7ce89e9f008878d1359cfb184029036ec4ff7ba184ef139974a3c094156b50fb3e57b6edb576aeb7132b2ea0fd607759e38a11c4a0a234126a89ad92a42c8fef466f8d273a2c180cca26e8fea910fc7dea8a755ec7a094741638c96cc0e001d144d3a4e796496b4716b935cb124efa09a42660e574de62a2c40cae0a98dae0eaa581f81341e9964b002d105d8947a6eb221feab1c5be9b8b04884731891a553c85d1ae1d297db08ed1e00a12bc2019bf09d8eaaf88da26ececac89531b2f00b6c62fdd7e0ca63847e2e97937f0203c9c02a616b384343f1a67e7ec11832c19b668e454c6906e964a7b13563b8e40f21a623ea7c"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4, 0x5, @broadcast, 0xff, 0x7, 0x2}}, @mic={0x8c, 0x18, {0x8a, "f2ff0000ff56", @long="c024661a57f04f9502077d66bccc3c1d"}}, @channel_switch={0x25, 0x3, {0x0, 0xb1, 0x1f}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_IE={0x8d, 0x2a, [@cf={0x4, 0x6, {0x3, 0x9, 0x8001, 0x9}}, @mic={0x8c, 0x10, {0x8f9, "c596e2c48fc8", @short="c2e75e3f3624661f"}}, @challenge={0x10, 0x1, 0xce}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xb2, 0x1}}, @fast_bss_trans={0x37, 0x64, {0x80, 0x2, "f77fa798f772b054765e3f74aafadb6f", "3be78a2c9dcb3b4abc74cff5146d268d2e12b8235b4f8d6c2763850287e4ecbd", "39d35133ad08c9f116a34e48abd78bd0af769ca91a521cbe069a68b8bfe64a42", [{0x1, 0x7, "5f1147195edbd5"}, {0x1, 0x7, "ad4d3a426a7775"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb, 0x2, "849737f4dfa4b0"}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x3, @device_a, 0xfffff31c, "", 0x2, 0x6, @broadcast, 0x7}}]}]}, 0xb30}}, 0x4004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r5, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@deltaction={0xec, 0x31, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) fgetxattr(r5, &(0x7f0000000540)=@random={'user.', 'hfsc\x00'}, &(0x7f00000005c0)=""/102, 0x66) 22:05:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1122.032220][T19140] loop5: detected capacity change from 0 to 512 [ 1122.056122][T19141] loop4: detected capacity change from 0 to 68 22:05:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1122.082271][ T2970] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1122.105743][T19140] EXT4-fs (loop5): inodes count not valid: 32 vs 254 [ 1122.116058][ T2970] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.141720][ T2970] loop4: unable to read partition table [ 1122.148314][T19141] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1122.171675][T19139] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1122.196908][T19139] CPU: 0 PID: 19139 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1122.207338][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1122.217491][T19139] Call Trace: [ 1122.220772][T19139] [ 1122.223707][T19139] dump_stack_lvl+0xcd/0x134 [ 1122.228316][T19139] dump_header+0x10b/0x7f9 [ 1122.232744][T19139] oom_kill_process.cold+0x10/0x15 [ 1122.237873][T19139] out_of_memory+0x358/0x14a0 [ 1122.242573][T19139] ? find_held_lock+0x2d/0x110 [ 1122.247350][T19139] ? oom_killer_disable+0x270/0x270 [ 1122.252569][T19139] ? find_held_lock+0x2d/0x110 [ 1122.257347][T19139] mem_cgroup_out_of_memory+0x206/0x270 [ 1122.260785][T19141] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1122.262877][T19139] ? mem_cgroup_margin+0x130/0x130 [ 1122.276551][T19139] ? lock_downgrade+0x6e0/0x6e0 [ 1122.281429][T19139] try_charge_memcg+0xf67/0x13f0 [ 1122.286387][T19139] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1122.292386][T19139] ? lock_downgrade+0x6e0/0x6e0 [ 1122.297260][T19139] charge_memcg+0x31/0x320 [ 1122.301688][T19139] __mem_cgroup_charge+0x27/0x90 [ 1122.306636][T19139] ? _compound_head+0x5d/0x150 [ 1122.311422][T19139] wp_page_copy+0x27c/0x1b60 [ 1122.316034][T19139] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1122.321503][T19139] ? lock_downgrade+0x6e0/0x6e0 [ 1122.326360][T19139] ? vm_normal_page+0x146/0x2a0 [ 1122.327224][T19141] FAT-fs (loop4): Filesystem has been set read-only [ 1122.331219][T19139] do_wp_page+0x1d1/0x1910 [ 1122.331246][T19139] __handle_mm_fault+0x1813/0x39b0 [ 1122.331273][T19139] ? vm_iomap_memory+0x190/0x190 [ 1122.331313][T19139] handle_mm_fault+0x1c8/0x780 [ 1122.331338][T19139] do_user_addr_fault+0x475/0x1210 [ 1122.331369][T19139] exc_page_fault+0x94/0x170 [ 1122.331395][T19139] asm_exc_page_fault+0x22/0x30 [ 1122.331414][T19139] RIP: 0033:0x7fe6884374b0 22:05:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1122.331431][T19139] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 1122.331450][T19139] RSP: 002b:00007ffffbe4a970 EFLAGS: 00010246 [ 1122.331467][T19139] RAX: 000000009a6ebc04 RBX: 00007fe68859c018 RCX: 0000001b2eb20000 [ 1122.331481][T19139] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec1382 [ 1122.331493][T19139] RBP: 000000009a6ebc04 R08: 0000000000001c04 R09: 000000009a6ebc08 [ 1122.331506][T19139] R10: 00007ffffbe4ab40 R11: 0000000000000246 R12: 00007fe688590000 [ 1122.331519][T19139] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3317d [ 1122.331531][T19139] ? trace_user_exit.constprop.0+0xd/0x210 [ 1122.331568][T19139] [ 1122.356774][T19139] memory: usage 307200kB, limit 307200kB, failcnt 5935 [ 1122.398763][T19153] __nla_validate_parse: 7 callbacks suppressed 22:05:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000ff000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1122.398778][T19153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1122.420680][T19139] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1122.511306][T19161] loop5: detected capacity change from 0 to 512 [ 1122.520228][T19139] Memory cgroup stats for /syz1: [ 1122.520415][T19139] anon 114688 [ 1122.520415][T19139] file 184320 [ 1122.520415][T19139] kernel 314273792 [ 1122.520415][T19139] kernel_stack 65536 [ 1122.520415][T19139] pagetables 69632 [ 1122.520415][T19139] percpu 5372992 [ 1122.520415][T19139] sock 0 [ 1122.520415][T19139] vmalloc 8192 [ 1122.520415][T19139] shmem 180224 [ 1122.520415][T19139] zswap 0 [ 1122.520415][T19139] zswapped 0 [ 1122.520415][T19139] file_mapped 180224 [ 1122.520415][T19139] file_dirty 4096 [ 1122.520415][T19139] file_writeback 0 [ 1122.520415][T19139] swapcached 0 [ 1122.520415][T19139] anon_thp 0 [ 1122.520415][T19139] file_thp 0 [ 1122.520415][T19139] shmem_thp 0 [ 1122.520415][T19139] inactive_anon 114688 [ 1122.520415][T19139] active_anon 180224 [ 1122.520415][T19139] inactive_file 0 [ 1122.520415][T19139] active_file 4096 [ 1122.520415][T19139] unevictable 0 [ 1122.520415][T19139] slab_reclaimable 17208 [ 1122.520415][T19139] slab_unreclaimable 308707456 [ 1122.520415][T19139] slab 308724664 [ 1122.524582][T19161] EXT4-fs (loop5): inodes count not valid: 32 vs 255 [ 1122.525411][T19139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19139,uid=0 22:05:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x17, 0x4400}], 0x0, &(0x7f0000011100)) [ 1122.676922][T19139] Memory cgroup out of memory: Killed process 19139 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 22:05:23 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 22:05:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800001ff000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1122.774423][T19165] loop4: detected capacity change from 0 to 68 [ 1122.778415][ T2970] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1122.806644][T19166] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1122.823338][ T2970] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.833605][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1122.858820][ T2970] loop4: unable to read partition table [ 1122.859617][T19167] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1122.885005][T19165] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1122.905514][T19165] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:23 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1122.945471][T19167] CPU: 0 PID: 19167 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1122.955932][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1122.965999][T19167] Call Trace: [ 1122.969282][T19167] [ 1122.972216][T19167] dump_stack_lvl+0xcd/0x134 [ 1122.976825][T19167] dump_header+0x10b/0x7f9 [ 1122.981260][T19167] oom_kill_process.cold+0x10/0x15 [ 1122.986391][T19167] out_of_memory+0x358/0x14a0 [ 1122.987750][T19180] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1122.991079][T19167] ? find_held_lock+0x2d/0x110 [ 1122.991104][T19167] ? oom_killer_disable+0x270/0x270 [ 1122.991127][T19167] ? find_held_lock+0x2d/0x110 [ 1122.991146][T19167] mem_cgroup_out_of_memory+0x206/0x270 [ 1122.991167][T19167] ? mem_cgroup_margin+0x130/0x130 [ 1122.991184][T19167] ? lock_downgrade+0x6e0/0x6e0 [ 1122.991214][T19167] try_charge_memcg+0xf67/0x13f0 [ 1122.991241][T19167] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1122.991262][T19167] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1122.991282][T19167] ? lock_downgrade+0x6e0/0x6e0 [ 1122.991302][T19167] ? lock_downgrade+0x6e0/0x6e0 [ 1122.991332][T19167] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1122.991355][T19167] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1122.991382][T19167] copy_process+0x145a/0x7090 [ 1122.991406][T19167] ? __lock_acquire+0xbc3/0x56d0 [ 1122.991433][T19167] ? __cleanup_sighand+0xb0/0xb0 [ 1122.991467][T19167] kernel_clone+0xe7/0xab0 [ 1122.991487][T19167] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1122.991508][T19167] ? create_io_thread+0xe0/0xe0 [ 1122.991531][T19167] ? find_held_lock+0x2d/0x110 [ 1122.991551][T19167] ? __ct_user_exit+0xff/0x150 [ 1122.991577][T19167] __do_sys_clone+0xba/0x100 [ 1122.991596][T19167] ? kernel_clone+0xab0/0xab0 22:05:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xf000}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1122.991624][T19167] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1122.991647][T19167] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1122.991675][T19167] do_syscall_64+0x35/0xb0 [ 1122.991694][T19167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1122.991713][T19167] RIP: 0033:0x7fe68848a6a1 22:05:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:05:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x3c, 0x4400}], 0x0, &(0x7f0000011100)) [ 1122.991729][T19167] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1122.991748][T19167] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1122.991766][T19167] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1122.991779][T19167] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1122.991791][T19167] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1122.991803][T19167] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1122.991814][T19167] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1122.991840][T19167] [ 1123.016074][T19165] FAT-fs (loop4): Filesystem has been set read-only [ 1123.068447][T19173] loop5: detected capacity change from 0 to 512 [ 1123.093562][T19167] memory: usage 307188kB, limit 307200kB, failcnt 5978 [ 1123.093581][T19167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1123.093592][T19167] Memory cgroup stats for /syz1: [ 1123.093760][T19167] anon 98304 [ 1123.093760][T19167] file 184320 [ 1123.093760][T19167] kernel 314265600 [ 1123.093760][T19167] kernel_stack 32768 [ 1123.093760][T19167] pagetables 65536 [ 1123.093760][T19167] percpu 5372992 [ 1123.093760][T19167] sock 0 [ 1123.093760][T19167] vmalloc 8192 [ 1123.093760][T19167] shmem 180224 [ 1123.093760][T19167] zswap 0 [ 1123.093760][T19167] zswapped 0 [ 1123.093760][T19167] file_mapped 180224 [ 1123.093760][T19167] file_dirty 4096 [ 1123.093760][T19167] file_writeback 0 [ 1123.093760][T19167] swapcached 0 [ 1123.093760][T19167] anon_thp 0 [ 1123.093760][T19167] file_thp 0 [ 1123.093760][T19167] shmem_thp 0 [ 1123.093760][T19167] inactive_anon 98304 [ 1123.093760][T19167] active_anon 180224 [ 1123.093760][T19167] inactive_file 0 [ 1123.093760][T19167] active_file 4096 [ 1123.093760][T19167] unevictable 0 [ 1123.093760][T19167] slab_reclaimable 15280 [ 1123.093760][T19167] slab_unreclaimable 308708448 [ 1123.093760][T19167] slab 308723728 [ 1123.093811][T19167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19167,uid=0 [ 1123.093919][T19167] Memory cgroup out of memory: Killed process 19167 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1123.147879][T19187] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1123.285748][T19193] loop4: detected capacity change from 0 to 68 [ 1123.436320][T19187] CPU: 1 PID: 19187 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1123.446737][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1123.456784][T19187] Call Trace: [ 1123.460050][T19187] [ 1123.462971][T19187] dump_stack_lvl+0xcd/0x134 [ 1123.467560][T19187] dump_header+0x10b/0x7f9 [ 1123.471973][T19187] oom_kill_process.cold+0x10/0x15 [ 1123.477089][T19187] out_of_memory+0x358/0x14a0 [ 1123.481769][T19187] ? find_held_lock+0x2d/0x110 [ 1123.486536][T19187] ? oom_killer_disable+0x270/0x270 [ 1123.491908][T19187] ? find_held_lock+0x2d/0x110 [ 1123.496750][T19187] mem_cgroup_out_of_memory+0x206/0x270 [ 1123.502290][T19187] ? mem_cgroup_margin+0x130/0x130 [ 1123.507392][T19187] ? lock_downgrade+0x6e0/0x6e0 [ 1123.512244][T19187] try_charge_memcg+0xf67/0x13f0 [ 1123.517180][T19187] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1123.523155][T19187] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1123.528867][T19187] ? lock_downgrade+0x6e0/0x6e0 [ 1123.533713][T19187] ? lock_downgrade+0x6e0/0x6e0 [ 1123.538566][T19187] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1123.544106][T19187] __alloc_pages+0x1ef/0x510 [ 1123.548691][T19187] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1123.555448][T19187] ? find_held_lock+0x2d/0x110 [ 1123.560209][T19187] ? lock_downgrade+0x6e0/0x6e0 [ 1123.565049][T19187] ? do_raw_spin_lock+0x120/0x2a0 [ 1123.570072][T19187] alloc_pages+0x1a6/0x270 [ 1123.574482][T19187] __pmd_alloc+0x3b/0x5c0 [ 1123.578801][T19187] ? __pud_alloc+0xdd/0x170 [ 1123.583296][T19187] __handle_mm_fault+0x8d4/0x39b0 [ 1123.588319][T19187] ? vm_iomap_memory+0x190/0x190 [ 1123.593263][T19187] handle_mm_fault+0x1c8/0x780 [ 1123.598022][T19187] do_user_addr_fault+0x475/0x1210 [ 1123.603135][T19187] exc_page_fault+0x94/0x170 [ 1123.607807][T19187] asm_exc_page_fault+0x22/0x30 [ 1123.612646][T19187] RIP: 0033:0x7fe6884264f6 [ 1123.617051][T19187] Code: 1f 44 00 00 48 8b 0d e1 ee 0a 01 4c 63 05 ca ee 0a 01 48 8b 05 cb ee 0a 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 b1 ee 0a 01 c3 52 48 8d 35 1f ba 0b 00 48 89 c2 48 [ 1123.636649][T19187] RSP: 002b:00007ffffbe4aa58 EFLAGS: 00010287 22:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1123.642706][T19187] RAX: 0000001b2eb20000 RBX: 0000000000000003 RCX: 0000001b2eb20000 [ 1123.650667][T19187] RDX: 0000001b2eb20004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 1123.658627][T19187] RBP: 0000000000000000 R08: 0000001b2ef20000 R09: 0000000000040000 [ 1123.666586][T19187] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 1123.674547][T19187] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffffbe4ad00 [ 1123.682526][T19187] 22:05:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000004000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1123.726397][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1123.736590][T19173] EXT4-fs (loop5): inodes count not valid: 32 vs 255 [ 1123.742043][T19193] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1123.800977][T19193] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1123.818342][T19193] FAT-fs (loop4): Filesystem has been set read-only [ 1123.831146][T19187] memory: usage 307132kB, limit 307200kB, failcnt 6026 [ 1123.838017][T19187] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1123.847202][T19187] Memory cgroup stats for /syz1: [ 1123.847391][T19187] anon 86016 [ 1123.847391][T19187] file 184320 [ 1123.847391][T19187] kernel 314232832 [ 1123.847391][T19187] kernel_stack 32768 [ 1123.847391][T19187] pagetables 57344 [ 1123.847391][T19187] percpu 5372992 [ 1123.847391][T19187] sock 0 [ 1123.847391][T19187] vmalloc 8192 [ 1123.847391][T19187] shmem 180224 [ 1123.847391][T19187] zswap 0 [ 1123.847391][T19187] zswapped 0 [ 1123.847391][T19187] file_mapped 180224 [ 1123.847391][T19187] file_dirty 4096 [ 1123.847391][T19187] file_writeback 0 [ 1123.847391][T19187] swapcached 0 [ 1123.847391][T19187] anon_thp 0 [ 1123.847391][T19187] file_thp 0 [ 1123.847391][T19187] shmem_thp 0 [ 1123.847391][T19187] inactive_anon 86016 [ 1123.847391][T19187] active_anon 180224 [ 1123.847391][T19187] inactive_file 0 [ 1123.847391][T19187] active_file 4096 [ 1123.847391][T19187] unevictable 0 [ 1123.847391][T19187] slab_reclaimable 15280 [ 1123.847391][T19187] slab_unreclaimable 308709256 [ 1123.847391][T19187] slab 308724536 22:05:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:05:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1123.968681][T19201] loop5: detected capacity change from 0 to 512 [ 1124.008062][T19201] EXT4-fs (loop5): invalid inodes per group: 4 [ 1124.008062][T19201] 22:05:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x43, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1124.021753][T19203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) (async) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 1124.078813][T19187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19187,uid=0 22:05:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000005000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x28}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1124.188640][T19213] loop4: detected capacity change from 0 to 68 [ 1124.217558][T19187] Memory cgroup out of memory: Killed process 19187 (syz-executor.1) total-vm:54376kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 22:05:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfe0f}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1124.243306][T19218] loop5: detected capacity change from 0 to 512 [ 1124.253498][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1124.263375][T19218] EXT4-fs (loop5): invalid inodes per group: 5 [ 1124.263375][T19218] [ 1124.314492][T19213] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1124.317397][T19219] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 1124.336938][T19213] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1124.336961][T19213] FAT-fs (loop4): Filesystem has been set read-only [ 1124.357422][T19219] CPU: 1 PID: 19219 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1124.367853][T19219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1124.377912][T19219] Call Trace: [ 1124.381184][T19219] [ 1124.384117][T19219] dump_stack_lvl+0xcd/0x134 [ 1124.388710][T19219] dump_header+0x10b/0x7f9 [ 1124.393146][T19219] oom_kill_process.cold+0x10/0x15 [ 1124.398263][T19219] out_of_memory+0x358/0x14a0 [ 1124.402946][T19219] ? find_held_lock+0x2d/0x110 [ 1124.405919][T19239] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.407707][T19219] ? oom_killer_disable+0x270/0x270 [ 1124.407737][T19219] ? find_held_lock+0x2d/0x110 [ 1124.407759][T19219] mem_cgroup_out_of_memory+0x206/0x270 [ 1124.432472][T19219] ? mem_cgroup_margin+0x130/0x130 [ 1124.437583][T19219] ? lock_downgrade+0x6e0/0x6e0 [ 1124.442437][T19219] try_charge_memcg+0xf67/0x13f0 [ 1124.447371][T19219] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1124.453345][T19219] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1124.459054][T19219] ? lock_downgrade+0x6e0/0x6e0 [ 1124.463898][T19219] ? lock_downgrade+0x6e0/0x6e0 [ 1124.468737][T19219] ? rcu_read_unlock+0x9/0x60 [ 1124.473413][T19219] obj_cgroup_charge+0x2ab/0x5e0 [ 1124.478343][T19219] ? copy_process+0x4ce/0x7090 [ 1124.483096][T19219] kmem_cache_alloc_node+0x92/0x3f0 [ 1124.488283][T19219] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1124.493474][T19219] copy_process+0x4ce/0x7090 [ 1124.498060][T19219] ? __lock_acquire+0xbc3/0x56d0 [ 1124.502995][T19219] ? __cleanup_sighand+0xb0/0xb0 [ 1124.507936][T19219] kernel_clone+0xe7/0xab0 [ 1124.512342][T19219] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1124.518312][T19219] ? create_io_thread+0xe0/0xe0 [ 1124.523160][T19219] ? find_held_lock+0x2d/0x110 [ 1124.527915][T19219] ? __ct_user_exit+0xff/0x150 [ 1124.532673][T19219] __do_sys_clone+0xba/0x100 [ 1124.537255][T19219] ? kernel_clone+0xab0/0xab0 [ 1124.541929][T19219] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1124.547814][T19219] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1124.553706][T19219] do_syscall_64+0x35/0xb0 [ 1124.558114][T19219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1124.563999][T19219] RIP: 0033:0x7fe68848a6a1 [ 1124.568406][T19219] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1124.588003][T19219] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1124.596406][T19219] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1124.604365][T19219] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1124.612415][T19219] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1124.620374][T19219] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1124.628338][T19219] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1124.636308][T19219] 22:05:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000006000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1124.691981][T19219] memory: usage 307156kB, limit 307200kB, failcnt 6055 [ 1124.700404][T19219] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1124.707616][T19219] Memory cgroup stats for /syz1: [ 1124.707809][T19219] anon 98304 [ 1124.707809][T19219] file 184320 [ 1124.707809][T19219] kernel 314245120 [ 1124.707809][T19219] kernel_stack 32768 [ 1124.707809][T19219] pagetables 65536 [ 1124.707809][T19219] percpu 5372992 [ 1124.707809][T19219] sock 0 [ 1124.707809][T19219] vmalloc 8192 [ 1124.707809][T19219] shmem 180224 [ 1124.707809][T19219] zswap 0 [ 1124.707809][T19219] zswapped 0 [ 1124.707809][T19219] file_mapped 180224 [ 1124.707809][T19219] file_dirty 4096 [ 1124.707809][T19219] file_writeback 0 [ 1124.707809][T19219] swapcached 0 [ 1124.707809][T19219] anon_thp 0 [ 1124.707809][T19219] file_thp 0 [ 1124.707809][T19219] shmem_thp 0 [ 1124.707809][T19219] inactive_anon 98304 [ 1124.707809][T19219] active_anon 180224 [ 1124.707809][T19219] inactive_file 0 [ 1124.707809][T19219] active_file 4096 [ 1124.707809][T19219] unevictable 0 [ 1124.707809][T19219] slab_reclaimable 15280 [ 1124.707809][T19219] slab_unreclaimable 308710184 [ 1124.707809][T19219] slab 308725464 [ 1124.720801][T19242] loop5: detected capacity change from 0 to 512 [ 1124.824172][T19219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19219,uid=0 22:05:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x44, 0x4400}], 0x0, &(0x7f0000011100)) [ 1124.844948][T19219] Memory cgroup out of memory: Killed process 19219 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:25 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) 22:05:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfeff}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1124.895120][T19245] loop4: detected capacity change from 0 to 68 22:05:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1124.970839][T19242] EXT4-fs (loop5): invalid inodes per group: 6 [ 1124.970839][T19242] [ 1124.983399][T19245] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1125.017938][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1125.038646][T19245] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1125.066003][T19245] FAT-fs (loop4): Filesystem has been set read-only 22:05:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000007000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1125.088549][T19253] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1125.128672][T19253] CPU: 1 PID: 19253 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1125.139134][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1125.146418][T19259] loop5: detected capacity change from 0 to 512 [ 1125.149181][T19253] Call Trace: [ 1125.149190][T19253] [ 1125.149198][T19253] dump_stack_lvl+0xcd/0x134 [ 1125.149228][T19253] dump_header+0x10b/0x7f9 [ 1125.149253][T19253] oom_kill_process.cold+0x10/0x15 [ 1125.175963][T19253] out_of_memory+0x358/0x14a0 [ 1125.180649][T19253] ? find_held_lock+0x2d/0x110 [ 1125.185414][T19253] ? oom_killer_disable+0x270/0x270 [ 1125.190614][T19253] ? find_held_lock+0x2d/0x110 [ 1125.195371][T19253] mem_cgroup_out_of_memory+0x206/0x270 [ 1125.200911][T19253] ? mem_cgroup_margin+0x130/0x130 [ 1125.206007][T19253] ? lock_downgrade+0x6e0/0x6e0 [ 1125.210860][T19253] try_charge_memcg+0xf67/0x13f0 [ 1125.215791][T19253] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1125.221766][T19253] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1125.227473][T19253] ? lock_downgrade+0x6e0/0x6e0 [ 1125.232321][T19253] ? lock_downgrade+0x6e0/0x6e0 [ 1125.237184][T19253] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1125.242730][T19253] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1125.248882][T19253] copy_process+0x145a/0x7090 [ 1125.253556][T19253] ? __lock_acquire+0xbc3/0x56d0 [ 1125.258488][T19253] ? __cleanup_sighand+0xb0/0xb0 [ 1125.263430][T19253] kernel_clone+0xe7/0xab0 [ 1125.267834][T19253] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1125.273806][T19253] ? create_io_thread+0xe0/0xe0 [ 1125.278651][T19253] ? find_held_lock+0x2d/0x110 [ 1125.283407][T19253] ? __ct_user_exit+0xff/0x150 [ 1125.288167][T19253] __do_sys_clone+0xba/0x100 [ 1125.292748][T19253] ? kernel_clone+0xab0/0xab0 [ 1125.297422][T19253] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1125.303309][T19253] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1125.309201][T19253] do_syscall_64+0x35/0xb0 [ 1125.313610][T19253] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.319495][T19253] RIP: 0033:0x7fe68848a6a1 [ 1125.323983][T19253] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1125.343580][T19253] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1125.351983][T19253] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1125.359942][T19253] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1125.367908][T19253] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1125.375868][T19253] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1125.383829][T19253] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1125.391800][T19253] [ 1125.424275][T19253] memory: usage 307188kB, limit 307200kB, failcnt 6102 [ 1125.435834][T19253] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1125.442891][T19253] Memory cgroup stats for /syz1: [ 1125.443070][T19253] anon 98304 [ 1125.443070][T19253] file 184320 [ 1125.443070][T19253] kernel 314261504 [ 1125.443070][T19253] kernel_stack 32768 [ 1125.443070][T19253] pagetables 65536 [ 1125.443070][T19253] percpu 5372992 [ 1125.443070][T19253] sock 0 [ 1125.443070][T19253] vmalloc 8192 [ 1125.443070][T19253] shmem 180224 [ 1125.443070][T19253] zswap 0 [ 1125.443070][T19253] zswapped 0 [ 1125.443070][T19253] file_mapped 180224 [ 1125.443070][T19253] file_dirty 4096 [ 1125.443070][T19253] file_writeback 0 [ 1125.443070][T19253] swapcached 0 [ 1125.443070][T19253] anon_thp 0 [ 1125.443070][T19253] file_thp 0 [ 1125.443070][T19253] shmem_thp 0 [ 1125.443070][T19253] inactive_anon 98304 [ 1125.443070][T19253] active_anon 180224 [ 1125.443070][T19253] inactive_file 0 [ 1125.443070][T19253] active_file 4096 [ 1125.443070][T19253] unevictable 0 [ 1125.443070][T19253] slab_reclaimable 15280 [ 1125.443070][T19253] slab_unreclaimable 308706648 [ 1125.443070][T19253] slab 308721928 [ 1125.552055][T19259] EXT4-fs (loop5): invalid inodes per group: 7 [ 1125.552055][T19259] 22:05:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:26 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) 22:05:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x55, 0x4400}], 0x0, &(0x7f0000011100)) [ 1125.563628][T19253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19253,uid=0 [ 1125.641950][T19253] Memory cgroup out of memory: Killed process 19253 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1125.667908][T19263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1125.681066][T19269] loop4: detected capacity change from 0 to 68 22:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xff0f}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1125.682257][ T4362] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1125.704896][ T4362] Buffer I/O error on dev loop4, logical block 0, async page read [ 1125.734166][ T4362] loop4: unable to read partition table [ 1125.743599][T19269] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1125.766604][T19269] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1125.786753][T19269] FAT-fs (loop4): Filesystem has been set read-only 22:05:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x90, 0x4400}], 0x0, &(0x7f0000011100)) [ 1125.832203][T19279] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:26 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) (async) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) (async) [ 1125.876897][T19279] CPU: 0 PID: 19279 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1125.887346][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1125.897409][T19279] Call Trace: [ 1125.900703][T19279] [ 1125.903637][T19279] dump_stack_lvl+0xcd/0x134 [ 1125.908248][T19279] dump_header+0x10b/0x7f9 [ 1125.912680][T19279] oom_kill_process.cold+0x10/0x15 [ 1125.917809][T19279] out_of_memory+0x358/0x14a0 [ 1125.922499][T19279] ? find_held_lock+0x2d/0x110 [ 1125.927289][T19279] ? oom_killer_disable+0x270/0x270 [ 1125.932507][T19279] ? find_held_lock+0x2d/0x110 [ 1125.937296][T19279] mem_cgroup_out_of_memory+0x206/0x270 [ 1125.942858][T19279] ? mem_cgroup_margin+0x130/0x130 [ 1125.947977][T19279] ? lock_downgrade+0x6e0/0x6e0 [ 1125.952830][T19279] try_charge_memcg+0xf67/0x13f0 [ 1125.957781][T19279] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1125.963753][T19279] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1125.969492][T19279] ? lock_downgrade+0x6e0/0x6e0 [ 1125.974351][T19279] ? lock_downgrade+0x6e0/0x6e0 [ 1125.979207][T19279] obj_cgroup_charge+0x2ab/0x5e0 [ 1125.984150][T19279] kmem_cache_alloc_lru+0x13e/0x720 [ 1125.989344][T19279] ? sock_alloc_inode+0x23/0x1d0 [ 1125.994297][T19279] sock_alloc_inode+0x23/0x1d0 [ 1125.999069][T19279] ? sock_free_inode+0x20/0x20 [ 1126.003845][T19279] alloc_inode+0x61/0x230 [ 1126.008194][T19279] new_inode_pseudo+0x13/0x80 [ 1126.012889][T19279] sock_alloc+0x3c/0x260 [ 1126.017212][T19279] __sock_create+0xb9/0x790 [ 1126.021732][T19279] ? lock_downgrade+0x6e0/0x6e0 [ 1126.026574][T19279] __sys_socket+0x12f/0x240 [ 1126.031071][T19279] ? __sys_socket_file+0x1f0/0x1f0 [ 1126.036198][T19279] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1126.042114][T19279] __x64_sys_socket+0x6f/0xb0 [ 1126.046791][T19279] do_syscall_64+0x35/0xb0 [ 1126.051221][T19279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.057098][T19279] RIP: 0033:0x7fe688489279 [ 1126.061497][T19279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1126.081271][T19279] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1126.089683][T19279] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1126.097846][T19279] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1126.105812][T19279] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1126.113778][T19279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.121739][T19279] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1126.129722][T19279] 22:05:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1126.157229][T19299] loop4: detected capacity change from 0 to 68 [ 1126.185817][T19299] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000025000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1126.235148][T19299] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1126.246943][T19299] FAT-fs (loop4): Filesystem has been set read-only [ 1126.260916][T19303] loop5: detected capacity change from 0 to 512 [ 1126.264526][ T3659] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1126.272983][T19279] memory: usage 307200kB, limit 307200kB, failcnt 6195 [ 1126.292199][ T3659] Buffer I/O error on dev loop5, logical block 0, async page read [ 1126.312853][T19279] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1126.316690][ T3659] loop5: unable to read partition table [ 1126.327576][T19279] Memory cgroup stats for /syz1: 22:05:27 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1126.327775][T19279] anon 102400 [ 1126.327775][T19279] file 184320 [ 1126.327775][T19279] kernel 314286080 [ 1126.327775][T19279] kernel_stack 65536 [ 1126.327775][T19279] pagetables 65536 [ 1126.327775][T19279] percpu 5372992 [ 1126.327775][T19279] sock 0 [ 1126.327775][T19279] vmalloc 8192 [ 1126.327775][T19279] shmem 180224 [ 1126.327775][T19279] zswap 0 [ 1126.327775][T19279] zswapped 0 [ 1126.327775][T19279] file_mapped 180224 [ 1126.327775][T19279] file_dirty 4096 [ 1126.327775][T19279] file_writeback 0 [ 1126.327775][T19279] swapcached 0 22:05:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x300, 0x4400}], 0x0, &(0x7f0000011100)) [ 1126.327775][T19279] anon_thp 0 [ 1126.327775][T19279] file_thp 0 [ 1126.327775][T19279] shmem_thp 0 [ 1126.327775][T19279] inactive_anon 102400 [ 1126.327775][T19279] active_anon 180224 [ 1126.327775][T19279] inactive_file 0 [ 1126.327775][T19279] active_file 4096 [ 1126.327775][T19279] unevictable 0 [ 1126.327775][T19279] slab_reclaimable 15280 [ 1126.327775][T19279] slab_unreclaimable 308718208 [ 1126.327775][T19279] slab 308733488 [ 1126.432681][T19309] loop4: detected capacity change from 0 to 68 22:05:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1126.458352][T19303] EXT4-fs (loop5): inodes count not valid: 32 vs 37 [ 1126.470855][T19279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19276,uid=0 [ 1126.501669][T19309] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1126.506382][T19279] Memory cgroup out of memory: Killed process 19276 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1126.543029][T19309] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xff7f}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x500, 0x4400}], 0x0, &(0x7f0000011100)) [ 1126.555997][T19309] FAT-fs (loop4): Filesystem has been set read-only [ 1126.567624][ T3659] I/O error, dev loop5, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 22:05:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000026000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:27 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:05:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1126.683796][T19317] loop4: detected capacity change from 0 to 68 [ 1126.696285][ T3659] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1126.720054][T19322] loop5: detected capacity change from 0 to 512 [ 1126.743593][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1126.755638][ T3659] Buffer I/O error on dev loop4, logical block 0, async page read [ 1126.757311][T19314] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:27 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1126.796992][ T3659] loop4: unable to read partition table [ 1126.806802][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1126.825402][T19317] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1126.853558][ T4362] loop5: unable to read partition table [ 1126.877533][T19314] CPU: 1 PID: 19314 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1126.877822][T19317] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1126.887965][T19314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1126.887980][T19314] Call Trace: [ 1126.887986][T19314] [ 1126.887995][T19314] dump_stack_lvl+0xcd/0x134 [ 1126.888032][T19314] dump_header+0x10b/0x7f9 [ 1126.921698][T19314] oom_kill_process.cold+0x10/0x15 [ 1126.926821][T19314] out_of_memory+0x358/0x14a0 [ 1126.931498][T19314] ? find_held_lock+0x2d/0x110 [ 1126.936252][T19314] ? oom_killer_disable+0x270/0x270 [ 1126.941446][T19314] ? find_held_lock+0x2d/0x110 [ 1126.946199][T19314] mem_cgroup_out_of_memory+0x206/0x270 [ 1126.951737][T19314] ? mem_cgroup_margin+0x130/0x130 [ 1126.956837][T19314] ? lock_downgrade+0x6e0/0x6e0 [ 1126.961686][T19314] try_charge_memcg+0xf67/0x13f0 [ 1126.966621][T19314] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1126.972602][T19314] ? lock_downgrade+0x6e0/0x6e0 [ 1126.977460][T19314] charge_memcg+0x31/0x320 [ 1126.981873][T19314] __mem_cgroup_charge+0x27/0x90 [ 1126.986804][T19314] ? _compound_head+0x5d/0x150 [ 1126.991564][T19314] wp_page_copy+0x27c/0x1b60 [ 1126.996148][T19314] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1127.001598][T19314] ? lock_downgrade+0x6e0/0x6e0 [ 1127.006438][T19314] ? vm_normal_page+0x146/0x2a0 [ 1127.011286][T19314] do_wp_page+0x52c/0x1910 [ 1127.015694][T19314] __handle_mm_fault+0x1813/0x39b0 [ 1127.020806][T19314] ? vm_iomap_memory+0x190/0x190 [ 1127.025757][T19314] handle_mm_fault+0x1c8/0x780 [ 1127.030513][T19314] do_user_addr_fault+0x475/0x1210 [ 1127.035627][T19314] exc_page_fault+0x94/0x170 [ 1127.040210][T19314] asm_exc_page_fault+0x22/0x30 [ 1127.045052][T19314] RIP: 0033:0x7fe688434e1e [ 1127.049456][T19314] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 57 71 16 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 1127.069058][T19314] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010246 [ 1127.075125][T19314] RAX: 00007fe68859bf80 RBX: 00007fe68859bf8c RCX: 0000000000000000 [ 1127.083087][T19314] RDX: 0000000000000000 RSI: 00007fe68859bf88 RDI: 0000000000000000 [ 1127.091046][T19314] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1127.099004][T19314] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007fe68859bf8c [ 1127.106966][T19314] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1127.114942][T19314] [ 1127.143275][T19317] FAT-fs (loop4): Filesystem has been set read-only [ 1127.150365][T19322] EXT4-fs (loop5): inodes count not valid: 32 vs 38 22:05:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002f000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x600, 0x4400}], 0x0, &(0x7f0000011100)) [ 1127.226765][T19314] memory: usage 307180kB, limit 307200kB, failcnt 6247 [ 1127.246735][T19314] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1127.259996][T19314] Memory cgroup stats for /syz1: [ 1127.260173][T19314] anon 98304 [ 1127.260173][T19314] file 184320 [ 1127.260173][T19314] kernel 314269696 [ 1127.260173][T19314] kernel_stack 65536 [ 1127.260173][T19314] pagetables 65536 [ 1127.260173][T19314] percpu 5372992 [ 1127.260173][T19314] sock 0 [ 1127.260173][T19314] vmalloc 8192 [ 1127.260173][T19314] shmem 180224 [ 1127.260173][T19314] zswap 0 [ 1127.260173][T19314] zswapped 0 [ 1127.260173][T19314] file_mapped 180224 [ 1127.260173][T19314] file_dirty 0 [ 1127.260173][T19314] file_writeback 0 [ 1127.260173][T19314] swapcached 0 [ 1127.260173][T19314] anon_thp 0 [ 1127.260173][T19314] file_thp 0 [ 1127.260173][T19314] shmem_thp 0 22:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1127.260173][T19314] inactive_anon 98304 [ 1127.260173][T19314] active_anon 180224 [ 1127.260173][T19314] inactive_file 0 [ 1127.260173][T19314] active_file 4096 [ 1127.260173][T19314] unevictable 0 [ 1127.260173][T19314] slab_reclaimable 15280 [ 1127.260173][T19314] slab_unreclaimable 308706808 [ 1127.260173][T19314] slab 308722088 [ 1127.304601][T19338] loop4: detected capacity change from 0 to 68 [ 1127.377131][T19339] loop5: detected capacity change from 0 to 512 [ 1127.405923][T19339] EXT4-fs (loop5): inodes count not valid: 32 vs 47 [ 1127.418045][T19314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19314,uid=0 [ 1127.423738][ T4362] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1127.440457][T19314] Memory cgroup out of memory: Killed process 19314 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1127.456760][ T4362] Buffer I/O error on dev loop4, logical block 0, async page read 22:05:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1127.476187][ T4362] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:28 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) 22:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1127.526942][ T4362] Buffer I/O error on dev loop4, logical block 0, async page read [ 1127.555526][ T4362] loop4: unable to read partition table 22:05:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000003d000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1127.585632][T19338] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1127.617432][T19338] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1127.633134][T19348] __nla_validate_parse: 3 callbacks suppressed [ 1127.633152][T19348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.653603][T19338] FAT-fs (loop4): Filesystem has been set read-only 22:05:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x700, 0x4400}], 0x0, &(0x7f0000011100)) [ 1127.733248][T19357] loop5: detected capacity change from 0 to 512 [ 1127.763792][T19357] EXT4-fs (loop5): inodes count not valid: 32 vs 61 [ 1127.777412][T19356] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1127.798067][T19356] CPU: 1 PID: 19356 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1127.808516][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1127.818573][T19356] Call Trace: [ 1127.821858][T19356] [ 1127.824802][T19356] dump_stack_lvl+0xcd/0x134 [ 1127.829416][T19356] dump_header+0x10b/0x7f9 22:05:28 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) [ 1127.833860][T19356] oom_kill_process.cold+0x10/0x15 [ 1127.838991][T19356] out_of_memory+0x358/0x14a0 [ 1127.843690][T19356] ? find_held_lock+0x2d/0x110 [ 1127.848469][T19356] ? oom_killer_disable+0x270/0x270 [ 1127.853695][T19356] ? find_held_lock+0x2d/0x110 [ 1127.858473][T19356] mem_cgroup_out_of_memory+0x206/0x270 [ 1127.864039][T19356] ? mem_cgroup_margin+0x130/0x130 [ 1127.869167][T19356] ? lock_downgrade+0x6e0/0x6e0 [ 1127.874048][T19356] try_charge_memcg+0xf67/0x13f0 [ 1127.879010][T19356] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1127.884669][T19361] loop4: detected capacity change from 0 to 68 [ 1127.885000][T19356] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1127.896850][T19356] ? lock_downgrade+0x6e0/0x6e0 [ 1127.901706][T19356] ? lock_downgrade+0x6e0/0x6e0 [ 1127.906568][T19356] obj_cgroup_charge+0x2ab/0x5e0 [ 1127.911508][T19356] kmem_cache_alloc_lru+0x13e/0x720 [ 1127.916697][T19356] ? sock_alloc_inode+0x23/0x1d0 [ 1127.921631][T19356] sock_alloc_inode+0x23/0x1d0 [ 1127.926385][T19356] ? sock_free_inode+0x20/0x20 [ 1127.931137][T19356] alloc_inode+0x61/0x230 [ 1127.936342][T19356] new_inode_pseudo+0x13/0x80 [ 1127.941014][T19356] sock_alloc+0x3c/0x260 [ 1127.945253][T19356] __sock_create+0xb9/0x790 [ 1127.949748][T19356] ? lock_downgrade+0x6e0/0x6e0 [ 1127.954593][T19356] __sys_socket+0x12f/0x240 [ 1127.959087][T19356] ? __sys_socket_file+0x1f0/0x1f0 [ 1127.964190][T19356] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1127.970084][T19356] __x64_sys_socket+0x6f/0xb0 [ 1127.974841][T19356] do_syscall_64+0x35/0xb0 [ 1127.979253][T19356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.985136][T19356] RIP: 0033:0x7fe688489279 [ 1127.989540][T19356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1128.009226][T19356] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1128.017632][T19356] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1128.025591][T19356] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1128.033557][T19356] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1128.041517][T19356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.049478][T19356] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1128.057452][T19356] 22:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:28 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) [ 1128.090012][T19356] memory: usage 307184kB, limit 307200kB, failcnt 6337 [ 1128.097282][T19356] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1128.126804][T19356] Memory cgroup stats for /syz1: [ 1128.126984][T19356] anon 102400 [ 1128.126984][T19356] file 184320 [ 1128.126984][T19356] kernel 314269696 [ 1128.126984][T19356] kernel_stack 65536 [ 1128.126984][T19356] pagetables 65536 [ 1128.126984][T19356] percpu 5372992 [ 1128.126984][T19356] sock 0 [ 1128.126984][T19356] vmalloc 8192 [ 1128.126984][T19356] shmem 180224 [ 1128.126984][T19356] zswap 0 [ 1128.126984][T19356] zswapped 0 [ 1128.126984][T19356] file_mapped 180224 [ 1128.126984][T19356] file_dirty 0 [ 1128.126984][T19356] file_writeback 0 [ 1128.126984][T19356] swapcached 0 [ 1128.126984][T19356] anon_thp 0 [ 1128.126984][T19356] file_thp 0 [ 1128.126984][T19356] shmem_thp 0 [ 1128.126984][T19356] inactive_anon 102400 [ 1128.126984][T19356] active_anon 180224 [ 1128.126984][T19356] inactive_file 0 [ 1128.126984][T19356] active_file 4096 [ 1128.126984][T19356] unevictable 0 [ 1128.126984][T19356] slab_reclaimable 15280 [ 1128.126984][T19356] slab_unreclaimable 308707112 [ 1128.126984][T19356] slab 308722392 [ 1128.171864][T19361] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000046000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1128.261964][T19361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1128.280114][T19372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1128.293390][T19361] FAT-fs (loop4): Filesystem has been set read-only [ 1128.365125][T19379] loop5: detected capacity change from 0 to 512 [ 1128.378648][T19356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19346,uid=0 [ 1128.381437][T19379] EXT4-fs (loop5): inodes count not valid: 32 vs 70 [ 1128.399416][T19356] Memory cgroup out of memory: Killed process 19346 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffff}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x500}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:29 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="b01f6e6db3e3ce7e2f99923c5084f606c533449f906d9300a60d1f95f014"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xb79953d6b6965fc6, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xf9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22:05:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x900, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000fe000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1128.587078][T19386] loop5: detected capacity change from 0 to 512 [ 1128.598328][T19388] loop4: detected capacity change from 0 to 68 [ 1128.628416][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1128.632124][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1128.675575][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1128.684258][T19388] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1128.684759][T19388] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1128.684781][T19388] FAT-fs (loop4): Filesystem has been set read-only [ 1128.692288][T19390] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1128.718202][ T4362] loop5: unable to read partition table [ 1128.731792][T19390] CPU: 0 PID: 19390 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1128.743194][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1128.753260][T19390] Call Trace: [ 1128.756548][T19390] [ 1128.759483][T19390] dump_stack_lvl+0xcd/0x134 [ 1128.764097][T19390] dump_header+0x10b/0x7f9 [ 1128.768539][T19390] oom_kill_process.cold+0x10/0x15 [ 1128.773668][T19390] out_of_memory+0x358/0x14a0 [ 1128.778366][T19390] ? find_held_lock+0x2d/0x110 [ 1128.783145][T19390] ? oom_killer_disable+0x270/0x270 [ 1128.788347][T19390] ? find_held_lock+0x2d/0x110 [ 1128.793115][T19390] mem_cgroup_out_of_memory+0x206/0x270 [ 1128.798681][T19390] ? mem_cgroup_margin+0x130/0x130 [ 1128.803809][T19390] ? lock_downgrade+0x6e0/0x6e0 [ 1128.808697][T19390] try_charge_memcg+0xf67/0x13f0 [ 1128.813655][T19390] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1128.819641][T19390] ? lock_downgrade+0x6e0/0x6e0 [ 1128.824517][T19390] charge_memcg+0x31/0x320 [ 1128.828963][T19390] __mem_cgroup_charge+0x27/0x90 [ 1128.833902][T19390] ? _compound_head+0x5d/0x150 [ 1128.838663][T19390] __handle_mm_fault+0x17df/0x39b0 [ 1128.843775][T19390] ? vm_iomap_memory+0x190/0x190 [ 1128.848724][T19390] handle_mm_fault+0x1c8/0x780 [ 1128.853488][T19390] do_user_addr_fault+0x475/0x1210 [ 1128.858608][T19390] exc_page_fault+0x94/0x170 [ 1128.863200][T19390] asm_exc_page_fault+0x22/0x30 [ 1128.868127][T19390] RIP: 0033:0x7fe688434e7d [ 1128.872540][T19390] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1128.892144][T19390] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1128.898200][T19390] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1128.906166][T19390] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1128.914132][T19390] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 22:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:29 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="b01f6e6db3e3ce7e2f99923c5084f606c533449f906d9300a60d1f95f014"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xb79953d6b6965fc6, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xf9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1128.922097][T19390] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1128.930065][T19390] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1128.938040][T19390] [ 1128.963086][T19386] EXT4-fs (loop5): inodes count not valid: 32 vs 254 22:05:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x600}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1128.972088][T19390] memory: usage 307188kB, limit 307200kB, failcnt 6401 22:05:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xa00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:29 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="b01f6e6db3e3ce7e2f99923c5084f606c533449f906d9300a60d1f95f014"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xb79953d6b6965fc6, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xf9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="b01f6e6db3e3ce7e2f99923c5084f606c533449f906d9300a60d1f95f014"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xb79953d6b6965fc6, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xf9}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 22:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.002316][T19398] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1129.033794][T19390] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1129.073637][T19390] Memory cgroup stats for /syz1: [ 1129.073864][T19390] anon 102400 [ 1129.073864][T19390] file 184320 [ 1129.073864][T19390] kernel 314273792 [ 1129.073864][T19390] kernel_stack 65536 [ 1129.073864][T19390] pagetables 69632 [ 1129.073864][T19390] percpu 5372992 [ 1129.073864][T19390] sock 0 [ 1129.073864][T19390] vmalloc 8192 [ 1129.073864][T19390] shmem 180224 [ 1129.073864][T19390] zswap 0 [ 1129.073864][T19390] zswapped 0 [ 1129.073864][T19390] file_mapped 180224 [ 1129.073864][T19390] file_dirty 0 [ 1129.073864][T19390] file_writeback 0 [ 1129.073864][T19390] swapcached 0 [ 1129.073864][T19390] anon_thp 0 [ 1129.073864][T19390] file_thp 0 [ 1129.073864][T19390] shmem_thp 0 [ 1129.073864][T19390] inactive_anon 102400 [ 1129.073864][T19390] active_anon 180224 [ 1129.073864][T19390] inactive_file 0 [ 1129.073864][T19390] active_file 4096 [ 1129.073864][T19390] unevictable 0 [ 1129.073864][T19390] slab_reclaimable 15280 [ 1129.073864][T19390] slab_unreclaimable 308706808 [ 1129.073864][T19390] slab 308722088 [ 1129.116603][T19407] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1129.185353][T19408] loop4: detected capacity change from 0 to 68 [ 1129.188753][T19390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19390,uid=0 22:05:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x2, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000fc010000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x700}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:30 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50500000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=@newqdisc={0x310, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0x1e}, {0xe}}, [@TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3ff, 0x9, 0x0, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0x7fff, 0x6, 0xfff, 0xf561, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x5, 0x7, 0x1, 0x2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x80, 0x80000001, 0x1, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0x7, 0x401, 0x8001, 0x1, 0x9, 0x80, 0x81, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0x7, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x0, 0x9, 0x1ff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x90, 0x8, 0x8, 0x9, 0x2, 0x3f, 0x8, 0x4}}, {0xc, 0x2, [0x101, 0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x80, 0x7f, 0x4d5, 0x8, 0x0, 0x1000, 0x0, 0xa}}, {0x18, 0x2, [0x20, 0x5, 0x6, 0xb588, 0x3ff, 0x4, 0xfe01, 0x8, 0x9, 0x20]}}, {{0x1c, 0x1, {0x9, 0x8d, 0x2, 0x754b, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe4, 0x0, 0x20, 0x0, 0x80000001, 0x1, 0x2}}, {0x8, 0x2, [0x100, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x7fff, 0x2, 0x81, 0x386d, 0x9}}, {0x16, 0x2, [0x8001, 0x3, 0x6, 0x88ca, 0x5, 0xfff9, 0x9, 0xc994, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93}, @TCA_RATE={0x6}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0x7ff, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x937b, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x65eb, 0xd6, 0x2, 0x9971a82, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xfd, 0x6b, 0x3f, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0xe360, 0x80]}}, {{0x1c, 0x1, {0x20, 0x0, 0x200, 0x2, 0x0, 0xffff0000, 0x7fff, 0x9}}, {0x16, 0x2, [0x5, 0xff80, 0x4, 0xfffe, 0x7fff, 0x101, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0x40, 0x4, 0x898b, 0x101, 0x1, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0x5, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x6, 0x0, 0x0, 0x80, 0x4}}, {0xc, 0x2, [0x3f, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0x20, 0x81, 0x7, 0x5, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x1ff, 0x7ff, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0x20, 0x2, 0xe61, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x310}, 0x1, 0x0, 0x0, 0x404c000}, 0x4008800) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250c00000005002a000000000005002d000100000005002e00000000000a00090053745f350ad4000008002b0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10040000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xfff2, 0xfff1}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040006}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="02678b4b2535cc588afa5cf86283b854df0d3844b7740b26676b4df170596260acba0abf5d1ea3adc8840bedbb022b3fca913f012027cd5ec9d7aef50d0dd140d1d7714c4a19e450c36153c24a7dd31aa2b7387b1e758bb400b3a1e9976561e13224807aa196b45061d4465b767028b9b33051af99298a7bee6fd82c6f94fa69ec11489939187efd2409a3aafe5c363454b59916c92c19d80e5947a5602bb2b73b6e07a71e14a851e343c4847b59a7597cccceda61ed989258ee4b1e88e041ab67fa98ad42f1e3515b68c34e4a86db92a65f4bea63", 0xd5}, {&(0x7f0000000280)="370c4facc6a1e1e0a48e94bedb0cf74a748adfabeac7b213d7aafbdc2b33a45923c71a54ff84e500c0365f045011a577db83f0f371a3e42fed0ae0639bddf1f748ff669163df85d68b6144598c79b775a61b2ed059e4f198e993328c929636c38990228c894ea1111879e5", 0x6b}, {&(0x7f0000000480)="5d9b65aedab995236c224ca7235650d7f4e2260e1220ede2a300a4b8035b4a16e6d140a3625a11003d55c3c047dafe1482713a99427c4142ac4559e2a151c237edd2e12bb473d0cd653d54764e6d3faf42cbfe699459baf339fcae2918e66887bd05451cc130ca4001bdeabce35d37c5e357eba236218eedd5535681c9b38779e8081ea8540a5e19cffc7a569b125554ccb23c23857652eb5fd11086785ef271ad45b08771fd481f510e32dabc20616b521d8f44ec19f936f79b580979c80999b352894e9e3cae07a54789e01209d5091d67e0", 0xd3}, {&(0x7f0000000300)="cb884dc3fd5d63a18db2da395cf8b09bff3e157e7f7f48fcb00095c0d181c12893b623a8b3d0cfe7a53a55c21765f8bfe7bfff1f070ab9", 0x37}, {&(0x7f0000000580)="bca0ef42838daca3f86e8ad8f3498c1c307fdc830675a4a636820dddfcbacf553c4e3c8e95d2b47460ea0fcd7fa5f8a1c24bf64586fd7e6c8277d699e4c2789095b7aa8f21c181a10d3714c5c3998623ff062c512cded68e0edbb3e7a5365bf43cbeb9e60659952c2133e16a3784f3eb15452c32feac92b6a78983a73063dd12f4d678f6d5c49f5883bb0ec3efd52bd452f1bcdfcd84d2891fb486aa9d428a0c4abb9ff72cd128fbd68c7d3981db340abd366153c86872a090736727e3dbb5a22c0c40d56d271df0b30d41228e54fbb95b78cfa32061", 0xd6}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000000680)="b8ba034db4546f39b9a22b527262e705a24d58d0fac551ad8e9f310debaa0faa2152e82a1f11303531e7a16566276845cd67f71c32c7abc0115b796c356751ffca3b78c91e0899a44999272bce9c0137611c79551648a939b585a2003480429e4d0cc51b301a6780547f5eafe645f6a0ba8b97b4df6c29b4e07e2a47935ff8be514aa0c717d94aae09c467ed215c96f5f04421b94337cc9dcf95c76ce7a831416b7380ec979e5f3e6a1206cb642b57c4ec0a2f684c3993aabf80a83170df276ee301a2d1", 0xc4}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x40000}}], 0x1, 0x4040) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1020400, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x23}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xe8'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'K,*\'('}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1129.245155][T19408] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1129.251219][T19390] Memory cgroup out of memory: Killed process 19390 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 1129.289958][T19422] loop5: detected capacity change from 0 to 512 22:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.316113][T19408] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1129.339242][T19422] EXT4-fs (loop5): inodes count not valid: 32 vs 508 [ 1129.344867][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1129.357807][T19408] FAT-fs (loop4): Filesystem has been set read-only 22:05:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000feff0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xc00, 0x4400}], 0x0, &(0x7f0000011100)) [ 1129.483661][T19435] loop5: detected capacity change from 0 to 512 [ 1129.487342][T19430] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1129.515473][T19430] CPU: 1 PID: 19430 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1129.525916][T19430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1129.535961][T19430] Call Trace: [ 1129.539230][T19430] [ 1129.542149][T19430] dump_stack_lvl+0xcd/0x134 [ 1129.546738][T19430] dump_header+0x10b/0x7f9 [ 1129.551155][T19430] oom_kill_process.cold+0x10/0x15 [ 1129.556261][T19430] out_of_memory+0x358/0x14a0 [ 1129.560945][T19430] ? find_held_lock+0x2d/0x110 [ 1129.565710][T19430] ? oom_killer_disable+0x270/0x270 [ 1129.570904][T19430] ? find_held_lock+0x2d/0x110 [ 1129.575659][T19430] mem_cgroup_out_of_memory+0x206/0x270 [ 1129.581202][T19430] ? mem_cgroup_margin+0x130/0x130 [ 1129.586304][T19430] ? lock_downgrade+0x6e0/0x6e0 [ 1129.591159][T19430] try_charge_memcg+0xf67/0x13f0 [ 1129.596094][T19430] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1129.602070][T19430] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1129.607782][T19430] ? lock_downgrade+0x6e0/0x6e0 [ 1129.612633][T19430] ? lock_downgrade+0x6e0/0x6e0 [ 1129.617496][T19430] obj_cgroup_charge+0x2ab/0x5e0 [ 1129.622439][T19430] kmem_cache_alloc_lru+0x13e/0x720 [ 1129.627628][T19430] ? sock_alloc_inode+0x23/0x1d0 [ 1129.632564][T19430] sock_alloc_inode+0x23/0x1d0 [ 1129.637319][T19430] ? sock_free_inode+0x20/0x20 [ 1129.642071][T19430] alloc_inode+0x61/0x230 [ 1129.646399][T19430] new_inode_pseudo+0x13/0x80 [ 1129.651065][T19430] sock_alloc+0x3c/0x260 [ 1129.655299][T19430] __sock_create+0xb9/0x790 [ 1129.659799][T19430] ? lock_downgrade+0x6e0/0x6e0 [ 1129.664654][T19430] __sys_socket+0x12f/0x240 [ 1129.669150][T19430] ? __sys_socket_file+0x1f0/0x1f0 [ 1129.674253][T19430] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1129.680149][T19430] __x64_sys_socket+0x6f/0xb0 [ 1129.684818][T19430] do_syscall_64+0x35/0xb0 [ 1129.689229][T19430] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.695113][T19430] RIP: 0033:0x7fe688489279 [ 1129.699520][T19430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1129.719127][T19430] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1129.727538][T19430] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1129.735500][T19430] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1129.743465][T19430] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1129.751427][T19430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.759389][T19430] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1129.767371][T19430] 22:05:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x900}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.792715][T19438] loop4: detected capacity change from 0 to 68 [ 1129.807378][T19438] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1129.824102][T19438] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.838881][T19430] memory: usage 307184kB, limit 307200kB, failcnt 6492 [ 1129.841042][T19438] FAT-fs (loop4): Filesystem has been set read-only 22:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.887391][T19430] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1129.888360][T19435] EXT4-fs (loop5): invalid inodes per group: 65534 [ 1129.888360][T19435] [ 1129.943333][T19430] Memory cgroup stats for /syz1: [ 1129.943516][T19430] anon 102400 [ 1129.943516][T19430] file 184320 [ 1129.943516][T19430] kernel 314269696 [ 1129.943516][T19430] kernel_stack 65536 [ 1129.943516][T19430] pagetables 65536 [ 1129.943516][T19430] percpu 5372992 [ 1129.943516][T19430] sock 0 [ 1129.943516][T19430] vmalloc 8192 [ 1129.943516][T19430] shmem 180224 [ 1129.943516][T19430] zswap 0 [ 1129.943516][T19430] zswapped 0 [ 1129.943516][T19430] file_mapped 180224 [ 1129.943516][T19430] file_dirty 0 [ 1129.943516][T19430] file_writeback 0 [ 1129.943516][T19430] swapcached 0 [ 1129.943516][T19430] anon_thp 0 [ 1129.943516][T19430] file_thp 0 [ 1129.943516][T19430] shmem_thp 0 [ 1129.943516][T19430] inactive_anon 102400 [ 1129.943516][T19430] active_anon 180224 [ 1129.943516][T19430] inactive_file 0 [ 1129.943516][T19430] active_file 4096 [ 1129.943516][T19430] unevictable 0 [ 1129.943516][T19430] slab_reclaimable 15280 [ 1129.943516][T19430] slab_unreclaimable 308706808 [ 1129.943516][T19430] slab 308722088 22:05:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xd00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1129.970011][T19446] loop4: detected capacity change from 0 to 68 [ 1130.086470][T19446] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1130.098710][T19446] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1130.117072][T19446] FAT-fs (loop4): Filesystem has been set read-only [ 1130.128007][T19430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19426,uid=0 [ 1130.146687][T19430] Memory cgroup out of memory: Killed process 19426 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x3, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000005244534bd5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xe00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:31 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50500000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=@newqdisc={0x310, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0x1e}, {0xe}}, [@TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3ff, 0x9, 0x0, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0x7fff, 0x6, 0xfff, 0xf561, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x5, 0x7, 0x1, 0x2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x80, 0x80000001, 0x1, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0x7, 0x401, 0x8001, 0x1, 0x9, 0x80, 0x81, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0x7, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x0, 0x9, 0x1ff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x90, 0x8, 0x8, 0x9, 0x2, 0x3f, 0x8, 0x4}}, {0xc, 0x2, [0x101, 0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x80, 0x7f, 0x4d5, 0x8, 0x0, 0x1000, 0x0, 0xa}}, {0x18, 0x2, [0x20, 0x5, 0x6, 0xb588, 0x3ff, 0x4, 0xfe01, 0x8, 0x9, 0x20]}}, {{0x1c, 0x1, {0x9, 0x8d, 0x2, 0x754b, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe4, 0x0, 0x20, 0x0, 0x80000001, 0x1, 0x2}}, {0x8, 0x2, [0x100, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x7fff, 0x2, 0x81, 0x386d, 0x9}}, {0x16, 0x2, [0x8001, 0x3, 0x6, 0x88ca, 0x5, 0xfff9, 0x9, 0xc994, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93}, @TCA_RATE={0x6}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0x7ff, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x937b, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x65eb, 0xd6, 0x2, 0x9971a82, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xfd, 0x6b, 0x3f, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0xe360, 0x80]}}, {{0x1c, 0x1, {0x20, 0x0, 0x200, 0x2, 0x0, 0xffff0000, 0x7fff, 0x9}}, {0x16, 0x2, [0x5, 0xff80, 0x4, 0xfffe, 0x7fff, 0x101, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0x40, 0x4, 0x898b, 0x101, 0x1, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0x5, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x6, 0x0, 0x0, 0x80, 0x4}}, {0xc, 0x2, [0x3f, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0x20, 0x81, 0x7, 0x5, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x1ff, 0x7ff, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0x20, 0x2, 0xe61, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x310}, 0x1, 0x0, 0x0, 0x404c000}, 0x4008800) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250c00000005002a000000000005002d000100000005002e00000000000a00090053745f350ad4000008002b0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10040000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xfff2, 0xfff1}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040006}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="02678b4b2535cc588afa5cf86283b854df0d3844b7740b26676b4df170596260acba0abf5d1ea3adc8840bedbb022b3fca913f012027cd5ec9d7aef50d0dd140d1d7714c4a19e450c36153c24a7dd31aa2b7387b1e758bb400b3a1e9976561e13224807aa196b45061d4465b767028b9b33051af99298a7bee6fd82c6f94fa69ec11489939187efd2409a3aafe5c363454b59916c92c19d80e5947a5602bb2b73b6e07a71e14a851e343c4847b59a7597cccceda61ed989258ee4b1e88e041ab67fa98ad42f1e3515b68c34e4a86db92a65f4bea63", 0xd5}, {&(0x7f0000000280)="370c4facc6a1e1e0a48e94bedb0cf74a748adfabeac7b213d7aafbdc2b33a45923c71a54ff84e500c0365f045011a577db83f0f371a3e42fed0ae0639bddf1f748ff669163df85d68b6144598c79b775a61b2ed059e4f198e993328c929636c38990228c894ea1111879e5", 0x6b}, {&(0x7f0000000480)="5d9b65aedab995236c224ca7235650d7f4e2260e1220ede2a300a4b8035b4a16e6d140a3625a11003d55c3c047dafe1482713a99427c4142ac4559e2a151c237edd2e12bb473d0cd653d54764e6d3faf42cbfe699459baf339fcae2918e66887bd05451cc130ca4001bdeabce35d37c5e357eba236218eedd5535681c9b38779e8081ea8540a5e19cffc7a569b125554ccb23c23857652eb5fd11086785ef271ad45b08771fd481f510e32dabc20616b521d8f44ec19f936f79b580979c80999b352894e9e3cae07a54789e01209d5091d67e0", 0xd3}, {&(0x7f0000000300)="cb884dc3fd5d63a18db2da395cf8b09bff3e157e7f7f48fcb00095c0d181c12893b623a8b3d0cfe7a53a55c21765f8bfe7bfff1f070ab9", 0x37}, {&(0x7f0000000580)="bca0ef42838daca3f86e8ad8f3498c1c307fdc830675a4a636820dddfcbacf553c4e3c8e95d2b47460ea0fcd7fa5f8a1c24bf64586fd7e6c8277d699e4c2789095b7aa8f21c181a10d3714c5c3998623ff062c512cded68e0edbb3e7a5365bf43cbeb9e60659952c2133e16a3784f3eb15452c32feac92b6a78983a73063dd12f4d678f6d5c49f5883bb0ec3efd52bd452f1bcdfcd84d2891fb486aa9d428a0c4abb9ff72cd128fbd68c7d3981db340abd366153c86872a090736727e3dbb5a22c0c40d56d271df0b30d41228e54fbb95b78cfa32061", 0xd6}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000000680)="b8ba034db4546f39b9a22b527262e705a24d58d0fac551ad8e9f310debaa0faa2152e82a1f11303531e7a16566276845cd67f71c32c7abc0115b796c356751ffca3b78c91e0899a44999272bce9c0137611c79551648a939b585a2003480429e4d0cc51b301a6780547f5eafe645f6a0ba8b97b4df6c29b4e07e2a47935ff8be514aa0c717d94aae09c467ed215c96f5f04421b94337cc9dcf95c76ce7a831416b7380ec979e5f3e6a1206cb642b57c4ec0a2f684c3993aabf80a83170df276ee301a2d1", 0xc4}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x40000}}], 0x1, 0x4040) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1020400, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x23}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xe8'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'K,*\'('}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50500000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=@newqdisc={0x310, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0x1e}, {0xe}}, [@TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3ff, 0x9, 0x0, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0x7fff, 0x6, 0xfff, 0xf561, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x5, 0x7, 0x1, 0x2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x80, 0x80000001, 0x1, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0x7, 0x401, 0x8001, 0x1, 0x9, 0x80, 0x81, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0x7, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x0, 0x9, 0x1ff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x90, 0x8, 0x8, 0x9, 0x2, 0x3f, 0x8, 0x4}}, {0xc, 0x2, [0x101, 0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x80, 0x7f, 0x4d5, 0x8, 0x0, 0x1000, 0x0, 0xa}}, {0x18, 0x2, [0x20, 0x5, 0x6, 0xb588, 0x3ff, 0x4, 0xfe01, 0x8, 0x9, 0x20]}}, {{0x1c, 0x1, {0x9, 0x8d, 0x2, 0x754b, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe4, 0x0, 0x20, 0x0, 0x80000001, 0x1, 0x2}}, {0x8, 0x2, [0x100, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x7fff, 0x2, 0x81, 0x386d, 0x9}}, {0x16, 0x2, [0x8001, 0x3, 0x6, 0x88ca, 0x5, 0xfff9, 0x9, 0xc994, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93}, @TCA_RATE={0x6}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0x7ff, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x937b, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x65eb, 0xd6, 0x2, 0x9971a82, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xfd, 0x6b, 0x3f, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0xe360, 0x80]}}, {{0x1c, 0x1, {0x20, 0x0, 0x200, 0x2, 0x0, 0xffff0000, 0x7fff, 0x9}}, {0x16, 0x2, [0x5, 0xff80, 0x4, 0xfffe, 0x7fff, 0x101, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0x40, 0x4, 0x898b, 0x101, 0x1, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0x5, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x6, 0x0, 0x0, 0x80, 0x4}}, {0xc, 0x2, [0x3f, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0x20, 0x81, 0x7, 0x5, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x1ff, 0x7ff, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0x20, 0x2, 0xe61, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x310}, 0x1, 0x0, 0x0, 0x404c000}, 0x4008800) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250c00000005002a000000000005002d000100000005002e00000000000a00090053745f350ad4000008002b0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10040000) (async) openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xfff2, 0xfff1}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040006}, 0x40000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) (async) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="02678b4b2535cc588afa5cf86283b854df0d3844b7740b26676b4df170596260acba0abf5d1ea3adc8840bedbb022b3fca913f012027cd5ec9d7aef50d0dd140d1d7714c4a19e450c36153c24a7dd31aa2b7387b1e758bb400b3a1e9976561e13224807aa196b45061d4465b767028b9b33051af99298a7bee6fd82c6f94fa69ec11489939187efd2409a3aafe5c363454b59916c92c19d80e5947a5602bb2b73b6e07a71e14a851e343c4847b59a7597cccceda61ed989258ee4b1e88e041ab67fa98ad42f1e3515b68c34e4a86db92a65f4bea63", 0xd5}, {&(0x7f0000000280)="370c4facc6a1e1e0a48e94bedb0cf74a748adfabeac7b213d7aafbdc2b33a45923c71a54ff84e500c0365f045011a577db83f0f371a3e42fed0ae0639bddf1f748ff669163df85d68b6144598c79b775a61b2ed059e4f198e993328c929636c38990228c894ea1111879e5", 0x6b}, {&(0x7f0000000480)="5d9b65aedab995236c224ca7235650d7f4e2260e1220ede2a300a4b8035b4a16e6d140a3625a11003d55c3c047dafe1482713a99427c4142ac4559e2a151c237edd2e12bb473d0cd653d54764e6d3faf42cbfe699459baf339fcae2918e66887bd05451cc130ca4001bdeabce35d37c5e357eba236218eedd5535681c9b38779e8081ea8540a5e19cffc7a569b125554ccb23c23857652eb5fd11086785ef271ad45b08771fd481f510e32dabc20616b521d8f44ec19f936f79b580979c80999b352894e9e3cae07a54789e01209d5091d67e0", 0xd3}, {&(0x7f0000000300)="cb884dc3fd5d63a18db2da395cf8b09bff3e157e7f7f48fcb00095c0d181c12893b623a8b3d0cfe7a53a55c21765f8bfe7bfff1f070ab9", 0x37}, {&(0x7f0000000580)="bca0ef42838daca3f86e8ad8f3498c1c307fdc830675a4a636820dddfcbacf553c4e3c8e95d2b47460ea0fcd7fa5f8a1c24bf64586fd7e6c8277d699e4c2789095b7aa8f21c181a10d3714c5c3998623ff062c512cded68e0edbb3e7a5365bf43cbeb9e60659952c2133e16a3784f3eb15452c32feac92b6a78983a73063dd12f4d678f6d5c49f5883bb0ec3efd52bd452f1bcdfcd84d2891fb486aa9d428a0c4abb9ff72cd128fbd68c7d3981db340abd366153c86872a090736727e3dbb5a22c0c40d56d271df0b30d41228e54fbb95b78cfa32061", 0xd6}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000000680)="b8ba034db4546f39b9a22b527262e705a24d58d0fac551ad8e9f310debaa0faa2152e82a1f11303531e7a16566276845cd67f71c32c7abc0115b796c356751ffca3b78c91e0899a44999272bce9c0137611c79551648a939b585a2003480429e4d0cc51b301a6780547f5eafe645f6a0ba8b97b4df6c29b4e07e2a47935ff8be514aa0c717d94aae09c467ed215c96f5f04421b94337cc9dcf95c76ce7a831416b7380ec979e5f3e6a1206cb642b57c4ec0a2f684c3993aabf80a83170df276ee301a2d1", 0xc4}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x40000}}], 0x1, 0x4040) (async) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1020400, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x23}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xe8'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'K,*\'('}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 22:05:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1130.308255][T19455] loop5: detected capacity change from 0 to 512 [ 1130.311140][T19454] loop4: detected capacity change from 0 to 68 [ 1130.329326][T19456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1130.348081][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.368875][ T3659] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.376800][T19459] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1130.384387][ T3659] Buffer I/O error on dev loop4, logical block 0, async page read [ 1130.412718][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1130.413531][T19459] CPU: 0 PID: 19459 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1130.425943][ T3659] loop4: unable to read partition table [ 1130.430897][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1130.430911][T19459] Call Trace: [ 1130.430918][T19459] [ 1130.430926][T19459] dump_stack_lvl+0xcd/0x134 [ 1130.430955][T19459] dump_header+0x10b/0x7f9 [ 1130.430979][T19459] oom_kill_process.cold+0x10/0x15 [ 1130.431004][T19459] out_of_memory+0x358/0x14a0 [ 1130.431035][T19459] ? find_held_lock+0x2d/0x110 [ 1130.431053][T19459] ? oom_killer_disable+0x270/0x270 [ 1130.431075][T19459] ? find_held_lock+0x2d/0x110 [ 1130.431096][T19459] mem_cgroup_out_of_memory+0x206/0x270 [ 1130.431116][T19459] ? mem_cgroup_margin+0x130/0x130 [ 1130.431132][T19459] ? lock_downgrade+0x6e0/0x6e0 [ 1130.431162][T19459] try_charge_memcg+0xf67/0x13f0 [ 1130.431188][T19459] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1130.431208][T19459] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1130.431229][T19459] ? lock_downgrade+0x6e0/0x6e0 [ 1130.431250][T19459] ? lock_downgrade+0x6e0/0x6e0 [ 1130.431281][T19459] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1130.431305][T19459] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1130.431333][T19459] copy_process+0x145a/0x7090 [ 1130.431359][T19459] ? __lock_acquire+0xbc3/0x56d0 [ 1130.431387][T19459] ? __cleanup_sighand+0xb0/0xb0 [ 1130.431422][T19459] kernel_clone+0xe7/0xab0 [ 1130.431443][T19459] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1130.431464][T19459] ? create_io_thread+0xe0/0xe0 [ 1130.431490][T19459] ? find_held_lock+0x2d/0x110 [ 1130.431512][T19459] ? __ct_user_exit+0xff/0x150 [ 1130.431537][T19459] __do_sys_clone+0xba/0x100 [ 1130.431558][T19459] ? kernel_clone+0xab0/0xab0 [ 1130.431586][T19459] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1130.431609][T19459] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1130.431639][T19459] do_syscall_64+0x35/0xb0 [ 1130.431659][T19459] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.431679][T19459] RIP: 0033:0x7fe68848a6a1 [ 1130.431695][T19459] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1130.431713][T19459] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1130.431733][T19459] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1130.431747][T19459] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1130.431760][T19459] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1130.431773][T19459] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1130.431785][T19459] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1130.431810][T19459] [ 1130.463187][T19459] memory: usage 307184kB, limit 307200kB, failcnt 6536 [ 1130.486574][ T4362] loop5: unable to read partition table [ 1130.497760][T19451] cgroup: fork rejected by pids controller in [ 1130.507793][T19459] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1130.576154][T19451] /syz3 [ 1130.763982][T19459] Memory cgroup stats for /syz1: [ 1130.766930][T19459] anon 98304 [ 1130.766930][T19459] file 184320 [ 1130.766930][T19459] kernel 314261504 [ 1130.766930][T19459] kernel_stack 32768 [ 1130.766930][T19459] pagetables 65536 [ 1130.766930][T19459] percpu 5372992 [ 1130.766930][T19459] sock 0 [ 1130.766930][T19459] vmalloc 8192 [ 1130.766930][T19459] shmem 180224 [ 1130.766930][T19459] zswap 0 [ 1130.766930][T19459] zswapped 0 [ 1130.766930][T19459] file_mapped 180224 [ 1130.766930][T19459] file_dirty 0 [ 1130.766930][T19459] file_writeback 0 [ 1130.766930][T19459] swapcached 0 [ 1130.766930][T19459] anon_thp 0 [ 1130.766930][T19459] file_thp 0 [ 1130.766930][T19459] shmem_thp 0 [ 1130.766930][T19459] inactive_anon 98304 [ 1130.766930][T19459] active_anon 180224 [ 1130.766930][T19459] inactive_file 0 [ 1130.766930][T19459] active_file 4096 [ 1130.766930][T19459] unevictable 0 [ 1130.766930][T19459] slab_reclaimable 15280 [ 1130.766930][T19459] slab_unreclaimable 308706648 [ 1130.766930][T19459] slab 308721928 [ 1130.767423][T19454] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1130.780993][T19459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1130.882135][T19454] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1130.929231][T19459] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19459,uid=0 [ 1130.949646][T19455] EXT4-fs (loop5): invalid inodes per group: 1263748178 [ 1130.949646][T19455] 22:05:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1020}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x5, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xf00, 0x4400}], 0x0, &(0x7f0000011100)) [ 1130.969881][T19459] Memory cgroup out of memory: Killed process 19459 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1131.003277][T19454] FAT-fs (loop4): Filesystem has been set read-only [ 1131.041323][T19451] 22:05:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000feffffffd5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:31 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50500000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=@newqdisc={0x310, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0x1e}, {0xe}}, [@TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3ff, 0x9, 0x0, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0x7fff, 0x6, 0xfff, 0xf561, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x5, 0x7, 0x1, 0x2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x80, 0x80000001, 0x1, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0x7, 0x401, 0x8001, 0x1, 0x9, 0x80, 0x81, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0x7, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x0, 0x9, 0x1ff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x90, 0x8, 0x8, 0x9, 0x2, 0x3f, 0x8, 0x4}}, {0xc, 0x2, [0x101, 0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x80, 0x7f, 0x4d5, 0x8, 0x0, 0x1000, 0x0, 0xa}}, {0x18, 0x2, [0x20, 0x5, 0x6, 0xb588, 0x3ff, 0x4, 0xfe01, 0x8, 0x9, 0x20]}}, {{0x1c, 0x1, {0x9, 0x8d, 0x2, 0x754b, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe4, 0x0, 0x20, 0x0, 0x80000001, 0x1, 0x2}}, {0x8, 0x2, [0x100, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x7fff, 0x2, 0x81, 0x386d, 0x9}}, {0x16, 0x2, [0x8001, 0x3, 0x6, 0x88ca, 0x5, 0xfff9, 0x9, 0xc994, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93}, @TCA_RATE={0x6}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0x7ff, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x937b, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x65eb, 0xd6, 0x2, 0x9971a82, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xfd, 0x6b, 0x3f, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0xe360, 0x80]}}, {{0x1c, 0x1, {0x20, 0x0, 0x200, 0x2, 0x0, 0xffff0000, 0x7fff, 0x9}}, {0x16, 0x2, [0x5, 0xff80, 0x4, 0xfffe, 0x7fff, 0x101, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0x40, 0x4, 0x898b, 0x101, 0x1, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0x5, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x6, 0x0, 0x0, 0x80, 0x4}}, {0xc, 0x2, [0x3f, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0x20, 0x81, 0x7, 0x5, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x1ff, 0x7ff, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0x20, 0x2, 0xe61, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x310}, 0x1, 0x0, 0x0, 0x404c000}, 0x4008800) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250c00000005002a000000000005002d000100000005002e00000000000a00090053745f350ad4000008002b0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10040000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xfff2, 0xfff1}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040006}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="02678b4b2535cc588afa5cf86283b854df0d3844b7740b26676b4df170596260acba0abf5d1ea3adc8840bedbb022b3fca913f012027cd5ec9d7aef50d0dd140d1d7714c4a19e450c36153c24a7dd31aa2b7387b1e758bb400b3a1e9976561e13224807aa196b45061d4465b767028b9b33051af99298a7bee6fd82c6f94fa69ec11489939187efd2409a3aafe5c363454b59916c92c19d80e5947a5602bb2b73b6e07a71e14a851e343c4847b59a7597cccceda61ed989258ee4b1e88e041ab67fa98ad42f1e3515b68c34e4a86db92a65f4bea63", 0xd5}, {&(0x7f0000000280)="370c4facc6a1e1e0a48e94bedb0cf74a748adfabeac7b213d7aafbdc2b33a45923c71a54ff84e500c0365f045011a577db83f0f371a3e42fed0ae0639bddf1f748ff669163df85d68b6144598c79b775a61b2ed059e4f198e993328c929636c38990228c894ea1111879e5", 0x6b}, {&(0x7f0000000480)="5d9b65aedab995236c224ca7235650d7f4e2260e1220ede2a300a4b8035b4a16e6d140a3625a11003d55c3c047dafe1482713a99427c4142ac4559e2a151c237edd2e12bb473d0cd653d54764e6d3faf42cbfe699459baf339fcae2918e66887bd05451cc130ca4001bdeabce35d37c5e357eba236218eedd5535681c9b38779e8081ea8540a5e19cffc7a569b125554ccb23c23857652eb5fd11086785ef271ad45b08771fd481f510e32dabc20616b521d8f44ec19f936f79b580979c80999b352894e9e3cae07a54789e01209d5091d67e0", 0xd3}, {&(0x7f0000000300)="cb884dc3fd5d63a18db2da395cf8b09bff3e157e7f7f48fcb00095c0d181c12893b623a8b3d0cfe7a53a55c21765f8bfe7bfff1f070ab9", 0x37}, {&(0x7f0000000580)="bca0ef42838daca3f86e8ad8f3498c1c307fdc830675a4a636820dddfcbacf553c4e3c8e95d2b47460ea0fcd7fa5f8a1c24bf64586fd7e6c8277d699e4c2789095b7aa8f21c181a10d3714c5c3998623ff062c512cded68e0edbb3e7a5365bf43cbeb9e60659952c2133e16a3784f3eb15452c32feac92b6a78983a73063dd12f4d678f6d5c49f5883bb0ec3efd52bd452f1bcdfcd84d2891fb486aa9d428a0c4abb9ff72cd128fbd68c7d3981db340abd366153c86872a090736727e3dbb5a22c0c40d56d271df0b30d41228e54fbb95b78cfa32061", 0xd6}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000000680)="b8ba034db4546f39b9a22b527262e705a24d58d0fac551ad8e9f310debaa0faa2152e82a1f11303531e7a16566276845cd67f71c32c7abc0115b796c356751ffca3b78c91e0899a44999272bce9c0137611c79551648a939b585a2003480429e4d0cc51b301a6780547f5eafe645f6a0ba8b97b4df6c29b4e07e2a47935ff8be514aa0c717d94aae09c467ed215c96f5f04421b94337cc9dcf95c76ce7a831416b7380ec979e5f3e6a1206cb642b57c4ec0a2f684c3993aabf80a83170df276ee301a2d1", 0xc4}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x40000}}], 0x1, 0x4040) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1020400, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x23}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xe8'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'K,*\'('}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50500000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=@newqdisc={0x310, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0x1e}, {0xe}}, [@TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3ff, 0x9, 0x0, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0x7fff, 0x6, 0xfff, 0xf561, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0xfb, 0x5, 0x7, 0x1, 0x2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x80, 0x80000001, 0x1, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0x7, 0x401, 0x8001, 0x1, 0x9, 0x80, 0x81, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0x7, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x0, 0x9, 0x1ff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x90, 0x8, 0x8, 0x9, 0x2, 0x3f, 0x8, 0x4}}, {0xc, 0x2, [0x101, 0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x80, 0x7f, 0x4d5, 0x8, 0x0, 0x1000, 0x0, 0xa}}, {0x18, 0x2, [0x20, 0x5, 0x6, 0xb588, 0x3ff, 0x4, 0xfe01, 0x8, 0x9, 0x20]}}, {{0x1c, 0x1, {0x9, 0x8d, 0x2, 0x754b, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe4, 0x0, 0x20, 0x0, 0x80000001, 0x1, 0x2}}, {0x8, 0x2, [0x100, 0x3ff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x7fff, 0x2, 0x81, 0x386d, 0x9}}, {0x16, 0x2, [0x8001, 0x3, 0x6, 0x88ca, 0x5, 0xfff9, 0x9, 0xc994, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x93}, @TCA_RATE={0x6}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0x7ff, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x937b, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x65eb, 0xd6, 0x2, 0x9971a82, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xfd, 0x6b, 0x3f, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0xe360, 0x80]}}, {{0x1c, 0x1, {0x20, 0x0, 0x200, 0x2, 0x0, 0xffff0000, 0x7fff, 0x9}}, {0x16, 0x2, [0x5, 0xff80, 0x4, 0xfffe, 0x7fff, 0x101, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0x40, 0x4, 0x898b, 0x101, 0x1, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0x5, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x6, 0x0, 0x0, 0x80, 0x4}}, {0xc, 0x2, [0x3f, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0x20, 0x81, 0x7, 0x5, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x1ff, 0x7ff, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0x20, 0x2, 0xe61, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x310}, 0x1, 0x0, 0x0, 0x404c000}, 0x4008800) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250c00000005002a000000000005002d000100000005002e00000000000a00090053745f350ad4000008002b0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x10040000) (async) openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xfff2, 0xfff1}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040006}, 0x40000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) (async) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="02678b4b2535cc588afa5cf86283b854df0d3844b7740b26676b4df170596260acba0abf5d1ea3adc8840bedbb022b3fca913f012027cd5ec9d7aef50d0dd140d1d7714c4a19e450c36153c24a7dd31aa2b7387b1e758bb400b3a1e9976561e13224807aa196b45061d4465b767028b9b33051af99298a7bee6fd82c6f94fa69ec11489939187efd2409a3aafe5c363454b59916c92c19d80e5947a5602bb2b73b6e07a71e14a851e343c4847b59a7597cccceda61ed989258ee4b1e88e041ab67fa98ad42f1e3515b68c34e4a86db92a65f4bea63", 0xd5}, {&(0x7f0000000280)="370c4facc6a1e1e0a48e94bedb0cf74a748adfabeac7b213d7aafbdc2b33a45923c71a54ff84e500c0365f045011a577db83f0f371a3e42fed0ae0639bddf1f748ff669163df85d68b6144598c79b775a61b2ed059e4f198e993328c929636c38990228c894ea1111879e5", 0x6b}, {&(0x7f0000000480)="5d9b65aedab995236c224ca7235650d7f4e2260e1220ede2a300a4b8035b4a16e6d140a3625a11003d55c3c047dafe1482713a99427c4142ac4559e2a151c237edd2e12bb473d0cd653d54764e6d3faf42cbfe699459baf339fcae2918e66887bd05451cc130ca4001bdeabce35d37c5e357eba236218eedd5535681c9b38779e8081ea8540a5e19cffc7a569b125554ccb23c23857652eb5fd11086785ef271ad45b08771fd481f510e32dabc20616b521d8f44ec19f936f79b580979c80999b352894e9e3cae07a54789e01209d5091d67e0", 0xd3}, {&(0x7f0000000300)="cb884dc3fd5d63a18db2da395cf8b09bff3e157e7f7f48fcb00095c0d181c12893b623a8b3d0cfe7a53a55c21765f8bfe7bfff1f070ab9", 0x37}, {&(0x7f0000000580)="bca0ef42838daca3f86e8ad8f3498c1c307fdc830675a4a636820dddfcbacf553c4e3c8e95d2b47460ea0fcd7fa5f8a1c24bf64586fd7e6c8277d699e4c2789095b7aa8f21c181a10d3714c5c3998623ff062c512cded68e0edbb3e7a5365bf43cbeb9e60659952c2133e16a3784f3eb15452c32feac92b6a78983a73063dd12f4d678f6d5c49f5883bb0ec3efd52bd452f1bcdfcd84d2891fb486aa9d428a0c4abb9ff72cd128fbd68c7d3981db340abd366153c86872a090736727e3dbb5a22c0c40d56d271df0b30d41228e54fbb95b78cfa32061", 0xd6}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000000680)="b8ba034db4546f39b9a22b527262e705a24d58d0fac551ad8e9f310debaa0faa2152e82a1f11303531e7a16566276845cd67f71c32c7abc0115b796c356751ffca3b78c91e0899a44999272bce9c0137611c79551648a939b585a2003480429e4d0cc51b301a6780547f5eafe645f6a0ba8b97b4df6c29b4e07e2a47935ff8be514aa0c717d94aae09c467ed215c96f5f04421b94337cc9dcf95c76ce7a831416b7380ec979e5f3e6a1206cb642b57c4ec0a2f684c3993aabf80a83170df276ee301a2d1", 0xc4}], 0x7, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x40000}}], 0x1, 0x4040) (async) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1020400, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x23}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xe8'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'K,*\'('}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 22:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x500}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1131.135911][T19492] loop5: detected capacity change from 0 to 512 [ 1131.147864][T19494] loop4: detected capacity change from 0 to 68 [ 1131.182159][T19494] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1131.206697][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2010}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1131.227404][T19492] EXT4-fs (loop5): invalid inodes per group: 4294967294 [ 1131.227404][T19492] [ 1131.246313][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1131.256891][T19499] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020020000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1131.301008][T19499] CPU: 1 PID: 19499 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1131.311618][T19499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1131.321680][T19499] Call Trace: [ 1131.324967][T19499] [ 1131.327901][T19499] dump_stack_lvl+0xcd/0x134 [ 1131.332513][T19499] dump_header+0x10b/0x7f9 [ 1131.333441][T19505] loop5: detected capacity change from 0 to 512 [ 1131.336932][T19499] oom_kill_process.cold+0x10/0x15 [ 1131.336963][T19499] out_of_memory+0x358/0x14a0 [ 1131.352942][T19499] ? find_held_lock+0x2d/0x110 [ 1131.357703][T19499] ? oom_killer_disable+0x270/0x270 [ 1131.362901][T19499] ? find_held_lock+0x2d/0x110 [ 1131.367665][T19499] mem_cgroup_out_of_memory+0x206/0x270 [ 1131.373207][T19499] ? mem_cgroup_margin+0x130/0x130 [ 1131.378305][T19499] ? lock_downgrade+0x6e0/0x6e0 [ 1131.383156][T19499] try_charge_memcg+0xf67/0x13f0 [ 1131.388089][T19499] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1131.394060][T19499] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1131.399771][T19499] ? lock_downgrade+0x6e0/0x6e0 [ 1131.404791][T19499] ? lock_downgrade+0x6e0/0x6e0 [ 1131.409649][T19499] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1131.415197][T19499] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1131.421486][T19499] copy_process+0x145a/0x7090 [ 1131.426164][T19499] ? __lock_acquire+0xbc3/0x56d0 [ 1131.431098][T19499] ? __cleanup_sighand+0xb0/0xb0 [ 1131.436045][T19499] kernel_clone+0xe7/0xab0 [ 1131.440454][T19499] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1131.446424][T19499] ? create_io_thread+0xe0/0xe0 [ 1131.451271][T19499] ? find_held_lock+0x2d/0x110 [ 1131.456025][T19499] ? __ct_user_exit+0xff/0x150 [ 1131.460792][T19499] __do_sys_clone+0xba/0x100 [ 1131.465383][T19499] ? kernel_clone+0xab0/0xab0 [ 1131.470064][T19499] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1131.475955][T19499] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1131.481854][T19499] do_syscall_64+0x35/0xb0 [ 1131.486351][T19499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1131.492238][T19499] RIP: 0033:0x7fe68848a6a1 [ 1131.496643][T19499] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1131.516241][T19499] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1131.524674][T19499] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1131.532648][T19499] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1131.540711][T19499] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1131.548768][T19499] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1131.556820][T19499] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1131.564806][T19499] [ 1131.632154][T19499] memory: usage 307172kB, limit 307200kB, failcnt 6586 [ 1131.632223][T19494] FAT-fs (loop4): Filesystem has been set read-only [ 1131.640121][T19499] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1131.655835][T19499] Memory cgroup stats for /syz1: [ 1131.655993][T19499] anon 98304 [ 1131.655993][T19499] file 184320 [ 1131.655993][T19499] kernel 314261504 [ 1131.655993][T19499] kernel_stack 32768 [ 1131.655993][T19499] pagetables 65536 [ 1131.655993][T19499] percpu 5372992 [ 1131.655993][T19499] sock 0 [ 1131.655993][T19499] vmalloc 8192 [ 1131.655993][T19499] shmem 180224 [ 1131.655993][T19499] zswap 0 [ 1131.655993][T19499] zswapped 0 [ 1131.655993][T19499] file_mapped 180224 [ 1131.655993][T19499] file_dirty 0 [ 1131.655993][T19499] file_writeback 0 [ 1131.655993][T19499] swapcached 0 [ 1131.655993][T19499] anon_thp 0 [ 1131.655993][T19499] file_thp 0 [ 1131.655993][T19499] shmem_thp 0 [ 1131.655993][T19499] inactive_anon 98304 [ 1131.655993][T19499] active_anon 180224 22:05:32 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a40)="424da1cfd6b3a6bcc61a74d96ba18ee8b11f8b8e0448b628c605990a0df3c071a015d76e57f03a2345480428adaf8a42c571bd9265974070b881410f3f1afb85a2a927709b121b9a791bb41a556a91e4678e1f9eefa370c941bed9c06d0004300b18664c02a45a691d3420b9af35a702372548578d3babc8ba77d20b50e0afd1854fd3f353b9", 0x86}], 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000b00ffff20ff0000000009000100686673630000000014fe010010000300"/44], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000005c0)=@l2, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/187, 0xbb}], 0x6, &(0x7f00000008c0)=""/156, 0x9c}, 0x10200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1131.655993][T19499] inactive_file 0 [ 1131.655993][T19499] active_file 4096 [ 1131.655993][T19499] unevictable 0 [ 1131.655993][T19499] slab_reclaimable 15280 [ 1131.655993][T19499] slab_unreclaimable 308706344 [ 1131.655993][T19499] slab 308721624 [ 1131.680641][T19505] EXT4-fs (loop5): inodes count not valid: 32 vs 544 [ 1131.798249][T19499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19499,uid=0 22:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x533}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1131.846277][T19499] Memory cgroup out of memory: Killed process 19499 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x1020, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020030000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1131.887318][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1131.936006][T19534] loop4: detected capacity change from 0 to 68 22:05:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x6, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) [ 1131.978507][T19534] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1131.985327][T19540] loop5: detected capacity change from 0 to 512 [ 1132.001141][T19534] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1132.012650][T19534] FAT-fs (loop4): Filesystem has been set read-only 22:05:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020040000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x1100, 0x4400}], 0x0, &(0x7f0000011100)) [ 1132.031036][T19540] EXT4-fs (loop5): inodes count not valid: 32 vs 800 [ 1132.055321][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x600}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:32 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a40)="424da1cfd6b3a6bcc61a74d96ba18ee8b11f8b8e0448b628c605990a0df3c071a015d76e57f03a2345480428adaf8a42c571bd9265974070b881410f3f1afb85a2a927709b121b9a791bb41a556a91e4678e1f9eefa370c941bed9c06d0004300b18664c02a45a691d3420b9af35a702372548578d3babc8ba77d20b50e0afd1854fd3f353b9", 0x86}], 0x1}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000b00ffff20ff0000000009000100686673630000000014fe010010000300"/44], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000005c0)=@l2, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/187, 0xbb}], 0x6, &(0x7f00000008c0)=""/156, 0x9c}, 0x10200) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1132.116169][T19545] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1132.202469][T19551] loop4: detected capacity change from 0 to 68 [ 1132.218393][T19556] loop5: detected capacity change from 0 to 512 [ 1132.244365][T19551] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1132.252711][T19545] CPU: 0 PID: 19545 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1132.263853][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1132.273929][T19545] Call Trace: [ 1132.277217][T19545] [ 1132.280155][T19545] dump_stack_lvl+0xcd/0x134 [ 1132.283965][T19551] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1132.284752][T19545] dump_header+0x10b/0x7f9 [ 1132.284785][T19545] oom_kill_process.cold+0x10/0x15 [ 1132.284811][T19545] out_of_memory+0x358/0x14a0 [ 1132.295003][T19551] FAT-fs (loop4): Filesystem has been set read-only [ 1132.297944][T19545] ? find_held_lock+0x2d/0x110 [ 1132.297970][T19545] ? oom_killer_disable+0x270/0x270 [ 1132.297996][T19545] ? find_held_lock+0x2d/0x110 [ 1132.308172][T19556] EXT4-fs (loop5): inodes count not valid: 32 vs 1056 [ 1132.314310][T19545] mem_cgroup_out_of_memory+0x206/0x270 [ 1132.314338][T19545] ? mem_cgroup_margin+0x130/0x130 [ 1132.314358][T19545] ? lock_downgrade+0x6e0/0x6e0 [ 1132.314391][T19545] try_charge_memcg+0xf67/0x13f0 [ 1132.314420][T19545] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1132.314444][T19545] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1132.314466][T19545] ? lock_downgrade+0x6e0/0x6e0 [ 1132.314490][T19545] ? lock_downgrade+0x6e0/0x6e0 [ 1132.314523][T19545] obj_cgroup_charge+0x2ab/0x5e0 [ 1132.314549][T19545] kmem_cache_alloc_lru+0x13e/0x720 [ 1132.314571][T19545] ? sock_alloc_inode+0x23/0x1d0 [ 1132.314598][T19545] sock_alloc_inode+0x23/0x1d0 [ 1132.314617][T19545] ? sock_free_inode+0x20/0x20 [ 1132.314637][T19545] alloc_inode+0x61/0x230 [ 1132.314660][T19545] new_inode_pseudo+0x13/0x80 [ 1132.314680][T19545] sock_alloc+0x3c/0x260 [ 1132.314699][T19545] __sock_create+0xb9/0x790 [ 1132.314721][T19545] ? lock_downgrade+0x6e0/0x6e0 [ 1132.314745][T19545] __sys_socket+0x12f/0x240 [ 1132.314766][T19545] ? __sys_socket_file+0x1f0/0x1f0 [ 1132.314788][T19545] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1132.314820][T19545] __x64_sys_socket+0x6f/0xb0 [ 1132.314842][T19545] do_syscall_64+0x35/0xb0 [ 1132.314862][T19545] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1132.314883][T19545] RIP: 0033:0x7fe688489279 22:05:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x1700, 0x4400}], 0x0, &(0x7f0000011100)) [ 1132.314900][T19545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1132.314920][T19545] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1132.314941][T19545] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1132.314954][T19545] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1132.314966][T19545] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1132.314979][T19545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.314991][T19545] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1132.315018][T19545] [ 1132.355059][T19545] memory: usage 307184kB, limit 307200kB, failcnt 6674 [ 1132.355077][T19545] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1132.355089][T19545] Memory cgroup stats for /syz1: [ 1132.355261][T19545] anon 102400 [ 1132.355261][T19545] file 184320 [ 1132.355261][T19545] kernel 314269696 [ 1132.355261][T19545] kernel_stack 65536 [ 1132.355261][T19545] pagetables 65536 [ 1132.355261][T19545] percpu 5372992 [ 1132.355261][T19545] sock 0 [ 1132.355261][T19545] vmalloc 8192 [ 1132.355261][T19545] shmem 180224 [ 1132.355261][T19545] zswap 0 [ 1132.355261][T19545] zswapped 0 [ 1132.355261][T19545] file_mapped 180224 [ 1132.355261][T19545] file_dirty 0 [ 1132.355261][T19545] file_writeback 0 [ 1132.355261][T19545] swapcached 0 [ 1132.355261][T19545] anon_thp 0 [ 1132.355261][T19545] file_thp 0 [ 1132.355261][T19545] shmem_thp 0 [ 1132.355261][T19545] inactive_anon 102400 [ 1132.355261][T19545] active_anon 180224 [ 1132.355261][T19545] inactive_file 4096 [ 1132.355261][T19545] active_file 0 [ 1132.355261][T19545] unevictable 0 [ 1132.355261][T19545] slab_reclaimable 15280 [ 1132.355261][T19545] slab_unreclaimable 308707112 [ 1132.355261][T19545] slab 308722392 22:05:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x9, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:33 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a40)="424da1cfd6b3a6bcc61a74d96ba18ee8b11f8b8e0448b628c605990a0df3c071a015d76e57f03a2345480428adaf8a42c571bd9265974070b881410f3f1afb85a2a927709b121b9a791bb41a556a91e4678e1f9eefa370c941bed9c06d0004300b18664c02a45a691d3420b9af35a702372548578d3babc8ba77d20b50e0afd1854fd3f353b9", 0x86}], 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000b00ffff20ff0000000009000100686673630000000014fe010010000300"/44], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000005c0)=@l2, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/187, 0xbb}], 0x6, &(0x7f00000008c0)=""/156, 0x9c}, 0x10200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a40)="424da1cfd6b3a6bcc61a74d96ba18ee8b11f8b8e0448b628c605990a0df3c071a015d76e57f03a2345480428adaf8a42c571bd9265974070b881410f3f1afb85a2a927709b121b9a791bb41a556a91e4678e1f9eefa370c941bed9c06d0004300b18664c02a45a691d3420b9af35a702372548578d3babc8ba77d20b50e0afd1854fd3f353b9", 0x86}], 0x1}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000b00ffff20ff0000000009000100686673630000000014fe010010000300"/44], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) (async) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000005c0)=@l2, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000780)=""/187, 0xbb}], 0x6, &(0x7f00000008c0)=""/156, 0x9c}, 0x10200) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) [ 1132.528177][T19567] loop4: detected capacity change from 0 to 68 [ 1132.547447][T19545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19544,uid=0 [ 1132.547580][T19545] Memory cgroup out of memory: Killed process 19544 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1132.623772][T19569] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1132.774222][T19570] __nla_validate_parse: 1 callbacks suppressed [ 1132.774239][T19570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1132.775181][T19569] CPU: 0 PID: 19569 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1132.800088][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1132.810145][T19569] Call Trace: [ 1132.813419][T19569] [ 1132.816342][T19569] dump_stack_lvl+0xcd/0x134 [ 1132.820937][T19569] dump_header+0x10b/0x7f9 [ 1132.825354][T19569] oom_kill_process.cold+0x10/0x15 [ 1132.830464][T19569] out_of_memory+0x358/0x14a0 [ 1132.835141][T19569] ? find_held_lock+0x2d/0x110 [ 1132.839898][T19569] ? oom_killer_disable+0x270/0x270 [ 1132.845093][T19569] ? find_held_lock+0x2d/0x110 [ 1132.849851][T19569] mem_cgroup_out_of_memory+0x206/0x270 [ 1132.855392][T19569] ? mem_cgroup_margin+0x130/0x130 [ 1132.860496][T19569] ? lock_downgrade+0x6e0/0x6e0 [ 1132.865351][T19569] try_charge_memcg+0xf67/0x13f0 [ 1132.870286][T19569] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1132.876268][T19569] ? lock_downgrade+0x6e0/0x6e0 [ 1132.881124][T19569] charge_memcg+0x31/0x320 [ 1132.885540][T19569] __mem_cgroup_charge+0x27/0x90 [ 1132.890473][T19569] ? _compound_head+0x5d/0x150 [ 1132.895233][T19569] wp_page_copy+0x27c/0x1b60 [ 1132.899824][T19569] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1132.905279][T19569] ? lock_downgrade+0x6e0/0x6e0 [ 1132.910123][T19569] ? vm_normal_page+0x146/0x2a0 [ 1132.914979][T19569] do_wp_page+0x52c/0x1910 [ 1132.919394][T19569] __handle_mm_fault+0x1813/0x39b0 [ 1132.924511][T19569] ? vm_iomap_memory+0x190/0x190 [ 1132.929460][T19569] handle_mm_fault+0x1c8/0x780 [ 1132.934220][T19569] do_user_addr_fault+0x475/0x1210 [ 1132.939339][T19569] exc_page_fault+0x94/0x170 [ 1132.943928][T19569] asm_exc_page_fault+0x22/0x30 [ 1132.948770][T19569] RIP: 0033:0x7fe688434c00 [ 1132.953178][T19569] Code: 0f 84 b4 00 00 00 80 3d b1 07 0a 01 00 75 1b 80 3d a9 07 0a 01 00 75 12 80 3d 9b 07 0a 01 00 0f 84 95 00 00 00 0f 1f 44 00 00 <41> c6 44 24 f8 01 45 89 6c 24 f4 41 c6 44 24 14 00 8b 93 8c 00 00 [ 1132.972781][T19569] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010202 [ 1132.978840][T19569] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 0000000000000000 [ 1132.986804][T19569] RDX: 00007ffffbe4abc8 RSI: ffff801977a64074 RDI: 00007ffffbe4abf8 [ 1132.994770][T19569] RBP: 00007ffffbe4abc8 R08: 0000000000000000 R09: 0000000000000000 [ 1133.002733][T19569] R10: 00007ffffbe84090 R11: 000000000003387c R12: 00007fe68859bf8c [ 1133.010696][T19569] R13: 0000000000000000 R14: 00007fe68859bf80 R15: 00007ffffbe4ad00 [ 1133.018672][T19569] 22:05:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x700}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.053577][T19569] memory: usage 307180kB, limit 307200kB, failcnt 6707 [ 1133.077518][T19569] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1133.085494][T19567] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1133.095674][T19569] Memory cgroup stats for /syz1: [ 1133.097526][T19567] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1133.100961][T19569] anon 86016 [ 1133.100961][T19569] file 184320 [ 1133.100961][T19569] kernel 314228736 [ 1133.100961][T19569] kernel_stack 32768 [ 1133.100961][T19569] pagetables 65536 [ 1133.100961][T19569] percpu 5372992 [ 1133.100961][T19569] sock 0 [ 1133.100961][T19569] vmalloc 8192 [ 1133.100961][T19569] shmem 180224 [ 1133.100961][T19569] zswap 0 [ 1133.100961][T19569] zswapped 0 [ 1133.100961][T19569] file_mapped 180224 [ 1133.100961][T19569] file_dirty 0 [ 1133.100961][T19569] file_writeback 0 [ 1133.100961][T19569] swapcached 0 [ 1133.100961][T19569] anon_thp 0 [ 1133.100961][T19569] file_thp 0 [ 1133.100961][T19569] shmem_thp 0 [ 1133.100961][T19569] inactive_anon 86016 [ 1133.100961][T19569] active_anon 180224 [ 1133.100961][T19569] inactive_file 0 [ 1133.100961][T19569] active_file 4096 [ 1133.100961][T19569] unevictable 0 [ 1133.100961][T19569] slab_reclaimable 15280 [ 1133.100961][T19569] slab_unreclaimable 308698160 [ 1133.100961][T19569] slab 308713440 22:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0xa, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xc00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020050000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1133.103589][T19567] FAT-fs (loop4): Filesystem has been set read-only [ 1133.207128][T19569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19569,uid=0 [ 1133.207425][T19569] Memory cgroup out of memory: Killed process 19569 (syz-executor.1) total-vm:54376kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x900}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.341130][T19582] loop3: detected capacity change from 0 to 68 [ 1133.356973][ T3659] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.387458][T19586] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1133.405940][ T3659] Buffer I/O error on dev loop3, logical block 0, async page read [ 1133.408651][T19587] loop5: detected capacity change from 0 to 512 [ 1133.451353][ T3659] loop3: unable to read partition table [ 1133.462268][T19582] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1133.478873][T19586] CPU: 1 PID: 19586 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1133.489310][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1133.499448][T19586] Call Trace: [ 1133.502719][T19586] [ 1133.505643][T19586] dump_stack_lvl+0xcd/0x134 [ 1133.510239][T19586] dump_header+0x10b/0x7f9 [ 1133.514659][T19586] oom_kill_process.cold+0x10/0x15 [ 1133.519779][T19586] out_of_memory+0x358/0x14a0 [ 1133.524468][T19586] ? find_held_lock+0x2d/0x110 [ 1133.529234][T19586] ? oom_killer_disable+0x270/0x270 [ 1133.534431][T19586] ? find_held_lock+0x2d/0x110 [ 1133.539280][T19586] mem_cgroup_out_of_memory+0x206/0x270 [ 1133.544827][T19586] ? mem_cgroup_margin+0x130/0x130 [ 1133.549933][T19586] ? lock_downgrade+0x6e0/0x6e0 [ 1133.554789][T19586] try_charge_memcg+0xf67/0x13f0 [ 1133.559728][T19586] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1133.565791][T19586] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1133.571512][T19586] ? lock_downgrade+0x6e0/0x6e0 [ 1133.576376][T19586] ? lock_downgrade+0x6e0/0x6e0 [ 1133.581233][T19586] obj_cgroup_charge+0x2ab/0x5e0 [ 1133.586171][T19586] kmem_cache_alloc_lru+0x13e/0x720 [ 1133.591368][T19586] ? sock_alloc_inode+0x23/0x1d0 [ 1133.596304][T19586] sock_alloc_inode+0x23/0x1d0 [ 1133.601063][T19586] ? sock_free_inode+0x20/0x20 [ 1133.605824][T19586] alloc_inode+0x61/0x230 [ 1133.610156][T19586] new_inode_pseudo+0x13/0x80 [ 1133.614829][T19586] sock_alloc+0x3c/0x260 [ 1133.619074][T19586] __sock_create+0xb9/0x790 [ 1133.623586][T19586] ? lock_downgrade+0x6e0/0x6e0 [ 1133.628443][T19586] __sys_socket+0x12f/0x240 [ 1133.632941][T19586] ? __sys_socket_file+0x1f0/0x1f0 [ 1133.638051][T19586] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1133.644033][T19586] __x64_sys_socket+0x6f/0xb0 [ 1133.648703][T19586] do_syscall_64+0x35/0xb0 [ 1133.653114][T19586] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1133.659003][T19586] RIP: 0033:0x7fe688489279 [ 1133.663421][T19586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1133.683028][T19586] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1133.691439][T19586] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1133.699407][T19586] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1133.707376][T19586] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1133.715348][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.723318][T19586] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1133.731310][T19586] 22:05:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x1f00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.752751][T19582] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1133.765395][T19582] FAT-fs (loop3): Filesystem has been set read-only [ 1133.774600][T19586] memory: usage 307200kB, limit 307200kB, failcnt 6771 [ 1133.794570][T19586] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 22:05:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.817120][T19587] EXT4-fs (loop5): inodes count not valid: 32 vs 1312 [ 1133.859645][T19597] loop4: detected capacity change from 0 to 68 [ 1133.860367][T19586] Memory cgroup stats for /syz1: [ 1133.866095][T19586] anon 102400 [ 1133.866095][T19586] file 184320 [ 1133.866095][T19586] kernel 314286080 [ 1133.866095][T19586] kernel_stack 65536 [ 1133.866095][T19586] pagetables 65536 [ 1133.866095][T19586] percpu 5372992 [ 1133.866095][T19586] sock 0 [ 1133.866095][T19586] vmalloc 8192 [ 1133.866095][T19586] shmem 180224 [ 1133.866095][T19586] zswap 0 [ 1133.866095][T19586] zswapped 0 [ 1133.866095][T19586] file_mapped 180224 [ 1133.866095][T19586] file_dirty 0 [ 1133.866095][T19586] file_writeback 0 [ 1133.866095][T19586] swapcached 0 [ 1133.866095][T19586] anon_thp 0 [ 1133.866095][T19586] file_thp 0 [ 1133.866095][T19586] shmem_thp 0 [ 1133.866095][T19586] inactive_anon 102400 [ 1133.866095][T19586] active_anon 180224 [ 1133.866095][T19586] inactive_file 0 [ 1133.866095][T19586] active_file 4096 [ 1133.866095][T19586] unevictable 0 [ 1133.866095][T19586] slab_reclaimable 15280 [ 1133.866095][T19586] slab_unreclaimable 308718208 22:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1133.866095][T19586] slab 308733488 [ 1133.880215][ T3659] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.010929][ T3659] Buffer I/O error on dev loop4, logical block 0, async page read [ 1134.026491][T19586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19580,uid=0 22:05:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020060000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1134.073740][T19586] Memory cgroup out of memory: Killed process 19580 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1134.114812][ T3659] loop4: unable to read partition table [ 1134.123375][T19597] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0xb, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x400300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x215c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.165069][T19605] loop5: detected capacity change from 0 to 512 [ 1134.173790][T19597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1134.196362][T19597] FAT-fs (loop4): Filesystem has been set read-only [ 1134.203736][T19605] EXT4-fs (loop5): inodes count not valid: 32 vs 1568 22:05:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020070000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x2000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3305}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.296459][T19615] loop5: detected capacity change from 0 to 512 [ 1134.330645][T19615] EXT4-fs (loop5): inodes count not valid: 32 vs 1824 22:05:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0ffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.381132][T19618] loop4: detected capacity change from 0 to 68 [ 1134.397879][ T3659] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020080000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1134.432912][ T3659] Buffer I/O error on dev loop4, logical block 0, async page read 22:05:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.487095][ T3659] loop4: unable to read partition table [ 1134.524732][T19626] loop5: detected capacity change from 0 to 512 22:05:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1134.543183][T19616] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1134.564464][T19618] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1134.597595][T19618] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1134.632453][T19626] EXT4-fs (loop5): inodes count not valid: 32 vs 2080 [ 1134.650749][T19618] FAT-fs (loop4): Filesystem has been set read-only [ 1134.664574][T19616] CPU: 0 PID: 19616 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1134.675024][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1134.685082][T19616] Call Trace: [ 1134.688357][T19616] [ 1134.691281][T19616] dump_stack_lvl+0xcd/0x134 [ 1134.695869][T19616] dump_header+0x10b/0x7f9 [ 1134.700288][T19616] oom_kill_process.cold+0x10/0x15 [ 1134.705409][T19616] out_of_memory+0x358/0x14a0 [ 1134.710099][T19616] ? find_held_lock+0x2d/0x110 [ 1134.714868][T19616] ? oom_killer_disable+0x270/0x270 [ 1134.720070][T19616] ? find_held_lock+0x2d/0x110 [ 1134.724837][T19616] mem_cgroup_out_of_memory+0x206/0x270 [ 1134.730386][T19616] ? mem_cgroup_margin+0x130/0x130 [ 1134.735504][T19616] ? lock_downgrade+0x6e0/0x6e0 [ 1134.740378][T19616] try_charge_memcg+0xf67/0x13f0 [ 1134.745335][T19616] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1134.751316][T19616] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1134.757027][T19616] ? lock_downgrade+0x6e0/0x6e0 [ 1134.761876][T19616] ? lock_downgrade+0x6e0/0x6e0 [ 1134.766753][T19616] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1134.772290][T19616] __alloc_pages+0x1ef/0x510 [ 1134.776873][T19616] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1134.783623][T19616] ? lock_chain_count+0x20/0x20 [ 1134.788488][T19616] ? __lock_acquire+0xbc3/0x56d0 [ 1134.793441][T19616] alloc_pages+0x1a6/0x270 [ 1134.797855][T19616] pte_alloc_one+0x16/0x230 [ 1134.802347][T19616] __pte_alloc+0x69/0x250 [ 1134.806673][T19616] ? pmd_install+0x150/0x150 [ 1134.811251][T19616] ? hugepage_vma_check+0x44e/0x780 [ 1134.816451][T19616] __handle_mm_fault+0x310b/0x39b0 [ 1134.821567][T19616] ? vm_iomap_memory+0x190/0x190 [ 1134.826548][T19616] handle_mm_fault+0x1c8/0x780 [ 1134.831316][T19616] do_user_addr_fault+0x475/0x1210 [ 1134.836450][T19616] exc_page_fault+0x94/0x170 [ 1134.841276][T19616] asm_exc_page_fault+0x22/0x30 [ 1134.846135][T19616] RIP: 0033:0x7fe688434e7d [ 1134.850576][T19616] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1134.870205][T19616] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1134.876270][T19616] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1134.884237][T19616] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1134.892213][T19616] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1134.900178][T19616] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1134.908146][T19616] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1134.916115][T19616] [ 1134.958469][T19616] memory: usage 307184kB, limit 307200kB, failcnt 6839 [ 1134.966597][T19616] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1134.979476][T19616] Memory cgroup stats for /syz1: [ 1134.979662][T19616] anon 102400 [ 1134.979662][T19616] file 184320 [ 1134.979662][T19616] kernel 314269696 [ 1134.979662][T19616] kernel_stack 65536 [ 1134.979662][T19616] pagetables 65536 [ 1134.979662][T19616] percpu 5372992 [ 1134.979662][T19616] sock 0 [ 1134.979662][T19616] vmalloc 8192 [ 1134.979662][T19616] shmem 180224 [ 1134.979662][T19616] zswap 0 [ 1134.979662][T19616] zswapped 0 [ 1134.979662][T19616] file_mapped 180224 [ 1134.979662][T19616] file_dirty 0 [ 1134.979662][T19616] file_writeback 0 [ 1134.979662][T19616] swapcached 0 [ 1134.979662][T19616] anon_thp 0 [ 1134.979662][T19616] file_thp 0 [ 1134.979662][T19616] shmem_thp 0 [ 1134.979662][T19616] inactive_anon 102400 [ 1134.979662][T19616] active_anon 180224 [ 1134.979662][T19616] inactive_file 0 [ 1134.979662][T19616] active_file 4096 [ 1134.979662][T19616] unevictable 0 [ 1134.979662][T19616] slab_reclaimable 15280 [ 1134.979662][T19616] slab_unreclaimable 308706808 [ 1134.979662][T19616] slab 308722088 [ 1135.102059][T19616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19616,uid=0 22:05:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x10, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5c21}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x2010, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020090000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1135.137166][T19616] Memory cgroup out of memory: Killed process 19616 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.186310][T19640] loop4: detected capacity change from 0 to 68 [ 1135.202682][T19642] loop5: detected capacity change from 0 to 512 22:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.232596][T19640] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1135.251296][T19642] EXT4-fs (loop5): inodes count not valid: 32 vs 2336 22:05:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000200a0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1135.286831][T19640] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1135.326656][T19644] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1135.338836][T19640] FAT-fs (loop4): Filesystem has been set read-only [ 1135.347653][T19644] CPU: 0 PID: 19644 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1135.358080][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1135.368143][T19644] Call Trace: [ 1135.371425][T19644] [ 1135.374362][T19644] dump_stack_lvl+0xcd/0x134 [ 1135.378986][T19644] dump_header+0x10b/0x7f9 [ 1135.383425][T19644] oom_kill_process.cold+0x10/0x15 [ 1135.388567][T19644] out_of_memory+0x358/0x14a0 [ 1135.393271][T19644] ? find_held_lock+0x2d/0x110 [ 1135.398057][T19644] ? oom_killer_disable+0x270/0x270 [ 1135.403272][T19644] ? find_held_lock+0x2d/0x110 [ 1135.408051][T19644] mem_cgroup_out_of_memory+0x206/0x270 [ 1135.412973][T19653] loop5: detected capacity change from 0 to 512 [ 1135.413596][T19644] ? mem_cgroup_margin+0x130/0x130 [ 1135.413618][T19644] ? lock_downgrade+0x6e0/0x6e0 [ 1135.413650][T19644] try_charge_memcg+0xf67/0x13f0 [ 1135.427078][T19653] EXT4-fs (loop5): inodes count not valid: 32 vs 2592 [ 1135.429796][T19644] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1135.429828][T19644] ? lock_downgrade+0x6e0/0x6e0 [ 1135.429858][T19644] charge_memcg+0x31/0x320 [ 1135.429883][T19644] __mem_cgroup_charge+0x27/0x90 [ 1135.429903][T19644] ? _compound_head+0x5d/0x150 [ 1135.429928][T19644] wp_page_copy+0x27c/0x1b60 [ 1135.429953][T19644] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1135.429972][T19644] ? lock_downgrade+0x6e0/0x6e0 [ 1135.429991][T19644] ? vm_normal_page+0x146/0x2a0 22:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.430021][T19644] do_wp_page+0x1d1/0x1910 [ 1135.430044][T19644] __handle_mm_fault+0x1813/0x39b0 [ 1135.430070][T19644] ? vm_iomap_memory+0x190/0x190 [ 1135.430108][T19644] handle_mm_fault+0x1c8/0x780 [ 1135.430132][T19644] do_user_addr_fault+0x475/0x1210 [ 1135.430164][T19644] exc_page_fault+0x94/0x170 [ 1135.430190][T19644] asm_exc_page_fault+0x22/0x30 [ 1135.430208][T19644] RIP: 0033:0x7fe6884374b0 [ 1135.430226][T19644] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 1135.430244][T19644] RSP: 002b:00007ffffbe4a970 EFLAGS: 00010246 [ 1135.430260][T19644] RAX: 000000009a6ebc04 RBX: 00007fe68859c018 RCX: 0000001b2eb20000 [ 1135.430273][T19644] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec1382 22:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.430285][T19644] RBP: 000000009a6ebc04 R08: 0000000000001c04 R09: 000000009a6ebc08 [ 1135.430297][T19644] R10: 00007ffffbe4ab40 R11: 0000000000000246 R12: 00007fe688590000 [ 1135.430309][T19644] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3317d [ 1135.430321][T19644] ? trace_user_exit.constprop.0+0xd/0x210 [ 1135.430356][T19644] [ 1135.484663][T19644] memory: usage 307200kB, limit 307200kB, failcnt 6895 [ 1135.646762][T19644] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1135.664621][T19644] Memory cgroup stats for /syz1: [ 1135.664801][T19644] anon 114688 [ 1135.664801][T19644] file 184320 [ 1135.664801][T19644] kernel 314273792 [ 1135.664801][T19644] kernel_stack 65536 [ 1135.664801][T19644] pagetables 69632 [ 1135.664801][T19644] percpu 5372992 [ 1135.664801][T19644] sock 0 [ 1135.664801][T19644] vmalloc 8192 [ 1135.664801][T19644] shmem 180224 [ 1135.664801][T19644] zswap 0 [ 1135.664801][T19644] zswapped 0 [ 1135.664801][T19644] file_mapped 180224 [ 1135.664801][T19644] file_dirty 0 [ 1135.664801][T19644] file_writeback 0 [ 1135.664801][T19644] swapcached 0 [ 1135.664801][T19644] anon_thp 0 [ 1135.664801][T19644] file_thp 0 [ 1135.664801][T19644] shmem_thp 0 [ 1135.664801][T19644] inactive_anon 114688 [ 1135.664801][T19644] active_anon 180224 [ 1135.664801][T19644] inactive_file 0 [ 1135.664801][T19644] active_file 4096 [ 1135.664801][T19644] unevictable 0 [ 1135.664801][T19644] slab_reclaimable 17208 [ 1135.664801][T19644] slab_unreclaimable 308707456 [ 1135.664801][T19644] slab 308724664 22:05:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x11, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x3c00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000200c0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.796537][T19644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19644,uid=0 [ 1135.820839][T19644] Memory cgroup out of memory: Killed process 19644 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 22:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.888708][T19667] loop4: detected capacity change from 0 to 68 [ 1135.895708][T19668] loop5: detected capacity change from 0 to 512 22:05:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.945908][T19667] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1135.964118][T19667] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1135.995240][T19668] EXT4-fs (loop5): inodes count not valid: 32 vs 3104 [ 1136.051146][T19671] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1136.055077][T19667] FAT-fs (loop4): Filesystem has been set read-only [ 1136.091128][T19671] CPU: 0 PID: 19671 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1136.101581][T19671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1136.111634][T19671] Call Trace: [ 1136.114902][T19671] [ 1136.117826][T19671] dump_stack_lvl+0xcd/0x134 [ 1136.122420][T19671] dump_header+0x10b/0x7f9 [ 1136.126835][T19671] oom_kill_process.cold+0x10/0x15 [ 1136.131950][T19671] out_of_memory+0x358/0x14a0 [ 1136.136628][T19671] ? find_held_lock+0x2d/0x110 [ 1136.141387][T19671] ? oom_killer_disable+0x270/0x270 [ 1136.146586][T19671] ? find_held_lock+0x2d/0x110 [ 1136.151343][T19671] mem_cgroup_out_of_memory+0x206/0x270 [ 1136.156886][T19671] ? mem_cgroup_margin+0x130/0x130 [ 1136.161986][T19671] ? lock_downgrade+0x6e0/0x6e0 [ 1136.166841][T19671] try_charge_memcg+0xf67/0x13f0 [ 1136.171778][T19671] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1136.177753][T19671] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1136.183469][T19671] ? lock_downgrade+0x6e0/0x6e0 [ 1136.188313][T19671] ? lock_downgrade+0x6e0/0x6e0 [ 1136.193165][T19671] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1136.198708][T19671] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1136.204864][T19671] copy_process+0x607/0x7090 [ 1136.209459][T19671] ? __lock_acquire+0xbc3/0x56d0 [ 1136.214403][T19671] ? __cleanup_sighand+0xb0/0xb0 [ 1136.219353][T19671] kernel_clone+0xe7/0xab0 [ 1136.223763][T19671] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1136.229738][T19671] ? create_io_thread+0xe0/0xe0 [ 1136.234588][T19671] ? find_held_lock+0x2d/0x110 [ 1136.239348][T19671] ? __ct_user_exit+0xff/0x150 [ 1136.244110][T19671] __do_sys_clone+0xba/0x100 [ 1136.248696][T19671] ? kernel_clone+0xab0/0xab0 [ 1136.253379][T19671] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1136.259272][T19671] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1136.265164][T19671] do_syscall_64+0x35/0xb0 [ 1136.269572][T19671] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1136.275465][T19671] RIP: 0033:0x7fe68848a6a1 [ 1136.279874][T19671] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1136.299476][T19671] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1136.307880][T19671] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1136.315843][T19671] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1136.323804][T19671] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1136.331766][T19671] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1136.339728][T19671] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1136.347700][T19671] 22:05:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x3f00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1136.460844][T19671] memory: usage 307176kB, limit 307200kB, failcnt 6948 [ 1136.474607][T19685] loop4: detected capacity change from 0 to 68 [ 1136.488343][T19671] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1136.507591][T19685] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1136.515128][T19671] Memory cgroup stats for /syz1: [ 1136.517080][T19671] anon 98304 [ 1136.517080][T19671] file 184320 [ 1136.517080][T19671] kernel 314265600 [ 1136.517080][T19671] kernel_stack 32768 [ 1136.517080][T19671] pagetables 65536 [ 1136.517080][T19671] percpu 5372992 [ 1136.517080][T19671] sock 0 [ 1136.517080][T19671] vmalloc 8192 [ 1136.517080][T19671] shmem 180224 [ 1136.517080][T19671] zswap 0 [ 1136.517080][T19671] zswapped 0 [ 1136.517080][T19671] file_mapped 180224 [ 1136.517080][T19671] file_dirty 0 [ 1136.517080][T19671] file_writeback 0 [ 1136.517080][T19671] swapcached 0 [ 1136.517080][T19671] anon_thp 0 [ 1136.517080][T19671] file_thp 0 [ 1136.517080][T19671] shmem_thp 0 [ 1136.517080][T19671] inactive_anon 98304 [ 1136.517080][T19671] active_anon 180224 [ 1136.517080][T19671] inactive_file 0 [ 1136.517080][T19671] active_file 4096 [ 1136.517080][T19671] unevictable 0 [ 1136.517080][T19671] slab_reclaimable 15280 [ 1136.517080][T19671] slab_unreclaimable 308706344 [ 1136.517080][T19671] slab 308721624 [ 1136.533743][T19685] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1136.637621][T19685] FAT-fs (loop4): Filesystem has been set read-only [ 1136.646128][T19671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19671,uid=0 22:05:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x14, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x400300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000200d0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1136.677241][T19671] Memory cgroup out of memory: Killed process 19671 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x4000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1136.825912][T19700] loop5: detected capacity change from 0 to 512 [ 1136.844915][ T3659] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1136.867371][T19702] loop4: detected capacity change from 0 to 68 22:05:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0ffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1136.873563][ T3659] Buffer I/O error on dev loop5, logical block 0, async page read [ 1136.877958][T19694] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1136.901176][ T3659] loop5: unable to read partition table [ 1136.943287][T19700] EXT4-fs (loop5): inodes count not valid: 32 vs 3360 [ 1136.971200][T19702] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1137.028188][T19694] CPU: 1 PID: 19694 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1137.035085][T19702] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1137.038634][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1137.038649][T19694] Call Trace: [ 1137.038656][T19694] [ 1137.038664][T19694] dump_stack_lvl+0xcd/0x134 [ 1137.038695][T19694] dump_header+0x10b/0x7f9 [ 1137.048366][T19702] FAT-fs (loop4): Filesystem has been set read-only [ 1137.057473][T19694] oom_kill_process.cold+0x10/0x15 [ 1137.057506][T19694] out_of_memory+0x358/0x14a0 [ 1137.057539][T19694] ? find_held_lock+0x2d/0x110 [ 1137.057559][T19694] ? oom_killer_disable+0x270/0x270 [ 1137.098936][T19694] ? find_held_lock+0x2d/0x110 [ 1137.103728][T19694] mem_cgroup_out_of_memory+0x206/0x270 [ 1137.109299][T19694] ? mem_cgroup_margin+0x130/0x130 [ 1137.114431][T19694] ? lock_downgrade+0x6e0/0x6e0 [ 1137.119303][T19694] try_charge_memcg+0xf67/0x13f0 [ 1137.124256][T19694] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1137.130236][T19694] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1137.135958][T19694] ? lock_downgrade+0x6e0/0x6e0 [ 1137.140799][T19694] ? lock_downgrade+0x6e0/0x6e0 [ 1137.145659][T19694] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1137.151224][T19694] __alloc_pages+0x1ef/0x510 [ 1137.155837][T19694] ? page_remove_rmap+0x135/0x1480 [ 1137.160961][T19694] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1137.167716][T19694] ? lock_chain_count+0x20/0x20 [ 1137.172573][T19694] ? __lock_acquire+0xbc3/0x56d0 [ 1137.177533][T19694] alloc_pages+0x1a6/0x270 [ 1137.181951][T19694] pte_alloc_one+0x16/0x230 [ 1137.186458][T19694] __pte_alloc+0x69/0x250 [ 1137.190776][T19694] ? pmd_install+0x150/0x150 [ 1137.195358][T19694] ? hugepage_vma_check+0x44e/0x780 [ 1137.200569][T19694] __handle_mm_fault+0x310b/0x39b0 [ 1137.205693][T19694] ? vm_iomap_memory+0x190/0x190 [ 1137.210644][T19694] handle_mm_fault+0x1c8/0x780 [ 1137.215422][T19694] do_user_addr_fault+0x475/0x1210 [ 1137.220549][T19694] exc_page_fault+0x94/0x170 [ 1137.225163][T19694] asm_exc_page_fault+0x22/0x30 [ 1137.230027][T19694] RIP: 0033:0x7fe688434e7d [ 1137.234450][T19694] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1137.254143][T19694] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1137.260197][T19694] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1137.268160][T19694] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1137.276120][T19694] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1137.284085][T19694] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1137.292056][T19694] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1137.300024][T19694] 22:05:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000200f0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1137.368926][T19694] memory: usage 307184kB, limit 307200kB, failcnt 7029 [ 1137.443608][T19714] loop5: detected capacity change from 0 to 512 [ 1137.452000][T19694] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1137.458858][T19694] Memory cgroup stats for /syz1: [ 1137.483708][T19694] anon 102400 [ 1137.483708][T19694] file 184320 [ 1137.483708][T19694] kernel 314269696 [ 1137.483708][T19694] kernel_stack 65536 [ 1137.483708][T19694] pagetables 65536 [ 1137.483708][T19694] percpu 5372992 [ 1137.483708][T19694] sock 0 [ 1137.483708][T19694] vmalloc 8192 [ 1137.483708][T19694] shmem 180224 [ 1137.483708][T19694] zswap 0 [ 1137.483708][T19694] zswapped 0 [ 1137.483708][T19694] file_mapped 180224 [ 1137.483708][T19694] file_dirty 0 [ 1137.483708][T19694] file_writeback 0 [ 1137.483708][T19694] swapcached 0 [ 1137.483708][T19694] anon_thp 0 [ 1137.483708][T19694] file_thp 0 [ 1137.483708][T19694] shmem_thp 0 [ 1137.483708][T19694] inactive_anon 102400 [ 1137.483708][T19694] active_anon 180224 [ 1137.483708][T19694] inactive_file 0 [ 1137.483708][T19694] active_file 4096 [ 1137.483708][T19694] unevictable 0 [ 1137.483708][T19694] slab_reclaimable 15280 [ 1137.483708][T19694] slab_unreclaimable 308706808 [ 1137.483708][T19694] slab 308722088 [ 1137.598242][T19714] EXT4-fs (loop5): inodes count not valid: 32 vs 3872 [ 1137.627386][T19694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19694,uid=0 [ 1137.655177][T19694] Memory cgroup out of memory: Killed process 19694 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x17, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x4300, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020100000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:38 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1137.753083][T19723] loop4: detected capacity change from 0 to 68 22:05:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1137.797110][T19723] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1137.801773][T19726] loop5: detected capacity change from 0 to 512 22:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10200000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1137.846437][T19723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1137.865551][T19726] EXT4-fs (loop5): inodes count not valid: 32 vs 4128 [ 1137.876133][T19723] FAT-fs (loop4): Filesystem has been set read-only 22:05:38 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x4400, 0x4400}], 0x0, &(0x7f0000011100)) [ 1138.026230][T19740] loop4: detected capacity change from 0 to 68 [ 1138.027494][T19725] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1138.063433][T19725] CPU: 1 PID: 19725 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1138.074343][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1138.084405][T19725] Call Trace: [ 1138.087677][T19725] [ 1138.090605][T19725] dump_stack_lvl+0xcd/0x134 [ 1138.095197][T19725] dump_header+0x10b/0x7f9 [ 1138.099615][T19725] oom_kill_process.cold+0x10/0x15 [ 1138.104726][T19725] out_of_memory+0x358/0x14a0 [ 1138.109410][T19725] ? find_held_lock+0x2d/0x110 [ 1138.114180][T19725] ? oom_killer_disable+0x270/0x270 [ 1138.119386][T19725] ? find_held_lock+0x2d/0x110 [ 1138.124145][T19725] mem_cgroup_out_of_memory+0x206/0x270 [ 1138.129690][T19725] ? mem_cgroup_margin+0x130/0x130 [ 1138.134794][T19725] ? lock_downgrade+0x6e0/0x6e0 [ 1138.139651][T19725] try_charge_memcg+0xf67/0x13f0 [ 1138.144590][T19725] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1138.150656][T19725] ? lock_downgrade+0x6e0/0x6e0 [ 1138.155511][T19725] charge_memcg+0x31/0x320 [ 1138.159928][T19725] __mem_cgroup_charge+0x27/0x90 [ 1138.164870][T19725] ? _compound_head+0x5d/0x150 [ 1138.169634][T19725] wp_page_copy+0x27c/0x1b60 [ 1138.174221][T19725] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1138.179670][T19725] ? lock_downgrade+0x6e0/0x6e0 [ 1138.184604][T19725] ? vm_normal_page+0x146/0x2a0 [ 1138.189459][T19725] do_wp_page+0x1d1/0x1910 [ 1138.193878][T19725] __handle_mm_fault+0x1813/0x39b0 [ 1138.198990][T19725] ? vm_iomap_memory+0x190/0x190 [ 1138.203942][T19725] handle_mm_fault+0x1c8/0x780 [ 1138.208703][T19725] do_user_addr_fault+0x475/0x1210 [ 1138.213828][T19725] exc_page_fault+0x94/0x170 [ 1138.218429][T19725] asm_exc_page_fault+0x22/0x30 [ 1138.223365][T19725] RIP: 0033:0x7fe6884374b0 [ 1138.227775][T19725] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 1138.247375][T19725] RSP: 002b:00007ffffbe4a970 EFLAGS: 00010246 [ 1138.253433][T19725] RAX: 000000009a6ebc04 RBX: 00007fe68859c018 RCX: 0000001b2eb20000 [ 1138.261404][T19725] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec1382 [ 1138.269375][T19725] RBP: 000000009a6ebc04 R08: 0000000000001c04 R09: 000000009a6ebc08 [ 1138.277341][T19725] R10: 00007ffffbe4ab40 R11: 0000000000000246 R12: 00007fe688590000 [ 1138.285393][T19725] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3317d [ 1138.293355][T19725] ? trace_user_exit.constprop.0+0xd/0x210 [ 1138.299170][T19725] [ 1138.355163][T19725] memory: usage 307200kB, limit 307200kB, failcnt 7085 [ 1138.368388][T19740] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1138.395144][T19725] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 22:05:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x2, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020110000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:39 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1138.400794][T19740] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1138.412931][T19725] Memory cgroup stats for /syz1: [ 1138.413109][T19725] anon 114688 [ 1138.413109][T19725] file 184320 [ 1138.413109][T19725] kernel 314273792 [ 1138.413109][T19725] kernel_stack 65536 [ 1138.413109][T19725] pagetables 69632 [ 1138.413109][T19725] percpu 5372992 [ 1138.413109][T19725] sock 0 [ 1138.413109][T19725] vmalloc 8192 [ 1138.413109][T19725] shmem 180224 [ 1138.413109][T19725] zswap 0 22:05:39 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1138.413109][T19725] zswapped 0 [ 1138.413109][T19725] file_mapped 180224 [ 1138.413109][T19725] file_dirty 0 [ 1138.413109][T19725] file_writeback 0 [ 1138.413109][T19725] swapcached 0 [ 1138.413109][T19725] anon_thp 0 [ 1138.413109][T19725] file_thp 0 [ 1138.413109][T19725] shmem_thp 0 [ 1138.413109][T19725] inactive_anon 114688 [ 1138.413109][T19725] active_anon 180224 [ 1138.413109][T19725] inactive_file 0 [ 1138.413109][T19725] active_file 4096 [ 1138.413109][T19725] unevictable 0 [ 1138.413109][T19725] slab_reclaimable 17208 [ 1138.413109][T19725] slab_unreclaimable 308707456 [ 1138.413109][T19725] slab 308724664 [ 1138.413159][T19725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19725,uid=0 22:05:39 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1138.413280][T19725] Memory cgroup out of memory: Killed process 19725 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 1138.565877][T19754] loop5: detected capacity change from 0 to 512 22:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1138.617737][T19750] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1138.636483][T19750] CPU: 0 PID: 19750 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1138.646925][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1138.657020][T19750] Call Trace: [ 1138.660299][T19750] [ 1138.663228][T19750] dump_stack_lvl+0xcd/0x134 [ 1138.667818][T19750] dump_header+0x10b/0x7f9 [ 1138.672240][T19750] oom_kill_process.cold+0x10/0x15 [ 1138.677350][T19750] out_of_memory+0x358/0x14a0 [ 1138.682034][T19750] ? find_held_lock+0x2d/0x110 [ 1138.686792][T19750] ? oom_killer_disable+0x270/0x270 [ 1138.691988][T19750] ? find_held_lock+0x2d/0x110 [ 1138.696748][T19750] mem_cgroup_out_of_memory+0x206/0x270 [ 1138.702290][T19750] ? mem_cgroup_margin+0x130/0x130 [ 1138.707514][T19750] ? lock_downgrade+0x6e0/0x6e0 [ 1138.712569][T19750] try_charge_memcg+0xf67/0x13f0 [ 1138.717520][T19750] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1138.723511][T19750] ? lock_downgrade+0x6e0/0x6e0 [ 1138.728545][T19750] charge_memcg+0x31/0x320 [ 1138.732970][T19750] __mem_cgroup_charge+0x27/0x90 [ 1138.737907][T19750] ? _compound_head+0x5d/0x150 [ 1138.742677][T19750] wp_page_copy+0x27c/0x1b60 [ 1138.747270][T19750] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1138.752730][T19750] ? lock_downgrade+0x6e0/0x6e0 [ 1138.757582][T19750] ? vm_normal_page+0x146/0x2a0 [ 1138.762442][T19750] do_wp_page+0x52c/0x1910 [ 1138.766861][T19750] __handle_mm_fault+0x1813/0x39b0 [ 1138.771985][T19750] ? vm_iomap_memory+0x190/0x190 [ 1138.776943][T19750] handle_mm_fault+0x1c8/0x780 [ 1138.781722][T19750] do_user_addr_fault+0x475/0x1210 [ 1138.786843][T19750] exc_page_fault+0x94/0x170 [ 1138.791439][T19750] asm_exc_page_fault+0x22/0x30 [ 1138.796288][T19750] RIP: 0033:0x7fe688434c00 [ 1138.800877][T19750] Code: 0f 84 b4 00 00 00 80 3d b1 07 0a 01 00 75 1b 80 3d a9 07 0a 01 00 75 12 80 3d 9b 07 0a 01 00 0f 84 95 00 00 00 0f 1f 44 00 00 <41> c6 44 24 f8 01 45 89 6c 24 f4 41 c6 44 24 14 00 8b 93 8c 00 00 [ 1138.820487][T19750] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010202 [ 1138.826559][T19750] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 0000000000000000 [ 1138.834555][T19750] RDX: 00007ffffbe4abc8 RSI: ffff801977a64074 RDI: 00007ffffbe4abf8 [ 1138.842541][T19750] RBP: 00007ffffbe4abc8 R08: 0000000000000000 R09: 0000000000000000 [ 1138.850515][T19750] R10: 00007ffffbe84090 R11: 0000000000033c4e R12: 00007fe68859bf8c [ 1138.858489][T19750] R13: 0000000000000000 R14: 00007fe68859bf80 R15: 00007ffffbe4ad00 [ 1138.866480][T19750] 22:05:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:39 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1139.053882][T19754] EXT4-fs (loop5): inodes count not valid: 32 vs 4384 [ 1139.068105][T19740] FAT-fs (loop4): Filesystem has been set read-only 22:05:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x5500, 0x4400}], 0x0, &(0x7f0000011100)) [ 1139.096725][T19750] memory: usage 307128kB, limit 307200kB, failcnt 7150 [ 1139.116842][T19750] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1139.126680][T19750] Memory cgroup stats for /syz1: [ 1139.126865][T19750] anon 86016 [ 1139.126865][T19750] file 184320 [ 1139.126865][T19750] kernel 314228736 [ 1139.126865][T19750] kernel_stack 32768 [ 1139.126865][T19750] pagetables 65536 [ 1139.126865][T19750] percpu 5372992 [ 1139.126865][T19750] sock 0 [ 1139.126865][T19750] vmalloc 8192 [ 1139.126865][T19750] shmem 180224 [ 1139.126865][T19750] zswap 0 [ 1139.126865][T19750] zswapped 0 [ 1139.126865][T19750] file_mapped 180224 [ 1139.126865][T19750] file_dirty 0 [ 1139.126865][T19750] file_writeback 0 [ 1139.126865][T19750] swapcached 0 [ 1139.126865][T19750] anon_thp 0 [ 1139.126865][T19750] file_thp 0 [ 1139.126865][T19750] shmem_thp 0 [ 1139.126865][T19750] inactive_anon 86016 [ 1139.126865][T19750] active_anon 180224 [ 1139.126865][T19750] inactive_file 0 [ 1139.126865][T19750] active_file 4096 [ 1139.126865][T19750] unevictable 0 [ 1139.126865][T19750] slab_reclaimable 15280 [ 1139.126865][T19750] slab_unreclaimable 308697856 [ 1139.126865][T19750] slab 308713136 [ 1139.237423][T19750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19750,uid=0 [ 1139.256259][T19750] Memory cgroup out of memory: Killed process 19750 (syz-executor.1) total-vm:54376kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x6, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9effffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020260000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1139.281458][T19767] loop4: detected capacity change from 0 to 68 [ 1139.296563][T19767] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1139.335446][T19774] loop5: detected capacity change from 0 to 512 [ 1139.364706][T19774] EXT4-fs (loop5): inodes count not valid: 32 vs 9760 22:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0ffffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1139.421963][T19767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1139.438156][T19767] FAT-fs (loop4): Filesystem has been set read-only 22:05:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000202a0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x9000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1139.582358][T19776] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1139.615727][T19786] loop5: detected capacity change from 0 to 512 [ 1139.625928][T19787] loop4: detected capacity change from 0 to 68 [ 1139.645718][T19786] EXT4-fs (loop5): inodes count not valid: 32 vs 10784 [ 1139.673503][T19787] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1139.685186][T19776] CPU: 0 PID: 19776 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1139.695630][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1139.705698][T19776] Call Trace: [ 1139.708993][T19776] [ 1139.711935][T19776] dump_stack_lvl+0xcd/0x134 [ 1139.716559][T19776] dump_header+0x10b/0x7f9 [ 1139.721008][T19776] oom_kill_process.cold+0x10/0x15 [ 1139.726142][T19776] out_of_memory+0x358/0x14a0 [ 1139.726737][T19787] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1139.730826][T19776] ? find_held_lock+0x2d/0x110 [ 1139.730852][T19776] ? oom_killer_disable+0x270/0x270 [ 1139.730878][T19776] ? find_held_lock+0x2d/0x110 [ 1139.730899][T19776] mem_cgroup_out_of_memory+0x206/0x270 [ 1139.730922][T19776] ? mem_cgroup_margin+0x130/0x130 [ 1139.730939][T19776] ? lock_downgrade+0x6e0/0x6e0 [ 1139.730974][T19776] try_charge_memcg+0xf67/0x13f0 [ 1139.731002][T19776] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1139.731024][T19776] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1139.731045][T19776] ? lock_downgrade+0x6e0/0x6e0 [ 1139.731067][T19776] ? lock_downgrade+0x6e0/0x6e0 [ 1139.731099][T19776] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1139.731125][T19776] __alloc_pages+0x1ef/0x510 [ 1139.731147][T19776] ? page_remove_rmap+0x135/0x1480 [ 1139.731167][T19776] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1139.731193][T19776] ? lock_chain_count+0x20/0x20 [ 1139.731224][T19776] ? __lock_acquire+0xbc3/0x56d0 [ 1139.731247][T19776] alloc_pages+0x1a6/0x270 [ 1139.731270][T19776] pte_alloc_one+0x16/0x230 [ 1139.731290][T19776] __pte_alloc+0x69/0x250 [ 1139.731309][T19776] ? pmd_install+0x150/0x150 [ 1139.731328][T19776] ? hugepage_vma_check+0x44e/0x780 [ 1139.731356][T19776] __handle_mm_fault+0x310b/0x39b0 [ 1139.731382][T19776] ? vm_iomap_memory+0x190/0x190 [ 1139.731422][T19776] handle_mm_fault+0x1c8/0x780 [ 1139.731455][T19776] do_user_addr_fault+0x475/0x1210 [ 1139.731485][T19776] exc_page_fault+0x94/0x170 [ 1139.731512][T19776] asm_exc_page_fault+0x22/0x30 [ 1139.731531][T19776] RIP: 0033:0x7fe688434e7d [ 1139.731549][T19776] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1139.731568][T19776] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1139.731590][T19776] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1139.731604][T19776] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1139.731617][T19776] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1139.731630][T19776] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1139.731644][T19776] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1139.731672][T19776] [ 1139.757752][T19776] memory: usage 307200kB, limit 307200kB, failcnt 7226 [ 1139.788286][T19787] FAT-fs (loop4): Filesystem has been set read-only [ 1139.808732][T19776] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1139.821573][ T4362] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1139.829995][T19776] Memory cgroup stats for /syz1: [ 1140.026769][T19776] anon 102400 [ 1140.026769][T19776] file 184320 [ 1140.026769][T19776] kernel 314269696 [ 1140.026769][T19776] kernel_stack 65536 [ 1140.026769][T19776] pagetables 65536 [ 1140.026769][T19776] percpu 5372992 [ 1140.026769][T19776] sock 0 [ 1140.026769][T19776] vmalloc 8192 [ 1140.026769][T19776] shmem 180224 [ 1140.026769][T19776] zswap 0 [ 1140.026769][T19776] zswapped 0 [ 1140.026769][T19776] file_mapped 180224 [ 1140.026769][T19776] file_dirty 0 [ 1140.026769][T19776] file_writeback 0 [ 1140.026769][T19776] swapcached 0 [ 1140.026769][T19776] anon_thp 0 [ 1140.026769][T19776] file_thp 0 [ 1140.026769][T19776] shmem_thp 0 [ 1140.026769][T19776] inactive_anon 102400 [ 1140.026769][T19776] active_anon 180224 [ 1140.026769][T19776] inactive_file 0 [ 1140.026769][T19776] active_file 4096 [ 1140.026769][T19776] unevictable 0 [ 1140.026769][T19776] slab_reclaimable 15280 [ 1140.026769][T19776] slab_unreclaimable 308707112 [ 1140.026769][T19776] slab 308722392 [ 1140.132679][T19776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19776,uid=0 22:05:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xfffff000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x8, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020460000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1140.162726][T19776] Memory cgroup out of memory: Killed process 19776 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1140.221570][T19798] loop5: detected capacity change from 0 to 512 [ 1140.257449][T19800] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1140.270388][T19800] CPU: 1 PID: 19800 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1140.280813][T19800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1140.290884][T19800] Call Trace: [ 1140.294178][T19800] [ 1140.297116][T19800] dump_stack_lvl+0xcd/0x134 [ 1140.301734][T19800] dump_header+0x10b/0x7f9 [ 1140.306173][T19800] oom_kill_process.cold+0x10/0x15 [ 1140.311311][T19800] out_of_memory+0x358/0x14a0 [ 1140.316010][T19800] ? find_held_lock+0x2d/0x110 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 22:05:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xedc0, 0x4400}], 0x0, &(0x7f0000011100)) [ 1140.320801][T19800] ? oom_killer_disable+0x270/0x270 [ 1140.326020][T19800] ? find_held_lock+0x2d/0x110 [ 1140.330983][T19800] mem_cgroup_out_of_memory+0x206/0x270 [ 1140.336542][T19800] ? mem_cgroup_margin+0x130/0x130 [ 1140.341669][T19800] ? lock_downgrade+0x6e0/0x6e0 [ 1140.346549][T19800] try_charge_memcg+0xf67/0x13f0 [ 1140.351506][T19800] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1140.357489][T19800] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1140.363211][T19800] ? lock_downgrade+0x6e0/0x6e0 [ 1140.368062][T19800] ? lock_downgrade+0x6e0/0x6e0 [ 1140.372927][T19800] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1140.378474][T19800] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1140.384638][T19800] copy_process+0x607/0x7090 [ 1140.389242][T19800] ? __lock_acquire+0xbc3/0x56d0 [ 1140.394187][T19800] ? __cleanup_sighand+0xb0/0xb0 [ 1140.399138][T19800] kernel_clone+0xe7/0xab0 [ 1140.403553][T19800] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1140.409535][T19800] ? create_io_thread+0xe0/0xe0 [ 1140.414393][T19800] ? find_held_lock+0x2d/0x110 [ 1140.419159][T19800] ? __ct_user_exit+0xff/0x150 [ 1140.423931][T19800] __do_sys_clone+0xba/0x100 [ 1140.428522][T19800] ? kernel_clone+0xab0/0xab0 [ 1140.433215][T19800] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1140.439119][T19800] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1140.445018][T19800] do_syscall_64+0x35/0xb0 [ 1140.449436][T19800] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.455326][T19800] RIP: 0033:0x7fe68848a6a1 [ 1140.459737][T19800] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1140.479353][T19800] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1140.487774][T19800] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1140.495743][T19800] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1140.503709][T19800] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1140.511677][T19800] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1140.519647][T19800] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1140.527631][T19800] 22:05:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffff7f}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1140.564181][T19804] loop4: detected capacity change from 0 to 68 [ 1140.571541][T19798] EXT4-fs (loop5): inodes count not valid: 32 vs 17952 [ 1140.584414][T19800] memory: usage 307168kB, limit 307200kB, failcnt 7266 [ 1140.600365][T19800] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1140.607501][T19800] Memory cgroup stats for /syz1: 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) [ 1140.607693][T19800] anon 98304 [ 1140.607693][T19800] file 184320 [ 1140.607693][T19800] kernel 314257408 [ 1140.607693][T19800] kernel_stack 32768 [ 1140.607693][T19800] pagetables 65536 [ 1140.607693][T19800] percpu 5372992 [ 1140.607693][T19800] sock 0 [ 1140.607693][T19800] vmalloc 8192 [ 1140.607693][T19800] shmem 180224 [ 1140.607693][T19800] zswap 0 [ 1140.607693][T19800] zswapped 0 [ 1140.607693][T19800] file_mapped 180224 [ 1140.607693][T19800] file_dirty 0 [ 1140.607693][T19800] file_writeback 0 [ 1140.607693][T19800] swapcached 0 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1140.607693][T19800] anon_thp 0 [ 1140.607693][T19800] file_thp 0 [ 1140.607693][T19800] shmem_thp 0 [ 1140.607693][T19800] inactive_anon 98304 [ 1140.607693][T19800] active_anon 180224 [ 1140.607693][T19800] inactive_file 0 [ 1140.607693][T19800] active_file 4096 [ 1140.607693][T19800] unevictable 0 [ 1140.607693][T19800] slab_reclaimable 15280 [ 1140.607693][T19800] slab_unreclaimable 308706648 [ 1140.607693][T19800] slab 308721928 22:05:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffff9e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1140.756060][T19804] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1140.822254][T19804] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1140.862634][T19804] FAT-fs (loop4): Filesystem has been set read-only [ 1140.878475][T19800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19800,uid=0 [ 1140.911042][T19800] Memory cgroup out of memory: Killed process 19800 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x9, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33050000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 22:05:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020550000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xfffffff0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xff00, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1141.004084][T19828] loop5: detected capacity change from 0 to 512 [ 1141.026723][T19830] loop4: detected capacity change from 0 to 68 [ 1141.043533][T19828] EXT4-fs (loop5): inodes count not valid: 32 vs 21792 22:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1141.093887][T19830] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020600000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:41 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 22:05:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1141.178744][T19830] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1141.204920][T19834] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1141.225388][T19839] loop5: detected capacity change from 0 to 512 [ 1141.241943][T19830] FAT-fs (loop4): Filesystem has been set read-only [ 1141.262754][T19834] CPU: 0 PID: 19834 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1141.273204][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1141.283257][T19834] Call Trace: [ 1141.286536][T19834] [ 1141.289643][T19834] dump_stack_lvl+0xcd/0x134 [ 1141.294248][T19834] dump_header+0x10b/0x7f9 [ 1141.298665][T19834] oom_kill_process.cold+0x10/0x15 [ 1141.303779][T19834] out_of_memory+0x358/0x14a0 [ 1141.308461][T19834] ? find_held_lock+0x2d/0x110 [ 1141.313223][T19834] ? oom_killer_disable+0x270/0x270 [ 1141.318421][T19834] ? find_held_lock+0x2d/0x110 [ 1141.323182][T19834] mem_cgroup_out_of_memory+0x206/0x270 [ 1141.328726][T19834] ? mem_cgroup_margin+0x130/0x130 [ 1141.333831][T19834] ? lock_downgrade+0x6e0/0x6e0 [ 1141.338691][T19834] try_charge_memcg+0xf67/0x13f0 [ 1141.343632][T19834] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1141.349613][T19834] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1141.355337][T19834] ? lock_downgrade+0x6e0/0x6e0 [ 1141.360192][T19834] ? lock_downgrade+0x6e0/0x6e0 [ 1141.365059][T19834] obj_cgroup_charge+0x2ab/0x5e0 [ 1141.370004][T19834] kmem_cache_alloc_lru+0x13e/0x720 [ 1141.375205][T19834] ? sock_alloc_inode+0x23/0x1d0 [ 1141.380146][T19834] sock_alloc_inode+0x23/0x1d0 [ 1141.384912][T19834] ? sock_free_inode+0x20/0x20 [ 1141.389671][T19834] alloc_inode+0x61/0x230 [ 1141.394010][T19834] new_inode_pseudo+0x13/0x80 [ 1141.398683][T19834] sock_alloc+0x3c/0x260 [ 1141.402924][T19834] __sock_create+0xb9/0x790 [ 1141.407425][T19834] ? lock_downgrade+0x6e0/0x6e0 [ 1141.412274][T19834] __sys_socket+0x12f/0x240 [ 1141.416772][T19834] ? __sys_socket_file+0x1f0/0x1f0 [ 1141.421882][T19834] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1141.427778][T19834] __x64_sys_socket+0x6f/0xb0 [ 1141.432454][T19834] do_syscall_64+0x35/0xb0 [ 1141.436864][T19834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1141.442756][T19834] RIP: 0033:0x7fe688489279 [ 1141.447166][T19834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1141.466771][T19834] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1141.475183][T19834] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1141.483152][T19834] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1141.491117][T19834] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1141.499086][T19834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.507055][T19834] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1141.515051][T19834] [ 1141.546000][T19839] EXT4-fs (loop5): inodes count not valid: 32 vs 24608 [ 1141.620459][T19834] memory: usage 307184kB, limit 307200kB, failcnt 7349 [ 1141.627928][T19834] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1141.648289][T19834] Memory cgroup stats for /syz1: [ 1141.648499][T19834] anon 102400 [ 1141.648499][T19834] file 184320 [ 1141.648499][T19834] kernel 314269696 [ 1141.648499][T19834] kernel_stack 65536 [ 1141.648499][T19834] pagetables 65536 [ 1141.648499][T19834] percpu 5372992 [ 1141.648499][T19834] sock 0 [ 1141.648499][T19834] vmalloc 8192 [ 1141.648499][T19834] shmem 180224 [ 1141.648499][T19834] zswap 0 [ 1141.648499][T19834] zswapped 0 [ 1141.648499][T19834] file_mapped 180224 [ 1141.648499][T19834] file_dirty 0 [ 1141.648499][T19834] file_writeback 0 [ 1141.648499][T19834] swapcached 0 [ 1141.648499][T19834] anon_thp 0 [ 1141.648499][T19834] file_thp 0 [ 1141.648499][T19834] shmem_thp 0 [ 1141.648499][T19834] inactive_anon 102400 [ 1141.648499][T19834] active_anon 180224 [ 1141.648499][T19834] inactive_file 0 [ 1141.648499][T19834] active_file 4096 [ 1141.648499][T19834] unevictable 0 [ 1141.648499][T19834] slab_reclaimable 15280 [ 1141.648499][T19834] slab_unreclaimable 308706808 [ 1141.648499][T19834] slab 308722088 22:05:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0xa, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5c210000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xff0f, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 22:05:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020900000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1141.762701][T19834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19831,uid=0 [ 1141.781378][T19834] Memory cgroup out of memory: Killed process 19831 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1141.831183][T19854] loop4: detected capacity change from 0 to 68 [ 1141.832205][T19855] loop5: detected capacity change from 0 to 512 [ 1141.865701][T19854] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1141.893256][T19855] EXT4-fs (loop5): invalid inodes per group: 36896 [ 1141.893256][T19855] [ 1141.917190][T19854] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020fe0000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1141.972893][T19854] FAT-fs (loop4): Filesystem has been set read-only 22:05:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1142.106163][T19869] loop5: detected capacity change from 0 to 512 [ 1142.118096][T19858] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1142.136021][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1142.164984][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1142.182103][T19858] CPU: 0 PID: 19858 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1142.192712][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1142.196385][ T2970] loop5: unable to read partition table [ 1142.202759][T19858] Call Trace: [ 1142.202769][T19858] [ 1142.202778][T19858] dump_stack_lvl+0xcd/0x134 [ 1142.202807][T19858] dump_header+0x10b/0x7f9 [ 1142.202834][T19858] oom_kill_process.cold+0x10/0x15 [ 1142.202861][T19858] out_of_memory+0x358/0x14a0 [ 1142.202889][T19858] ? find_held_lock+0x2d/0x110 [ 1142.202909][T19858] ? oom_killer_disable+0x270/0x270 [ 1142.202934][T19858] ? find_held_lock+0x2d/0x110 [ 1142.202955][T19858] mem_cgroup_out_of_memory+0x206/0x270 [ 1142.202977][T19858] ? mem_cgroup_margin+0x130/0x130 [ 1142.202994][T19858] ? lock_downgrade+0x6e0/0x6e0 [ 1142.203034][T19858] try_charge_memcg+0xf67/0x13f0 [ 1142.203062][T19858] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1142.203083][T19858] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1142.203103][T19858] ? lock_downgrade+0x6e0/0x6e0 [ 1142.203125][T19858] ? lock_downgrade+0x6e0/0x6e0 [ 1142.203155][T19858] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1142.203179][T19858] __alloc_pages+0x1ef/0x510 [ 1142.203203][T19858] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1142.203227][T19858] ? lock_chain_count+0x20/0x20 [ 1142.203256][T19858] ? __lock_acquire+0xbc3/0x56d0 [ 1142.203279][T19858] alloc_pages+0x1a6/0x270 [ 1142.203302][T19858] pte_alloc_one+0x16/0x230 [ 1142.203320][T19858] __pte_alloc+0x69/0x250 [ 1142.203339][T19858] ? pmd_install+0x150/0x150 [ 1142.203355][T19858] ? hugepage_vma_check+0x44e/0x780 [ 1142.203382][T19858] __handle_mm_fault+0x310b/0x39b0 [ 1142.203407][T19858] ? vm_iomap_memory+0x190/0x190 [ 1142.203443][T19858] handle_mm_fault+0x1c8/0x780 [ 1142.203466][T19858] do_user_addr_fault+0x475/0x1210 [ 1142.203496][T19858] exc_page_fault+0x94/0x170 [ 1142.203522][T19858] asm_exc_page_fault+0x22/0x30 [ 1142.203539][T19858] RIP: 0033:0x7fe688434e7d [ 1142.203557][T19858] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1142.203575][T19858] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1142.203592][T19858] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1142.203605][T19858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1142.203617][T19858] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1142.203629][T19858] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1142.203642][T19858] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1142.203669][T19858] [ 1142.216798][T19858] memory: usage 307184kB, limit 307200kB, failcnt 7424 [ 1142.325743][T19869] EXT4-fs (loop5): invalid inodes per group: 65056 [ 1142.325743][T19869] [ 1142.359116][T19858] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1142.484097][T19858] Memory cgroup stats for /syz1: [ 1142.484280][T19858] anon 102400 [ 1142.484280][T19858] file 184320 [ 1142.484280][T19858] kernel 314269696 [ 1142.484280][T19858] kernel_stack 65536 [ 1142.484280][T19858] pagetables 65536 [ 1142.484280][T19858] percpu 5372992 [ 1142.484280][T19858] sock 0 [ 1142.484280][T19858] vmalloc 8192 [ 1142.484280][T19858] shmem 180224 [ 1142.484280][T19858] zswap 0 [ 1142.484280][T19858] zswapped 0 [ 1142.484280][T19858] file_mapped 180224 [ 1142.484280][T19858] file_dirty 0 [ 1142.484280][T19858] file_writeback 0 [ 1142.484280][T19858] swapcached 0 [ 1142.484280][T19858] anon_thp 0 [ 1142.484280][T19858] file_thp 0 [ 1142.484280][T19858] shmem_thp 0 [ 1142.484280][T19858] inactive_anon 102400 [ 1142.484280][T19858] active_anon 180224 [ 1142.484280][T19858] inactive_file 0 [ 1142.484280][T19858] active_file 4096 [ 1142.484280][T19858] unevictable 0 [ 1142.484280][T19858] slab_reclaimable 15280 [ 1142.484280][T19858] slab_unreclaimable 308707112 [ 1142.484280][T19858] slab 308722392 [ 1142.599694][T19858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19858,uid=0 22:05:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0xb, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x32957, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:43 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9effffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000204f0100d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1142.622258][T19858] Memory cgroup out of memory: Killed process 19858 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:43 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1142.716835][T19880] loop4: detected capacity change from 0 to 68 [ 1142.737988][T19881] loop5: detected capacity change from 0 to 512 22:05:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf0ffffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:43 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1142.779313][T19880] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020800100d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1142.833077][T19881] EXT4-fs (loop5): invalid inodes per group: 85792 [ 1142.833077][T19881] [ 1142.862774][T19880] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xfffff000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1142.927918][T19880] FAT-fs (loop4): Filesystem has been set read-only [ 1142.961938][T19882] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1143.010968][T19894] loop5: detected capacity change from 0 to 512 [ 1143.026213][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1143.032840][T19882] CPU: 1 PID: 19882 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1143.045753][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1143.049047][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.055810][T19882] Call Trace: [ 1143.055820][T19882] [ 1143.055828][T19882] dump_stack_lvl+0xcd/0x134 [ 1143.074765][T19882] dump_header+0x10b/0x7f9 [ 1143.079205][T19882] oom_kill_process.cold+0x10/0x15 [ 1143.084328][T19882] out_of_memory+0x358/0x14a0 [ 1143.089018][T19882] ? find_held_lock+0x2d/0x110 [ 1143.093807][T19882] ? oom_killer_disable+0x270/0x270 [ 1143.099039][T19882] ? find_held_lock+0x2d/0x110 [ 1143.103831][T19882] mem_cgroup_out_of_memory+0x206/0x270 [ 1143.109390][T19882] ? mem_cgroup_margin+0x130/0x130 [ 1143.114511][T19882] ? lock_downgrade+0x6e0/0x6e0 [ 1143.119381][T19882] try_charge_memcg+0xf67/0x13f0 [ 1143.124322][T19882] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1143.130296][T19882] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1143.136008][T19882] ? lock_downgrade+0x6e0/0x6e0 [ 1143.140860][T19882] ? lock_downgrade+0x6e0/0x6e0 [ 1143.145801][T19882] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1143.151345][T19882] __alloc_pages+0x1ef/0x510 [ 1143.155931][T19882] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1143.162690][T19882] ? lock_chain_count+0x20/0x20 [ 1143.167541][T19882] ? __lock_acquire+0xbc3/0x56d0 [ 1143.172472][T19882] alloc_pages+0x1a6/0x270 [ 1143.176886][T19882] pte_alloc_one+0x16/0x230 [ 1143.181386][T19882] __pte_alloc+0x69/0x250 [ 1143.185892][T19882] ? pmd_install+0x150/0x150 [ 1143.190825][T19882] ? hugepage_vma_check+0x44e/0x780 [ 1143.196020][T19882] __handle_mm_fault+0x310b/0x39b0 [ 1143.201135][T19882] ? vm_iomap_memory+0x190/0x190 [ 1143.206079][T19882] handle_mm_fault+0x1c8/0x780 [ 1143.210841][T19882] do_user_addr_fault+0x475/0x1210 [ 1143.215954][T19882] exc_page_fault+0x94/0x170 [ 1143.220542][T19882] asm_exc_page_fault+0x22/0x30 [ 1143.225388][T19882] RIP: 0033:0x7fe688434e7d [ 1143.229797][T19882] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1143.249401][T19882] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1143.255462][T19882] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1143.263427][T19882] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1143.271393][T19882] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1143.279356][T19882] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1143.287317][T19882] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1143.295293][T19882] [ 1143.328561][T19882] memory: usage 307184kB, limit 307200kB, failcnt 7493 [ 1143.336625][T19882] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1143.344595][T19882] Memory cgroup stats for /syz1: [ 1143.344787][T19882] anon 102400 [ 1143.344787][T19882] file 184320 [ 1143.344787][T19882] kernel 314269696 [ 1143.344787][T19882] kernel_stack 65536 [ 1143.344787][T19882] pagetables 65536 [ 1143.344787][T19882] percpu 5372992 [ 1143.344787][T19882] sock 0 [ 1143.344787][T19882] vmalloc 8192 [ 1143.344787][T19882] shmem 180224 [ 1143.344787][T19882] zswap 0 [ 1143.344787][T19882] zswapped 0 [ 1143.344787][T19882] file_mapped 180224 [ 1143.344787][T19882] file_dirty 4096 [ 1143.344787][T19882] file_writeback 0 [ 1143.344787][T19882] swapcached 0 [ 1143.344787][T19882] anon_thp 0 [ 1143.344787][T19882] file_thp 0 [ 1143.344787][T19882] shmem_thp 0 [ 1143.344787][T19882] inactive_anon 102400 [ 1143.344787][T19882] active_anon 180224 [ 1143.344787][T19882] inactive_file 0 [ 1143.344787][T19882] active_file 4096 [ 1143.344787][T19882] unevictable 0 [ 1143.344787][T19882] slab_reclaimable 17208 [ 1143.344787][T19882] slab_unreclaimable 308707456 [ 1143.344787][T19882] slab 308724664 [ 1143.357043][ T4362] loop5: unable to read partition table [ 1143.463616][T19882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19882,uid=0 22:05:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x10, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:44 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:05:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xe0000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffff7f}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1143.484044][T19894] EXT4-fs (loop5): invalid inodes per group: 98336 [ 1143.484044][T19894] [ 1143.494806][T19882] Memory cgroup out of memory: Killed process 19882 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:44 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:05:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020f80100d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1143.534813][T19900] loop4: detected capacity change from 0 to 68 22:05:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffff9e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1143.603130][T19900] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1143.626065][T19907] loop5: detected capacity change from 0 to 512 22:05:44 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) [ 1143.665300][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1143.699399][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.720831][T19900] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1143.738945][ T4362] loop5: unable to read partition table [ 1143.747854][T19907] EXT4-fs (loop5): invalid inodes per group: 129056 [ 1143.747854][T19907] [ 1143.758137][T19910] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1143.758165][T19910] CPU: 1 PID: 19910 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1143.758187][T19910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1143.758199][T19910] Call Trace: [ 1143.758205][T19910] [ 1143.758212][T19910] dump_stack_lvl+0xcd/0x134 [ 1143.758243][T19910] dump_header+0x10b/0x7f9 [ 1143.758270][T19910] oom_kill_process.cold+0x10/0x15 [ 1143.758297][T19910] out_of_memory+0x358/0x14a0 [ 1143.758324][T19910] ? find_held_lock+0x2d/0x110 [ 1143.758345][T19910] ? oom_killer_disable+0x270/0x270 [ 1143.758370][T19910] ? find_held_lock+0x2d/0x110 [ 1143.758393][T19910] mem_cgroup_out_of_memory+0x206/0x270 [ 1143.758414][T19910] ? mem_cgroup_margin+0x130/0x130 [ 1143.758433][T19910] ? lock_downgrade+0x6e0/0x6e0 [ 1143.758466][T19910] try_charge_memcg+0xf67/0x13f0 [ 1143.758493][T19910] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1143.758520][T19910] ? get_mem_cgroup_from_objcg+0xa1/0x260 22:05:44 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x44}}, 0x0) [ 1143.758541][T19910] ? lock_downgrade+0x6e0/0x6e0 [ 1143.758564][T19910] ? lock_downgrade+0x6e0/0x6e0 [ 1143.758596][T19910] obj_cgroup_charge+0x2ab/0x5e0 [ 1143.758622][T19910] kmem_cache_alloc_lru+0x13e/0x720 [ 1143.758641][T19910] ? sock_alloc_inode+0x23/0x1d0 [ 1143.758667][T19910] sock_alloc_inode+0x23/0x1d0 [ 1143.758686][T19910] ? sock_free_inode+0x20/0x20 [ 1143.758705][T19910] alloc_inode+0x61/0x230 [ 1143.758728][T19910] new_inode_pseudo+0x13/0x80 [ 1143.758746][T19910] sock_alloc+0x3c/0x260 [ 1143.758767][T19910] __sock_create+0xb9/0x790 [ 1143.758787][T19910] ? lock_downgrade+0x6e0/0x6e0 [ 1143.758812][T19910] __sys_socket+0x12f/0x240 [ 1143.758833][T19910] ? __sys_socket_file+0x1f0/0x1f0 [ 1143.758856][T19910] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1143.758888][T19910] __x64_sys_socket+0x6f/0xb0 [ 1143.758910][T19910] do_syscall_64+0x35/0xb0 [ 1143.758930][T19910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1143.758950][T19910] RIP: 0033:0x7fe688489279 [ 1143.758967][T19910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1143.758985][T19910] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1143.759006][T19910] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1143.759020][T19910] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1143.759040][T19910] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1143.759053][T19910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xfffffff0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1143.759065][T19910] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1143.759093][T19910] [ 1143.763523][T19910] memory: usage 307200kB, limit 307200kB, failcnt 7573 [ 1144.038065][T19900] FAT-fs (loop4): Filesystem has been set read-only [ 1144.076463][T19910] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1144.084478][T19910] Memory cgroup stats for /syz1: [ 1144.084667][T19910] anon 102400 [ 1144.084667][T19910] file 184320 [ 1144.084667][T19910] kernel 314269696 [ 1144.084667][T19910] kernel_stack 65536 [ 1144.084667][T19910] pagetables 65536 [ 1144.084667][T19910] percpu 5372992 [ 1144.084667][T19910] sock 0 [ 1144.084667][T19910] vmalloc 8192 [ 1144.084667][T19910] shmem 180224 [ 1144.084667][T19910] zswap 0 [ 1144.084667][T19910] zswapped 0 [ 1144.084667][T19910] file_mapped 180224 [ 1144.084667][T19910] file_dirty 4096 [ 1144.084667][T19910] file_writeback 0 [ 1144.084667][T19910] swapcached 0 [ 1144.084667][T19910] anon_thp 0 [ 1144.084667][T19910] file_thp 0 [ 1144.084667][T19910] shmem_thp 0 [ 1144.084667][T19910] inactive_anon 102400 [ 1144.084667][T19910] active_anon 180224 [ 1144.084667][T19910] inactive_file 0 [ 1144.084667][T19910] active_file 4096 [ 1144.084667][T19910] unevictable 0 [ 1144.084667][T19910] slab_reclaimable 15280 [ 1144.084667][T19910] slab_unreclaimable 308707112 [ 1144.084667][T19910] slab 308722392 [ 1144.214825][T19910] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19904,uid=0 22:05:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x11, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x44}}, 0x0) 22:05:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x100000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000300d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xffffffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1144.265716][T19910] Memory cgroup out of memory: Killed process 19904 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1144.331405][T19926] loop4: detected capacity change from 0 to 68 [ 1144.355950][T19929] loop5: detected capacity change from 0 to 512 22:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x44}}, 0x0) [ 1144.377356][T19926] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) [ 1144.453208][T19929] EXT4-fs (loop5): invalid inodes per group: 196640 [ 1144.453208][T19929] [ 1144.465283][T19926] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1144.491834][T19926] FAT-fs (loop4): Filesystem has been set read-only 22:05:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020100400d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1144.531495][T19931] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1144.597616][T19931] CPU: 1 PID: 19931 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1144.608153][T19931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1144.618223][T19931] Call Trace: [ 1144.621513][T19931] [ 1144.624460][T19931] dump_stack_lvl+0xcd/0x134 [ 1144.624618][T19942] loop5: detected capacity change from 0 to 512 [ 1144.629147][T19931] dump_header+0x10b/0x7f9 [ 1144.629177][T19931] oom_kill_process.cold+0x10/0x15 [ 1144.644942][T19931] out_of_memory+0x358/0x14a0 [ 1144.649630][T19931] ? find_held_lock+0x2d/0x110 [ 1144.654389][T19931] ? oom_killer_disable+0x270/0x270 [ 1144.659584][T19931] ? find_held_lock+0x2d/0x110 [ 1144.664343][T19931] mem_cgroup_out_of_memory+0x206/0x270 [ 1144.669886][T19931] ? mem_cgroup_margin+0x130/0x130 [ 1144.674988][T19931] ? lock_downgrade+0x6e0/0x6e0 [ 1144.679848][T19931] try_charge_memcg+0xf67/0x13f0 [ 1144.684784][T19931] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1144.690761][T19931] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1144.696480][T19931] ? lock_downgrade+0x6e0/0x6e0 [ 1144.701329][T19931] ? lock_downgrade+0x6e0/0x6e0 [ 1144.706183][T19931] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1144.711728][T19931] __alloc_pages+0x1ef/0x510 [ 1144.716312][T19931] ? page_remove_rmap+0x135/0x1480 [ 1144.721418][T19931] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1144.728177][T19931] ? lock_chain_count+0x20/0x20 [ 1144.733040][T19931] ? __lock_acquire+0xbc3/0x56d0 [ 1144.737975][T19931] alloc_pages+0x1a6/0x270 [ 1144.742395][T19931] pte_alloc_one+0x16/0x230 [ 1144.746901][T19931] __pte_alloc+0x69/0x250 [ 1144.751226][T19931] ? pmd_install+0x150/0x150 [ 1144.755809][T19931] ? hugepage_vma_check+0x44e/0x780 [ 1144.761006][T19931] __handle_mm_fault+0x310b/0x39b0 [ 1144.766119][T19931] ? vm_iomap_memory+0x190/0x190 [ 1144.771068][T19931] handle_mm_fault+0x1c8/0x780 [ 1144.775826][T19931] do_user_addr_fault+0x475/0x1210 [ 1144.780941][T19931] exc_page_fault+0x94/0x170 [ 1144.785535][T19931] asm_exc_page_fault+0x22/0x30 [ 1144.790388][T19931] RIP: 0033:0x7fe688434e7d [ 1144.794807][T19931] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1144.814413][T19931] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1144.820476][T19931] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1144.828439][T19931] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1144.836403][T19931] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 22:05:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x400000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1144.844370][T19931] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1144.852334][T19931] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1144.860319][T19931] [ 1144.905264][T19946] loop4: detected capacity change from 0 to 68 [ 1144.910185][ T2970] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1144.932319][T19942] EXT4-fs (loop5): invalid inodes per group: 266272 [ 1144.932319][T19942] [ 1144.940667][T19931] memory: usage 307184kB, limit 307200kB, failcnt 7659 [ 1144.947945][T19931] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1144.948561][ T2970] Buffer I/O error on dev loop4, logical block 0, async page read [ 1144.962313][T19931] Memory cgroup stats for /syz1: [ 1144.963983][T19931] anon 102400 [ 1144.963983][T19931] file 184320 [ 1144.963983][T19931] kernel 314269696 [ 1144.963983][T19931] kernel_stack 65536 [ 1144.963983][T19931] pagetables 65536 [ 1144.963983][T19931] percpu 5372992 [ 1144.963983][T19931] sock 0 [ 1144.963983][T19931] vmalloc 8192 [ 1144.963983][T19931] shmem 180224 [ 1144.963983][T19931] zswap 0 [ 1144.963983][T19931] zswapped 0 [ 1144.963983][T19931] file_mapped 180224 [ 1144.963983][T19931] file_dirty 4096 [ 1144.963983][T19931] file_writeback 0 [ 1144.963983][T19931] swapcached 0 [ 1144.963983][T19931] anon_thp 0 [ 1144.963983][T19931] file_thp 0 [ 1144.963983][T19931] shmem_thp 0 [ 1144.963983][T19931] inactive_anon 102400 [ 1144.963983][T19931] active_anon 180224 [ 1144.963983][T19931] inactive_file 0 [ 1144.963983][T19931] active_file 4096 [ 1144.963983][T19931] unevictable 0 [ 1144.963983][T19931] slab_reclaimable 15280 [ 1144.963983][T19931] slab_unreclaimable 308706808 [ 1144.963983][T19931] slab 308722088 [ 1144.978564][ T2970] loop4: unable to read partition table [ 1145.082706][T19931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19931,uid=0 22:05:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x14, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000500d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1145.102746][T19931] Memory cgroup out of memory: Killed process 19931 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1145.128628][T19946] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1145.142549][T19946] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) [ 1145.174087][T19953] loop5: detected capacity change from 0 to 512 [ 1145.176838][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1145.200580][T19946] FAT-fs (loop4): Filesystem has been set read-only [ 1145.235173][T19955] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1145.238611][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1145.247215][T19955] CPU: 1 PID: 19955 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1145.263595][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1145.273656][T19955] Call Trace: [ 1145.274163][ T4362] loop5: unable to read partition table [ 1145.276922][T19955] [ 1145.276932][T19955] dump_stack_lvl+0xcd/0x134 [ 1145.276962][T19955] dump_header+0x10b/0x7f9 [ 1145.294501][T19955] oom_kill_process.cold+0x10/0x15 [ 1145.299622][T19955] out_of_memory+0x358/0x14a0 [ 1145.304310][T19955] ? find_held_lock+0x2d/0x110 [ 1145.309076][T19955] ? oom_killer_disable+0x270/0x270 [ 1145.314274][T19955] ? find_held_lock+0x2d/0x110 [ 1145.319037][T19955] mem_cgroup_out_of_memory+0x206/0x270 [ 1145.324580][T19955] ? mem_cgroup_margin+0x130/0x130 [ 1145.329684][T19955] ? lock_downgrade+0x6e0/0x6e0 [ 1145.334537][T19955] try_charge_memcg+0xf67/0x13f0 [ 1145.339474][T19955] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1145.345451][T19955] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1145.351170][T19955] ? lock_downgrade+0x6e0/0x6e0 [ 1145.356036][T19955] ? lock_downgrade+0x6e0/0x6e0 [ 1145.360891][T19955] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1145.366436][T19955] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1145.372592][T19955] copy_process+0x607/0x7090 [ 1145.377178][T19955] ? __lock_acquire+0xbc3/0x56d0 [ 1145.382115][T19955] ? __cleanup_sighand+0xb0/0xb0 [ 1145.387058][T19955] kernel_clone+0xe7/0xab0 [ 1145.391470][T19955] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1145.397446][T19955] ? create_io_thread+0xe0/0xe0 [ 1145.402303][T19955] ? find_held_lock+0x2d/0x110 [ 1145.407070][T19955] ? __ct_user_exit+0xff/0x150 [ 1145.411837][T19955] __do_sys_clone+0xba/0x100 [ 1145.416422][T19955] ? kernel_clone+0xab0/0xab0 [ 1145.421101][T19955] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1145.426996][T19955] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1145.432894][T19955] do_syscall_64+0x35/0xb0 [ 1145.437325][T19955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1145.443213][T19955] RIP: 0033:0x7fe68848a6a1 [ 1145.447621][T19955] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1145.467226][T19955] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1145.475636][T19955] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1145.483599][T19955] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1145.491741][T19955] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1145.499887][T19955] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1145.507858][T19955] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1145.515834][T19955] 22:05:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x900000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1145.560190][T19953] EXT4-fs (loop5): invalid inodes per group: 327712 [ 1145.560190][T19953] 22:05:46 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) [ 1145.604803][T19963] loop4: detected capacity change from 0 to 68 [ 1145.616733][T19963] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1145.631942][T19955] memory: usage 307168kB, limit 307200kB, failcnt 7699 [ 1145.646823][T19963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000600d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1145.680969][T19955] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1145.697335][T19963] FAT-fs (loop4): Filesystem has been set read-only [ 1145.716529][T19955] Memory cgroup stats for /syz1: [ 1145.716714][T19955] anon 98304 [ 1145.716714][T19955] file 184320 [ 1145.716714][T19955] kernel 314257408 [ 1145.716714][T19955] kernel_stack 32768 [ 1145.716714][T19955] pagetables 65536 [ 1145.716714][T19955] percpu 5372992 [ 1145.716714][T19955] sock 0 [ 1145.716714][T19955] vmalloc 8192 [ 1145.716714][T19955] shmem 180224 [ 1145.716714][T19955] zswap 0 [ 1145.716714][T19955] zswapped 0 [ 1145.716714][T19955] file_mapped 180224 [ 1145.716714][T19955] file_dirty 4096 [ 1145.716714][T19955] file_writeback 0 [ 1145.716714][T19955] swapcached 0 [ 1145.716714][T19955] anon_thp 0 [ 1145.716714][T19955] file_thp 0 22:05:46 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1145.716714][T19955] shmem_thp 0 [ 1145.716714][T19955] inactive_anon 98304 [ 1145.716714][T19955] active_anon 180224 [ 1145.716714][T19955] inactive_file 0 [ 1145.716714][T19955] active_file 4096 [ 1145.716714][T19955] unevictable 0 [ 1145.716714][T19955] slab_reclaimable 15280 [ 1145.716714][T19955] slab_unreclaimable 308706344 [ 1145.716714][T19955] slab 308721624 [ 1145.873876][T19972] loop5: detected capacity change from 0 to 512 [ 1145.884852][T19972] EXT4-fs (loop5): invalid inodes per group: 393248 [ 1145.884852][T19972] [ 1145.924204][T19955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19955,uid=0 [ 1145.969049][T19955] Memory cgroup out of memory: Killed process 19955 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x32, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:46 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000700d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x1000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:46 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x60}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1146.155841][T19985] loop4: detected capacity change from 0 to 68 22:05:46 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x40}}, 0x0) 22:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1146.276236][T19982] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1146.293266][T19993] loop5: detected capacity change from 0 to 512 [ 1146.321058][T19993] EXT4-fs (loop5): invalid inodes per group: 458784 [ 1146.321058][T19993] [ 1146.339189][T19982] CPU: 0 PID: 19982 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1146.349618][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1146.359685][T19982] Call Trace: [ 1146.362975][T19982] [ 1146.365924][T19982] dump_stack_lvl+0xcd/0x134 [ 1146.370541][T19982] dump_header+0x10b/0x7f9 [ 1146.374967][T19982] oom_kill_process.cold+0x10/0x15 [ 1146.380094][T19982] out_of_memory+0x358/0x14a0 [ 1146.384794][T19982] ? find_held_lock+0x2d/0x110 [ 1146.389568][T19982] ? oom_killer_disable+0x270/0x270 [ 1146.394786][T19982] ? find_held_lock+0x2d/0x110 [ 1146.399566][T19982] mem_cgroup_out_of_memory+0x206/0x270 [ 1146.405126][T19982] ? mem_cgroup_margin+0x130/0x130 [ 1146.410246][T19982] ? lock_downgrade+0x6e0/0x6e0 [ 1146.415108][T19982] try_charge_memcg+0xf67/0x13f0 [ 1146.420049][T19982] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1146.426043][T19982] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1146.431778][T19982] ? lock_downgrade+0x6e0/0x6e0 [ 1146.436644][T19982] ? lock_downgrade+0x6e0/0x6e0 [ 1146.441490][T19982] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1146.447026][T19982] __alloc_pages+0x1ef/0x510 [ 1146.451622][T19982] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1146.458417][T19982] ? lock_chain_count+0x20/0x20 [ 1146.463279][T19982] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1146.469094][T19982] ? __lock_acquire+0xbc3/0x56d0 [ 1146.474037][T19982] alloc_pages+0x1a6/0x270 [ 1146.478455][T19982] pte_alloc_one+0x16/0x230 [ 1146.482973][T19982] __pte_alloc+0x69/0x250 [ 1146.487303][T19982] ? pmd_install+0x150/0x150 [ 1146.491909][T19982] ? hugepage_vma_check+0x44e/0x780 [ 1146.497103][T19982] __handle_mm_fault+0x310b/0x39b0 [ 1146.503301][T19982] ? vm_iomap_memory+0x190/0x190 [ 1146.508268][T19982] handle_mm_fault+0x1c8/0x780 [ 1146.513118][T19982] do_user_addr_fault+0x475/0x1210 [ 1146.518232][T19982] exc_page_fault+0x94/0x170 [ 1146.522834][T19982] asm_exc_page_fault+0x22/0x30 [ 1146.527701][T19982] RIP: 0033:0x7fe688434e7d [ 1146.532352][T19982] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1146.551949][T19982] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010207 [ 1146.558004][T19982] RAX: 0000000000000001 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1146.565975][T19982] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1146.573957][T19982] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1146.581918][T19982] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1146.589886][T19982] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1146.597869][T19982] [ 1146.617509][T19982] memory: usage 307184kB, limit 307200kB, failcnt 7770 [ 1146.627714][T19985] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1146.641862][T19985] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1146.648241][T19982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1146.659100][T19985] FAT-fs (loop4): Filesystem has been set read-only [ 1146.667027][T19982] Memory cgroup stats for /syz1: [ 1146.667209][T19982] anon 102400 [ 1146.667209][T19982] file 184320 [ 1146.667209][T19982] kernel 314269696 [ 1146.667209][T19982] kernel_stack 65536 [ 1146.667209][T19982] pagetables 65536 [ 1146.667209][T19982] percpu 5372992 [ 1146.667209][T19982] sock 0 [ 1146.667209][T19982] vmalloc 8192 [ 1146.667209][T19982] shmem 180224 [ 1146.667209][T19982] zswap 0 [ 1146.667209][T19982] zswapped 0 [ 1146.667209][T19982] file_mapped 180224 [ 1146.667209][T19982] file_dirty 4096 [ 1146.667209][T19982] file_writeback 0 [ 1146.667209][T19982] swapcached 0 [ 1146.667209][T19982] anon_thp 0 [ 1146.667209][T19982] file_thp 0 [ 1146.667209][T19982] shmem_thp 0 [ 1146.667209][T19982] inactive_anon 102400 [ 1146.667209][T19982] active_anon 180224 [ 1146.667209][T19982] inactive_file 0 [ 1146.667209][T19982] active_file 4096 [ 1146.667209][T19982] unevictable 0 [ 1146.667209][T19982] slab_reclaimable 15280 [ 1146.667209][T19982] slab_unreclaimable 308706808 [ 1146.667209][T19982] slab 308722088 [ 1146.773955][T19982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19982,uid=0 22:05:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x3c, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x40}}, 0x0) 22:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000900d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x2000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1146.793746][T19982] Memory cgroup out of memory: Killed process 19982 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1146.864408][T20004] loop5: detected capacity change from 0 to 512 22:05:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x40}}, 0x0) 22:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x500}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1146.922506][T20004] EXT4-fs (loop5): invalid inodes per group: 589856 [ 1146.922506][T20004] [ 1146.925499][T20009] loop4: detected capacity change from 0 to 68 22:05:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000a00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x600}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1147.046820][T20009] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1147.071424][T20008] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1147.126333][T20009] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1147.138917][T20008] CPU: 0 PID: 20008 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1147.149355][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1147.159420][T20008] Call Trace: [ 1147.162707][T20008] [ 1147.165658][T20008] dump_stack_lvl+0xcd/0x134 [ 1147.168373][T20009] FAT-fs (loop4): Filesystem has been set read-only [ 1147.170255][T20008] dump_header+0x10b/0x7f9 [ 1147.170285][T20008] oom_kill_process.cold+0x10/0x15 [ 1147.170312][T20008] out_of_memory+0x358/0x14a0 [ 1147.170338][T20008] ? find_held_lock+0x2d/0x110 [ 1147.170358][T20008] ? oom_killer_disable+0x270/0x270 [ 1147.170383][T20008] ? find_held_lock+0x2d/0x110 [ 1147.170404][T20008] mem_cgroup_out_of_memory+0x206/0x270 [ 1147.170426][T20008] ? mem_cgroup_margin+0x130/0x130 [ 1147.170443][T20008] ? lock_downgrade+0x6e0/0x6e0 [ 1147.170476][T20008] try_charge_memcg+0xf67/0x13f0 [ 1147.170502][T20008] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1147.170529][T20008] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1147.170549][T20008] ? lock_downgrade+0x6e0/0x6e0 [ 1147.170571][T20008] ? lock_downgrade+0x6e0/0x6e0 [ 1147.170600][T20008] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1147.170624][T20008] __alloc_pages+0x1ef/0x510 [ 1147.170648][T20008] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1147.170673][T20008] ? lock_chain_count+0x20/0x20 [ 1147.170702][T20008] ? __lock_acquire+0xbc3/0x56d0 [ 1147.170724][T20008] alloc_pages+0x1a6/0x270 [ 1147.170747][T20008] pte_alloc_one+0x16/0x230 [ 1147.170767][T20008] __pte_alloc+0x69/0x250 [ 1147.170784][T20008] ? pmd_install+0x150/0x150 [ 1147.170801][T20008] ? hugepage_vma_check+0x44e/0x780 [ 1147.170827][T20008] __handle_mm_fault+0x310b/0x39b0 [ 1147.170852][T20008] ? vm_iomap_memory+0x190/0x190 [ 1147.170889][T20008] handle_mm_fault+0x1c8/0x780 [ 1147.170911][T20008] do_user_addr_fault+0x475/0x1210 [ 1147.170943][T20008] exc_page_fault+0x94/0x170 [ 1147.170966][T20008] asm_exc_page_fault+0x22/0x30 [ 1147.170985][T20008] RIP: 0033:0x7fe688434e7d [ 1147.171001][T20008] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 e3 43 05 00 <83> 05 7c b1 56 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 ff 04 0a 01 [ 1147.171019][T20008] RSP: 002b:00007ffffbe4aa60 EFLAGS: 00010217 [ 1147.171036][T20008] RAX: 0000000000000000 RBX: 00007fe68859bf8c RCX: 00007fe688489279 [ 1147.171049][T20008] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe68859bf88 [ 1147.171062][T20008] RBP: 00007fe68859bf80 R08: 00007fe6895f9700 R09: 0000000000000000 [ 1147.171075][T20008] R10: 00007fe6895f9700 R11: 0000000000000246 R12: 00007fe68859bf8c [ 1147.171087][T20008] R13: 00007fe6885a0060 R14: 00007fe68859bf80 R15: 0000000000000000 [ 1147.171114][T20008] [ 1147.179189][T20020] loop5: detected capacity change from 0 to 512 [ 1147.245891][T20008] memory: usage 307188kB, limit 307200kB, failcnt 7853 [ 1147.283556][T20020] EXT4-fs (loop5): invalid inodes per group: 655392 [ 1147.283556][T20020] [ 1147.307927][T20008] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1147.476100][T20008] Memory cgroup stats for /syz1: [ 1147.476281][T20008] anon 102400 [ 1147.476281][T20008] file 184320 [ 1147.476281][T20008] kernel 314269696 [ 1147.476281][T20008] kernel_stack 65536 [ 1147.476281][T20008] pagetables 65536 [ 1147.476281][T20008] percpu 5372992 [ 1147.476281][T20008] sock 0 [ 1147.476281][T20008] vmalloc 8192 [ 1147.476281][T20008] shmem 180224 [ 1147.476281][T20008] zswap 0 [ 1147.476281][T20008] zswapped 0 [ 1147.476281][T20008] file_mapped 180224 [ 1147.476281][T20008] file_dirty 4096 [ 1147.476281][T20008] file_writeback 0 [ 1147.476281][T20008] swapcached 0 [ 1147.476281][T20008] anon_thp 0 [ 1147.476281][T20008] file_thp 0 [ 1147.476281][T20008] shmem_thp 0 [ 1147.476281][T20008] inactive_anon 102400 [ 1147.476281][T20008] active_anon 180224 [ 1147.476281][T20008] inactive_file 0 [ 1147.476281][T20008] active_file 4096 [ 1147.476281][T20008] unevictable 0 [ 1147.476281][T20008] slab_reclaimable 15280 [ 1147.476281][T20008] slab_unreclaimable 308706808 [ 1147.476281][T20008] slab 308722088 [ 1147.593848][T20008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20008,uid=0 [ 1147.612728][T20008] Memory cgroup out of memory: Killed process 20008 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x2, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:48 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x700}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000c00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x3000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1147.697937][T20029] loop4: detected capacity change from 0 to 68 [ 1147.706272][T20031] loop5: detected capacity change from 0 to 512 [ 1147.722942][T20029] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1147.734985][T20031] EXT4-fs (loop5): invalid inodes per group: 786464 [ 1147.734985][T20031] 22:05:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x900}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:48 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000d00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1147.776443][T20033] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1147.807658][T20033] CPU: 1 PID: 20033 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1147.818133][T20033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1147.828290][T20033] Call Trace: [ 1147.831582][T20033] [ 1147.834521][T20033] dump_stack_lvl+0xcd/0x134 [ 1147.839404][T20033] dump_header+0x10b/0x7f9 [ 1147.843839][T20033] oom_kill_process.cold+0x10/0x15 [ 1147.848968][T20033] out_of_memory+0x358/0x14a0 [ 1147.853662][T20033] ? find_held_lock+0x2d/0x110 [ 1147.858442][T20033] ? oom_killer_disable+0x270/0x270 [ 1147.863657][T20033] ? find_held_lock+0x2d/0x110 [ 1147.866752][T20029] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1147.868420][T20033] mem_cgroup_out_of_memory+0x206/0x270 [ 1147.868446][T20033] ? mem_cgroup_margin+0x130/0x130 [ 1147.877073][T20029] FAT-fs (loop4): Filesystem has been set read-only [ 1147.882629][T20033] ? lock_downgrade+0x6e0/0x6e0 [ 1147.882666][T20033] try_charge_memcg+0xf67/0x13f0 [ 1147.882693][T20033] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1147.904268][T20040] loop5: detected capacity change from 0 to 512 [ 1147.910191][T20033] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1147.910216][T20033] ? lock_downgrade+0x6e0/0x6e0 [ 1147.910237][T20033] ? lock_downgrade+0x6e0/0x6e0 [ 1147.910264][T20033] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1147.910289][T20033] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1147.910317][T20033] copy_process+0x607/0x7090 [ 1147.910342][T20033] ? __lock_acquire+0xbc3/0x56d0 [ 1147.910369][T20033] ? __cleanup_sighand+0xb0/0xb0 [ 1147.910404][T20033] kernel_clone+0xe7/0xab0 22:05:48 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) [ 1147.910424][T20033] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1147.910446][T20033] ? create_io_thread+0xe0/0xe0 [ 1147.910471][T20033] ? find_held_lock+0x2d/0x110 [ 1147.910493][T20033] ? __ct_user_exit+0xff/0x150 [ 1147.910518][T20033] __do_sys_clone+0xba/0x100 [ 1147.910547][T20033] ? kernel_clone+0xab0/0xab0 [ 1147.910577][T20033] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1147.910601][T20033] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1147.910628][T20033] do_syscall_64+0x35/0xb0 [ 1147.910646][T20033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1147.910666][T20033] RIP: 0033:0x7fe68848a6a1 [ 1147.910683][T20033] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1147.910702][T20033] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1147.910722][T20033] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1147.910736][T20033] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1147.910749][T20033] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1147.910762][T20033] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1147.910774][T20033] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1147.910800][T20033] 22:05:48 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x3, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1147.976247][T20033] memory: usage 307188kB, limit 307200kB, failcnt 7905 [ 1148.031790][T20040] EXT4-fs (loop5): invalid inodes per group: 852000 [ 1148.031790][T20040] [ 1148.071665][T20033] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1148.071684][T20033] Memory cgroup stats for /syz1: [ 1148.071855][T20033] anon 98304 [ 1148.071855][T20033] file 184320 [ 1148.071855][T20033] kernel 314265600 [ 1148.071855][T20033] kernel_stack 32768 [ 1148.071855][T20033] pagetables 65536 [ 1148.071855][T20033] percpu 5372992 [ 1148.071855][T20033] sock 0 [ 1148.071855][T20033] vmalloc 8192 [ 1148.071855][T20033] shmem 180224 [ 1148.071855][T20033] zswap 0 [ 1148.071855][T20033] zswapped 0 [ 1148.071855][T20033] file_mapped 180224 [ 1148.071855][T20033] file_dirty 4096 [ 1148.071855][T20033] file_writeback 0 [ 1148.071855][T20033] swapcached 0 [ 1148.071855][T20033] anon_thp 0 [ 1148.071855][T20033] file_thp 0 [ 1148.071855][T20033] shmem_thp 0 [ 1148.071855][T20033] inactive_anon 98304 [ 1148.071855][T20033] active_anon 180224 [ 1148.071855][T20033] inactive_file 0 [ 1148.071855][T20033] active_file 4096 [ 1148.071855][T20033] unevictable 0 22:05:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1148.071855][T20033] slab_reclaimable 15280 [ 1148.071855][T20033] slab_unreclaimable 308708448 [ 1148.071855][T20033] slab 308723728 [ 1148.071906][T20033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20033,uid=0 [ 1148.072016][T20033] Memory cgroup out of memory: Killed process 20033 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:49 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) 22:05:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000f00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1148.357929][T20049] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x4000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x60}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1148.452316][T20049] CPU: 0 PID: 20049 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1148.462871][T20049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1148.472939][T20049] Call Trace: [ 1148.476229][T20049] [ 1148.479170][T20049] dump_stack_lvl+0xcd/0x134 [ 1148.483785][T20049] dump_header+0x10b/0x7f9 [ 1148.488234][T20049] oom_kill_process.cold+0x10/0x15 [ 1148.493371][T20049] out_of_memory+0x358/0x14a0 [ 1148.498069][T20049] ? find_held_lock+0x2d/0x110 [ 1148.502843][T20049] ? oom_killer_disable+0x270/0x270 [ 1148.508064][T20049] ? find_held_lock+0x2d/0x110 [ 1148.512841][T20049] mem_cgroup_out_of_memory+0x206/0x270 [ 1148.518406][T20049] ? mem_cgroup_margin+0x130/0x130 [ 1148.523022][T20060] loop4: detected capacity change from 0 to 68 [ 1148.523508][T20049] ? lock_downgrade+0x6e0/0x6e0 [ 1148.534508][T20049] try_charge_memcg+0xf67/0x13f0 [ 1148.539451][T20049] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1148.545434][T20049] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1148.551147][T20049] ? lock_downgrade+0x6e0/0x6e0 [ 1148.555991][T20049] ? lock_downgrade+0x6e0/0x6e0 [ 1148.560848][T20049] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1148.566389][T20049] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1148.572546][T20049] copy_process+0x145a/0x7090 [ 1148.577220][T20049] ? __lock_acquire+0xbc3/0x56d0 [ 1148.582158][T20049] ? __cleanup_sighand+0xb0/0xb0 [ 1148.587101][T20049] kernel_clone+0xe7/0xab0 [ 1148.591515][T20049] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1148.597490][T20049] ? create_io_thread+0xe0/0xe0 [ 1148.602339][T20049] ? find_held_lock+0x2d/0x110 [ 1148.607095][T20049] ? __ct_user_exit+0xff/0x150 [ 1148.611858][T20049] __do_sys_clone+0xba/0x100 [ 1148.616442][T20049] ? kernel_clone+0xab0/0xab0 [ 1148.621122][T20049] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1148.627011][T20049] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1148.632918][T20049] do_syscall_64+0x35/0xb0 [ 1148.637417][T20049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1148.643305][T20049] RIP: 0033:0x7fe68848a6a1 [ 1148.647711][T20049] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1148.667311][T20049] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1148.675723][T20049] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1148.683693][T20049] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1148.691662][T20049] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 22:05:49 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) [ 1148.699719][T20049] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1148.707679][T20049] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1148.715652][T20049] 22:05:49 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1148.771817][T20060] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1148.801534][T20060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1020}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1148.826825][T20060] FAT-fs (loop4): Filesystem has been set read-only [ 1148.881747][T20049] memory: usage 307172kB, limit 307200kB, failcnt 7957 [ 1148.901785][T20057] loop5: detected capacity change from 0 to 512 [ 1148.915069][T20057] EXT4-fs (loop5): invalid inodes per group: 983072 [ 1148.915069][T20057] [ 1148.922302][T20049] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1148.947867][T20049] Memory cgroup stats for /syz1: [ 1148.948152][T20049] anon 98304 [ 1148.948152][T20049] file 184320 [ 1148.948152][T20049] kernel 314261504 [ 1148.948152][T20049] kernel_stack 32768 [ 1148.948152][T20049] pagetables 65536 [ 1148.948152][T20049] percpu 5372992 [ 1148.948152][T20049] sock 0 [ 1148.948152][T20049] vmalloc 8192 [ 1148.948152][T20049] shmem 180224 [ 1148.948152][T20049] zswap 0 [ 1148.948152][T20049] zswapped 0 [ 1148.948152][T20049] file_mapped 180224 [ 1148.948152][T20049] file_dirty 4096 [ 1148.948152][T20049] file_writeback 0 [ 1148.948152][T20049] swapcached 0 [ 1148.948152][T20049] anon_thp 0 [ 1148.948152][T20049] file_thp 0 [ 1148.948152][T20049] shmem_thp 0 [ 1148.948152][T20049] inactive_anon 98304 [ 1148.948152][T20049] active_anon 180224 [ 1148.948152][T20049] inactive_file 0 [ 1148.948152][T20049] active_file 4096 [ 1148.948152][T20049] unevictable 0 [ 1148.948152][T20049] slab_reclaimable 15280 [ 1148.948152][T20049] slab_unreclaimable 308706344 [ 1148.948152][T20049] slab 308721624 [ 1149.063700][T20049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20049,uid=0 22:05:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x5, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2010}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:49 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020041000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x5000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1149.123866][T20049] Memory cgroup out of memory: Killed process 20049 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 22:05:49 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1149.182542][T20081] loop5: detected capacity change from 0 to 512 [ 1149.186968][T20082] loop4: detected capacity change from 0 to 68 [ 1149.214859][T20082] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:05:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3f00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x500}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1149.238452][T20081] EXT4-fs (loop5): invalid inodes per group: 1049632 [ 1149.238452][T20081] 22:05:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1149.299082][T20082] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) 22:05:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x533}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020201000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1149.345988][T20082] FAT-fs (loop4): Filesystem has been set read-only [ 1149.362626][T20086] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1149.442499][T20094] loop5: detected capacity change from 0 to 512 [ 1149.447634][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.455438][T20086] CPU: 1 PID: 20086 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1149.468785][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1149.477572][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.478835][T20086] Call Trace: [ 1149.478844][T20086] [ 1149.478852][T20086] dump_stack_lvl+0xcd/0x134 [ 1149.487609][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.489912][T20086] dump_header+0x10b/0x7f9 [ 1149.489945][T20086] oom_kill_process.cold+0x10/0x15 [ 1149.489972][T20086] out_of_memory+0x358/0x14a0 [ 1149.493326][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.497447][T20086] ? find_held_lock+0x2d/0x110 [ 1149.497473][T20086] ? oom_killer_disable+0x270/0x270 [ 1149.522281][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.528491][T20086] ? find_held_lock+0x2d/0x110 [ 1149.528522][T20086] mem_cgroup_out_of_memory+0x206/0x270 [ 1149.528544][T20086] ? mem_cgroup_margin+0x130/0x130 [ 1149.533799][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.538444][T20086] ? lock_downgrade+0x6e0/0x6e0 [ 1149.538482][T20086] try_charge_memcg+0xf67/0x13f0 [ 1149.538510][T20086] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1149.548176][ T4362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.552316][T20086] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1149.552343][T20086] ? lock_downgrade+0x6e0/0x6e0 [ 1149.552366][T20086] ? lock_downgrade+0x6e0/0x6e0 [ 1149.552396][T20086] obj_cgroup_charge+0x2ab/0x5e0 [ 1149.552423][T20086] kmem_cache_alloc_lru+0x13e/0x720 [ 1149.552445][T20086] ? sock_alloc_inode+0x23/0x1d0 [ 1149.552473][T20086] sock_alloc_inode+0x23/0x1d0 [ 1149.552493][T20086] ? sock_free_inode+0x20/0x20 [ 1149.552512][T20086] alloc_inode+0x61/0x230 [ 1149.552536][T20086] new_inode_pseudo+0x13/0x80 [ 1149.552556][T20086] sock_alloc+0x3c/0x260 [ 1149.552578][T20086] __sock_create+0xb9/0x790 [ 1149.552599][T20086] ? lock_downgrade+0x6e0/0x6e0 [ 1149.552622][T20086] __sys_socket+0x12f/0x240 [ 1149.552644][T20086] ? __sys_socket_file+0x1f0/0x1f0 [ 1149.552668][T20086] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1149.552700][T20086] __x64_sys_socket+0x6f/0xb0 [ 1149.552723][T20086] do_syscall_64+0x35/0xb0 [ 1149.552744][T20086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1149.552765][T20086] RIP: 0033:0x7fe688489279 [ 1149.552783][T20086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1149.552804][T20086] RSP: 002b:00007fe6895f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1149.552825][T20086] RAX: ffffffffffffffda RBX: 00007fe68859bf80 RCX: 00007fe688489279 [ 1149.552840][T20086] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1149.552854][T20086] RBP: 00007fe6884e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1149.552867][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.552880][T20086] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1149.552908][T20086] [ 1149.597532][T20086] memory: usage 307200kB, limit 307200kB, failcnt 8045 [ 1149.722003][ T4362] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.728880][T20086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1149.786563][ T4362] loop5: unable to read partition table [ 1149.816077][T20086] Memory cgroup stats for /syz1: [ 1149.857912][T20086] anon 102400 [ 1149.857912][T20086] file 184320 [ 1149.857912][T20086] kernel 314269696 [ 1149.857912][T20086] kernel_stack 65536 [ 1149.857912][T20086] pagetables 65536 [ 1149.857912][T20086] percpu 5372992 [ 1149.857912][T20086] sock 0 [ 1149.857912][T20086] vmalloc 8192 [ 1149.857912][T20086] shmem 180224 [ 1149.857912][T20086] zswap 0 [ 1149.857912][T20086] zswapped 0 [ 1149.857912][T20086] file_mapped 180224 [ 1149.857912][T20086] file_dirty 4096 22:05:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x6, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020260000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x6000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x600}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1149.857912][T20086] file_writeback 0 [ 1149.857912][T20086] swapcached 0 [ 1149.857912][T20086] anon_thp 0 [ 1149.857912][T20086] file_thp 0 [ 1149.857912][T20086] shmem_thp 0 [ 1149.857912][T20086] inactive_anon 102400 [ 1149.857912][T20086] active_anon 180224 [ 1149.857912][T20086] inactive_file 0 [ 1149.857912][T20086] active_file 4096 [ 1149.857912][T20086] unevictable 0 [ 1149.857912][T20086] slab_reclaimable 15280 [ 1149.857912][T20086] slab_unreclaimable 308707112 [ 1149.857912][T20086] slab 308722392 [ 1149.858262][T20094] EXT4-fs (loop5): invalid inodes per group: 1056800 [ 1149.858262][T20094] [ 1149.863618][T20086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20083,uid=0 [ 1149.863750][T20086] Memory cgroup out of memory: Killed process 20083 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1149.911881][T20099] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1149.989732][T20103] loop3: detected capacity change from 0 to 512 [ 1150.026062][T20099] CPU: 0 PID: 20099 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1150.036502][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1150.042408][T20105] loop4: detected capacity change from 0 to 68 [ 1150.046726][T20099] Call Trace: [ 1150.046736][T20099] [ 1150.059084][T20099] dump_stack_lvl+0xcd/0x134 [ 1150.063690][T20099] dump_header+0x10b/0x7f9 [ 1150.068106][T20099] oom_kill_process.cold+0x10/0x15 [ 1150.073216][T20099] out_of_memory+0x358/0x14a0 [ 1150.077892][T20099] ? find_held_lock+0x2d/0x110 [ 1150.082651][T20099] ? oom_killer_disable+0x270/0x270 [ 1150.087846][T20099] ? find_held_lock+0x2d/0x110 [ 1150.092604][T20099] mem_cgroup_out_of_memory+0x206/0x270 [ 1150.098152][T20099] ? mem_cgroup_margin+0x130/0x130 [ 1150.103262][T20099] ? lock_downgrade+0x6e0/0x6e0 [ 1150.108119][T20099] try_charge_memcg+0xf67/0x13f0 [ 1150.113057][T20099] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1150.119040][T20099] ? lock_downgrade+0x6e0/0x6e0 [ 1150.123900][T20099] charge_memcg+0x31/0x320 [ 1150.128312][T20099] __mem_cgroup_charge+0x27/0x90 [ 1150.133246][T20099] ? _compound_head+0x5d/0x150 [ 1150.138005][T20099] wp_page_copy+0x27c/0x1b60 [ 1150.142600][T20099] ? restore_exclusive_pte+0x8b0/0x8b0 [ 1150.148050][T20099] ? lock_downgrade+0x6e0/0x6e0 [ 1150.152895][T20099] ? vm_normal_page+0x146/0x2a0 [ 1150.157744][T20099] do_wp_page+0x52c/0x1910 [ 1150.162156][T20099] __handle_mm_fault+0x1813/0x39b0 [ 1150.167264][T20099] ? vm_iomap_memory+0x190/0x190 [ 1150.172214][T20099] handle_mm_fault+0x1c8/0x780 [ 1150.176976][T20099] do_user_addr_fault+0x475/0x1210 [ 1150.182094][T20099] exc_page_fault+0x94/0x170 [ 1150.186683][T20099] asm_exc_page_fault+0x22/0x30 [ 1150.191532][T20099] RIP: 0033:0x7fe688458241 [ 1150.195940][T20099] Code: 11 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 3a e2 09 00 e8 [ 1150.215551][T20099] RSP: 002b:00007ffffbe4a880 EFLAGS: 00010206 [ 1150.221698][T20099] RAX: 00000000000206e1 RBX: 00007fe6885705e0 RCX: 0000555555811920 [ 1150.229665][T20099] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 1150.237807][T20099] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007fe688570640 [ 1150.245774][T20099] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 1150.253740][T20099] R13: 0000000000000120 R14: 0000000000000012 R15: 0000555555811800 [ 1150.261716][T20099] 22:05:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1150.277613][T20105] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1150.296211][T20105] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1150.306855][T20105] FAT-fs (loop4): Filesystem has been set read-only [ 1150.316032][T20099] memory: usage 307136kB, limit 307200kB, failcnt 8084 22:05:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020001100d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1150.325466][T20099] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1150.333670][T20103] EXT4-fs (loop3): inodes count not valid: 32 vs 9760 [ 1150.350668][T20099] Memory cgroup stats for /syz1: [ 1150.351030][T20099] anon 94208 [ 1150.351030][T20099] file 184320 [ 1150.351030][T20099] kernel 314228736 [ 1150.351030][T20099] kernel_stack 32768 [ 1150.351030][T20099] pagetables 65536 [ 1150.351030][T20099] percpu 5372992 22:05:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x700}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x7000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1150.351030][T20099] sock 0 [ 1150.351030][T20099] vmalloc 8192 [ 1150.351030][T20099] shmem 180224 [ 1150.351030][T20099] zswap 0 [ 1150.351030][T20099] zswapped 0 [ 1150.351030][T20099] file_mapped 180224 [ 1150.351030][T20099] file_dirty 4096 [ 1150.351030][T20099] file_writeback 0 [ 1150.351030][T20099] swapcached 0 [ 1150.351030][T20099] anon_thp 0 [ 1150.351030][T20099] file_thp 0 [ 1150.351030][T20099] shmem_thp 0 [ 1150.351030][T20099] inactive_anon 94208 [ 1150.351030][T20099] active_anon 180224 [ 1150.351030][T20099] inactive_file 0 [ 1150.351030][T20099] active_file 4096 [ 1150.351030][T20099] unevictable 0 [ 1150.351030][T20099] slab_reclaimable 15280 [ 1150.351030][T20099] slab_unreclaimable 308698784 [ 1150.351030][T20099] slab 308714064 [ 1150.461540][T20099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20099,uid=0 22:05:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x9, 0xa, r8}]}, 0x4c}}, 0x0) [ 1150.483007][T20099] Memory cgroup out of memory: Killed process 20099 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1150.505783][T20113] loop5: detected capacity change from 0 to 512 [ 1150.523633][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:51 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) [ 1150.537145][T20115] loop4: detected capacity change from 0 to 68 [ 1150.544892][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.544976][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.545000][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.545042][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.545063][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.545105][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.545126][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.545168][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.545190][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.545246][ T2970] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.607005][T20115] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1150.613875][T20115] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1150.625125][T20116] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:05:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0xa, 0xa, r8}]}, 0x4c}}, 0x0) [ 1150.625152][T20116] CPU: 0 PID: 20116 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1150.625173][T20116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1150.625185][T20116] Call Trace: [ 1150.625191][T20116] [ 1150.625197][T20116] dump_stack_lvl+0xcd/0x134 [ 1150.625226][T20116] dump_header+0x10b/0x7f9 [ 1150.625251][T20116] oom_kill_process.cold+0x10/0x15 [ 1150.625277][T20116] out_of_memory+0x358/0x14a0 [ 1150.625303][T20116] ? find_held_lock+0x2d/0x110 [ 1150.625323][T20116] ? oom_killer_disable+0x270/0x270 [ 1150.625347][T20116] ? find_held_lock+0x2d/0x110 [ 1150.625367][T20116] mem_cgroup_out_of_memory+0x206/0x270 [ 1150.625388][T20116] ? mem_cgroup_margin+0x130/0x130 [ 1150.625405][T20116] ? lock_downgrade+0x6e0/0x6e0 [ 1150.625435][T20116] try_charge_memcg+0xf67/0x13f0 [ 1150.625460][T20116] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1150.625481][T20116] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1150.625500][T20116] ? lock_downgrade+0x6e0/0x6e0 [ 1150.625520][T20116] ? lock_downgrade+0x6e0/0x6e0 [ 1150.625557][T20116] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1150.625580][T20116] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1150.625608][T20116] copy_process+0x607/0x7090 [ 1150.625633][T20116] ? __lock_acquire+0xbc3/0x56d0 [ 1150.625662][T20116] ? __cleanup_sighand+0xb0/0xb0 [ 1150.625698][T20116] kernel_clone+0xe7/0xab0 [ 1150.625718][T20116] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1150.625740][T20116] ? create_io_thread+0xe0/0xe0 [ 1150.625766][T20116] ? find_held_lock+0x2d/0x110 [ 1150.625788][T20116] ? __ct_user_exit+0xff/0x150 [ 1150.625814][T20116] __do_sys_clone+0xba/0x100 [ 1150.625834][T20116] ? kernel_clone+0xab0/0xab0 [ 1150.625864][T20116] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1150.625887][T20116] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1150.625914][T20116] do_syscall_64+0x35/0xb0 [ 1150.625934][T20116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1150.625954][T20116] RIP: 0033:0x7fe68848a6a1 [ 1150.625970][T20116] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1150.625988][T20116] RSP: 002b:00007ffffbe4a928 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1150.626009][T20116] RAX: ffffffffffffffda RBX: 00007fe6895f9700 RCX: 00007fe68848a6a1 [ 1150.626022][T20116] RDX: 00007fe6895f99d0 RSI: 00007fe6895f92f0 RDI: 00000000003d0f00 [ 1150.626035][T20116] RBP: 00007ffffbe4ab70 R08: 00007fe6895f9700 R09: 00007fe6895f9700 [ 1150.626046][T20116] R10: 00007fe6895f99d0 R11: 0000000000000206 R12: 00007ffffbe4a9de [ 1150.626059][T20116] R13: 00007ffffbe4a9df R14: 00007fe6895f9300 R15: 0000000000022000 [ 1150.626084][T20116] [ 1150.626092][T20116] memory: usage 307200kB, limit 307200kB, failcnt 8133 [ 1150.626104][T20116] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1150.626116][T20116] Memory cgroup stats for /syz1: [ 1150.626232][T20116] anon 98304 [ 1150.626232][T20116] file 184320 [ 1150.626232][T20116] kernel 314290176 [ 1150.626232][T20116] kernel_stack 32768 [ 1150.626232][T20116] pagetables 65536 [ 1150.626232][T20116] percpu 5372992 [ 1150.626232][T20116] sock 0 [ 1150.626232][T20116] vmalloc 8192 [ 1150.626232][T20116] shmem 180224 [ 1150.626232][T20116] zswap 0 [ 1150.626232][T20116] zswapped 0 [ 1150.626232][T20116] file_mapped 180224 [ 1150.626232][T20116] file_dirty 4096 [ 1150.626232][T20116] file_writeback 0 [ 1150.626232][T20116] swapcached 0 [ 1150.626232][T20116] anon_thp 0 [ 1150.626232][T20116] file_thp 0 [ 1150.626232][T20116] shmem_thp 0 [ 1150.626232][T20116] inactive_anon 98304 [ 1150.626232][T20116] active_anon 180224 [ 1150.626232][T20116] inactive_file 0 [ 1150.626232][T20116] active_file 4096 [ 1150.626232][T20116] unevictable 0 [ 1150.626232][T20116] slab_reclaimable 27888 [ 1150.626232][T20116] slab_unreclaimable 308718392 [ 1150.626232][T20116] slab 308746280 [ 1150.626284][T20116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20116,uid=0 [ 1150.626371][T20116] Memory cgroup out of memory: Killed process 20116 (syz-executor.1) total-vm:54508kB, anon-rss:396kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1150.646029][ T2970] Buffer I/O error on dev loop5, logical block 0, async page read [ 1150.695897][ T3639] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1150.700950][T20115] FAT-fs (loop4): Filesystem has been set read-only [ 1150.710609][ T2970] loop5: unable to read partition table [ 1150.720616][T20119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1150.813747][T20113] EXT4-fs (loop5): invalid inodes per group: 1114144 [ 1150.813747][T20113] [ 1150.839245][ T3639] CPU: 1 PID: 3639 Comm: syz-executor.1 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0 #0 [ 1151.145939][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1151.156012][ T3639] Call Trace: [ 1151.159287][ T3639] [ 1151.162211][ T3639] dump_stack_lvl+0xcd/0x134 [ 1151.166807][ T3639] dump_header+0x10b/0x7f9 [ 1151.171222][ T3639] oom_kill_process.cold+0x10/0x15 [ 1151.176357][ T3639] out_of_memory+0x358/0x14a0 [ 1151.181059][ T3639] ? find_held_lock+0x2d/0x110 [ 1151.185818][ T3639] ? oom_killer_disable+0x270/0x270 [ 1151.191014][ T3639] ? find_held_lock+0x2d/0x110 [ 1151.195777][ T3639] mem_cgroup_out_of_memory+0x206/0x270 [ 1151.201339][ T3639] ? mem_cgroup_margin+0x130/0x130 [ 1151.206442][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 1151.211298][ T3639] try_charge_memcg+0xf67/0x13f0 [ 1151.216251][ T3639] ? mem_cgroup_handle_over_high+0x510/0x510 [ 1151.222226][ T3639] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1151.227937][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 1151.232784][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 1151.237639][ T3639] __memcg_kmem_charge_page+0x16a/0x3b0 [ 1151.243181][ T3639] __alloc_pages+0x1ef/0x510 [ 1151.247774][ T3639] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 1151.254540][ T3639] ? find_held_lock+0x2d/0x110 [ 1151.259302][ T3639] alloc_pages+0x1a6/0x270 [ 1151.263717][ T3639] pte_alloc_one+0x16/0x230 [ 1151.268212][ T3639] __pte_alloc+0x69/0x250 [ 1151.272533][ T3639] ? pmd_install+0x150/0x150 [ 1151.277115][ T3639] ? _raw_spin_unlock+0x24/0x40 [ 1151.281961][ T3639] ? __pmd_alloc+0x2ff/0x5c0 [ 1151.286546][ T3639] copy_page_range+0x15e9/0x37d0 [ 1151.291502][ T3639] ? handle_mm_fault+0x780/0x780 [ 1151.296441][ T3639] ? __vma_link_rb+0x553/0x710 [ 1151.301291][ T3639] dup_mm+0xa99/0x13a0 [ 1151.305364][ T3639] ? replace_mm_exe_file+0x480/0x480 [ 1151.310647][ T3639] ? __raw_spin_lock_init+0x36/0x110 [ 1151.315930][ T3639] copy_process+0x3cb9/0x7090 [ 1151.320602][ T3639] ? find_held_lock+0x2d/0x110 [ 1151.325370][ T3639] ? __cleanup_sighand+0xb0/0xb0 [ 1151.330316][ T3639] kernel_clone+0xe7/0xab0 [ 1151.334725][ T3639] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1151.340698][ T3639] ? create_io_thread+0xe0/0xe0 [ 1151.345549][ T3639] ? find_held_lock+0x2d/0x110 [ 1151.350306][ T3639] ? __ct_user_exit+0xff/0x150 [ 1151.355071][ T3639] __do_sys_clone+0xba/0x100 [ 1151.359742][ T3639] ? kernel_clone+0xab0/0xab0 [ 1151.364421][ T3639] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1151.370311][ T3639] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1151.376205][ T3639] do_syscall_64+0x35/0xb0 [ 1151.380614][ T3639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.386500][ T3639] RIP: 0033:0x7fe68848786b [ 1151.390908][ T3639] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1151.410509][ T3639] RSP: 002b:00007ffffbe4ac20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1151.418914][ T3639] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe68848786b [ 1151.426878][ T3639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 22:05:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x30000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1151.434839][ T3639] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555810400 [ 1151.442803][ T3639] R10: 00005555558106d0 R11: 0000000000000246 R12: 0000000000000001 [ 1151.450765][ T3639] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffffbe4ad00 [ 1151.458742][ T3639] 22:05:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020001f00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1151.522794][ T3639] memory: usage 307040kB, limit 307200kB, failcnt 8194 [ 1151.530675][ T3639] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1151.543491][ T3639] Memory cgroup stats for /syz1: [ 1151.543875][ T3639] anon 57344 [ 1151.543875][ T3639] file 184320 [ 1151.543875][ T3639] kernel 314167296 [ 1151.543875][ T3639] kernel_stack 32768 [ 1151.543875][ T3639] pagetables 12288 [ 1151.543875][ T3639] percpu 5372992 [ 1151.543875][ T3639] sock 0 [ 1151.543875][ T3639] vmalloc 8192 [ 1151.543875][ T3639] shmem 180224 [ 1151.543875][ T3639] zswap 0 [ 1151.543875][ T3639] zswapped 0 [ 1151.543875][ T3639] file_mapped 180224 [ 1151.543875][ T3639] file_dirty 4096 [ 1151.543875][ T3639] file_writeback 0 [ 1151.543875][ T3639] swapcached 0 [ 1151.543875][ T3639] anon_thp 0 [ 1151.543875][ T3639] file_thp 0 [ 1151.543875][ T3639] shmem_thp 0 [ 1151.543875][ T3639] inactive_anon 57344 [ 1151.543875][ T3639] active_anon 180224 [ 1151.543875][ T3639] inactive_file 0 [ 1151.543875][ T3639] active_file 4096 [ 1151.543875][ T3639] unevictable 0 [ 1151.543875][ T3639] slab_reclaimable 11376 [ 1151.543875][ T3639] slab_unreclaimable 308700984 [ 1151.543875][ T3639] slab 308712360 [ 1151.655348][ T4362] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x8000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1151.656505][ T3639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3639,uid=0 [ 1151.683232][ T4362] I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020002000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x900}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1151.718347][ T4362] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1151.744481][ T4362] I/O error, dev loop4, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 22:05:52 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@buf={0x29, &(0x7f0000000100)="41a464d7d877e6b1c9caa62b67f7456de64ea0f580babaa93170b3d2c4b483f25bc8a9442858ee58bc"}) [ 1151.777968][T20129] loop5: detected capacity change from 0 to 512 [ 1151.805317][T20129] EXT4-fs (loop5): invalid inodes per group: 2097184 [ 1151.805317][T20129] 22:05:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020102000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1151.811769][ T3639] Memory cgroup out of memory: Killed process 3639 (syz-executor.1) total-vm:50536kB, anon-rss:396kB, file-rss:9072kB, shmem-rss:4kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1151.836435][T20131] loop4: detected capacity change from 0 to 68 [ 1151.868365][ T4362] ldm_validate_partition_table(): Disk read failed. [ 1151.891428][T20137] loop5: detected capacity change from 0 to 512 [ 1151.896184][T20135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1151.907547][ T4362] loop4: unable to read partition table [ 1151.907790][T20131] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1151.908235][T20131] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1151.908257][T20131] FAT-fs (loop4): Filesystem has been set read-only 22:05:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x9000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1151.938288][T20137] EXT4-fs (loop5): invalid inodes per group: 2101280 [ 1151.938288][T20137] 22:05:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x34000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020002600d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1152.032815][T20140] FAT-fs (loop4): bogus number of reserved sectors [ 1152.071033][T20140] FAT-fs (loop4): Can't find a valid FAT filesystem 22:05:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xa000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1152.103192][T20145] loop5: detected capacity change from 0 to 512 [ 1152.166620][T20145] EXT4-fs (loop5): invalid inodes per group: 2490400 [ 1152.166620][T20145] [ 1152.203348][T20149] FAT-fs (loop4): bogus number of reserved sectors [ 1152.218721][T20149] FAT-fs (loop4): Can't find a valid FAT filesystem 22:05:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0xb, 0xa, r8}]}, 0x4c}}, 0x0) 22:05:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xc000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020002a00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0x28}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x400300}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1152.397414][T20152] FAT-fs (loop4): bogus number of reserved sectors [ 1152.418123][T20158] loop5: detected capacity change from 0 to 512 [ 1152.432694][T20152] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1152.448340][T20158] EXT4-fs (loop5): invalid inodes per group: 2752544 [ 1152.448340][T20158] 22:05:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xd000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020003f00d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1152.494697][ T3740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.584781][T20157] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf00}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1152.628697][T20168] FAT-fs (loop4): bogus number of reserved sectors [ 1152.662487][T20170] loop5: detected capacity change from 0 to 512 [ 1152.681730][ T4362] ldm_validate_partition_table(): Disk read failed. [ 1152.688487][ T4362] Dev loop5: unable to read RDB block 0 [ 1152.732125][ T3740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.751103][T20168] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1152.771107][ T4362] loop5: unable to read partition table 22:05:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x10, 0xa, r8}]}, 0x4c}}, 0x0) [ 1152.777840][T20170] EXT4-fs (loop5): invalid inodes per group: 4128800 [ 1152.777840][T20170] 22:05:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x9effffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf0ffff}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0xf000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020004000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1153.000764][T20183] FAT-fs (loop4): bogus number of reserved sectors [ 1153.064976][T20187] loop5: detected capacity change from 0 to 512 [ 1153.070825][T20183] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1153.104997][T20187] EXT4-fs (loop5): invalid inodes per group: 4194336 [ 1153.104997][T20187] [ 1153.106676][ T3740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 22:05:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020524500d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) 22:05:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x10000000, 0x4400}], 0x0, &(0x7f0000011100)) 22:05:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x215c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 1153.293026][T20191] loop5: detected capacity change from 0 to 512 [ 1153.324166][T20193] FAT-fs (loop4): bogus number of reserved sectors 22:05:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x10}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1000000}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 22:05:54 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000010000000800010075333200200002000800010000000b00140005"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_delroute={0x90, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x5, 0xfe, 0x4, 0xfd, 0x11, 0x2b00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x4d, r6}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) [ 1153.423286][T20191] EXT4-fs (loop5): invalid inodes per group: 4543008 [ 1153.423286][T20191] [ 1153.423928][T20193] FAT-fs (loop4): Can't find a valid FAT filesystem 22:05:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020004600d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@norecovery}]}) [ 1153.485434][ T3740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.603668][T20201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:05:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x11000000, 0x4400}], 0x0, &(0x7f0000011100)) [ 1153.665972][T20207] loop5: detected capacity change from 0 to 512 [ 1153.754010][T20207] EXT4-fs (loop5): invalid inodes per group: 4587552 [ 1153.754010][T20207] [ 1153.798001][T20210] FAT-fs (loop4): bogus number of reserved sectors [ 1153.880952][T20210] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1155.403538][ T3740] device vlan2087 left promiscuous mode [ 1155.415118][ T3740] bridge2424: port 1(vlan2087) entered disabled state [ 1155.628457][ T3740] device vlan2060 left promiscuous mode [ 1155.648581][ T3740] bridge2368: port 1(vlan2060) entered disabled state [ 1155.695130][ T3740] device vlan2057 left promiscuous mode [ 1155.716454][ T3740] bridge2364: port 1(vlan2057) entered disabled state [ 1155.748080][ T3740] device vlan2055 left promiscuous mode [ 1155.767865][ T3740] bridge2362: port 1(vlan2055) entered disabled state [ 1155.848411][ T3740] device vlan2045 left promiscuous mode [ 1155.858251][ T3740] bridge2342: port 1(vlan2045) entered disabled state [ 1155.886203][ T3740] device vlan2043 left promiscuous mode [ 1155.894453][ T3740] bridge2340: port 1(vlan2043) entered disabled state [ 1155.918636][ T3740] device vlan2041 left promiscuous mode [ 1155.933630][ T3740] bridge2338: port 1(vlan2041) entered disabled state [ 1155.951586][ T3740] device vlan2038 left promiscuous mode [ 1155.957547][ T3740] bridge2336: port 1(vlan2038) entered disabled state [ 1155.984488][ T3740] device vlan2037 left promiscuous mode [ 1155.997863][ T3740] bridge2334: port 1(vlan2037) entered disabled state [ 1156.024305][ T3740] device vlan2035 left promiscuous mode [ 1156.048700][ T3740] bridge2332: port 1(vlan2035) entered disabled state [ 1156.072892][ T3740] device vlan2033 left promiscuous mode [ 1156.078504][ T3740] bridge2330: port 1(vlan2033) entered disabled state [ 1156.093344][ T3740] device vlan2031 left promiscuous mode [ 1156.098946][ T3740] bridge2328: port 1(vlan2031) entered disabled state [ 1156.115903][ T3740] device vlan2028 left promiscuous mode [ 1156.125649][ T3740] bridge2324: port 1(vlan2028) entered disabled state [ 1156.138752][ T3740] device vlan2026 left promiscuous mode [ 1156.145612][ T3740] bridge2322: port 1(vlan2026) entered disabled state [ 1156.158840][ T3740] device vlan2024 left promiscuous mode [ 1156.165878][ T3740] bridge2320: port 1(vlan2024) entered disabled state [ 1156.178464][ T3740] device vlan2022 left promiscuous mode [ 1156.186355][ T3740] bridge2318: port 1(vlan2022) entered disabled state [ 1156.201058][ T3740] device vlan2020 left promiscuous mode [ 1156.206666][ T3740] bridge2316: port 1(vlan2020) entered disabled state [ 1156.222100][ T3740] device vlan2018 left promiscuous mode [ 1156.227717][ T3740] bridge2314: port 1(vlan2018) entered disabled state [ 1156.245564][ T3740] device vlan2015 left promiscuous mode [ 1156.252339][ T3740] bridge2310: port 1(vlan2015) entered disabled state [ 1156.273829][ T3740] device vlan2012 left promiscuous mode [ 1156.282568][ T3740] bridge2306: port 1(vlan2012) entered disabled state [ 1156.295698][ T3740] device vlan2010 left promiscuous mode [ 1156.303327][ T3740] bridge2304: port 1(vlan2010) entered disabled state [ 1156.316115][ T3740] device vlan2008 left promiscuous mode [ 1156.323529][ T3740] bridge2302: port 1(vlan2008) entered disabled state [ 1156.336068][ T3740] device vlan2006 left promiscuous mode [ 1156.343596][ T3740] bridge2300: port 1(vlan2006) entered disabled state [ 1156.356322][ T3740] device vlan2004 left promiscuous mode [ 1156.364054][ T3740] bridge2298: port 1(vlan2004) entered disabled state [ 1156.377200][ T3740] device vlan2002 left promiscuous mode [ 1156.385693][ T3740] bridge2296: port 1(vlan2002) entered disabled state [ 1156.398201][ T3740] device vlan2000 left promiscuous mode [ 1156.405130][ T3740] bridge2294: port 1(vlan2000) entered disabled state [ 1156.418756][ T3740] device vlan1998 left promiscuous mode [ 1156.425570][ T3740] bridge2292: port 1(vlan1998) entered disabled state [ 1156.438325][ T3740] device vlan1996 left promiscuous mode [ 1156.445159][ T3740] bridge2290: port 1(vlan1996) entered disabled state [ 1156.460805][ T3740] device vlan1994 left promiscuous mode [ 1156.466411][ T3740] bridge2288: port 1(vlan1994) entered disabled state [ 1156.481312][ T3740] device vlan1992 left promiscuous mode [ 1156.486928][ T3740] bridge2286: port 1(vlan1992) entered disabled state [ 1156.501685][ T3740] device vlan1990 left promiscuous mode [ 1156.507283][ T3740] bridge2284: port 1(vlan1990) entered disabled state [ 1156.523811][ T3740] device vlan1988 left promiscuous mode [ 1156.531483][ T3740] bridge2282: port 1(vlan1988) entered disabled state [ 1156.544989][ T3740] device vlan1986 left promiscuous mode [ 1156.552127][ T3740] bridge2280: port 1(vlan1986) entered disabled state [ 1156.567271][ T3740] device vlan1984 left promiscuous mode [ 1156.574080][ T3740] bridge2278: port 1(vlan1984) entered disabled state [ 1156.588055][ T3740] device vlan1982 left promiscuous mode [ 1156.595138][ T3740] bridge2276: port 1(vlan1982) entered disabled state [ 1156.608159][ T3740] device vlan1980 left promiscuous mode [ 1156.617768][ T3740] bridge2274: port 1(vlan1980) entered disabled state [ 1156.634516][ T3740] device vlan1978 left promiscuous mode [ 1156.641467][ T3740] bridge2272: port 1(vlan1978) entered disabled state [ 1156.656025][ T3740] device vlan1976 left promiscuous mode [ 1156.663165][ T3740] bridge2270: port 1(vlan1976) entered disabled state [ 1156.678504][ T3740] device vlan1974 left promiscuous mode [ 1156.685434][ T3740] bridge2268: port 1(vlan1974) entered disabled state [ 1156.698137][ T3740] device vlan1972 left promiscuous mode [ 1156.707369][ T3740] bridge2266: port 1(vlan1972) entered disabled state [ 1156.720385][ T3740] device vlan1970 left promiscuous mode [ 1156.726158][ T3740] bridge2264: port 1(vlan1970) entered disabled state [ 1156.742621][ T3740] device vlan1968 left promiscuous mode [ 1156.748322][ T3740] bridge2262: port 1(vlan1968) entered disabled state [ 1156.768346][ T3740] device vlan1966 left promiscuous mode [ 1156.776395][ T3740] bridge2260: port 1(vlan1966) entered disabled state [ 1156.792350][ T3740] device vlan1964 left promiscuous mode [ 1156.797955][ T3740] bridge2258: port 1(vlan1964) entered disabled state [ 1156.814181][ T3740] device vlan1962 left promiscuous mode [ 1156.821314][ T3740] bridge2256: port 1(vlan1962) entered disabled state [ 1156.838730][ T3740] device vlan1959 left promiscuous mode [ 1156.846151][ T3740] bridge2252: port 1(vlan1959) entered disabled state [ 1156.858374][ T3740] device vlan1958 left promiscuous mode [ 1156.865103][ T3740] bridge2250: port 1(vlan1958) entered disabled state [ 1156.877397][ T3740] device vlan1956 left promiscuous mode [ 1156.884521][ T3740] bridge2248: port 1(vlan1956) entered disabled state [ 1156.898362][ T3740] device vlan1954 left promiscuous mode [ 1156.905992][ T3740] bridge2246: port 1(vlan1954) entered disabled state [ 1156.922465][ T3740] device vlan1952 left promiscuous mode [ 1156.928179][ T3740] bridge2244: port 1(vlan1952) entered disabled state [ 1156.943933][ T3740] device vlan1950 left promiscuous mode [ 1156.951450][ T3740] bridge2242: port 1(vlan1950) entered disabled state [ 1156.966384][ T3740] device vlan1948 left promiscuous mode [ 1156.973319][ T3740] bridge2240: port 1(vlan1948) entered disabled state [ 1156.987268][ T3740] device vlan1946 left promiscuous mode [ 1156.994379][ T3740] bridge2238: port 1(vlan1946) entered disabled state [ 1157.006739][ T3740] device vlan1944 left promiscuous mode [ 1157.014592][ T3740] bridge2236: port 1(vlan1944) entered disabled state [ 1157.027187][ T3740] device vlan1942 left promiscuous mode [ 1157.034043][ T3740] bridge2234: port 1(vlan1942) entered disabled state [ 1157.047850][ T3740] device vlan1940 left promiscuous mode [ 1157.055259][ T3740] bridge2232: port 1(vlan1940) entered disabled state [ 1157.082950][ T3740] device vlan1938 left promiscuous mode [ 1157.088666][ T3740] bridge2230: port 1(vlan1938) entered disabled state [ 1157.113021][ T3740] device vlan1936 left promiscuous mode [ 1157.118678][ T3740] bridge2228: port 1(vlan1936) entered disabled state [ 1157.144398][ T3740] device vlan1934 left promiscuous mode [ 1157.157068][ T3740] bridge2226: port 1(vlan1934) entered disabled state [ 1157.182770][ T3740] device vlan1932 left promiscuous mode [ 1157.188562][ T3740] bridge2224: port 1(vlan1932) entered disabled state [ 1157.206489][ T3740] device vlan1930 left promiscuous mode [ 1157.214470][ T3740] bridge2222: port 1(vlan1930) entered disabled state [ 1157.227876][ T3740] device vlan1928 left promiscuous mode [ 1157.234750][ T3740] bridge2220: port 1(vlan1928) entered disabled state [ 1157.246626][ T3740] device vlan1926 left promiscuous mode [ 1157.254091][ T3740] bridge2218: port 1(vlan1926) entered disabled state [ 1157.266228][ T3740] device vlan1924 left promiscuous mode [ 1157.275506][ T3740] bridge2216: port 1(vlan1924) entered disabled state [ 1157.287639][ T3740] device vlan1922 left promiscuous mode [ 1157.295014][ T3740] bridge2214: port 1(vlan1922) entered disabled state [ 1157.308448][ T3740] device vlan1919 left promiscuous mode [ 1157.315500][ T3740] bridge2210: port 1(vlan1919) entered disabled state [ 1157.327462][ T3740] device vlan1917 left promiscuous mode [ 1157.335142][ T3740] bridge2208: port 1(vlan1917) entered disabled state [ 1157.346766][ T3740] device vlan1915 left promiscuous mode [ 1157.353666][ T3740] bridge2206: port 1(vlan1915) entered disabled state [ 1157.366981][ T3740] device vlan1913 left promiscuous mode [ 1157.373927][ T3740] bridge2204: port 1(vlan1913) entered disabled state [ 1157.389009][ T3740] device vlan1911 left promiscuous mode [ 1157.394833][ T3740] bridge2202: port 1(vlan1911) entered disabled state [ 1157.408643][ T3740] device vlan1909 left promiscuous mode [ 1157.415395][ T3740] bridge2200: port 1(vlan1909) entered disabled state [ 1157.430466][ T3740] device vlan1907 left promiscuous mode [ 1157.436087][ T3740] bridge2198: port 1(vlan1907) entered disabled state [ 1157.452254][ T3740] device vlan1905 left promiscuous mode [ 1157.457852][ T3740] bridge2196: port 1(vlan1905) entered disabled state [ 1157.475393][ T3740] device vlan1903 left promiscuous mode [ 1157.482728][ T3740] bridge2194: port 1(vlan1903) entered disabled state [ 1157.497114][ T3740] device vlan1901 left promiscuous mode [ 1157.504490][ T3740] bridge2192: port 1(vlan1901) entered disabled state [ 1157.516738][ T3740] device vlan1899 left promiscuous mode [ 1157.524378][ T3740] bridge2190: port 1(vlan1899) entered disabled state [ 1157.536147][ T3740] device vlan1897 left promiscuous mode [ 1157.543379][ T3740] bridge2188: port 1(vlan1897) entered disabled state [ 1157.557570][ T3740] device vlan1895 left promiscuous mode [ 1157.565023][ T3740] bridge2186: port 1(vlan1895) entered disabled state [ 1157.577251][ T3740] device vlan1893 left promiscuous mode [ 1157.584085][ T3740] bridge2184: port 1(vlan1893) entered disabled state [ 1157.596955][ T3740] device vlan1891 left promiscuous mode [ 1157.603551][ T3740] bridge2182: port 1(vlan1891) entered disabled state [ 1157.616683][ T3740] device vlan1889 left promiscuous mode [ 1157.623926][ T3740] bridge2180: port 1(vlan1889) entered disabled state [ 1157.636934][ T3740] device vlan1887 left promiscuous mode [ 1157.643941][ T3740] bridge2178: port 1(vlan1887) entered disabled state [ 1157.658686][ T3740] device vlan1885 left promiscuous mode [ 1157.666314][ T3740] bridge2176: port 1(vlan1885) entered disabled state [ 1157.681180][ T3740] device vlan1883 left promiscuous mode [ 1157.686806][ T3740] bridge2174: port 1(vlan1883) entered disabled state [ 1157.698603][ T3740] device vlan1881 left promiscuous mode [ 1157.705473][ T3740] bridge2172: port 1(vlan1881) entered disabled state [ 1157.723792][ T3740] device vlan1879 left promiscuous mode [ 1157.733133][ T3740] bridge2170: port 1(vlan1879) entered disabled state [ 1157.745306][ T3740] device vlan1877 left promiscuous mode [ 1157.753127][ T3740] bridge2168: port 1(vlan1877) entered disabled state [ 1157.768418][ T3740] device vlan1875 left promiscuous mode [ 1157.776099][ T3740] bridge2164: port 1(vlan1875) entered disabled state [ 1157.787871][ T3740] device vlan1873 left promiscuous mode [ 1157.795313][ T3740] bridge2162: port 1(vlan1873) entered disabled state [ 1157.811413][ T3740] device vlan1871 left promiscuous mode [ 1157.817046][ T3740] bridge2160: port 1(vlan1871) entered disabled state [ 1157.831025][ T3740] device vlan1869 left promiscuous mode [ 1157.836628][ T3740] bridge2158: port 1(vlan1869) entered disabled state [ 1157.848868][ T3740] device vlan1867 left promiscuous mode [ 1157.857446][ T3740] bridge2156: port 1(vlan1867) entered disabled state [ 1157.870740][ T3740] device vlan1865 left promiscuous mode [ 1157.876383][ T3740] bridge2154: port 1(vlan1865) entered disabled state [ 1157.892510][ T3740] device vlan1863 left promiscuous mode [ 1157.898122][ T3740] bridge2152: port 1(vlan1863) entered disabled state [ 1157.912247][ T3740] device vlan1861 left promiscuous mode [ 1157.917917][ T3740] bridge2151: port 1(vlan1861) entered disabled state [ 1157.977544][ T3740] device vlan1859 left promiscuous mode [ 1157.988637][ T3740] bridge2148: port 1(vlan1859) entered disabled state [ 1158.003437][ T3740] device vlan1856 left promiscuous mode [ 1158.011948][ T3740] bridge2144: port 1(vlan1856) entered disabled state [ 1158.024035][ T3740] device vlan1854 left promiscuous mode [ 1158.032209][ T3740] bridge2142: port 1(vlan1854) entered disabled state [ 1158.045974][ T3740] device vlan1852 left promiscuous mode [ 1158.053159][ T3740] bridge2140: port 1(vlan1852) entered disabled state [ 1158.066994][ T3740] device vlan1850 left promiscuous mode [ 1158.073881][ T3740] bridge2138: port 1(vlan1850) entered disabled state [ 1158.087193][ T3740] device vlan1848 left promiscuous mode [ 1158.094171][ T3740] bridge2136: port 1(vlan1848) entered disabled state [ 1158.107465][ T3740] device vlan1846 left promiscuous mode [ 1158.122397][ T3740] bridge2134: port 1(vlan1846) entered disabled state [ 1158.134934][ T3740] device vlan1844 left promiscuous mode [ 1158.142491][ T3740] bridge2132: port 1(vlan1844) entered disabled state [ 1158.155380][ T3740] device vlan1842 left promiscuous mode [ 1158.162098][ T3740] bridge2130: port 1(vlan1842) entered disabled state [ 1158.176384][ T3740] device vlan1840 left promiscuous mode [ 1158.183288][ T3740] bridge2128: port 1(vlan1840) entered disabled state [ 1158.197485][ T3740] device vlan1838 left promiscuous mode [ 1158.204307][ T3740] bridge2126: port 1(vlan1838) entered disabled state [ 1158.219660][ T3740] device vlan1836 left promiscuous mode [ 1158.225449][ T3740] bridge2124: port 1(vlan1836) entered disabled state [ 1158.239122][ T3740] device vlan1834 left promiscuous mode [ 1158.244726][ T3740] bridge2122: port 1(vlan1834) entered disabled state [ 1158.258807][ T3740] device vlan1832 left promiscuous mode [ 1158.265464][ T3740] bridge2120: port 1(vlan1832) entered disabled state [ 1158.284984][ T3665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.294181][ T3740] device vlan1830 left promiscuous mode [ 1158.294301][ T3740] bridge2118: port 1(vlan1830) entered disabled state [ 1158.312893][ T3665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.321735][ T3665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.324673][ T3740] device vlan1828 left promiscuous mode [ 1158.330611][ T3665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.342636][ T3740] bridge2116: port 1(vlan1828) entered disabled state [ 1158.353521][T20257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1158.362107][T20257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.365170][ T3740] device vlan1826 left promiscuous mode [ 1158.377920][ T3740] bridge2114: port 1(vlan1826) entered disabled state [ 1158.398824][ T3740] device vlan1824 left promiscuous mode [ 1158.405715][ T3740] bridge2112: port 1(vlan1824) entered disabled state [ 1158.417307][ T3740] device vlan1822 left promiscuous mode [ 1158.425651][ T3740] bridge2110: port 1(vlan1822) entered disabled state [ 1158.437746][ T3740] device vlan1820 left promiscuous mode [ 1158.445258][ T3740] bridge2108: port 1(vlan1820) entered disabled state [ 1158.457495][ T3740] device vlan1818 left promiscuous mode [ 1158.464385][ T3740] bridge2106: port 1(vlan1818) entered disabled state [ 1158.478613][ T3740] device vlan1816 left promiscuous mode [ 1158.485546][ T3740] bridge2104: port 1(vlan1816) entered disabled state [ 1158.498212][ T3740] device vlan1814 left promiscuous mode [ 1158.504756][ T3740] bridge2102: port 1(vlan1814) entered disabled state [ 1158.517503][ T3740] device vlan1812 left promiscuous mode [ 1158.524215][ T3740] bridge2100: port 1(vlan1812) entered disabled state [ 1158.537549][ T3740] device vlan1810 left promiscuous mode [ 1158.544495][ T3740] bridge2098: port 1(vlan1810) entered disabled state [ 1158.557489][ T3740] device vlan1808 left promiscuous mode [ 1158.564405][ T3740] bridge2096: port 1(vlan1808) entered disabled state [ 1158.575258][ T3740] device vlan1806 left promiscuous mode [ 1158.582560][ T3740] bridge2094: port 1(vlan1806) entered disabled state [ 1158.599172][ T3740] device vlan1804 left promiscuous mode [ 1158.604801][ T3740] bridge2090: port 1(vlan1804) entered disabled state [ 1158.618958][ T3740] device vlan1802 left promiscuous mode [ 1158.624620][ T3740] bridge2088: port 1(vlan1802) entered disabled state [ 1158.638334][ T3740] device vlan1800 left promiscuous mode [ 1158.644968][ T3740] bridge2086: port 1(vlan1800) entered disabled state [ 1158.657878][ T3740] device vlan1798 left promiscuous mode [ 1158.664801][ T3740] bridge2084: port 1(vlan1798) entered disabled state [ 1158.678695][ T3740] device vlan1796 left promiscuous mode [ 1158.685388][ T3740] bridge2082: port 1(vlan1796) entered disabled state [ 1158.697148][ T3740] device vlan1794 left promiscuous mode [ 1158.704689][ T3740] bridge2080: port 1(vlan1794) entered disabled state [ 1158.716102][ T3740] device vlan1792 left promiscuous mode [ 1158.723184][ T3740] bridge2078: port 1(vlan1792) entered disabled state [ 1158.737336][ T3740] device vlan1790 left promiscuous mode [ 1158.744349][ T3740] bridge2076: port 1(vlan1790) entered disabled state [ 1158.760677][ T3740] device vlan1788 left promiscuous mode [ 1158.766282][ T3740] bridge2074: port 1(vlan1788) entered disabled state [ 1158.777509][ T3740] device vlan1786 left promiscuous mode [ 1158.784702][ T3740] bridge2072: port 1(vlan1786) entered disabled state [ 1158.796270][ T3740] device vlan1784 left promiscuous mode [ 1158.803315][ T3740] bridge2070: port 1(vlan1784) entered disabled state [ 1158.815870][ T3740] device vlan1782 left promiscuous mode [ 1158.822744][ T3740] bridge2069: port 1(vlan1782) entered disabled state [ 1158.838310][ T3740] device vlan1780 left promiscuous mode [ 1158.845781][ T3740] bridge2066: port 1(vlan1780) entered disabled state [ 1158.857200][ T3740] device vlan1778 left promiscuous mode [ 1158.864110][ T3740] bridge2064: port 1(vlan1778) entered disabled state [ 1158.878397][ T3740] device vlan1776 left promiscuous mode [ 1158.885425][ T3740] bridge2062: port 1(vlan1776) entered disabled state [ 1158.898369][ T3740] device vlan1774 left promiscuous mode [ 1158.905291][ T3740] bridge2060: port 1(vlan1774) entered disabled state [ 1158.920852][ T3740] device vlan1772 left promiscuous mode [ 1158.926701][ T3740] bridge2058: port 1(vlan1772) entered disabled state [ 1158.938433][ T3740] device vlan1770 left promiscuous mode [ 1158.945295][ T3740] bridge2056: port 1(vlan1770) entered disabled state [ 1158.959983][ T3740] device vlan1768 left promiscuous mode [ 1158.965605][ T3740] bridge2054: port 1(vlan1768) entered disabled state [ 1158.979713][ T3740] device vlan1766 left promiscuous mode [ 1158.985349][ T3740] bridge2052: port 1(vlan1766) entered disabled state [ 1159.001155][ T3740] device vlan1764 left promiscuous mode [ 1159.006769][ T3740] bridge2050: port 1(vlan1764) entered disabled state [ 1159.019484][ T3740] device vlan1762 left promiscuous mode [ 1159.025122][ T3740] bridge2048: port 1(vlan1762) entered disabled state [ 1159.038484][ T3740] device vlan1760 left promiscuous mode [ 1159.045734][ T3740] bridge2046: port 1(vlan1760) entered disabled state [ 1159.062935][ T3740] device vlan1758 left promiscuous mode [ 1159.068583][ T3740] bridge2044: port 1(vlan1758) entered disabled state [ 1159.082732][ T3740] device vlan1756 left promiscuous mode [ 1159.088520][ T3740] bridge2042: port 1(vlan1756) entered disabled state [ 1159.101892][ T3740] device vlan1754 left promiscuous mode [ 1159.107515][ T3740] bridge2040: port 1(vlan1754) entered disabled state [ 1159.118853][ T3740] device vlan1752 left promiscuous mode [ 1159.125468][ T3740] bridge2038: port 1(vlan1752) entered disabled state [ 1159.137423][ T3740] device vlan1750 left promiscuous mode [ 1159.144362][ T3740] bridge2036: port 1(vlan1750) entered disabled state [ 1159.170249][ T3740] device vlan1748 left promiscuous mode [ 1159.175875][ T3740] bridge2034: port 1(vlan1748) entered disabled state [ 1159.188796][ T3740] device vlan1746 left promiscuous mode [ 1159.195462][ T3740] bridge2032: port 1(vlan1746) entered disabled state [ 1159.207426][ T3740] device vlan1744 left promiscuous mode [ 1159.214146][ T3740] bridge2030: port 1(vlan1744) entered disabled state [ 1159.227243][ T3740] device vlan1742 left promiscuous mode [ 1159.234786][ T3740] bridge2028: port 1(vlan1742) entered disabled state [ 1159.246232][ T3740] device vlan1740 left promiscuous mode [ 1159.253588][ T3740] bridge2026: port 1(vlan1740) entered disabled state [ 1159.267431][ T3740] device vlan1737 left promiscuous mode [ 1159.274365][ T3740] bridge2022: port 1(vlan1737) entered disabled state [ 1159.290495][ T3740] device vlan1734 left promiscuous mode [ 1159.296093][ T3740] bridge2018: port 1(vlan1734) entered disabled state [ 1159.309441][ T3740] device vlan1732 left promiscuous mode [ 1159.315055][ T3740] bridge2016: port 1(vlan1732) entered disabled state [ 1159.330902][ T3740] bridge2014: port 1(vlan1730) entered disabled state [ 1159.343718][ T3740] bridge2012: port 1(vlan1728) entered disabled state [ 1159.354622][ T3740] bridge2010: port 1(vlan1726) entered disabled state [ 1159.365717][ T3740] bridge2008: port 1(vlan1724) entered disabled state [ 1159.377638][ T3740] bridge2006: port 1(vlan1722) entered disabled state [ 1159.392505][ T3740] bridge2004: port 1(vlan1720) entered disabled state [ 1159.403970][ T3740] device vlan1718 left promiscuous mode [ 1159.412895][ T3740] bridge2002: port 1(vlan1718) entered disabled state [ 1159.427540][ T3740] device vlan1715 left promiscuous mode [ 1159.435424][ T3740] bridge1998: port 1(vlan1715) entered disabled state [ 1159.446471][ T3740] device vlan1713 left promiscuous mode [ 1159.454885][ T3740] bridge1996: port 1(vlan1713) entered disabled state [ 1159.466056][ T3740] bridge1994: port 1(vlan1711) entered disabled state [ 1159.477822][ T3740] device vlan1709 left promiscuous mode [ 1159.484764][ T3740] bridge1992: port 1(vlan1709) entered disabled state [ 1159.497804][ T3740] device vlan1707 left promiscuous mode [ 1159.504921][ T3740] bridge1990: port 1(vlan1707) entered disabled state [ 1159.517161][ T3740] device vlan1705 left promiscuous mode [ 1159.523842][ T3740] bridge1988: port 1(vlan1705) entered disabled state [ 1159.537233][ T3740] bridge1986: port 1(vlan1703) entered disabled state [ 1159.548832][ T3740] bridge1984: port 1(vlan1701) entered disabled state [ 1159.561098][ T3740] bridge1982: port 1(vlan1699) entered disabled state [ 1159.574939][ T3740] device vlan1697 left promiscuous mode [ 1159.581664][ T3740] bridge1980: port 1(vlan1697) entered disabled state [ 1159.593915][ T3740] bridge1978: port 1(vlan1695) entered disabled state [ 1159.606591][ T3740] device vlan1693 left promiscuous mode [ 1159.614109][ T3740] bridge1976: port 1(vlan1693) entered disabled state [ 1159.625451][ T3740] device vlan1691 left promiscuous mode [ 1159.633316][ T3740] bridge1974: port 1(vlan1691) entered disabled state [ 1159.645360][ T3740] device vlan1689 left promiscuous mode [ 1159.653748][ T3740] bridge1972: port 1(vlan1689) entered disabled state [ 1159.664656][ T3740] bridge1970: port 1(vlan1687) entered disabled state [ 1159.678436][ T3740] bridge1966: port 1(vlan1684) entered disabled state [ 1159.688894][ T3740] bridge1964: port 1(vlan1682) entered disabled state [ 1159.703466][ T3740] bridge1962: port 1(vlan1680) entered disabled state [ 1159.715262][ T3740] bridge1960: port 1(vlan1678) entered disabled state [ 1159.729250][ T3740] bridge1958: port 1(vlan1676) entered disabled state [ 1159.738721][ T3740] bridge1956: port 1(vlan1674) entered disabled state [ 1159.751141][ T3740] device vlan1672 left promiscuous mode [ 1159.756738][ T3740] bridge1954: port 1(vlan1672) entered disabled state [ 1159.771614][ T3740] bridge1952: port 1(vlan1671) entered disabled state [ 1159.785555][ T3740] bridge1950: port 1(vlan1669) entered disabled state [ 1159.797748][ T3740] bridge1948: port 1(vlan1667) entered disabled state [ 1159.812976][ T3740] bridge1946: port 1(vlan1665) entered disabled state [ 1159.824852][ T3740] device vlan1663 left promiscuous mode [ 1159.834172][ T3740] bridge1944: port 1(vlan1663) entered disabled state [ 1159.845397][ T3740] bridge1942: port 1(vlan1661) entered disabled state [ 1159.858904][ T3740] bridge1938: port 1(vlan1658) entered disabled state [ 1159.870184][ T3740] device vlan1656 left promiscuous mode [ 1159.875791][ T3740] bridge1936: port 1(vlan1656) entered disabled state [ 1159.895436][ T3740] bridge1934: port 1(vlan1654) entered disabled state [ 1159.908217][ T3740] bridge1932: port 1(vlan1652) entered disabled state [ 1159.924702][ T3740] bridge1928: port 1(vlan1649) entered disabled state [ 1159.936882][ T3740] bridge1926: port 1(vlan1647) entered disabled state [ 1159.948062][ T3740] device vlan1645 left promiscuous mode [ 1159.954648][ T3740] bridge1924: port 1(vlan1645) entered disabled state [ 1159.971561][ T3740] bridge1920: port 1(vlan1642) entered disabled state [ 1159.984585][ T3740] bridge1918: port 1(vlan1640) entered disabled state [ 1159.995345][ T3740] bridge1916: port 1(vlan1638) entered disabled state [ 1160.006588][ T3740] bridge1914: port 1(vlan1636) entered disabled state [ 1160.020542][ T3740] bridge1912: port 1(vlan1634) entered disabled state [ 1160.033748][ T3740] bridge1910: port 1(vlan1632) entered disabled state [ 1160.046126][ T3740] bridge1908: port 1(vlan1630) entered disabled state [ 1160.057352][ T3740] bridge1906: port 1(vlan1629) entered disabled state [ 1160.068225][ T3740] bridge1904: port 1(vlan1627) entered disabled state [ 1160.079264][ T3740] bridge1902: port 1(vlan1625) entered disabled state [ 1160.088912][ T3740] bridge1900: port 1(vlan1623) entered disabled state [ 1160.101855][ T3740] bridge1898: port 1(vlan1621) entered disabled state [ 1160.115947][ T3740] device vlan1619 left promiscuous mode [ 1160.123313][ T3740] bridge1896: port 1(vlan1619) entered disabled state [ 1160.135559][ T3740] device vlan1617 left promiscuous mode [ 1160.142149][ T3740] bridge1894: port 1(vlan1617) entered disabled state [ 1160.156195][ T3740] device vlan1615 left promiscuous mode [ 1160.163518][ T3740] bridge1892: port 1(vlan1615) entered disabled state [ 1160.177398][ T3740] device vlan1613 left promiscuous mode [ 1160.184175][ T3740] bridge1890: port 1(vlan1613) entered disabled state [ 1160.202831][ T3740] device vlan1611 left promiscuous mode [ 1160.208429][ T3740] bridge1888: port 1(vlan1611) entered disabled state [ 1160.220107][ T3740] device vlan1609 left promiscuous mode [ 1160.225807][ T3740] bridge1886: port 1(vlan1609) entered disabled state [ 1160.238058][ T3740] device vlan1607 left promiscuous mode [ 1160.244537][ T3740] bridge1884: port 1(vlan1607) entered disabled state [ 1160.255972][ T3740] device vlan1605 left promiscuous mode [ 1160.263589][ T3740] bridge1882: port 1(vlan1605) entered disabled state [ 1160.275505][ T3740] device vlan1603 left promiscuous mode [ 1160.282892][ T3740] bridge1880: port 1(vlan1603) entered disabled state [ 1160.294855][ T3740] device vlan1601 left promiscuous mode [ 1160.302170][ T3740] bridge1878: port 1(vlan1601) entered disabled state [ 1160.315071][ T3740] device vlan1599 left promiscuous mode [ 1160.321614][ T3740] bridge1876: port 1(vlan1599) entered disabled state [ 1160.334742][ T3740] device vlan1597 left promiscuous mode [ 1160.341574][ T3740] bridge1874: port 1(vlan1597) entered disabled state [ 1160.355122][ T3740] device vlan1595 left promiscuous mode [ 1160.361828][ T3740] bridge1872: port 1(vlan1595) entered disabled state [ 1160.376894][ T3740] device vlan1593 left promiscuous mode [ 1160.383871][ T3740] bridge1870: port 1(vlan1593) entered disabled state [ 1160.394913][ T3740] device vlan1591 left promiscuous mode [ 1160.402599][ T3740] bridge1868: port 1(vlan1591) entered disabled state [ 1160.414305][ T3740] device vlan1589 left promiscuous mode [ 1160.421116][ T3740] bridge1866: port 1(vlan1589) entered disabled state [ 1160.430710][T12411] Bluetooth: hci0: command 0x0409 tx timeout [ 1160.437838][ T3740] device vlan1587 left promiscuous mode [ 1160.444424][ T3740] bridge1864: port 1(vlan1587) entered disabled state [ 1160.456869][ T3740] device vlan1585 left promiscuous mode [ 1160.463533][ T3740] bridge1862: port 1(vlan1585) entered disabled state [ 1160.477222][ T3740] device vlan1583 left promiscuous mode [ 1160.484560][ T3740] bridge1860: port 1(vlan1583) entered disabled state [ 1160.495328][ T3740] bridge1858: port 1(vlan1581) entered disabled state [ 1160.513289][ T3740] device vlan1579 left promiscuous mode [ 1160.518918][ T3740] device bridge1857 left promiscuous mode [ 1160.526687][ T3740] bridge1856: port 1(vlan1579) entered disabled state [ 1160.537497][ T3740] device vlan1577 left promiscuous mode [ 1160.544100][ T3740] bridge1854: port 1(vlan1577) entered disabled state [ 1160.555555][ T3740] device vlan1575 left promiscuous mode [ 1160.562616][ T3740] device bridge1853 left promiscuous mode [ 1160.568428][ T3740] bridge1852: port 1(vlan1575) entered disabled state [ 1160.580831][ T3740] device vlan1573 left promiscuous mode [ 1160.586435][ T3740] bridge1850: port 1(vlan1573) entered disabled state [ 1160.597951][ T3740] device vlan1571 left promiscuous mode [ 1160.604673][ T3740] device bridge1849 left promiscuous mode [ 1160.612141][ T3740] bridge1848: port 1(vlan1571) entered disabled state [ 1160.624204][ T3740] device vlan1569 left promiscuous mode [ 1160.632559][ T3740] bridge1846: port 1(vlan1569) entered disabled state [ 1160.644524][ T3740] device vlan1567 left promiscuous mode [ 1160.651977][ T3740] device bridge1845 left promiscuous mode [ 1160.657792][ T3740] bridge1844: port 1(vlan1567) entered disabled state [ 1160.671050][ T3740] device vlan1565 left promiscuous mode [ 1160.676642][ T3740] bridge1842: port 1(vlan1565) entered disabled state [ 1160.690523][ T3740] device vlan1563 left promiscuous mode [ 1160.696079][ T3740] device bridge1841 left promiscuous mode [ 1160.705089][ T3740] bridge1840: port 1(vlan1563) entered disabled state [ 1160.715963][ T3740] device vlan1561 left promiscuous mode [ 1160.723138][ T3740] bridge1838: port 1(vlan1561) entered disabled state [ 1160.734880][ T3740] device vlan1559 left promiscuous mode [ 1160.741876][ T3740] device bridge1837 left promiscuous mode [ 1160.747694][ T3740] bridge1836: port 1(vlan1559) entered disabled state [ 1160.758793][ T3740] device vlan1557 left promiscuous mode [ 1160.766293][ T3740] bridge1834: port 1(vlan1557) entered disabled state [ 1160.777322][ T3740] device vlan1555 left promiscuous mode [ 1160.783972][ T3740] device bridge1833 left promiscuous mode [ 1160.791491][ T3740] bridge1832: port 1(vlan1555) entered disabled state [ 1160.802399][ T3740] device vlan1553 left promiscuous mode [ 1160.807990][ T3740] bridge1830: port 1(vlan1553) entered disabled state [ 1160.822690][ T3740] device vlan1551 left promiscuous mode [ 1160.828243][ T3740] device bridge1829 left promiscuous mode [ 1160.835681][ T3740] bridge1828: port 1(vlan1551) entered disabled state [ 1160.851740][ T3740] device vlan1549 left promiscuous mode [ 1160.857353][ T3740] bridge1826: port 1(vlan1549) entered disabled state [ 1160.871917][ T3740] device vlan1547 left promiscuous mode [ 1160.877452][ T3740] device bridge1825 left promiscuous mode [ 1160.884542][ T3740] bridge1824: port 1(vlan1547) entered disabled state [ 1160.895801][ T3740] device vlan1545 left promiscuous mode [ 1160.903556][ T3740] bridge1822: port 1(vlan1545) entered disabled state [ 1160.916416][ T3740] device vlan1543 left promiscuous mode [ 1160.924761][ T3740] device bridge1821 left promiscuous mode [ 1160.931940][ T3740] bridge1820: port 1(vlan1543) entered disabled state [ 1160.944577][ T3740] device vlan1541 left promiscuous mode [ 1160.951753][ T3740] bridge1818: port 1(vlan1541) entered disabled state [ 1160.968643][ T3740] device vlan1537 left promiscuous mode [ 1160.975341][ T3740] bridge1814: port 1(vlan1537) entered disabled state [ 1160.987876][ T3740] device vlan1535 left promiscuous mode [ 1160.994329][ T3740] device bridge1813 left promiscuous mode [ 1161.001639][ T3740] bridge1812: port 1(vlan1535) entered disabled state [ 1161.013655][ T3740] device vlan1533 left promiscuous mode [ 1161.020590][ T3740] bridge1810: port 1(vlan1533) entered disabled state [ 1161.034384][ T3740] device vlan1531 left promiscuous mode [ 1161.041063][ T3740] device bridge1809 left promiscuous mode [ 1161.046890][ T3740] bridge1808: port 1(vlan1531) entered disabled state [ 1161.057750][ T3740] device vlan1529 left promiscuous mode [ 1161.064836][ T3740] bridge1806: port 1(vlan1529) entered disabled state [ 1161.078666][ T3740] device vlan1527 left promiscuous mode [ 1161.085239][ T3740] device bridge1805 left promiscuous mode [ 1161.092426][ T3740] bridge1804: port 1(vlan1527) entered disabled state [ 1161.106595][ T3740] device vlan1525 left promiscuous mode [ 1161.113109][ T3740] bridge1802: port 1(vlan1525) entered disabled state [ 1161.126888][ T3740] device vlan1523 left promiscuous mode [ 1161.133308][ T3740] device bridge1801 left promiscuous mode [ 1161.140686][ T3740] bridge1800: port 1(vlan1523) entered disabled state [ 1161.151953][ T3740] device vlan1521 left promiscuous mode [ 1161.157682][ T3740] bridge1798: port 1(vlan1521) entered disabled state [ 1161.187683][ T3740] device vlan1518 left promiscuous mode [ 1161.196649][ T3740] bridge1794: port 1(vlan1518) entered disabled state [ 1161.207381][ T3740] bridge1792: port 1(vlan1516) entered disabled state [ 1161.221034][ T3740] bridge1790: port 1(vlan1514) entered disabled state [ 1161.242011][ T3740] bridge1788: port 1(vlan1512) entered disabled state [ 1161.255545][ T3740] device vlan1510 left promiscuous mode [ 1161.262466][ T3740] device bridge1787 left promiscuous mode [ 1161.268383][ T3740] bridge1786: port 1(vlan1510) entered disabled state [ 1161.279598][ T3740] device vlan1508 left promiscuous mode [ 1161.285353][ T3740] device bridge1785 left promiscuous mode [ 1161.293880][ T3740] bridge1784: port 1(vlan1508) entered disabled state [ 1161.305172][ T3740] device vlan1506 left promiscuous mode [ 1161.312112][ T3740] bridge1782: port 1(vlan1506) entered disabled state [ 1161.323584][ T3740] device vlan1504 left promiscuous mode [ 1161.330862][ T3740] device bridge1781 left promiscuous mode [ 1161.336723][ T3740] bridge1780: port 1(vlan1504) entered disabled state [ 1161.350687][ T3740] bridge1778: port 1(vlan1502) entered disabled state [ 1161.365226][ T3740] device vlan1500 left promiscuous mode [ 1161.371802][ T3740] bridge1776: port 1(vlan1500) entered disabled state [ 1161.385001][ T3740] device vlan1498 left promiscuous mode [ 1161.392296][ T3740] bridge1774: port 1(vlan1498) entered disabled state [ 1161.405958][ T3740] device vlan1496 left promiscuous mode [ 1161.413565][ T3740] bridge1772: port 1(vlan1496) entered disabled state [ 1161.424315][ T3740] device vlan1494 left promiscuous mode [ 1161.431437][ T3740] bridge1770: port 1(vlan1494) entered disabled state [ 1161.442670][ T3740] bridge1768: port 1(vlan1492) entered disabled state [ 1161.453227][ T3740] device vlan1490 left promiscuous mode [ 1161.458841][ T3740] bridge1766: port 1(vlan1490) entered disabled state [ 1161.473485][ T3740] device vlan1488 left promiscuous mode [ 1161.480366][ T3740] device bridge1765 left promiscuous mode [ 1161.486254][ T3740] bridge1764: port 1(vlan1488) entered disabled state [ 1161.497070][ T3740] device vlan1486 left promiscuous mode [ 1161.505042][ T3740] bridge1762: port 1(vlan1486) entered disabled state [ 1161.517127][ T3740] device vlan1484 left promiscuous mode [ 1161.524518][ T3740] bridge1760: port 1(vlan1484) entered disabled state [ 1161.535933][ T3740] device vlan1482 left promiscuous mode [ 1161.543417][ T3740] device bridge1759 left promiscuous mode [ 1161.551236][ T3740] bridge1758: port 1(vlan1482) entered disabled state [ 1161.563583][ T3740] bridge1756: port 1(vlan1480) entered disabled state [ 1161.575029][ T3740] device vlan1478 left promiscuous mode [ 1161.583346][ T3740] bridge1754: port 1(vlan1478) entered disabled state [ 1161.594820][ T3740] bridge1752: port 1(vlan1476) entered disabled state [ 1161.605897][ T3740] bridge1750: port 1(vlan1474) entered disabled state [ 1161.616473][ T3740] device vlan1472 left promiscuous mode [ 1161.623752][ T3740] bridge1748: port 1(vlan1472) entered disabled state [ 1161.635370][ T3740] device vlan1470 left promiscuous mode [ 1161.642914][ T3740] bridge1746: port 1(vlan1470) entered disabled state [ 1161.654561][ T3740] device vlan1468 left promiscuous mode [ 1161.661573][ T3740] bridge1744: port 1(vlan1468) entered disabled state [ 1161.673983][ T3740] bridge1742: port 1(vlan1466) entered disabled state [ 1161.685856][ T3740] bridge1740: port 1(vlan1464) entered disabled state [ 1161.698433][ T3740] device vlan1462 left promiscuous mode [ 1161.708032][ T3740] bridge1738: port 1(vlan1462) entered disabled state [ 1161.718936][ T3740] bridge1736: port 1(vlan1460) entered disabled state [ 1161.734635][ T3740] bridge1734: port 1(vlan1458) entered disabled state [ 1161.745080][ T3740] bridge1732: port 1(vlan1456) entered disabled state [ 1161.756876][ T3740] device vlan1454 left promiscuous mode [ 1161.763503][ T3740] bridge1730: port 1(vlan1454) entered disabled state [ 1161.774882][ T3740] device vlan1452 left promiscuous mode [ 1161.781931][ T3740] bridge1728: port 1(vlan1452) entered disabled state [ 1161.794226][ T3740] device vlan1450 left promiscuous mode [ 1161.801669][ T3740] bridge1726: port 1(vlan1450) entered disabled state [ 1161.816573][ T3740] device vlan1448 left promiscuous mode [ 1161.823045][ T3740] bridge1724: port 1(vlan1448) entered disabled state [ 1161.835520][ T3740] device vlan1446 left promiscuous mode [ 1161.842016][ T3740] bridge1722: port 1(vlan1446) entered disabled state [ 1161.853158][ T3740] device vlan1444 left promiscuous mode [ 1161.858762][ T3740] bridge1720: port 1(vlan1444) entered disabled state [ 1161.871243][ T3740] device vlan1442 left promiscuous mode [ 1161.876895][ T3740] bridge1718: port 1(vlan1442) entered disabled state [ 1161.888721][ T3740] device vlan1440 left promiscuous mode [ 1161.895210][ T3740] bridge1716: port 1(vlan1440) entered disabled state [ 1161.906092][ T3740] device vlan1438 left promiscuous mode [ 1161.913375][ T3740] bridge1714: port 1(vlan1438) entered disabled state [ 1161.925626][ T3740] device vlan1436 left promiscuous mode [ 1161.933074][ T3740] bridge1712: port 1(vlan1436) entered disabled state [ 1161.945425][ T3740] device vlan1433 left promiscuous mode [ 1161.953054][ T3740] bridge1708: port 1(vlan1433) entered disabled state [ 1161.965440][ T3740] device vlan1431 left promiscuous mode [ 1161.972477][ T3740] bridge1706: port 1(vlan1431) entered disabled state [ 1161.986200][ T3740] device vlan1429 left promiscuous mode [ 1161.993098][ T3740] device bridge1705 left promiscuous mode [ 1161.998916][ T3740] bridge1704: port 1(vlan1429) entered disabled state [ 1162.009576][ T3740] device vlan1427 left promiscuous mode [ 1162.015191][ T3740] bridge1702: port 1(vlan1427) entered disabled state [ 1162.027872][ T3740] device vlan1425 left promiscuous mode [ 1162.036314][ T3740] device bridge1701 left promiscuous mode [ 1162.043761][ T3740] bridge1700: port 1(vlan1425) entered disabled state [ 1162.055083][ T3740] device vlan1423 left promiscuous mode [ 1162.062240][ T3740] bridge1698: port 1(vlan1423) entered disabled state [ 1162.073462][ T3740] device vlan1421 left promiscuous mode [ 1162.080683][ T3740] device bridge1697 left promiscuous mode [ 1162.086493][ T3740] bridge1696: port 1(vlan1421) entered disabled state [ 1162.097067][ T3740] device vlan1419 left promiscuous mode [ 1162.103625][ T3740] bridge1694: port 1(vlan1419) entered disabled state [ 1162.117071][ T3740] device vlan1417 left promiscuous mode [ 1162.123553][ T3740] device bridge1693 left promiscuous mode [ 1162.132073][ T3740] bridge1692: port 1(vlan1417) entered disabled state [ 1162.143518][ T3740] device vlan1415 left promiscuous mode [ 1162.150240][ T3740] bridge1690: port 1(vlan1415) entered disabled state [ 1162.164139][ T3740] device vlan1412 left promiscuous mode [ 1162.170774][ T3740] bridge1686: port 1(vlan1412) entered disabled state [ 1162.182567][ T3740] device vlan1410 left promiscuous mode [ 1162.188167][ T3740] bridge1684: port 1(vlan1410) entered disabled state [ 1162.198880][ T3740] device vlan1408 left promiscuous mode [ 1162.205756][ T3740] bridge1682: port 1(vlan1408) entered disabled state [ 1162.221863][ T3740] device vlan1406 left promiscuous mode [ 1162.227448][ T3740] bridge1680: port 1(vlan1406) entered disabled state [ 1162.242430][ T3740] device vlan1404 left promiscuous mode [ 1162.248022][ T3740] bridge1678: port 1(vlan1404) entered disabled state [ 1162.258620][ T3740] device vlan1402 left promiscuous mode [ 1162.265236][ T3740] bridge1676: port 1(vlan1402) entered disabled state [ 1162.280573][ T3740] device vlan1400 left promiscuous mode [ 1162.286292][ T3740] bridge1674: port 1(vlan1400) entered disabled state [ 1162.296741][ T3740] device vlan1398 left promiscuous mode [ 1162.303441][ T3740] bridge1672: port 1(vlan1398) entered disabled state [ 1162.315787][ T3740] device vlan1396 left promiscuous mode [ 1162.322983][ T3740] bridge1670: port 1(vlan1396) entered disabled state [ 1162.335894][ T3740] device vlan1394 left promiscuous mode [ 1162.342585][ T3740] bridge1668: port 1(vlan1394) entered disabled state [ 1162.355878][ T3740] device vlan1392 left promiscuous mode [ 1162.362408][ T3740] bridge1666: port 1(vlan1392) entered disabled state [ 1162.375752][ T3740] device vlan1390 left promiscuous mode [ 1162.382375][ T3740] bridge1664: port 1(vlan1390) entered disabled state [ 1162.398118][ T3740] device vlan1388 left promiscuous mode [ 1162.404543][ T3740] bridge1662: port 1(vlan1388) entered disabled state [ 1162.416195][ T3740] device vlan1386 left promiscuous mode [ 1162.422582][ T3740] bridge1660: port 1(vlan1386) entered disabled state [ 1162.435027][ T3740] device vlan1384 left promiscuous mode [ 1162.441582][ T3740] bridge1658: port 1(vlan1384) entered disabled state [ 1162.452896][ T3740] device vlan1382 left promiscuous mode [ 1162.458497][ T3740] bridge1656: port 1(vlan1382) entered disabled state [ 1162.470457][ T3740] device vlan1380 left promiscuous mode [ 1162.476063][ T3740] bridge1654: port 1(vlan1380) entered disabled state [ 1162.488469][ T3740] device vlan1378 left promiscuous mode [ 1162.495350][ T3740] bridge1652: port 1(vlan1378) entered disabled state [ 1162.506260][ T3740] device vlan1376 left promiscuous mode [ 1162.513477][T12411] Bluetooth: hci0: command 0x041b tx timeout [ 1162.516572][ T3740] bridge1650: port 1(vlan1376) entered disabled state [ 1162.531553][ T3740] device vlan1374 left promiscuous mode [ 1162.537138][ T3740] bridge1648: port 1(vlan1374) entered disabled state [ 1162.550331][ T3740] device vlan1372 left promiscuous mode [ 1162.555933][ T3740] bridge1646: port 1(vlan1372) entered disabled state [ 1162.567279][ T3740] device vlan1370 left promiscuous mode [ 1162.573706][ T3740] bridge1644: port 1(vlan1370) entered disabled state [ 1162.585256][ T3740] device vlan1368 left promiscuous mode [ 1162.591834][ T3740] bridge1642: port 1(vlan1368) entered disabled state [ 1162.604215][ T3740] device vlan1366 left promiscuous mode [ 1162.611300][ T3740] bridge1640: port 1(vlan1366) entered disabled state [ 1162.623619][ T3740] device vlan1364 left promiscuous mode [ 1162.630911][ T3740] bridge1638: port 1(vlan1364) entered disabled state [ 1162.644604][ T3740] device vlan1361 left promiscuous mode [ 1162.651430][ T3740] bridge1634: port 1(vlan1361) entered disabled state [ 1162.664429][ T3740] device vlan1359 left promiscuous mode [ 1162.671052][ T3740] bridge1632: port 1(vlan1359) entered disabled state [ 1162.683923][ T3740] device vlan1357 left promiscuous mode [ 1162.690608][ T3740] bridge1630: port 1(vlan1357) entered disabled state [ 1162.701596][ T3740] device vlan1355 left promiscuous mode [ 1162.707203][ T3740] bridge1628: port 1(vlan1355) entered disabled state [ 1162.718269][ T3740] device vlan1353 left promiscuous mode [ 1162.724826][ T3740] bridge1626: port 1(vlan1353) entered disabled state [ 1162.736729][ T3740] device vlan1351 left promiscuous mode [ 1162.743384][ T3740] bridge1624: port 1(vlan1351) entered disabled state [ 1162.756744][ T3740] device vlan1349 left promiscuous mode [ 1162.763491][ T3740] bridge1622: port 1(vlan1349) entered disabled state [ 1162.775789][ T3740] device vlan1347 left promiscuous mode [ 1162.782327][ T3740] bridge1620: port 1(vlan1347) entered disabled state [ 1162.796870][ T3740] device vlan1345 left promiscuous mode [ 1162.803325][ T3740] bridge1618: port 1(vlan1345) entered disabled state [ 1162.816740][ T3740] device vlan1343 left promiscuous mode [ 1162.823228][ T3740] bridge1616: port 1(vlan1343) entered disabled state [ 1162.836916][ T3740] device vlan1340 left promiscuous mode [ 1162.843383][ T3740] bridge1612: port 1(vlan1340) entered disabled state [ 1162.855656][ T3740] device vlan1338 left promiscuous mode [ 1162.862237][ T3740] bridge1610: port 1(vlan1338) entered disabled state [ 1162.873882][ T3740] device vlan1336 left promiscuous mode [ 1162.881692][ T3740] bridge1608: port 1(vlan1336) entered disabled state [ 1162.894501][ T3740] device vlan1334 left promiscuous mode [ 1162.901678][ T3740] bridge1606: port 1(vlan1334) entered disabled state [ 1162.916759][ T3740] device vlan1332 left promiscuous mode [ 1162.924771][ T3740] bridge1604: port 1(vlan1332) entered disabled state [ 1162.937356][ T3740] device vlan1330 left promiscuous mode [ 1162.943855][ T3740] bridge1602: port 1(vlan1330) entered disabled state [ 1162.955838][ T3740] device vlan1328 left promiscuous mode [ 1162.962293][ T3740] bridge1600: port 1(vlan1328) entered disabled state [ 1162.974715][ T3740] device vlan1326 left promiscuous mode [ 1162.981189][ T3740] bridge1598: port 1(vlan1326) entered disabled state [ 1162.991827][ T3740] device vlan1324 left promiscuous mode [ 1162.997426][ T3740] bridge1596: port 1(vlan1324) entered disabled state [ 1163.016902][ T3740] device vlan1322 left promiscuous mode [ 1163.024288][ T3740] bridge1594: port 1(vlan1322) entered disabled state [ 1163.036583][ T3740] device vlan1320 left promiscuous mode [ 1163.043022][ T3740] bridge1592: port 1(vlan1320) entered disabled state [ 1163.055402][ T3740] device vlan1318 left promiscuous mode [ 1163.061993][ T3740] bridge1590: port 1(vlan1318) entered disabled state [ 1163.075390][ T3740] device vlan1315 left promiscuous mode [ 1163.082718][ T3740] bridge1586: port 1(vlan1315) entered disabled state [ 1163.095354][ T3740] device vlan1313 left promiscuous mode [ 1163.102301][ T3740] bridge1584: port 1(vlan1313) entered disabled state [ 1163.116445][ T3740] device vlan1311 left promiscuous mode [ 1163.123547][ T3740] bridge1582: port 1(vlan1311) entered disabled state [ 1163.135694][ T3740] device vlan1309 left promiscuous mode [ 1163.142212][ T3740] bridge1580: port 1(vlan1309) entered disabled state [ 1163.155199][ T3740] device vlan1307 left promiscuous mode [ 1163.162207][ T3740] bridge1578: port 1(vlan1307) entered disabled state [ 1163.173600][ T3740] device vlan1305 left promiscuous mode [ 1163.180896][ T3740] bridge1576: port 1(vlan1305) entered disabled state [ 1163.192348][ T3740] device vlan1303 left promiscuous mode [ 1163.198041][ T3740] bridge1574: port 1(vlan1303) entered disabled state [ 1163.211372][ T3740] device vlan1301 left promiscuous mode [ 1163.217044][ T3740] bridge1572: port 1(vlan1301) entered disabled state [ 1163.228591][ T3740] device vlan1299 left promiscuous mode [ 1163.235615][ T3740] bridge1570: port 1(vlan1299) entered disabled state [ 1163.250215][ T3740] device vlan1297 left promiscuous mode [ 1163.255876][ T3740] bridge1568: port 1(vlan1297) entered disabled state [ 1163.271083][ T3740] device vlan1295 left promiscuous mode [ 1163.276720][ T3740] bridge1566: port 1(vlan1295) entered disabled state [ 1163.290148][ T3740] device vlan1293 left promiscuous mode [ 1163.295949][ T3740] bridge1565: port 1(vlan1293) entered disabled state [ 1163.317510][ T3740] device vlan1291 left promiscuous mode [ 1163.325262][ T3740] bridge1562: port 1(vlan1291) entered disabled state [ 1163.336244][ T3740] device vlan1289 left promiscuous mode [ 1163.344751][ T3740] bridge1560: port 1(vlan1289) entered disabled state [ 1163.356134][ T3740] device vlan1287 left promiscuous mode [ 1163.363501][ T3740] bridge1558: port 1(vlan1287) entered disabled state [ 1163.377708][ T3740] device vlan1284 left promiscuous mode [ 1163.384432][ T3740] bridge1554: port 1(vlan1284) entered disabled state [ 1163.395530][ T3740] device vlan1282 left promiscuous mode [ 1163.403920][ T3740] bridge1553: port 1(vlan1282) entered disabled state [ 1163.415815][ T3740] device vlan1280 left promiscuous mode [ 1163.423052][ T3740] bridge1550: port 1(vlan1280) entered disabled state [ 1163.434561][ T3740] device vlan1278 left promiscuous mode [ 1163.441618][ T3740] bridge1548: port 1(vlan1278) entered disabled state [ 1163.453415][ T3740] device vlan1276 left promiscuous mode [ 1163.461697][ T3740] bridge1546: port 1(vlan1276) entered disabled state [ 1163.473787][ T3740] device vlan1274 left promiscuous mode [ 1163.483566][ T3740] bridge1544: port 1(vlan1274) entered disabled state [ 1163.495071][ T3740] device vlan1272 left promiscuous mode [ 1163.502394][ T3740] bridge1542: port 1(vlan1272) entered disabled state [ 1163.514902][ T3740] device vlan1270 left promiscuous mode [ 1163.521651][ T3740] bridge1540: port 1(vlan1270) entered disabled state [ 1163.534694][ T3740] device vlan1268 left promiscuous mode [ 1163.541457][ T3740] bridge1538: port 1(vlan1268) entered disabled state [ 1163.554686][ T3740] device vlan1266 left promiscuous mode [ 1163.561600][ T3740] bridge1536: port 1(vlan1266) entered disabled state [ 1163.575643][ T3740] device vlan1264 left promiscuous mode [ 1163.582205][ T3740] bridge1534: port 1(vlan1264) entered disabled state [ 1163.596794][ T3740] device vlan1261 left promiscuous mode [ 1163.603543][ T3740] bridge1530: port 1(vlan1261) entered disabled state [ 1163.617008][ T3740] device vlan1259 left promiscuous mode [ 1163.623528][ T3740] bridge1528: port 1(vlan1259) entered disabled state [ 1163.634526][ T3740] device vlan1257 left promiscuous mode [ 1163.641737][ T3740] bridge1526: port 1(vlan1257) entered disabled state [ 1163.653795][ T3740] device vlan1255 left promiscuous mode [ 1163.660834][ T3740] bridge1524: port 1(vlan1255) entered disabled state [ 1163.676231][ T3740] device vlan1253 left promiscuous mode [ 1163.682859][ T3740] bridge1522: port 1(vlan1253) entered disabled state [ 1163.694821][ T3740] device vlan1251 left promiscuous mode [ 1163.701491][ T3740] bridge1520: port 1(vlan1251) entered disabled state [ 1163.713275][ T3740] device vlan1249 left promiscuous mode [ 1163.718876][ T3740] bridge1518: port 1(vlan1249) entered disabled state [ 1163.730329][ T3740] device vlan1247 left promiscuous mode [ 1163.735948][ T3740] bridge1516: port 1(vlan1247) entered disabled state [ 1163.746483][ T3740] device vlan1245 left promiscuous mode [ 1163.753008][ T3740] bridge1514: port 1(vlan1245) entered disabled state [ 1163.765901][ T3740] device vlan1243 left promiscuous mode [ 1163.772525][ T3740] bridge1512: port 1(vlan1243) entered disabled state [ 1163.785959][ T3740] device vlan1241 left promiscuous mode [ 1163.792869][ T3740] bridge1510: port 1(vlan1241) entered disabled state [ 1163.805171][ T3740] device vlan1239 left promiscuous mode [ 1163.812317][ T3740] bridge1508: port 1(vlan1239) entered disabled state [ 1163.824735][ T3740] device vlan1237 left promiscuous mode [ 1163.831185][ T3740] bridge1506: port 1(vlan1237) entered disabled state [ 1163.841082][ T3740] device vlan1235 left promiscuous mode [ 1163.846684][ T3740] bridge1504: port 1(vlan1235) entered disabled state [ 1163.857532][ T3740] device vlan1233 left promiscuous mode [ 1163.864380][ T3740] bridge1502: port 1(vlan1233) entered disabled state [ 1163.874693][ T3740] device vlan1231 left promiscuous mode [ 1163.881660][ T3740] bridge1500: port 1(vlan1231) entered disabled state [ 1163.894244][ T3740] device vlan1229 left promiscuous mode [ 1163.901434][ T3740] bridge1498: port 1(vlan1229) entered disabled state [ 1163.911750][ T3740] device vlan1227 left promiscuous mode [ 1163.917365][ T3740] bridge1496: port 1(vlan1227) entered disabled state [ 1163.930908][ T3740] device vlan1225 left promiscuous mode [ 1163.936515][ T3740] bridge1494: port 1(vlan1225) entered disabled state [ 1163.948608][ T3740] device vlan1223 left promiscuous mode [ 1163.955554][ T3740] bridge1492: port 1(vlan1223) entered disabled state [ 1163.969584][ T3740] device vlan1221 left promiscuous mode [ 1163.975204][ T3740] bridge1490: port 1(vlan1221) entered disabled state [ 1163.986113][ T3740] device vlan1219 left promiscuous mode [ 1163.992878][ T3740] bridge1488: port 1(vlan1219) entered disabled state [ 1164.005030][ T3740] device vlan1217 left promiscuous mode [ 1164.011821][ T3740] bridge1486: port 1(vlan1217) entered disabled state [ 1164.022773][ T3740] device vlan1215 left promiscuous mode [ 1164.028368][ T3740] bridge1484: port 1(vlan1215) entered disabled state [ 1164.048833][ T3740] device vlan1213 left promiscuous mode [ 1164.055491][ T3740] bridge1482: port 1(vlan1213) entered disabled state [ 1164.068463][ T3740] device vlan1211 left promiscuous mode [ 1164.074916][ T3740] bridge1480: port 1(vlan1211) entered disabled state [ 1164.085216][ T3740] device vlan1209 left promiscuous mode [ 1164.092242][ T3740] bridge1478: port 1(vlan1209) entered disabled state [ 1164.103801][ T3740] device vlan1207 left promiscuous mode [ 1164.111942][ T3740] bridge1476: port 1(vlan1207) entered disabled state [ 1164.124292][ T3740] device vlan1205 left promiscuous mode [ 1164.130856][ T3740] bridge1474: port 1(vlan1205) entered disabled state [ 1164.142963][ T3740] device vlan1203 left promiscuous mode [ 1164.148565][ T3740] bridge1472: port 1(vlan1203) entered disabled state [ 1164.158802][ T3740] device vlan1201 left promiscuous mode [ 1164.165210][ T3740] bridge1470: port 1(vlan1201) entered disabled state [ 1164.176982][ T3740] device vlan1199 left promiscuous mode [ 1164.183443][ T3740] bridge1468: port 1(vlan1199) entered disabled state [ 1164.195527][ T3740] device vlan1197 left promiscuous mode [ 1164.202590][ T3740] bridge1466: port 1(vlan1197) entered disabled state [ 1164.214406][ T3740] device vlan1195 left promiscuous mode [ 1164.221576][ T3740] bridge1464: port 1(vlan1195) entered disabled state [ 1164.233990][ T3740] device vlan1193 left promiscuous mode [ 1164.240622][ T3740] bridge1462: port 1(vlan1193) entered disabled state [ 1164.254471][ T3740] device vlan1190 left promiscuous mode [ 1164.260926][ T3740] bridge1458: port 1(vlan1190) entered disabled state [ 1164.272614][ T3740] device vlan1188 left promiscuous mode [ 1164.278231][ T3740] bridge1456: port 1(vlan1188) entered disabled state [ 1164.288926][ T3740] device vlan1186 left promiscuous mode [ 1164.295411][ T3740] bridge1454: port 1(vlan1186) entered disabled state [ 1164.306563][ T3740] device vlan1184 left promiscuous mode [ 1164.313084][ T3740] bridge1452: port 1(vlan1184) entered disabled state [ 1164.324519][ T3740] device vlan1182 left promiscuous mode [ 1164.332273][ T3740] bridge1450: port 1(vlan1182) entered disabled state [ 1164.345304][ T3740] device vlan1180 left promiscuous mode [ 1164.356322][ T3740] bridge1448: port 1(vlan1180) entered disabled state [ 1164.367020][ T3740] device vlan1178 left promiscuous mode [ 1164.373359][ T3740] bridge1446: port 1(vlan1178) entered disabled state [ 1164.385717][ T3740] device vlan1176 left promiscuous mode [ 1164.392299][ T3740] bridge1444: port 1(vlan1176) entered disabled state [ 1164.403915][ T3740] device vlan1174 left promiscuous mode [ 1164.410778][ T3740] bridge1442: port 1(vlan1174) entered disabled state [ 1164.421667][ T3740] device vlan1172 left promiscuous mode [ 1164.427264][ T3740] bridge1440: port 1(vlan1172) entered disabled state [ 1164.438063][ T3740] device vlan1170 left promiscuous mode [ 1164.444969][ T3740] bridge1438: port 1(vlan1170) entered disabled state [ 1164.455658][ T3740] device vlan1168 left promiscuous mode [ 1164.462560][ T3740] bridge1436: port 1(vlan1168) entered disabled state [ 1164.474177][ T3740] device vlan1166 left promiscuous mode [ 1164.480796][ T3740] bridge1434: port 1(vlan1166) entered disabled state [ 1164.491820][ T3740] device vlan1164 left promiscuous mode [ 1164.497423][ T3740] bridge1432: port 1(vlan1164) entered disabled state [ 1164.508728][ T3740] device vlan1161 left promiscuous mode [ 1164.515399][ T3740] bridge1428: port 1(vlan1161) entered disabled state [ 1164.527810][ T3740] device vlan1157 left promiscuous mode [ 1164.534589][ T3740] bridge1425: port 1(vlan1157) entered disabled state [ 1164.545535][ T3740] device vlan1155 left promiscuous mode [ 1164.553608][ T3740] bridge1422: port 1(vlan1155) entered disabled state [ 1164.564382][ T3740] device vlan1153 left promiscuous mode [ 1164.571144][ T3740] bridge1420: port 1(vlan1153) entered disabled state [ 1164.580993][ T3740] device vlan1151 left promiscuous mode [ 1164.586623][ T3740] bridge1418: port 1(vlan1151) entered disabled state [ 1164.589979][T12411] Bluetooth: hci0: command 0x040f tx timeout [ 1164.604174][ T3740] device vlan1149 left promiscuous mode [ 1164.612490][ T3740] bridge1416: port 1(vlan1149) entered disabled state [ 1164.624308][ T3740] device vlan1147 left promiscuous mode [ 1164.631262][ T3740] bridge1414: port 1(vlan1147) entered disabled state [ 1164.642833][ T3740] device vlan1145 left promiscuous mode [ 1164.648448][ T3740] bridge1412: port 1(vlan1145) entered disabled state [ 1164.658617][ T3740] device vlan1143 left promiscuous mode [ 1164.665046][ T3740] bridge1410: port 1(vlan1143) entered disabled state [ 1164.678031][ T3740] device vlan1141 left promiscuous mode [ 1164.684267][ T3740] bridge1408: port 1(vlan1141) entered disabled state [ 1164.695899][ T3740] device vlan1139 left promiscuous mode [ 1164.702281][ T3740] bridge1406: port 1(vlan1139) entered disabled state [ 1164.714276][ T3740] device vlan1137 left promiscuous mode [ 1164.721338][ T3740] bridge1404: port 1(vlan1137) entered disabled state [ 1164.733651][ T3740] device vlan1134 left promiscuous mode [ 1164.741215][ T3740] bridge1400: port 1(vlan1134) entered disabled state [ 1164.753383][ T3740] device vlan1132 left promiscuous mode [ 1164.760320][ T3740] bridge1398: port 1(vlan1132) entered disabled state [ 1164.772320][ T3740] device vlan1130 left promiscuous mode [ 1164.777928][ T3740] bridge1396: port 1(vlan1130) entered disabled state [ 1164.787957][ T3740] device vlan1128 left promiscuous mode [ 1164.794309][ T3740] bridge1394: port 1(vlan1128) entered disabled state [ 1164.806295][ T3740] device vlan1126 left promiscuous mode [ 1164.812629][ T3740] bridge1392: port 1(vlan1126) entered disabled state [ 1164.824716][ T3740] device vlan1124 left promiscuous mode [ 1164.831279][ T3740] bridge1390: port 1(vlan1124) entered disabled state [ 1164.842912][ T3740] device vlan1122 left promiscuous mode [ 1164.848517][ T3740] bridge1388: port 1(vlan1122) entered disabled state [ 1164.858672][ T3740] device vlan1120 left promiscuous mode [ 1164.864979][ T3740] bridge1386: port 1(vlan1120) entered disabled state [ 1164.876269][ T3740] device vlan1118 left promiscuous mode [ 1164.882738][ T3740] bridge1384: port 1(vlan1118) entered disabled state [ 1164.895889][ T3740] device vlan1116 left promiscuous mode [ 1164.902165][ T3740] bridge1382: port 1(vlan1116) entered disabled state [ 1164.913577][ T3740] device vlan1114 left promiscuous mode [ 1164.920913][ T3740] bridge1380: port 1(vlan1114) entered disabled state [ 1164.930991][ T3740] device vlan1112 left promiscuous mode [ 1164.936596][ T3740] bridge1378: port 1(vlan1112) entered disabled state [ 1164.947624][ T3740] device vlan1110 left promiscuous mode [ 1164.955196][ T3740] bridge1376: port 1(vlan1110) entered disabled state [ 1164.965623][ T3740] device vlan1108 left promiscuous mode [ 1164.972650][ T3740] bridge1374: port 1(vlan1108) entered disabled state [ 1164.983138][ T3740] device vlan1106 left promiscuous mode [ 1164.988726][ T3740] bridge1372: port 1(vlan1106) entered disabled state [ 1165.000433][ T3740] device vlan1104 left promiscuous mode [ 1165.006034][ T3740] bridge1370: port 1(vlan1104) entered disabled state [ 1165.018196][ T3740] device vlan1102 left promiscuous mode [ 1165.024716][ T3740] bridge1368: port 1(vlan1102) entered disabled state [ 1165.036024][ T3740] device vlan1100 left promiscuous mode [ 1165.042378][ T3740] bridge1366: port 1(vlan1100) entered disabled state [ 1165.054588][ T3740] device vlan1098 left promiscuous mode [ 1165.061005][ T3740] bridge1364: port 1(vlan1098) entered disabled state [ 1165.073059][ T3740] device vlan1096 left promiscuous mode [ 1165.078803][ T3740] bridge1362: port 1(vlan1096) entered disabled state [ 1165.092268][ T3740] device vlan1093 left promiscuous mode [ 1165.097873][ T3740] bridge1358: port 1(vlan1093) entered disabled state [ 1165.113226][ T3740] device vlan1089 left promiscuous mode [ 1165.118828][ T3740] bridge1352: port 1(vlan1089) entered disabled state [ 1165.131319][ T3740] device vlan1087 left promiscuous mode [ 1165.136929][ T3740] bridge1350: port 1(vlan1087) entered disabled state [ 1165.147290][ T3740] device vlan1085 left promiscuous mode [ 1165.154157][ T3740] bridge1348: port 1(vlan1085) entered disabled state [ 1165.164521][ T3740] device vlan1083 left promiscuous mode [ 1165.172401][ T3740] bridge1346: port 1(vlan1083) entered disabled state [ 1165.182698][ T3740] device vlan1081 left promiscuous mode [ 1165.188288][ T3740] bridge1344: port 1(vlan1081) entered disabled state [ 1165.198562][ T3740] device vlan1079 left promiscuous mode [ 1165.204845][ T3740] bridge1342: port 1(vlan1079) entered disabled state [ 1165.216744][ T3740] device vlan1077 left promiscuous mode [ 1165.223102][ T3740] bridge1340: port 1(vlan1077) entered disabled state [ 1165.235026][ T3740] device vlan1075 left promiscuous mode [ 1165.241771][ T3740] bridge1338: port 1(vlan1075) entered disabled state [ 1165.254291][ T3740] device vlan1073 left promiscuous mode [ 1165.260702][ T3740] bridge1336: port 1(vlan1073) entered disabled state [ 1165.271936][ T3740] device vlan1071 left promiscuous mode [ 1165.277565][ T3740] bridge1334: port 1(vlan1071) entered disabled state [ 1165.288258][ T3740] device vlan1069 left promiscuous mode [ 1165.294572][ T3740] bridge1332: port 1(vlan1069) entered disabled state [ 1165.304453][ T3740] device vlan1067 left promiscuous mode [ 1165.311467][ T3740] bridge1330: port 1(vlan1067) entered disabled state [ 1165.322140][ T3740] device vlan1065 left promiscuous mode [ 1165.327720][ T3740] bridge1328: port 1(vlan1065) entered disabled state [ 1165.338522][ T3740] device vlan1063 left promiscuous mode [ 1165.344778][ T3740] bridge1326: port 1(vlan1063) entered disabled state [ 1165.356062][ T3740] device vlan1061 left promiscuous mode [ 1165.362328][ T3740] bridge1324: port 1(vlan1061) entered disabled state [ 1165.374368][ T3740] device vlan1059 left promiscuous mode [ 1165.380736][ T3740] bridge1322: port 1(vlan1059) entered disabled state [ 1165.396699][ T3740] device vlan1057 left promiscuous mode [ 1165.403306][ T3740] bridge1320: port 1(vlan1057) entered disabled state [ 1165.414413][ T3740] device vlan1054 left promiscuous mode [ 1165.421652][ T3740] bridge1316: port 1(vlan1054) entered disabled state [ 1165.432825][ T3740] device vlan1052 left promiscuous mode [ 1165.438431][ T3740] bridge1314: port 1(vlan1052) entered disabled state [ 1165.450181][ T3740] device vlan1050 left promiscuous mode [ 1165.455780][ T3740] bridge1312: port 1(vlan1050) entered disabled state [ 1165.467000][ T3740] device vlan1048 left promiscuous mode [ 1165.474052][ T3740] bridge1310: port 1(vlan1048) entered disabled state [ 1165.485352][ T3740] device vlan1046 left promiscuous mode [ 1165.491741][ T3740] bridge1308: port 1(vlan1046) entered disabled state [ 1165.503798][ T3740] device vlan1044 left promiscuous mode [ 1165.510153][ T3740] bridge1306: port 1(vlan1044) entered disabled state [ 1165.520411][ T3740] device vlan1042 left promiscuous mode [ 1165.526207][ T3740] bridge1304: port 1(vlan1042) entered disabled state [ 1165.536315][ T3740] device vlan1040 left promiscuous mode [ 1165.542815][ T3740] bridge1302: port 1(vlan1040) entered disabled state [ 1165.555068][ T3740] device vlan1038 left promiscuous mode [ 1165.561247][ T3740] bridge1300: port 1(vlan1038) entered disabled state [ 1165.571186][ T3740] device vlan1035 left promiscuous mode [ 1165.576785][ T3740] bridge1298: port 1(vlan1035) entered disabled state [ 1165.587673][ T3740] device vlan1034 left promiscuous mode [ 1165.594205][ T3740] bridge1296: port 1(vlan1034) entered disabled state [ 1165.604043][ T3740] device vlan1032 left promiscuous mode [ 1165.610764][ T3740] bridge1294: port 1(vlan1032) entered disabled state [ 1165.621133][ T3740] device vlan1030 left promiscuous mode [ 1165.626719][ T3740] bridge1292: port 1(vlan1030) entered disabled state [ 1165.636612][ T3740] device vlan1028 left promiscuous mode [ 1165.644728][ T3740] bridge1290: port 1(vlan1028) entered disabled state [ 1165.655090][ T3740] device vlan1026 left promiscuous mode [ 1165.661975][ T3740] bridge1288: port 1(vlan1026) entered disabled state [ 1165.671719][ T3740] device vlan1024 left promiscuous mode [ 1165.677302][ T3740] bridge1286: port 1(vlan1024) entered disabled state [ 1165.688098][ T3740] device vlan1022 left promiscuous mode [ 1165.694595][ T3740] bridge1284: port 1(vlan1022) entered disabled state [ 1165.705810][ T3740] device vlan1020 left promiscuous mode [ 1165.712117][ T3740] bridge1282: port 1(vlan1020) entered disabled state [ 1165.725162][ T3740] device vlan1018 left promiscuous mode [ 1165.731493][ T3740] bridge1280: port 1(vlan1018) entered disabled state [ 1165.742687][ T3740] device vlan1016 left promiscuous mode [ 1165.748293][ T3740] bridge1278: port 1(vlan1016) entered disabled state [ 1165.758855][ T3740] device vlan1014 left promiscuous mode [ 1165.765651][ T3740] bridge1276: port 1(vlan1014) entered disabled state [ 1165.778352][ T3740] device vlan1012 left promiscuous mode [ 1165.784621][ T3740] bridge1274: port 1(vlan1012) entered disabled state [ 1165.795968][ T3740] device vlan1010 left promiscuous mode [ 1165.802293][ T3740] bridge1272: port 1(vlan1010) entered disabled state [ 1165.813513][ T3740] device vlan1008 left promiscuous mode [ 1165.820273][ T3740] bridge1270: port 1(vlan1008) entered disabled state [ 1165.830665][ T3740] device vlan1007 left promiscuous mode [ 1165.836277][ T3740] bridge1268: port 1(vlan1007) entered disabled state [ 1165.846363][ T3740] device vlan1005 left promiscuous mode [ 1165.852700][ T3740] bridge1266: port 1(vlan1005) entered disabled state [ 1165.864106][ T3740] device vlan1003 left promiscuous mode [ 1165.870644][ T3740] bridge1264: port 1(vlan1003) entered disabled state [ 1165.883088][ T3740] device vlan1001 left promiscuous mode [ 1165.888742][ T3740] bridge1262: port 1(vlan1001) entered disabled state [ 1165.899448][ T3740] device vlan999 left promiscuous mode [ 1165.905282][ T3740] bridge1260: port 1(vlan999) entered disabled state [ 1165.915738][ T3740] device vlan997 left promiscuous mode [ 1165.922298][ T3740] bridge1258: port 1(vlan997) entered disabled state [ 1165.932169][ T3740] device vlan995 left promiscuous mode [ 1165.937678][ T3740] bridge1256: port 1(vlan995) entered disabled state [ 1165.948531][ T3740] device vlan993 left promiscuous mode [ 1165.954725][ T3740] bridge1254: port 1(vlan993) entered disabled state [ 1165.966266][ T3740] device vlan991 left promiscuous mode [ 1165.972594][ T3740] bridge1252: port 1(vlan991) entered disabled state [ 1165.985223][ T3740] device vlan989 left promiscuous mode [ 1165.991868][ T3740] bridge1250: port 1(vlan989) entered disabled state [ 1166.005254][ T3740] device vlan987 left promiscuous mode [ 1166.011808][ T3740] bridge1248: port 1(vlan987) entered disabled state [ 1166.024182][ T3740] device vlan985 left promiscuous mode [ 1166.032185][ T3740] bridge1246: port 1(vlan985) entered disabled state [ 1166.044875][ T3740] device vlan983 left promiscuous mode [ 1166.051756][ T3740] bridge1244: port 1(vlan983) entered disabled state [ 1166.062908][ T3740] device vlan981 left promiscuous mode [ 1166.068505][ T3740] bridge1242: port 1(vlan981) entered disabled state [ 1166.079212][ T3740] device vlan979 left promiscuous mode [ 1166.084739][ T3740] bridge1240: port 1(vlan979) entered disabled state [ 1166.095322][ T3740] device vlan977 left promiscuous mode [ 1166.102140][ T3740] bridge1238: port 1(vlan977) entered disabled state [ 1166.111983][ T3740] device vlan975 left promiscuous mode [ 1166.117482][ T3740] bridge1236: port 1(vlan975) entered disabled state [ 1166.133418][ T3740] device vlan973 left promiscuous mode [ 1166.138923][ T3740] bridge1234: port 1(vlan973) entered disabled state [ 1166.151491][ T3740] device vlan971 left promiscuous mode [ 1166.157011][ T3740] bridge1232: port 1(vlan971) entered disabled state [ 1166.167085][ T3740] device vlan969 left promiscuous mode [ 1166.173587][ T3740] bridge1230: port 1(vlan969) entered disabled state [ 1166.185111][ T3740] device vlan967 left promiscuous mode [ 1166.192043][ T3740] bridge1228: port 1(vlan967) entered disabled state [ 1166.206468][ T3740] device vlan964 left promiscuous mode [ 1166.213075][ T3740] bridge1224: port 1(vlan964) entered disabled state [ 1166.224703][ T3740] device vlan962 left promiscuous mode [ 1166.231504][ T3740] bridge1222: port 1(vlan962) entered disabled state [ 1166.241358][ T3740] device vlan960 left promiscuous mode [ 1166.246872][ T3740] bridge1220: port 1(vlan960) entered disabled state [ 1166.257760][ T3740] device vlan958 left promiscuous mode [ 1166.264378][ T3740] bridge1218: port 1(vlan958) entered disabled state [ 1166.291184][ T3740] device vlan956 left promiscuous mode [ 1166.296757][ T3740] bridge1216: port 1(vlan956) entered disabled state [ 1166.307792][ T3740] device vlan954 left promiscuous mode [ 1166.315679][ T3740] bridge1214: port 1(vlan954) entered disabled state [ 1166.325774][ T3740] device vlan953 left promiscuous mode [ 1166.333805][ T3740] bridge1212: port 1(vlan953) entered disabled state [ 1166.343723][ T3740] device vlan951 left promiscuous mode [ 1166.350125][ T3740] bridge1210: port 1(vlan951) entered disabled state [ 1166.359348][ T3740] device vlan949 left promiscuous mode [ 1166.364874][ T3740] bridge1208: port 1(vlan949) entered disabled state [ 1166.376335][ T3740] device vlan947 left promiscuous mode [ 1166.382587][ T3740] bridge1206: port 1(vlan947) entered disabled state [ 1166.395558][ T3740] device vlan945 left promiscuous mode [ 1166.401969][ T3740] bridge1204: port 1(vlan945) entered disabled state [ 1166.412744][ T3740] device vlan943 left promiscuous mode [ 1166.418263][ T3740] bridge1202: port 1(vlan943) entered disabled state [ 1166.430685][ T3740] device vlan941 left promiscuous mode [ 1166.436248][ T3740] bridge1200: port 1(vlan941) entered disabled state [ 1166.449611][ T3740] device vlan939 left promiscuous mode [ 1166.455129][ T3740] bridge1198: port 1(vlan939) entered disabled state [ 1166.464988][ T3740] device vlan937 left promiscuous mode [ 1166.471854][ T3740] bridge1196: port 1(vlan937) entered disabled state [ 1166.481557][ T3740] device vlan936 left promiscuous mode [ 1166.487057][ T3740] bridge1194: port 1(vlan936) entered disabled state [ 1166.497299][ T3740] device vlan934 left promiscuous mode [ 1166.504497][ T3740] bridge1192: port 1(vlan934) entered disabled state [ 1166.515797][ T3740] device vlan932 left promiscuous mode [ 1166.521916][ T3740] bridge1190: port 1(vlan932) entered disabled state [ 1166.532918][ T3740] device vlan930 left promiscuous mode [ 1166.538434][ T3740] bridge1188: port 1(vlan930) entered disabled state [ 1166.549142][ T3740] device vlan928 left promiscuous mode [ 1166.554861][ T3740] bridge1186: port 1(vlan928) entered disabled state [ 1166.565218][ T3740] device vlan926 left promiscuous mode [ 1166.571700][ T3740] bridge1184: port 1(vlan926) entered disabled state [ 1166.581364][ T3740] device vlan924 left promiscuous mode [ 1166.586873][ T3740] bridge1182: port 1(vlan924) entered disabled state [ 1166.597226][ T3740] device vlan922 left promiscuous mode [ 1166.603748][ T3740] bridge1180: port 1(vlan922) entered disabled state [ 1166.618323][ T3740] device vlan920 left promiscuous mode [ 1166.624506][ T3740] bridge1178: port 1(vlan920) entered disabled state [ 1166.637256][ T3740] device vlan917 left promiscuous mode [ 1166.643440][ T3740] bridge1174: port 1(vlan917) entered disabled state [ 1166.654549][ T3740] device vlan915 left promiscuous mode [ 1166.660919][ T3740] bridge1172: port 1(vlan915) entered disabled state [ 1166.669959][T29142] Bluetooth: hci0: command 0x0419 tx timeout [ 1166.670503][ T3740] device vlan914 left promiscuous mode [ 1166.682630][ T3740] bridge1170: port 1(vlan914) entered disabled state [ 1166.693915][ T3740] device vlan912 left promiscuous mode [ 1166.700639][ T3740] bridge1168: port 1(vlan912) entered disabled state [ 1166.711002][ T3740] device vlan910 left promiscuous mode [ 1166.716543][ T3740] bridge1166: port 1(vlan910) entered disabled state [ 1166.726571][ T3740] device vlan908 left promiscuous mode [ 1166.733121][ T3740] bridge1164: port 1(vlan908) entered disabled state [ 1166.744005][ T3740] device vlan906 left promiscuous mode [ 1166.751639][ T3740] bridge1162: port 1(vlan906) entered disabled state [ 1166.762689][ T3740] device vlan904 left promiscuous mode [ 1166.768198][ T3740] bridge1160: port 1(vlan904) entered disabled state [ 1166.778085][ T3740] device vlan902 left promiscuous mode [ 1166.784893][ T3740] bridge1158: port 1(vlan902) entered disabled state [ 1166.797483][ T3740] device vlan900 left promiscuous mode [ 1166.803627][ T3740] bridge1156: port 1(vlan900) entered disabled state [ 1166.815498][ T3740] device vlan898 left promiscuous mode [ 1166.821711][ T3740] bridge1154: port 1(vlan898) entered disabled state [ 1166.831822][ T3740] device vlan896 left promiscuous mode [ 1166.837365][ T3740] bridge1152: port 1(vlan896) entered disabled state [ 1166.848136][ T3740] device vlan894 left promiscuous mode [ 1166.855209][ T3740] bridge1150: port 1(vlan894) entered disabled state [ 1166.866138][ T3740] device vlan892 left promiscuous mode [ 1166.872255][ T3740] bridge1148: port 1(vlan892) entered disabled state [ 1166.884099][ T3740] device vlan890 left promiscuous mode [ 1166.890409][ T3740] bridge1146: port 1(vlan890) entered disabled state [ 1166.901602][ T3740] device vlan888 left promiscuous mode [ 1166.907117][ T3740] bridge1144: port 1(vlan888) entered disabled state [ 1166.917157][ T3740] device vlan886 left promiscuous mode [ 1166.924107][ T3740] bridge1142: port 1(vlan886) entered disabled state [ 1166.933859][ T3740] device vlan884 left promiscuous mode [ 1166.940408][ T3740] bridge1140: port 1(vlan884) entered disabled state [ 1166.950559][ T3740] device vlan882 left promiscuous mode [ 1166.956081][ T3740] bridge1138: port 1(vlan882) entered disabled state [ 1166.965902][ T3740] device vlan880 left promiscuous mode [ 1166.973458][ T3740] bridge1136: port 1(vlan880) entered disabled state [ 1166.983626][ T3740] device vlan878 left promiscuous mode [ 1166.990764][ T3740] bridge1134: port 1(vlan878) entered disabled state [ 1167.003097][ T3740] device vlan876 left promiscuous mode [ 1167.008608][ T3740] bridge1132: port 1(vlan876) entered disabled state [ 1167.020714][ T3740] device vlan874 left promiscuous mode [ 1167.026239][ T3740] bridge1130: port 1(vlan874) entered disabled state [ 1167.036046][ T3740] device vlan872 left promiscuous mode [ 1167.042632][ T3740] bridge1128: port 1(vlan872) entered disabled state [ 1167.052694][ T3740] device vlan870 left promiscuous mode [ 1167.058206][ T3740] bridge1126: port 1(vlan870) entered disabled state [ 1167.068413][ T3740] device vlan868 left promiscuous mode [ 1167.075862][ T3740] bridge1124: port 1(vlan868) entered disabled state [ 1167.088646][ T3740] device vlan866 left promiscuous mode [ 1167.094892][ T3740] bridge1122: port 1(vlan866) entered disabled state [ 1167.105098][ T3740] device vlan864 left promiscuous mode [ 1167.112295][ T3740] bridge1120: port 1(vlan864) entered disabled state [ 1167.123318][ T3740] device vlan862 left promiscuous mode [ 1167.128821][ T3740] bridge1118: port 1(vlan862) entered disabled state [ 1167.140122][ T3740] device vlan860 left promiscuous mode [ 1167.145634][ T3740] bridge1116: port 1(vlan860) entered disabled state [ 1167.161244][ T3740] device vlan858 left promiscuous mode [ 1167.166877][ T3740] bridge1114: port 1(vlan858) entered disabled state [ 1167.177844][ T3740] device vlan856 left promiscuous mode [ 1167.184755][ T3740] bridge1112: port 1(vlan856) entered disabled state [ 1167.195504][ T3740] device vlan854 left promiscuous mode [ 1167.202813][ T3740] bridge1110: port 1(vlan854) entered disabled state [ 1167.212576][ T3740] device vlan852 left promiscuous mode [ 1167.218079][ T3740] bridge1108: port 1(vlan852) entered disabled state [ 1167.227862][ T3740] device vlan850 left promiscuous mode [ 1167.234952][ T3740] bridge1106: port 1(vlan850) entered disabled state [ 1167.245836][ T3740] device vlan848 left promiscuous mode [ 1167.252140][ T3740] bridge1104: port 1(vlan848) entered disabled state [ 1167.262804][ T3740] device vlan846 left promiscuous mode [ 1167.268315][ T3740] bridge1102: port 1(vlan846) entered disabled state [ 1167.278734][ T3740] device vlan844 left promiscuous mode [ 1167.285381][ T3740] bridge1100: port 1(vlan844) entered disabled state [ 1167.296487][ T3740] device vlan841 left promiscuous mode [ 1167.303200][ T3740] bridge1096: port 1(vlan841) entered disabled state [ 1167.314508][ T3740] device vlan839 left promiscuous mode [ 1167.321176][ T3740] bridge1094: port 1(vlan839) entered disabled state [ 1167.332285][ T3740] device vlan837 left promiscuous mode [ 1167.337813][ T3740] bridge1092: port 1(vlan837) entered disabled state [ 1167.348096][ T3740] device vlan835 left promiscuous mode [ 1167.354413][ T3740] bridge1090: port 1(vlan835) entered disabled state [ 1167.365681][ T3740] device vlan833 left promiscuous mode [ 1167.371926][ T3740] bridge1088: port 1(vlan833) entered disabled state [ 1167.383413][ T3740] device vlan831 left promiscuous mode [ 1167.390244][ T3740] bridge1086: port 1(vlan831) entered disabled state [ 1167.398895][ T3740] device vlan829 left promiscuous mode [ 1167.405427][ T3740] bridge1084: port 1(vlan829) entered disabled state [ 1167.417081][ T3740] device vlan828 left promiscuous mode [ 1167.424146][ T3740] bridge1082: port 1(vlan828) entered disabled state [ 1167.434753][ T3740] device vlan826 left promiscuous mode [ 1167.441646][ T3740] bridge1080: port 1(vlan826) entered disabled state [ 1167.452489][ T3740] device vlan824 left promiscuous mode [ 1167.457996][ T3740] bridge1078: port 1(vlan824) entered disabled state [ 1167.468428][ T3740] device vlan822 left promiscuous mode [ 1167.477205][ T3740] bridge1076: port 1(vlan822) entered disabled state [ 1167.488089][ T3740] device vlan820 left promiscuous mode [ 1167.494726][ T3740] bridge1074: port 1(vlan820) entered disabled state [ 1167.504419][ T3740] device vlan818 left promiscuous mode [ 1167.510872][ T3740] bridge1072: port 1(vlan818) entered disabled state [ 1167.523690][ T3740] device vlan816 left promiscuous mode [ 1167.530237][ T3740] bridge1070: port 1(vlan816) entered disabled state [ 1167.539306][ T3740] device vlan814 left promiscuous mode [ 1167.544821][ T3740] bridge1068: port 1(vlan814) entered disabled state [ 1167.556395][ T3740] device vlan812 left promiscuous mode [ 1167.562701][ T3740] bridge1066: port 1(vlan812) entered disabled state [ 1167.573924][ T3740] device vlan810 left promiscuous mode [ 1167.580451][ T3740] bridge1064: port 1(vlan810) entered disabled state [ 1167.590329][ T3740] device vlan808 left promiscuous mode [ 1167.595842][ T3740] bridge1062: port 1(vlan808) entered disabled state [ 1167.605978][ T3740] device vlan806 left promiscuous mode [ 1167.612369][ T3740] bridge1060: port 1(vlan806) entered disabled state [ 1167.624646][ T3740] device vlan804 left promiscuous mode [ 1167.631264][ T3740] bridge1058: port 1(vlan804) entered disabled state [ 1167.640914][ T3740] device vlan802 left promiscuous mode [ 1167.646424][ T3740] bridge1056: port 1(vlan802) entered disabled state [ 1167.656590][ T3740] device vlan800 left promiscuous mode [ 1167.662963][ T3740] bridge1054: port 1(vlan800) entered disabled state [ 1167.673929][ T3740] device vlan798 left promiscuous mode [ 1167.681455][ T3740] bridge1052: port 1(vlan798) entered disabled state [ 1167.692204][ T3740] device vlan796 left promiscuous mode [ 1167.697810][ T3740] bridge1050: port 1(vlan796) entered disabled state [ 1167.708393][ T3740] device vlan794 left promiscuous mode [ 1167.714620][ T3740] bridge1048: port 1(vlan794) entered disabled state [ 1167.724630][ T3740] device vlan792 left promiscuous mode [ 1167.731225][ T3740] bridge1046: port 1(vlan792) entered disabled state [ 1167.743142][ T3740] device vlan790 left promiscuous mode [ 1167.748660][ T3740] bridge1044: port 1(vlan790) entered disabled state [ 1167.758704][ T3740] device vlan788 left promiscuous mode [ 1167.766064][ T3740] bridge1042: port 1(vlan788) entered disabled state [ 1167.775674][ T3740] device vlan786 left promiscuous mode [ 1167.782186][ T3740] bridge1040: port 1(vlan786) entered disabled state [ 1167.792375][ T3740] device vlan784 left promiscuous mode [ 1167.797959][ T3740] bridge1038: port 1(vlan784) entered disabled state [ 1167.808062][ T3740] device vlan782 left promiscuous mode [ 1167.814333][ T3740] bridge1036: port 1(vlan782) entered disabled state [ 1167.825232][ T3740] device vlan780 left promiscuous mode [ 1167.831331][ T3740] bridge1034: port 1(vlan780) entered disabled state [ 1167.841364][ T3740] device vlan778 left promiscuous mode [ 1167.846961][ T3740] bridge1032: port 1(vlan778) entered disabled state [ 1167.860743][ T3740] device vlan776 left promiscuous mode [ 1167.866359][ T3740] bridge1030: port 1(vlan776) entered disabled state [ 1167.876130][ T3740] device vlan774 left promiscuous mode [ 1167.882573][ T3740] bridge1028: port 1(vlan774) entered disabled state [ 1167.894161][ T3740] device vlan772 left promiscuous mode [ 1167.900659][ T3740] bridge1026: port 1(vlan772) entered disabled state [ 1167.910895][ T3740] device vlan770 left promiscuous mode [ 1167.916405][ T3740] bridge1024: port 1(vlan770) entered disabled state [ 1167.926483][ T3740] device vlan768 left promiscuous mode [ 1167.933455][ T3740] bridge1022: port 1(vlan768) entered disabled state [ 1167.943120][ T3740] device vlan766 left promiscuous mode [ 1167.948628][ T3740] bridge1020: port 1(vlan766) entered disabled state [ 1167.958727][ T3740] device vlan764 left promiscuous mode [ 1167.965661][ T3740] bridge1018: port 1(vlan764) entered disabled state [ 1167.975953][ T3740] device vlan762 left promiscuous mode [ 1167.982036][ T3740] bridge1016: port 1(vlan762) entered disabled state [ 1167.993489][ T3740] device vlan760 left promiscuous mode [ 1168.000764][ T3740] bridge1014: port 1(vlan760) entered disabled state [ 1168.010040][ T3740] device vlan758 left promiscuous mode [ 1168.015551][ T3740] bridge1012: port 1(vlan758) entered disabled state [ 1168.025973][ T3740] device vlan756 left promiscuous mode [ 1168.032270][ T3740] bridge1010: port 1(vlan756) entered disabled state [ 1168.041901][ T3740] device vlan754 left promiscuous mode [ 1168.047405][ T3740] bridge1008: port 1(vlan754) entered disabled state [ 1168.059472][ T3740] device vlan751 left promiscuous mode [ 1168.064983][ T3740] bridge1004: port 1(vlan751) entered disabled state [ 1168.077087][ T3740] device vlan749 left promiscuous mode [ 1168.083234][ T3740] bridge1002: port 1(vlan749) entered disabled state [ 1168.093678][ T3740] device vlan747 left promiscuous mode [ 1168.100402][ T3740] bridge1001: port 1(vlan747) entered disabled state [ 1168.110106][ T3740] device vlan746 left promiscuous mode [ 1168.115660][ T3740] bridge998: port 1(vlan746) entered disabled state [ 1168.127301][ T3740] device vlan744 left promiscuous mode [ 1168.133839][ T3740] bridge996: port 1(vlan744) entered disabled state [ 1168.143427][ T3740] device vlan742 left promiscuous mode [ 1168.150098][ T3740] bridge994: port 1(vlan742) entered disabled state [ 1168.158442][ T3740] device vlan740 left promiscuous mode [ 1168.165011][ T3740] bridge993: port 1(vlan740) entered disabled state [ 1168.176270][ T3740] device vlan738 left promiscuous mode [ 1168.182505][ T3740] bridge990: port 1(vlan738) entered disabled state [ 1168.196957][ T3740] device vlan735 left promiscuous mode [ 1168.203582][ T3740] bridge986: port 1(vlan735) entered disabled state [ 1168.213838][ T3740] device vlan733 left promiscuous mode [ 1168.220475][ T3740] bridge984: port 1(vlan733) entered disabled state [ 1168.230255][ T3740] device vlan731 left promiscuous mode [ 1168.235755][ T3740] bridge982: port 1(vlan731) entered disabled state [ 1168.245737][ T3740] device vlan729 left promiscuous mode [ 1168.252290][ T3740] bridge980: port 1(vlan729) entered disabled state [ 1168.263302][ T3740] device vlan727 left promiscuous mode [ 1168.268795][ T3740] bridge978: port 1(vlan727) entered disabled state [ 1168.280812][ T3740] device vlan725 left promiscuous mode [ 1168.286324][ T3740] bridge976: port 1(vlan725) entered disabled state [ 1168.296640][ T3740] device vlan723 left promiscuous mode [ 1168.302766][ T3740] bridge974: port 1(vlan723) entered disabled state [ 1168.314404][ T3740] device vlan721 left promiscuous mode [ 1168.320497][ T3740] bridge972: port 1(vlan721) entered disabled state [ 1168.330880][ T3740] device vlan719 left promiscuous mode [ 1168.336478][ T3740] bridge970: port 1(vlan719) entered disabled state [ 1168.346346][ T3740] device vlan717 left promiscuous mode [ 1168.352750][ T3740] bridge968: port 1(vlan717) entered disabled state [ 1168.363691][ T3740] device vlan715 left promiscuous mode [ 1168.370135][ T3740] bridge966: port 1(vlan715) entered disabled state [ 1168.379171][ T3740] device vlan713 left promiscuous mode [ 1168.384687][ T3740] bridge964: port 1(vlan713) entered disabled state [ 1168.395242][ T3740] device vlan711 left promiscuous mode [ 1168.402345][ T3740] bridge962: port 1(vlan711) entered disabled state [ 1168.413803][ T3740] device vlan709 left promiscuous mode [ 1168.420766][ T3740] bridge960: port 1(vlan709) entered disabled state [ 1168.429763][ T3740] device vlan707 left promiscuous mode [ 1168.435275][ T3740] bridge958: port 1(vlan707) entered disabled state [ 1168.445414][ T3740] device vlan705 left promiscuous mode [ 1168.451947][ T3740] bridge956: port 1(vlan705) entered disabled state [ 1168.463773][ T3740] device vlan703 left promiscuous mode [ 1168.472056][ T3740] bridge954: port 1(vlan703) entered disabled state [ 1168.482471][ T3740] device vlan701 left promiscuous mode [ 1168.487967][ T3740] bridge952: port 1(vlan701) entered disabled state [ 1168.498042][ T3740] device vlan699 left promiscuous mode [ 1168.504044][ T3740] bridge950: port 1(vlan699) entered disabled state [ 1168.518687][ T3740] device vlan697 left promiscuous mode [ 1168.524731][ T3740] bridge948: port 1(vlan697) entered disabled state [ 1168.534611][ T3740] device vlan695 left promiscuous mode [ 1168.541382][ T3740] bridge946: port 1(vlan695) entered disabled state [ 1168.550869][ T3740] device vlan693 left promiscuous mode [ 1168.556382][ T3740] bridge944: port 1(vlan693) entered disabled state [ 1168.566429][ T3740] device vlan691 left promiscuous mode [ 1168.572908][ T3740] bridge942: port 1(vlan691) entered disabled state [ 1168.585452][ T3740] device vlan687 left promiscuous mode [ 1168.591846][ T3740] bridge936: port 1(vlan687) entered disabled state [ 1168.603055][ T3740] device vlan685 left promiscuous mode [ 1168.608576][ T3740] bridge934: port 1(vlan685) entered disabled state [ 1168.621258][ T3740] device vlan682 left promiscuous mode [ 1168.626772][ T3740] bridge930: port 1(vlan682) entered disabled state [ 1168.637013][ T3740] device vlan680 left promiscuous mode [ 1168.643015][ T3740] bridge928: port 1(vlan680) entered disabled state [ 1168.656537][ T3740] device vlan677 left promiscuous mode [ 1168.662555][ T3740] bridge924: port 1(vlan677) entered disabled state [ 1168.675489][ T3740] device vlan674 left promiscuous mode [ 1168.681527][ T3740] bridge920: port 1(vlan674) entered disabled state [ 1168.691076][ T3740] device vlan672 left promiscuous mode [ 1168.696583][ T3740] bridge918: port 1(vlan672) entered disabled state [ 1168.706655][ T3740] device vlan670 left promiscuous mode [ 1168.713139][ T3740] bridge916: port 1(vlan670) entered disabled state [ 1168.769753][ T3740] device vlan639 left promiscuous mode [ 1168.775299][ T3740] bridge852: port 1(vlan639) entered disabled state [ 1168.786056][ T3740] device vlan637 left promiscuous mode [ 1168.792536][ T3740] bridge850: port 1(vlan637) entered disabled state [ 1168.802173][ T3740] device vlan635 left promiscuous mode [ 1168.807670][ T3740] bridge848: port 1(vlan635) entered disabled state [ 1168.818578][ T3740] device vlan633 left promiscuous mode [ 1168.824953][ T3740] bridge846: port 1(vlan633) entered disabled state [ 1168.834711][ T3740] device vlan631 left promiscuous mode [ 1168.840956][ T3740] bridge844: port 1(vlan631) entered disabled state [ 1168.851593][ T3740] device vlan629 left promiscuous mode [ 1168.857110][ T3740] bridge842: port 1(vlan629) entered disabled state [ 1168.867796][ T3740] device vlan627 left promiscuous mode [ 1168.874910][ T3740] bridge840: port 1(vlan627) entered disabled state [ 1168.884985][ T3740] device vlan625 left promiscuous mode [ 1168.891186][ T3740] bridge838: port 1(vlan625) entered disabled state [ 1168.901256][ T3740] device vlan623 left promiscuous mode [ 1168.906858][ T3740] bridge836: port 1(vlan623) entered disabled state [ 1168.916365][ T3740] device vlan621 left promiscuous mode [ 1168.922772][ T3740] bridge834: port 1(vlan621) entered disabled state [ 1168.933989][ T3740] device vlan619 left promiscuous mode [ 1168.940377][ T3740] bridge832: port 1(vlan619) entered disabled state [ 1168.951036][ T3740] device vlan617 left promiscuous mode [ 1168.956557][ T3740] bridge830: port 1(vlan617) entered disabled state [ 1168.966232][ T3740] device vlan615 left promiscuous mode [ 1168.972328][ T3740] bridge828: port 1(vlan615) entered disabled state [ 1168.983903][ T3740] device vlan613 left promiscuous mode [ 1168.990300][ T3740] bridge826: port 1(vlan613) entered disabled state [ 1169.000214][ T3740] device vlan611 left promiscuous mode [ 1169.005814][ T3740] bridge824: port 1(vlan611) entered disabled state [ 1169.015184][ T3740] device vlan609 left promiscuous mode [ 1169.021583][ T3740] bridge822: port 1(vlan609) entered disabled state [ 1169.032933][ T3740] device vlan607 left promiscuous mode [ 1169.038461][ T3740] bridge820: port 1(vlan607) entered disabled state [ 1169.048093][ T3740] device vlan605 left promiscuous mode [ 1169.054384][ T3740] bridge818: port 1(vlan605) entered disabled state [ 1169.067611][ T3740] device vlan603 left promiscuous mode [ 1169.073937][ T3740] bridge816: port 1(vlan603) entered disabled state [ 1169.083563][ T3740] device vlan601 left promiscuous mode [ 1169.090466][ T3740] bridge814: port 1(vlan601) entered disabled state [ 1169.103486][ T3740] device vlan597 left promiscuous mode [ 1169.110703][ T3740] bridge808: port 1(vlan597) entered disabled state [ 1169.119803][ T3740] device vlan595 left promiscuous mode [ 1169.125326][ T3740] bridge806: port 1(vlan595) entered disabled state [ 1169.136164][ T3740] device vlan593 left promiscuous mode [ 1169.142186][ T3740] bridge804: port 1(vlan593) entered disabled state [ 1169.153097][ T3740] device vlan591 left promiscuous mode [ 1169.158633][ T3740] bridge802: port 1(vlan591) entered disabled state [ 1169.168107][ T3740] device vlan589 left promiscuous mode [ 1169.174342][ T3740] bridge800: port 1(vlan589) entered disabled state [ 1169.186270][ T3740] device vlan587 left promiscuous mode [ 1169.192338][ T3740] bridge798: port 1(vlan587) entered disabled state [ 1169.204827][ T3740] device vlan585 left promiscuous mode [ 1169.211111][ T3740] bridge796: port 1(vlan585) entered disabled state [ 1169.221315][ T3740] device vlan583 left promiscuous mode [ 1169.226834][ T3740] bridge794: port 1(vlan583) entered disabled state [ 1169.237319][ T3740] device vlan581 left promiscuous mode [ 1169.251289][ T3740] bridge792: port 1(vlan581) entered disabled state [ 1169.261797][ T3740] device vlan579 left promiscuous mode [ 1169.267300][ T3740] bridge790: port 1(vlan579) entered disabled state [ 1169.276888][ T3740] device vlan577 left promiscuous mode [ 1169.282917][ T3740] bridge788: port 1(vlan577) entered disabled state [ 1169.294011][ T3740] device vlan575 left promiscuous mode [ 1169.300624][ T3740] bridge786: port 1(vlan575) entered disabled state [ 1169.311009][ T3740] device vlan573 left promiscuous mode [ 1169.316598][ T3740] bridge784: port 1(vlan573) entered disabled state [ 1169.326455][ T3740] device vlan571 left promiscuous mode [ 1169.332489][ T3740] bridge782: port 1(vlan571) entered disabled state [ 1169.343962][ T3740] device vlan569 left promiscuous mode [ 1169.350056][ T3740] bridge780: port 1(vlan569) entered disabled state [ 1169.358862][ T3740] device vlan567 left promiscuous mode [ 1169.365332][ T3740] bridge778: port 1(vlan567) entered disabled state [ 1169.375376][ T3740] device vlan565 left promiscuous mode [ 1169.381465][ T3740] bridge777: port 1(vlan565) entered disabled state [ 1169.393916][ T3740] device vlan563 left promiscuous mode [ 1169.400351][ T3740] bridge774: port 1(vlan563) entered disabled state [ 1169.410276][ T3740] device vlan561 left promiscuous mode [ 1169.416321][ T3740] bridge772: port 1(vlan561) entered disabled state [ 1169.427990][ T3740] device vlan559 left promiscuous mode [ 1169.435021][ T3740] bridge770: port 1(vlan559) entered disabled state [ 1169.446370][ T3740] device vlan557 left promiscuous mode [ 1169.452874][ T3740] bridge768: port 1(vlan557) entered disabled state [ 1169.463580][ T3740] device vlan555 left promiscuous mode [ 1169.470315][ T3740] bridge766: port 1(vlan555) entered disabled state [ 1169.480470][ T3740] device vlan553 left promiscuous mode [ 1169.485991][ T3740] bridge764: port 1(vlan553) entered disabled state [ 1169.496038][ T3740] device vlan551 left promiscuous mode [ 1169.503834][ T3740] bridge762: port 1(vlan551) entered disabled state [ 1169.514458][ T3740] device vlan549 left promiscuous mode [ 1169.521844][ T3740] bridge760: port 1(vlan549) entered disabled state [ 1169.531297][ T3740] device vlan547 left promiscuous mode [ 1169.536798][ T3740] bridge758: port 1(vlan547) entered disabled state [ 1169.548783][ T3740] device vlan545 left promiscuous mode [ 1169.557045][ T3740] bridge756: port 1(vlan545) entered disabled state [ 1169.568288][ T3740] device vlan543 left promiscuous mode [ 1169.574525][ T3740] bridge754: port 1(vlan543) entered disabled state [ 1169.585340][ T3740] device vlan541 left promiscuous mode [ 1169.591400][ T3740] bridge752: port 1(vlan541) entered disabled state [ 1169.600986][ T3740] device vlan539 left promiscuous mode [ 1169.606510][ T3740] bridge750: port 1(vlan539) entered disabled state [ 1169.616802][ T3740] device vlan537 left promiscuous mode [ 1169.623230][ T3740] bridge748: port 1(vlan537) entered disabled state [ 1169.632615][ T3740] device vlan535 left promiscuous mode [ 1169.638109][ T3740] bridge746: port 1(vlan535) entered disabled state [ 1169.647466][ T3740] device vlan533 left promiscuous mode [ 1169.654178][ T3740] bridge744: port 1(vlan533) entered disabled state [ 1169.664887][ T3740] device vlan531 left promiscuous mode [ 1169.671232][ T3740] bridge742: port 1(vlan531) entered disabled state [ 1169.681912][ T3740] device vlan529 left promiscuous mode [ 1169.687425][ T3740] bridge740: port 1(vlan529) entered disabled state [ 1169.696758][ T3740] device vlan527 left promiscuous mode [ 1169.702821][ T3740] bridge738: port 1(vlan527) entered disabled state [ 1169.713628][ T3740] device vlan525 left promiscuous mode [ 1169.720245][ T3740] bridge736: port 1(vlan525) entered disabled state [ 1169.728922][ T3740] device vlan523 left promiscuous mode [ 1169.735168][ T3740] bridge734: port 1(vlan523) entered disabled state [ 1169.746042][ T3740] device vlan521 left promiscuous mode [ 1169.752524][ T3740] bridge732: port 1(vlan521) entered disabled state [ 1169.764446][ T3740] device vlan519 left promiscuous mode [ 1169.770568][ T3740] bridge730: port 1(vlan519) entered disabled state [ 1169.780041][ T3740] device vlan517 left promiscuous mode [ 1169.785565][ T3740] bridge728: port 1(vlan517) entered disabled state [ 1169.794819][ T3740] device vlan515 left promiscuous mode [ 1169.800910][ T3740] bridge726: port 1(vlan515) entered disabled state [ 1169.810618][ T3740] device vlan513 left promiscuous mode [ 1169.816127][ T3740] bridge724: port 1(vlan513) entered disabled state [ 1169.825384][ T3740] device vlan511 left promiscuous mode [ 1169.832319][ T3740] bridge722: port 1(vlan511) entered disabled state [ 1169.843556][ T3740] device vlan509 left promiscuous mode [ 1169.849859][ T3740] bridge720: port 1(vlan509) entered disabled state [ 1169.862580][ T3740] device vlan506 left promiscuous mode [ 1169.868098][ T3740] bridge716: port 1(vlan506) entered disabled state [ 1169.877262][ T3740] device vlan504 left promiscuous mode [ 1169.883684][ T3740] bridge715: port 1(vlan504) entered disabled state [ 1169.893877][ T3740] device vlan503 left promiscuous mode [ 1169.900227][ T3740] bridge712: port 1(vlan503) entered disabled state [ 1169.909224][ T3740] device vlan502 left promiscuous mode [ 1169.914748][ T3740] bridge710: port 1(vlan502) entered disabled state [ 1169.925931][ T3740] device vlan500 left promiscuous mode [ 1169.931861][ T3740] bridge708: port 1(vlan500) entered disabled state [ 1169.941944][ T3740] device vlan498 left promiscuous mode [ 1169.947455][ T3740] bridge706: port 1(vlan498) entered disabled state [ 1169.957492][ T3740] device vlan496 left promiscuous mode [ 1169.964096][ T3740] bridge704: port 1(vlan496) entered disabled state [ 1169.973810][ T3740] device vlan494 left promiscuous mode [ 1169.980192][ T3740] bridge702: port 1(vlan494) entered disabled state [ 1169.989654][ T3740] device vlan492 left promiscuous mode [ 1169.995365][ T3740] bridge700: port 1(vlan492) entered disabled state [ 1170.005023][ T3740] device vlan490 left promiscuous mode [ 1170.011386][ T3740] bridge698: port 1(vlan490) entered disabled state [ 1170.021632][ T3740] device vlan488 left promiscuous mode [ 1170.027252][ T3740] bridge696: port 1(vlan488) entered disabled state [ 1170.036509][ T3740] device vlan486 left promiscuous mode [ 1170.043065][ T3740] bridge694: port 1(vlan486) entered disabled state [ 1170.053378][ T3740] device vlan484 left promiscuous mode [ 1170.058899][ T3740] bridge692: port 1(vlan484) entered disabled state [ 1170.072140][ T3740] device vlan482 left promiscuous mode [ 1170.077687][ T3740] bridge690: port 1(vlan482) entered disabled state [ 1170.087581][ T3740] device vlan480 left promiscuous mode [ 1170.094358][ T3740] bridge688: port 1(vlan480) entered disabled state [ 1170.103623][ T3740] device vlan478 left promiscuous mode [ 1170.109962][ T3740] bridge686: port 1(vlan478) entered disabled state [ 1170.120416][ T3740] device vlan475 left promiscuous mode [ 1170.125926][ T3740] bridge682: port 1(vlan475) entered disabled state [ 1170.135640][ T3740] device vlan473 left promiscuous mode [ 1170.141889][ T3740] bridge680: port 1(vlan473) entered disabled state [ 1170.152297][ T3740] device vlan471 left promiscuous mode [ 1170.157828][ T3740] bridge678: port 1(vlan471) entered disabled state [ 1170.168929][ T3740] device vlan469 left promiscuous mode [ 1170.174877][ T3740] bridge676: port 1(vlan469) entered disabled state [ 1170.184484][ T3740] device vlan467 left promiscuous mode [ 1170.191931][ T3740] bridge674: port 1(vlan467) entered disabled state [ 1170.205239][ T3740] device vlan465 left promiscuous mode [ 1170.211442][ T3740] bridge672: port 1(vlan465) entered disabled state [ 1170.220804][ T3740] device vlan463 left promiscuous mode [ 1170.226338][ T3740] bridge670: port 1(vlan463) entered disabled state [ 1170.235958][ T3740] device vlan461 left promiscuous mode [ 1170.242068][ T3740] bridge668: port 1(vlan461) entered disabled state [ 1170.252258][ T3740] device vlan459 left promiscuous mode [ 1170.258300][ T3740] bridge666: port 1(vlan459) entered disabled state [ 1170.267885][ T3740] device vlan457 left promiscuous mode [ 1170.275934][ T3740] bridge664: port 1(vlan457) entered disabled state [ 1170.286891][ T3740] device vlan455 left promiscuous mode [ 1170.293274][ T3740] bridge662: port 1(vlan455) entered disabled state [ 1170.304856][ T3740] device vlan452 left promiscuous mode [ 1170.311221][ T3740] bridge658: port 1(vlan452) entered disabled state [ 1170.320942][ T3740] device vlan450 left promiscuous mode [ 1170.326465][ T3740] bridge656: port 1(vlan450) entered disabled state [ 1170.335713][ T3740] device vlan448 left promiscuous mode [ 1170.342268][ T3740] bridge654: port 1(vlan448) entered disabled state [ 1170.353399][ T3740] device vlan446 left promiscuous mode [ 1170.358926][ T3740] bridge652: port 1(vlan446) entered disabled state [ 1170.368820][ T3740] device vlan444 left promiscuous mode [ 1170.374757][ T3740] bridge650: port 1(vlan444) entered disabled state [ 1170.384950][ T3740] device vlan442 left promiscuous mode [ 1170.391926][ T3740] bridge648: port 1(vlan442) entered disabled state [ 1170.401216][ T3740] device vlan440 left promiscuous mode [ 1170.406712][ T3740] bridge646: port 1(vlan440) entered disabled state [ 1170.416813][ T3740] device vlan438 left promiscuous mode [ 1170.423042][ T3740] bridge644: port 1(vlan438) entered disabled state [ 1170.435071][ T3740] device vlan436 left promiscuous mode [ 1170.441649][ T3740] bridge642: port 1(vlan436) entered disabled state [ 1170.454325][ T3740] device vlan433 left promiscuous mode [ 1170.460793][ T3740] bridge638: port 1(vlan433) entered disabled state [ 1170.469767][ T3740] device vlan431 left promiscuous mode [ 1170.475287][ T3740] bridge636: port 1(vlan431) entered disabled state [ 1170.485354][ T3740] device vlan429 left promiscuous mode [ 1170.491471][ T3740] bridge634: port 1(vlan429) entered disabled state [ 1170.500698][ T3740] device vlan427 left promiscuous mode [ 1170.506193][ T3740] bridge632: port 1(vlan427) entered disabled state [ 1170.516295][ T3740] device vlan425 left promiscuous mode [ 1170.522574][ T3740] bridge630: port 1(vlan425) entered disabled state [ 1170.533204][ T3740] device vlan423 left promiscuous mode [ 1170.538718][ T3740] bridge628: port 1(vlan423) entered disabled state [ 1170.550618][ T3740] device vlan421 left promiscuous mode [ 1170.556154][ T3740] bridge626: port 1(vlan421) entered disabled state [ 1170.565962][ T3740] device vlan419 left promiscuous mode [ 1170.572172][ T3740] bridge624: port 1(vlan419) entered disabled state [ 1170.581420][ T3740] device vlan417 left promiscuous mode [ 1170.586914][ T3740] bridge622: port 1(vlan417) entered disabled state [ 1170.599456][ T3740] device vlan415 left promiscuous mode [ 1170.604969][ T3740] bridge620: port 1(vlan415) entered disabled state [ 1170.615506][ T3740] device vlan413 left promiscuous mode [ 1170.621363][ T3740] bridge618: port 1(vlan413) entered disabled state [ 1170.631123][ T3740] device vlan411 left promiscuous mode [ 1170.636635][ T3740] bridge616: port 1(vlan411) entered disabled state [ 1170.646556][ T3740] device vlan409 left promiscuous mode [ 1170.653881][ T3740] bridge614: port 1(vlan409) entered disabled state [ 1170.663688][ T3740] device vlan407 left promiscuous mode [ 1170.669869][ T3740] bridge612: port 1(vlan407) entered disabled state [ 1170.680344][ T3740] device vlan405 left promiscuous mode [ 1170.685852][ T3740] bridge610: port 1(vlan405) entered disabled state [ 1170.696687][ T3740] device vlan403 left promiscuous mode [ 1170.702657][ T3740] bridge608: port 1(vlan403) entered disabled state [ 1170.714309][ T3740] device vlan401 left promiscuous mode [ 1170.720254][ T3740] bridge606: port 1(vlan401) entered disabled state [ 1170.728866][ T3740] device vlan399 left promiscuous mode [ 1170.735115][ T3740] bridge604: port 1(vlan399) entered disabled state [ 1170.745558][ T3740] device vlan397 left promiscuous mode [ 1170.751523][ T3740] bridge602: port 1(vlan397) entered disabled state [ 1170.762601][ T3740] device vlan395 left promiscuous mode [ 1170.768111][ T3740] bridge600: port 1(vlan395) entered disabled state [ 1170.778093][ T3740] device vlan393 left promiscuous mode [ 1170.784788][ T3740] bridge598: port 1(vlan393) entered disabled state [ 1170.793971][ T3740] device vlan391 left promiscuous mode [ 1170.800220][ T3740] bridge596: port 1(vlan391) entered disabled state [ 1170.809157][ T3740] device vlan389 left promiscuous mode [ 1170.814669][ T3740] bridge594: port 1(vlan389) entered disabled state [ 1170.825433][ T3740] device vlan387 left promiscuous mode [ 1170.831458][ T3740] bridge592: port 1(vlan387) entered disabled state [ 1170.840741][ T3740] device vlan385 left promiscuous mode [ 1170.846253][ T3740] bridge590: port 1(vlan385) entered disabled state [ 1170.855863][ T3740] device vlan383 left promiscuous mode [ 1170.862157][ T3740] bridge588: port 1(vlan383) entered disabled state [ 1170.871642][ T3740] device vlan381 left promiscuous mode [ 1170.877247][ T3740] bridge586: port 1(vlan381) entered disabled state [ 1170.887810][ T3740] device vlan379 left promiscuous mode [ 1170.894018][ T3740] bridge584: port 1(vlan379) entered disabled state [ 1170.903480][ T3740] device vlan377 left promiscuous mode [ 1170.909668][ T3740] bridge582: port 1(vlan377) entered disabled state [ 1170.918393][ T3740] device vlan375 left promiscuous mode [ 1170.924539][ T3740] bridge580: port 1(vlan375) entered disabled state [ 1170.935473][ T3740] device vlan373 left promiscuous mode [ 1170.941616][ T3740] bridge578: port 1(vlan373) entered disabled state [ 1170.951958][ T3740] device vlan371 left promiscuous mode [ 1170.957472][ T3740] bridge576: port 1(vlan371) entered disabled state [ 1170.966936][ T3740] device vlan369 left promiscuous mode [ 1170.973945][ T3740] bridge574: port 1(vlan369) entered disabled state [ 1170.983681][ T3740] device vlan367 left promiscuous mode [ 1170.989994][ T3740] bridge572: port 1(vlan367) entered disabled state [ 1170.998803][ T3740] device vlan365 left promiscuous mode [ 1171.004958][ T3740] bridge570: port 1(vlan365) entered disabled state [ 1171.015420][ T3740] device vlan363 left promiscuous mode [ 1171.021422][ T3740] bridge568: port 1(vlan363) entered disabled state [ 1171.031891][ T3740] device vlan361 left promiscuous mode [ 1171.037427][ T3740] bridge566: port 1(vlan361) entered disabled state [ 1171.047769][ T3740] device vlan359 left promiscuous mode [ 1171.054558][ T3740] bridge564: port 1(vlan359) entered disabled state [ 1171.063695][ T3740] device vlan357 left promiscuous mode [ 1171.069814][ T3740] bridge562: port 1(vlan357) entered disabled state [ 1171.078421][ T3740] device vlan355 left promiscuous mode [ 1171.084484][ T3740] bridge560: port 1(vlan355) entered disabled state [ 1171.095624][ T3740] device vlan353 left promiscuous mode [ 1171.101567][ T3740] bridge558: port 1(vlan353) entered disabled state [ 1171.111404][ T3740] device vlan351 left promiscuous mode [ 1171.116927][ T3740] bridge556: port 1(vlan351) entered disabled state [ 1171.126692][ T3740] device vlan349 left promiscuous mode [ 1171.132731][ T3740] bridge554: port 1(vlan349) entered disabled state [ 1171.141988][ T3740] device vlan347 left promiscuous mode [ 1171.147514][ T3740] bridge552: port 1(vlan347) entered disabled state [ 1171.157720][ T3740] device vlan345 left promiscuous mode [ 1171.163632][ T3740] bridge550: port 1(vlan345) entered disabled state [ 1171.174319][ T3740] device vlan343 left promiscuous mode [ 1171.180484][ T3740] bridge548: port 1(vlan343) entered disabled state [ 1171.190050][ T3740] device vlan341 left promiscuous mode [ 1171.195681][ T3740] bridge546: port 1(vlan341) entered disabled state [ 1171.205729][ T3740] device vlan339 left promiscuous mode [ 1171.211929][ T3740] bridge544: port 1(vlan339) entered disabled state [ 1171.221126][ T3740] device vlan337 left promiscuous mode [ 1171.226625][ T3740] bridge542: port 1(vlan337) entered disabled state [ 1171.238220][ T3740] device vlan335 left promiscuous mode [ 1171.244139][ T3740] bridge540: port 1(vlan335) entered disabled state [ 1171.253964][ T3740] device vlan333 left promiscuous mode [ 1171.260418][ T3740] bridge538: port 1(vlan333) entered disabled state [ 1171.270237][ T3740] device vlan331 left promiscuous mode [ 1171.275747][ T3740] bridge536: port 1(vlan331) entered disabled state [ 1171.285053][ T3740] device vlan329 left promiscuous mode [ 1171.291195][ T3740] bridge534: port 1(vlan329) entered disabled state [ 1171.302253][ T3740] device vlan327 left promiscuous mode [ 1171.307770][ T3740] bridge532: port 1(vlan327) entered disabled state [ 1171.318634][ T3740] device vlan325 left promiscuous mode [ 1171.324704][ T3740] bridge530: port 1(vlan325) entered disabled state [ 1171.334839][ T3740] device vlan324 left promiscuous mode [ 1171.341104][ T3740] bridge528: port 1(vlan324) entered disabled state [ 1171.351133][ T3740] device vlan322 left promiscuous mode [ 1171.356659][ T3740] bridge526: port 1(vlan322) entered disabled state [ 1171.365777][ T3740] device vlan320 left promiscuous mode [ 1171.372605][ T3740] bridge524: port 1(vlan320) entered disabled state [ 1171.438217][ T3740] device vlan288 left promiscuous mode [ 1171.444779][ T3740] bridge460: port 1(vlan288) entered disabled state [ 1171.458882][ T3740] device vlan283 left promiscuous mode [ 1171.465000][ T3740] bridge452: port 1(vlan283) entered disabled state [ 1171.638209][ T3740] device vlan129 left promiscuous mode [ 1171.644344][ T3740] bridge257: port 1(vlan129) entered disabled state [ 1171.653599][ T3740] device vlan128 left promiscuous mode [ 1171.659701][ T3740] bridge255: port 1(vlan128) entered disabled state [ 1171.668028][ T3740] device vlan127 left promiscuous mode [ 1171.673724][ T3740] bridge253: port 1(vlan127) entered disabled state [ 1171.683601][ T3740] device vlan126 left promiscuous mode [ 1171.689658][ T3740] bridge251: port 1(vlan126) entered disabled state [ 1171.698023][ T3740] device vlan125 left promiscuous mode [ 1171.705346][ T3740] bridge249: port 1(vlan125) entered disabled state [ 1171.714221][ T3740] device vlan124 left promiscuous mode [ 1171.720819][ T3740] bridge247: port 1(vlan124) entered disabled state [ 1171.730010][ T3740] device vlan123 left promiscuous mode [ 1171.735521][ T3740] bridge245: port 1(vlan123) entered disabled state [ 1171.745750][ T3740] device vlan122 left promiscuous mode [ 1171.751473][ T3740] bridge243: port 1(vlan122) entered disabled state [ 1171.763456][ T3740] device vlan121 left promiscuous mode [ 1171.768957][ T3740] bridge241: port 1(vlan121) entered disabled state [ 1171.777676][ T3740] device vlan120 left promiscuous mode [ 1171.783655][ T3740] bridge239: port 1(vlan120) entered disabled state [ 1171.792619][ T3740] device vlan119 left promiscuous mode [ 1171.798114][ T3740] bridge237: port 1(vlan119) entered disabled state [ 1171.808478][ T3740] device vlan118 left promiscuous mode [ 1171.815113][ T3740] bridge235: port 1(vlan118) entered disabled state [ 1171.824213][ T3740] device vlan117 left promiscuous mode [ 1171.830556][ T3740] bridge233: port 1(vlan117) entered disabled state [ 1171.839856][ T3740] device vlan115 left promiscuous mode [ 1171.845368][ T3740] bridge231: port 1(vlan115) entered disabled state [ 1171.855332][ T3740] device vlan113 left promiscuous mode [ 1171.861234][ T3740] bridge229: port 1(vlan113) entered disabled state [ 1171.870322][ T3740] device vlan111 left promiscuous mode [ 1171.875845][ T3740] bridge227: port 1(vlan111) entered disabled state [ 1171.884635][ T3740] device vlan110 left promiscuous mode [ 1171.892466][ T3740] bridge225: port 1(vlan110) entered disabled state [ 1171.901530][ T3740] device vlan109 left promiscuous mode [ 1171.907055][ T3740] bridge223: port 1(vlan109) entered disabled state [ 1171.915984][ T3740] device vlan108 left promiscuous mode [ 1171.922429][ T3740] bridge221: port 1(vlan108) entered disabled state [ 1171.933550][ T3740] device vlan107 left promiscuous mode [ 1171.939404][ T3740] bridge219: port 1(vlan107) entered disabled state [ 1171.947812][ T3740] device vlan106 left promiscuous mode [ 1171.953911][ T3740] bridge217: port 1(vlan106) entered disabled state [ 1171.962599][ T3740] device vlan105 left promiscuous mode [ 1171.968211][ T3740] bridge215: port 1(vlan105) entered disabled state [ 1171.980619][ T3740] device vlan104 left promiscuous mode [ 1171.986132][ T3740] bridge213: port 1(vlan104) entered disabled state [ 1171.996196][ T3740] device vlan103 left promiscuous mode [ 1172.002050][ T3740] bridge211: port 1(vlan103) entered disabled state [ 1172.011884][ T3740] device vlan102 left promiscuous mode [ 1172.017465][ T3740] bridge209: port 1(vlan102) entered disabled state [ 1172.026411][ T3740] device vlan101 left promiscuous mode [ 1172.032914][ T3740] bridge207: port 1(vlan101) entered disabled state [ 1172.044713][ T3740] device vlan100 left promiscuous mode [ 1172.050684][ T3740] bridge205: port 1(vlan100) entered disabled state [ 1172.060094][ T3740] device vlan99 left promiscuous mode [ 1172.065527][ T3740] bridge203: port 1(vlan99) entered disabled state [ 1172.074173][ T3740] device vlan98 left promiscuous mode [ 1172.081339][ T3740] bridge201: port 1(vlan98) entered disabled state [ 1172.090362][ T3740] device vlan97 left promiscuous mode [ 1172.095782][ T3740] bridge199: port 1(vlan97) entered disabled state [ 1172.104693][ T3740] device vlan96 left promiscuous mode [ 1172.110854][ T3740] bridge197: port 1(vlan96) entered disabled state [ 1172.119895][ T3740] device vlan95 left promiscuous mode [ 1172.125417][ T3740] bridge195: port 1(vlan95) entered disabled state [ 1172.135066][ T3740] device vlan94 left promiscuous mode [ 1172.141180][ T3740] bridge193: port 1(vlan94) entered disabled state [ 1172.150961][ T3740] device vlan93 left promiscuous mode [ 1172.156395][ T3740] bridge191: port 1(vlan93) entered disabled state [ 1172.165116][ T3740] device vlan92 left promiscuous mode [ 1172.171135][ T3740] bridge189: port 1(vlan92) entered disabled state [ 1172.180871][ T3740] device vlan91 left promiscuous mode [ 1172.186286][ T3740] bridge187: port 1(vlan91) entered disabled state [ 1172.198123][ T3740] device vlan89 left promiscuous mode [ 1172.203813][ T3740] bridge183: port 1(vlan89) entered disabled state [ 1172.212478][ T3740] device vlan88 left promiscuous mode [ 1172.217891][ T3740] bridge181: port 1(vlan88) entered disabled state [ 1172.228204][ T3740] device vlan87 left promiscuous mode [ 1172.233946][ T3740] bridge179: port 1(vlan87) entered disabled state [ 1172.243994][ T3740] device vlan86 left promiscuous mode [ 1172.250865][ T3740] bridge177: port 1(vlan86) entered disabled state [ 1172.260276][ T3740] device vlan85 left promiscuous mode [ 1172.265901][ T3740] bridge175: port 1(vlan85) entered disabled state [ 1172.275535][ T3740] device vlan84 left promiscuous mode [ 1172.281340][ T3740] bridge173: port 1(vlan84) entered disabled state [ 1172.291508][ T3740] device vlan83 left promiscuous mode [ 1172.296923][ T3740] bridge171: port 1(vlan83) entered disabled state [ 1172.306903][ T3740] device vlan82 left promiscuous mode [ 1172.312579][ T3740] bridge169: port 1(vlan82) entered disabled state [ 1172.389873][ T3740] device vlan51 left promiscuous mode [ 1172.395327][ T3740] bridge68: port 1(vlan51) entered disabled state [ 1172.405956][ T3740] device vlan50 left promiscuous mode [ 1172.411621][ T3740] bridge66: port 1(vlan50) entered disabled state [ 1172.422320][ T3740] device vlan49 left promiscuous mode [ 1172.427745][ T3740] bridge64: port 1(vlan49) entered disabled state [ 1172.436307][ T3740] device vlan48 left promiscuous mode [ 1172.442185][ T3740] bridge62: port 1(vlan48) entered disabled state [ 1172.451405][ T3740] device vlan47 left promiscuous mode [ 1172.456817][ T3740] bridge60: port 1(vlan47) entered disabled state [ 1172.465492][ T3740] device vlan46 left promiscuous mode [ 1172.472322][ T3740] bridge58: port 1(vlan46) entered disabled state [ 1172.482195][ T3740] device vlan45 left promiscuous mode [ 1172.487815][ T3740] bridge56: port 1(vlan45) entered disabled state [ 1172.496294][ T3740] device vlan44 left promiscuous mode [ 1172.502441][ T3740] bridge54: port 1(vlan44) entered disabled state [ 1172.511061][ T3740] device vlan43 left promiscuous mode [ 1172.516484][ T3740] bridge52: port 1(vlan43) entered disabled state [ 1172.526879][ T3740] device vlan42 left promiscuous mode [ 1172.532716][ T3740] bridge50: port 1(vlan42) entered disabled state [ 1172.543235][ T3740] device vlan41 left promiscuous mode [ 1172.548657][ T3740] bridge48: port 1(vlan41) entered disabled state [ 1172.557216][ T3740] device vlan40 left promiscuous mode [ 1172.562981][ T3740] bridge46: port 1(vlan40) entered disabled state [ 1172.602327][ T3740] device vlan9 left promiscuous mode [ 1172.607658][ T3740] bridge7: port 1(vlan9) entered disabled state [ 1172.616575][ T3740] device vlan7 left promiscuous mode [ 1172.623144][ T3740] bridge5: port 1(vlan7) entered disabled state [ 1172.632403][ T3740] device vlan5 left promiscuous mode [ 1172.637728][ T3740] bridge3: port 1(vlan5) entered disabled state [ 1172.647875][ T3740] device vlan3 left promiscuous mode [ 1172.653325][ T3740] bridge1: port 1(vlan3) entered disabled state [ 1172.665700][ T3740] device hsr_slave_0 left promiscuous mode [ 1172.673218][ T3740] device hsr_slave_1 left promiscuous mode [ 1172.681596][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.689870][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.700499][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.708328][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.718756][ T3740] device bridge_slave_1 left promiscuous mode [ 1172.726140][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.735407][ T3740] device bridge_slave_0 left promiscuous mode [ 1172.742934][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.104554][ T3740] device bridge2440 left promiscuous mode [ 1173.111209][ T3740] device bridge2438 left promiscuous mode [ 1173.117145][ T3740] device bridge2436 left promiscuous mode [ 1173.123429][ T3740] device bridge2434 left promiscuous mode [ 1173.130866][ T3740] device bridge2432 left promiscuous mode [ 1173.136796][ T3740] device bridge2430 left promiscuous mode [ 1173.143598][ T3740] device bridge2428 left promiscuous mode [ 1173.150105][ T3740] device bridge2426 left promiscuous mode [ 1173.156072][ T3740] device bridge2424 left promiscuous mode [ 1173.162632][ T3740] device bridge2422 left promiscuous mode [ 1173.171761][ T3740] device bridge2420 left promiscuous mode [ 1173.177674][ T3740] device bridge2418 left promiscuous mode [ 1173.184144][ T3740] device bridge2416 left promiscuous mode [ 1173.191022][ T3740] device bridge2414 left promiscuous mode [ 1173.196982][ T3740] device bridge2412 left promiscuous mode [ 1173.203697][ T3740] device bridge2410 left promiscuous mode [ 1173.210364][ T3740] device bridge2408 left promiscuous mode [ 1173.216589][ T3740] device bridge2406 left promiscuous mode [ 1173.222873][ T3740] device bridge2404 left promiscuous mode [ 1173.228775][ T3740] device bridge2402 left promiscuous mode [ 1173.235274][ T3740] device bridge2400 left promiscuous mode [ 1173.242299][ T3740] device bridge2398 left promiscuous mode [ 1173.248259][ T3740] device bridge2396 left promiscuous mode [ 1173.255057][ T3740] device bridge2394 left promiscuous mode [ 1173.261569][ T3740] device bridge2392 left promiscuous mode [ 1173.267512][ T3740] device bridge2390 left promiscuous mode [ 1173.274557][ T3740] device bridge2386 left promiscuous mode [ 1173.281043][ T3740] device bridge2384 left promiscuous mode [ 1173.286944][ T3740] device bridge2382 left promiscuous mode [ 1173.293766][ T3740] device bridge2380 left promiscuous mode [ 1173.300546][ T3740] device bridge2376 left promiscuous mode [ 1173.306454][ T3740] device bridge2374 left promiscuous mode [ 1173.314207][ T3740] device bridge2372 left promiscuous mode [ 1173.320772][ T3740] device bridge2370 left promiscuous mode [ 1173.326690][ T3740] device bridge2368 left promiscuous mode [ 1173.334407][ T3740] device bridge2366 left promiscuous mode [ 1173.341373][ T3740] device bridge2364 left promiscuous mode [ 1173.347297][ T3740] device bridge2362 left promiscuous mode [ 1173.354978][ T3740] device bridge2360 left promiscuous mode [ 1173.362598][ T3740] device bridge2358 left promiscuous mode [ 1173.368785][ T3740] device bridge2356 left promiscuous mode [ 1173.376006][ T3740] device bridge2354 left promiscuous mode [ 1173.382889][ T3740] device bridge2352 left promiscuous mode [ 1173.388900][ T3740] device bridge2350 left promiscuous mode [ 1173.396041][ T3740] device bridge2348 left promiscuous mode [ 1173.402826][ T3740] device bridge2346 left promiscuous mode [ 1173.408895][ T3740] device bridge2342 left promiscuous mode [ 1173.415464][ T3740] device bridge2340 left promiscuous mode [ 1173.422259][ T3740] device bridge2338 left promiscuous mode [ 1173.428105][ T3740] device bridge2336 left promiscuous mode [ 1173.434591][ T3740] device bridge2334 left promiscuous mode [ 1173.441806][ T3740] device bridge2332 left promiscuous mode [ 1173.447728][ T3740] device bridge2330 left promiscuous mode [ 1173.454280][ T3740] device bridge2328 left promiscuous mode [ 1173.461739][ T3740] device bridge2326 left promiscuous mode [ 1173.467708][ T3740] device bridge2324 left promiscuous mode [ 1173.475184][ T3740] device bridge2322 left promiscuous mode [ 1173.481941][ T3740] device bridge2320 left promiscuous mode [ 1173.487861][ T3740] device bridge2318 left promiscuous mode [ 1173.494580][ T3740] device bridge2316 left promiscuous mode [ 1173.501570][ T3740] device bridge2314 left promiscuous mode [ 1173.507615][ T3740] device bridge2312 left promiscuous mode [ 1173.515250][ T3740] device bridge2310 left promiscuous mode [ 1173.522026][ T3740] device bridge2308 left promiscuous mode [ 1173.527956][ T3740] device bridge2306 left promiscuous mode [ 1173.534882][ T3740] device bridge2304 left promiscuous mode [ 1173.541691][ T3740] device bridge2302 left promiscuous mode [ 1173.547612][ T3740] device bridge2300 left promiscuous mode [ 1173.555297][ T3740] device bridge2298 left promiscuous mode [ 1173.562100][ T3740] device bridge2296 left promiscuous mode [ 1173.568024][ T3740] device bridge2294 left promiscuous mode [ 1173.575063][ T3740] device bridge2292 left promiscuous mode [ 1173.583126][ T3740] device bridge2290 left promiscuous mode [ 1173.590483][ T3740] device bridge2288 left promiscuous mode [ 1173.596400][ T3740] device bridge2286 left promiscuous mode [ 1173.603460][ T3740] device bridge2284 left promiscuous mode [ 1173.610219][ T3740] device bridge2282 left promiscuous mode [ 1173.616130][ T3740] device bridge2280 left promiscuous mode [ 1173.624181][ T3740] device bridge2278 left promiscuous mode [ 1173.631100][ T3740] device bridge2276 left promiscuous mode [ 1173.637013][ T3740] device bridge2274 left promiscuous mode [ 1173.643918][ T3740] device bridge2272 left promiscuous mode [ 1173.650224][ T3740] device bridge2270 left promiscuous mode [ 1173.656205][ T3740] device bridge2268 left promiscuous mode [ 1173.663017][ T3740] device bridge2266 left promiscuous mode [ 1173.670354][ T3740] device bridge2264 left promiscuous mode [ 1173.676733][ T3740] device bridge2262 left promiscuous mode [ 1173.684693][ T3740] device bridge2260 left promiscuous mode [ 1173.691088][ T3740] device bridge2258 left promiscuous mode [ 1173.697073][ T3740] device bridge2256 left promiscuous mode [ 1173.705798][ T3740] device bridge2254 left promiscuous mode [ 1173.712754][ T3740] device bridge2250 left promiscuous mode [ 1173.718640][ T3740] device bridge2248 left promiscuous mode [ 1173.725140][ T3740] device bridge2246 left promiscuous mode [ 1173.731735][ T3740] device bridge2244 left promiscuous mode [ 1173.737639][ T3740] device bridge2242 left promiscuous mode [ 1173.744281][ T3740] device bridge2240 left promiscuous mode [ 1173.750882][ T3740] device bridge2238 left promiscuous mode [ 1173.756814][ T3740] device bridge2236 left promiscuous mode [ 1173.764281][ T3740] device bridge2234 left promiscuous mode [ 1173.771030][ T3740] device bridge2232 left promiscuous mode [ 1173.776993][ T3740] device bridge2230 left promiscuous mode [ 1173.784253][ T3740] device bridge2228 left promiscuous mode [ 1173.791997][ T3740] device bridge2226 left promiscuous mode [ 1173.797894][ T3740] device bridge2224 left promiscuous mode [ 1173.804592][ T3740] device bridge2222 left promiscuous mode [ 1173.811274][ T3740] device bridge2220 left promiscuous mode [ 1173.817206][ T3740] device bridge2218 left promiscuous mode [ 1173.824342][ T3740] device bridge2216 left promiscuous mode [ 1173.830785][ T3740] device bridge2214 left promiscuous mode [ 1173.836704][ T3740] device bridge2212 left promiscuous mode [ 1173.843683][ T3740] device bridge2210 left promiscuous mode [ 1173.850264][ T3740] device bridge2208 left promiscuous mode [ 1173.856178][ T3740] device bridge2206 left promiscuous mode [ 1173.863243][ T3740] device bridge2204 left promiscuous mode [ 1173.869366][ T3740] device bridge2202 left promiscuous mode [ 1173.875301][ T3740] device bridge2200 left promiscuous mode [ 1173.883173][ T3740] device bridge2198 left promiscuous mode [ 1173.889714][ T3740] device bridge2196 left promiscuous mode [ 1173.895647][ T3740] device bridge2194 left promiscuous mode [ 1173.903450][ T3740] device bridge2192 left promiscuous mode [ 1173.910373][ T3740] device bridge2190 left promiscuous mode [ 1173.916539][ T3740] device bridge2188 left promiscuous mode [ 1173.923198][ T3740] device bridge2186 left promiscuous mode [ 1173.930316][ T3740] device bridge2184 left promiscuous mode [ 1173.936262][ T3740] device bridge2182 left promiscuous mode [ 1173.943223][ T3740] device bridge2180 left promiscuous mode [ 1173.950821][ T3740] device bridge2178 left promiscuous mode [ 1173.956767][ T3740] device bridge2176 left promiscuous mode [ 1173.963463][ T3740] device bridge2174 left promiscuous mode [ 1173.970372][ T3740] device bridge2172 left promiscuous mode [ 1173.976318][ T3740] device bridge2170 left promiscuous mode [ 1173.983232][ T3740] device bridge2166 left promiscuous mode [ 1173.990204][ T3740] device bridge2164 left promiscuous mode [ 1173.996339][ T3740] device bridge2162 left promiscuous mode [ 1174.003024][ T3740] device bridge2160 left promiscuous mode [ 1174.008935][ T3740] device bridge2158 left promiscuous mode [ 1174.015622][ T3740] device bridge2156 left promiscuous mode [ 1174.022491][ T3740] device bridge2154 left promiscuous mode [ 1174.028410][ T3740] device bridge2152 left promiscuous mode [ 1174.036506][ T3740] device bridge2151 left promiscuous mode [ 1174.045052][ T3740] device bridge2148 left promiscuous mode [ 1174.051417][ T3740] device bridge2146 left promiscuous mode [ 1174.057416][ T3740] device bridge2144 left promiscuous mode [ 1174.063881][ T3740] device bridge2142 left promiscuous mode [ 1174.070721][ T3740] device bridge2140 left promiscuous mode [ 1174.076637][ T3740] device bridge2138 left promiscuous mode [ 1174.083255][ T3740] device bridge2136 left promiscuous mode [ 1174.089974][ T3740] device bridge2134 left promiscuous mode [ 1174.096516][ T3740] device bridge2132 left promiscuous mode [ 1174.103297][ T3740] device bridge2130 left promiscuous mode [ 1174.110519][ T3740] device bridge2128 left promiscuous mode [ 1174.116654][ T3740] device bridge2126 left promiscuous mode [ 1174.124340][ T3740] device bridge2124 left promiscuous mode [ 1174.130963][ T3740] device bridge2122 left promiscuous mode [ 1174.136895][ T3740] device bridge2120 left promiscuous mode [ 1174.145861][ T3740] device bridge2118 left promiscuous mode [ 1174.152067][ T3740] device bridge2116 left promiscuous mode [ 1174.157981][ T3740] device bridge2114 left promiscuous mode [ 1174.164642][ T3740] device bridge2112 left promiscuous mode [ 1174.171400][ T3740] device bridge2110 left promiscuous mode [ 1174.177391][ T3740] device bridge2108 left promiscuous mode [ 1174.184256][ T3740] device bridge2106 left promiscuous mode [ 1174.191101][ T3740] device bridge2104 left promiscuous mode [ 1174.197033][ T3740] device bridge2102 left promiscuous mode [ 1174.205082][ T3740] device bridge2100 left promiscuous mode [ 1174.211359][ T3740] device bridge2098 left promiscuous mode [ 1174.217280][ T3740] device bridge2096 left promiscuous mode [ 1174.224583][ T3740] device bridge2092 left promiscuous mode [ 1174.232413][ T3740] device bridge2090 left promiscuous mode [ 1174.238336][ T3740] device bridge2088 left promiscuous mode [ 1174.245068][ T3740] device bridge2086 left promiscuous mode [ 1174.251587][ T3740] device bridge2084 left promiscuous mode [ 1174.257495][ T3740] device bridge2082 left promiscuous mode [ 1174.265994][ T3740] device bridge2080 left promiscuous mode [ 1174.273640][ T3740] device bridge2078 left promiscuous mode [ 1174.280660][ T3740] device bridge2076 left promiscuous mode [ 1174.286709][ T3740] device bridge2074 left promiscuous mode [ 1174.293262][ T3740] device bridge2072 left promiscuous mode [ 1174.300200][ T3740] device bridge2070 left promiscuous mode [ 1174.306071][ T3740] device bridge2069 left promiscuous mode [ 1174.313049][ T3740] device bridge2066 left promiscuous mode [ 1174.318955][ T3740] device bridge2064 left promiscuous mode [ 1174.325327][ T3740] device bridge2062 left promiscuous mode [ 1174.332296][ T3740] device bridge2060 left promiscuous mode [ 1174.338255][ T3740] device bridge2058 left promiscuous mode [ 1174.347193][ T3740] device bridge2056 left promiscuous mode [ 1174.354890][ T3740] device bridge2054 left promiscuous mode [ 1174.361752][ T3740] device bridge2052 left promiscuous mode [ 1174.367880][ T3740] device bridge2050 left promiscuous mode [ 1174.374741][ T3740] device bridge2048 left promiscuous mode [ 1174.381332][ T3740] device bridge2046 left promiscuous mode [ 1174.387696][ T3740] device bridge2044 left promiscuous mode [ 1174.395124][ T3740] device bridge2042 left promiscuous mode [ 1174.401492][ T3740] device bridge2040 left promiscuous mode [ 1174.407400][ T3740] device bridge2038 left promiscuous mode [ 1174.414679][ T3740] device bridge2036 left promiscuous mode [ 1174.421206][ T3740] device bridge2034 left promiscuous mode [ 1174.427145][ T3740] device bridge2032 left promiscuous mode [ 1174.434801][ T3740] device bridge2030 left promiscuous mode [ 1174.441780][ T3740] device bridge2028 left promiscuous mode [ 1174.448015][ T3740] device bridge2026 left promiscuous mode [ 1174.456045][ T3740] device bridge2024 left promiscuous mode [ 1174.463494][ T3740] device bridge2022 left promiscuous mode [ 1174.469859][ T3740] device bridge2020 left promiscuous mode [ 1174.475791][ T3740] device bridge2018 left promiscuous mode [ 1174.483865][ T3740] device bridge2016 left promiscuous mode [ 1174.490243][ T3740] device bridge2015 left promiscuous mode [ 1174.496098][ T3740] device bridge2014 left promiscuous mode [ 1174.502717][ T3740] device bridge2012 left promiscuous mode [ 1174.508633][ T3740] device bridge2010 left promiscuous mode [ 1174.515994][ T3740] device bridge2008 left promiscuous mode [ 1174.522499][ T3740] device bridge2006 left promiscuous mode [ 1174.528550][ T3740] device bridge2005 left promiscuous mode [ 1174.535786][ T3740] device bridge2004 left promiscuous mode [ 1174.542107][ T3740] device bridge2002 left promiscuous mode [ 1174.547999][ T3740] device bridge2000 left promiscuous mode [ 1174.554773][ T3740] device bridge1998 left promiscuous mode [ 1174.561950][ T3740] device bridge1996 left promiscuous mode [ 1174.567778][ T3740] device bridge1995 left promiscuous mode [ 1174.574634][ T3740] device bridge1994 left promiscuous mode [ 1174.581290][ T3740] device bridge1992 left promiscuous mode [ 1174.587189][ T3740] device bridge1990 left promiscuous mode [ 1174.595963][ T3740] device bridge1988 left promiscuous mode [ 1174.602323][ T3740] device bridge1987 left promiscuous mode [ 1174.608162][ T3740] device bridge1986 left promiscuous mode [ 1174.614833][ T3740] device bridge1985 left promiscuous mode [ 1174.621258][ T3740] device bridge1984 left promiscuous mode [ 1174.627090][ T3740] device bridge1983 left promiscuous mode [ 1174.633766][ T3740] device bridge1982 left promiscuous mode [ 1174.640372][ T3740] device bridge1980 left promiscuous mode [ 1174.646207][ T3740] device bridge1979 left promiscuous mode [ 1174.652758][ T3740] device bridge1978 left promiscuous mode [ 1174.658700][ T3740] device bridge1976 left promiscuous mode [ 1174.665232][ T3740] device bridge1974 left promiscuous mode [ 1174.672333][ T3740] device bridge1972 left promiscuous mode [ 1174.678259][ T3740] device bridge1970 left promiscuous mode [ 1174.686149][ T3740] device bridge1968 left promiscuous mode [ 1174.692638][ T3740] device bridge1966 left promiscuous mode [ 1174.698545][ T3740] device bridge1964 left promiscuous mode [ 1174.706473][ T3740] device bridge1962 left promiscuous mode [ 1174.712796][ T3740] device bridge1960 left promiscuous mode [ 1174.718693][ T3740] device bridge1958 left promiscuous mode [ 1174.725435][ T3740] device bridge1956 left promiscuous mode [ 1174.733236][ T3740] device bridge1952 left promiscuous mode [ 1174.739383][ T3740] device bridge1950 left promiscuous mode [ 1174.745334][ T3740] device bridge1948 left promiscuous mode [ 1174.754062][ T3740] device bridge1946 left promiscuous mode [ 1174.760582][ T3740] device bridge1944 left promiscuous mode [ 1174.766518][ T3740] device bridge1942 left promiscuous mode [ 1174.774088][ T3740] device bridge1940 left promiscuous mode [ 1174.780810][ T3740] device bridge1938 left promiscuous mode [ 1174.786912][ T3740] device bridge1936 left promiscuous mode [ 1174.794619][ T3740] device bridge1934 left promiscuous mode [ 1174.801112][ T3740] device bridge1932 left promiscuous mode [ 1174.807108][ T3740] device bridge1930 left promiscuous mode [ 1174.814656][ T3740] device bridge1928 left promiscuous mode [ 1174.821217][ T3740] device bridge1926 left promiscuous mode [ 1174.827124][ T3740] device bridge1924 left promiscuous mode [ 1174.834698][ T3740] device bridge1922 left promiscuous mode [ 1174.858913][ T3740] device bridge1920 left promiscuous mode [ 1174.865139][ T3740] device bridge1918 left promiscuous mode [ 1174.871588][ T3740] device bridge1916 left promiscuous mode [ 1174.877553][ T3740] device bridge1914 left promiscuous mode [ 1174.884898][ T3740] device bridge1912 left promiscuous mode [ 1174.894670][ T3740] device bridge1910 left promiscuous mode [ 1174.901886][ T3740] device bridge1906 left promiscuous mode [ 1174.907800][ T3740] device bridge1904 left promiscuous mode [ 1174.914749][ T3740] device bridge1902 left promiscuous mode [ 1174.923335][ T3740] device bridge1900 left promiscuous mode [ 1174.930554][ T3740] device bridge1898 left promiscuous mode [ 1174.936447][ T3740] device bridge1896 left promiscuous mode [ 1174.943368][ T3740] device bridge1894 left promiscuous mode [ 1174.950162][ T3740] device bridge1892 left promiscuous mode [ 1174.956133][ T3740] device bridge1890 left promiscuous mode [ 1174.962768][ T3740] device bridge1888 left promiscuous mode [ 1174.968689][ T3740] device bridge1886 left promiscuous mode [ 1174.974909][ T3740] device bridge1884 left promiscuous mode [ 1174.981521][ T3740] device bridge1882 left promiscuous mode [ 1174.987419][ T3740] device bridge1880 left promiscuous mode [ 1174.994449][ T3740] device bridge1878 left promiscuous mode [ 1175.002265][ T3740] device bridge1876 left promiscuous mode [ 1175.008243][ T3740] device bridge1874 left promiscuous mode [ 1175.015043][ T3740] device bridge1872 left promiscuous mode [ 1175.021987][ T3740] device bridge1870 left promiscuous mode [ 1175.027924][ T3740] device bridge1868 left promiscuous mode [ 1175.035802][ T3740] device bridge1866 left promiscuous mode [ 1175.042427][ T3740] device bridge1864 left promiscuous mode [ 1175.048337][ T3740] device bridge1862 left promiscuous mode [ 1175.055333][ T3740] device bridge1860 left promiscuous mode [ 1175.062586][ T3740] device bridge1859 left promiscuous mode [ 1175.068371][ T3740] device bridge1858 left promiscuous mode [ 1175.075622][ T3740] device bridge1856 left promiscuous mode [ 1175.082370][ T3740] device bridge1854 left promiscuous mode [ 1175.088297][ T3740] device bridge1852 left promiscuous mode [ 1175.095060][ T3740] device bridge1850 left promiscuous mode [ 1175.102041][ T3740] device bridge1848 left promiscuous mode [ 1175.107890][ T3740] device bridge1846 left promiscuous mode [ 1175.115457][ T3740] device bridge1844 left promiscuous mode [ 1175.121847][ T3740] device bridge1842 left promiscuous mode [ 1175.127853][ T3740] device bridge1840 left promiscuous mode [ 1175.134308][ T3740] device bridge1838 left promiscuous mode [ 1175.141280][ T3740] device bridge1836 left promiscuous mode [ 1175.147248][ T3740] device bridge1834 left promiscuous mode [ 1175.154806][ T3740] device bridge1832 left promiscuous mode [ 1175.161485][ T3740] device bridge1830 left promiscuous mode [ 1175.167422][ T3740] device bridge1828 left promiscuous mode [ 1175.173942][ T3740] device bridge1826 left promiscuous mode [ 1175.181244][ T3740] device bridge1824 left promiscuous mode [ 1175.187839][ T3740] device bridge1822 left promiscuous mode [ 1175.194247][ T3740] device bridge1820 left promiscuous mode [ 1175.201048][ T3740] device bridge1818 left promiscuous mode [ 1175.206972][ T3740] device bridge1816 left promiscuous mode [ 1175.213631][ T3740] device bridge1814 left promiscuous mode [ 1175.221035][ T3740] device bridge1812 left promiscuous mode [ 1175.227372][ T3740] device bridge1810 left promiscuous mode [ 1175.234680][ T3740] device bridge1808 left promiscuous mode [ 1175.241429][ T3740] device bridge1806 left promiscuous mode [ 1175.247348][ T3740] device bridge1804 left promiscuous mode [ 1175.254964][ T3740] device bridge1802 left promiscuous mode [ 1175.262064][ T3740] device bridge1800 left promiscuous mode [ 1175.268057][ T3740] device bridge1798 left promiscuous mode [ 1175.274999][ T3740] device bridge1796 left promiscuous mode [ 1175.282197][ T3740] device bridge1794 left promiscuous mode [ 1175.288107][ T3740] device bridge1792 left promiscuous mode [ 1175.294639][ T3740] device bridge1791 left promiscuous mode [ 1175.301200][ T3740] device bridge1790 left promiscuous mode [ 1175.307053][ T3740] device bridge1789 left promiscuous mode [ 1175.314484][ T3740] device bridge1788 left promiscuous mode [ 1175.322086][ T3740] device bridge1786 left promiscuous mode [ 1175.328027][ T3740] device bridge1784 left promiscuous mode [ 1175.335563][ T3740] device bridge1782 left promiscuous mode [ 1175.342045][ T3740] device bridge1780 left promiscuous mode [ 1175.347967][ T3740] device bridge1778 left promiscuous mode [ 1175.355097][ T3740] device bridge1776 left promiscuous mode [ 1175.361935][ T3740] device bridge1774 left promiscuous mode [ 1175.367839][ T3740] device bridge1772 left promiscuous mode [ 1175.374252][ T3740] device bridge1770 left promiscuous mode [ 1175.382173][ T3740] device bridge1768 left promiscuous mode [ 1175.388091][ T3740] device bridge1766 left promiscuous mode [ 1175.395328][ T3740] device bridge1764 left promiscuous mode [ 1175.402091][ T3740] device bridge1762 left promiscuous mode [ 1175.408037][ T3740] device bridge1760 left promiscuous mode [ 1175.414760][ T3740] device bridge1758 left promiscuous mode [ 1175.421368][ T3740] device bridge1756 left promiscuous mode [ 1175.427279][ T3740] device bridge1754 left promiscuous mode [ 1175.434281][ T3740] device bridge1752 left promiscuous mode [ 1175.441673][ T3740] device bridge1750 left promiscuous mode [ 1175.447586][ T3740] device bridge1748 left promiscuous mode [ 1175.454267][ T3740] device bridge1746 left promiscuous mode [ 1175.460664][ T3740] device bridge1744 left promiscuous mode [ 1175.466585][ T3740] device bridge1742 left promiscuous mode [ 1175.473541][ T3740] device bridge1740 left promiscuous mode [ 1175.490366][ T3740] device bridge1738 left promiscuous mode [ 1175.496287][ T3740] device bridge1736 left promiscuous mode [ 1175.503478][ T3740] device bridge1734 left promiscuous mode [ 1175.509980][ T3740] device bridge1732 left promiscuous mode [ 1175.515909][ T3740] device bridge1730 left promiscuous mode [ 1175.523347][ T3740] device bridge1728 left promiscuous mode [ 1175.530278][ T3740] device bridge1726 left promiscuous mode [ 1175.536205][ T3740] device bridge1724 left promiscuous mode [ 1175.543560][ T3740] device bridge1722 left promiscuous mode [ 1175.551567][ T3740] device bridge1720 left promiscuous mode [ 1175.557487][ T3740] device bridge1718 left promiscuous mode [ 1175.564413][ T3740] device bridge1716 left promiscuous mode [ 1175.570791][ T3740] device bridge1714 left promiscuous mode [ 1175.576685][ T3740] device bridge1712 left promiscuous mode [ 1175.583816][ T3740] device bridge1710 left promiscuous mode [ 1175.590669][ T3740] device bridge1708 left promiscuous mode [ 1175.596584][ T3740] device bridge1706 left promiscuous mode [ 1175.603179][ T3740] device bridge1704 left promiscuous mode [ 1175.609883][ T3740] device bridge1702 left promiscuous mode [ 1175.615827][ T3740] device bridge1700 left promiscuous mode [ 1175.622395][ T3740] device bridge1698 left promiscuous mode [ 1175.628325][ T3740] device bridge1696 left promiscuous mode [ 1175.636113][ T3740] device bridge1694 left promiscuous mode [ 1175.642406][ T3740] device bridge1692 left promiscuous mode [ 1175.648305][ T3740] device bridge1690 left promiscuous mode [ 1175.654845][ T3740] device bridge1688 left promiscuous mode [ 1175.662939][ T3740] device bridge1686 left promiscuous mode [ 1175.668828][ T3740] device bridge1684 left promiscuous mode [ 1175.675447][ T3740] device bridge1682 left promiscuous mode [ 1175.681829][ T3740] device bridge1680 left promiscuous mode [ 1175.687728][ T3740] device bridge1678 left promiscuous mode [ 1175.695041][ T3740] device bridge1676 left promiscuous mode [ 1175.702154][ T3740] device bridge1674 left promiscuous mode [ 1175.708065][ T3740] device bridge1672 left promiscuous mode [ 1175.715489][ T3740] device bridge1670 left promiscuous mode [ 1175.722363][ T3740] device bridge1668 left promiscuous mode [ 1175.728255][ T3740] device bridge1666 left promiscuous mode [ 1175.734875][ T3740] device bridge1664 left promiscuous mode [ 1175.741205][ T3740] device bridge1662 left promiscuous mode [ 1175.747098][ T3740] device bridge1660 left promiscuous mode [ 1175.753939][ T3740] device bridge1658 left promiscuous mode [ 1175.760481][ T3740] device bridge1656 left promiscuous mode [ 1175.766396][ T3740] device bridge1654 left promiscuous mode [ 1175.774177][ T3740] device bridge1652 left promiscuous mode [ 1175.780659][ T3740] device bridge1650 left promiscuous mode [ 1175.786555][ T3740] device bridge1648 left promiscuous mode [ 1175.794487][ T3740] device bridge1646 left promiscuous mode [ 1175.801565][ T3740] device bridge1644 left promiscuous mode [ 1175.807522][ T3740] device bridge1642 left promiscuous mode [ 1175.814464][ T3740] device bridge1640 left promiscuous mode [ 1175.821134][ T3740] device bridge1638 left promiscuous mode [ 1175.827064][ T3740] device bridge1636 left promiscuous mode [ 1175.833847][ T3740] device bridge1634 left promiscuous mode [ 1175.840731][ T3740] device bridge1632 left promiscuous mode [ 1175.846650][ T3740] device bridge1630 left promiscuous mode [ 1175.853590][ T3740] device bridge1628 left promiscuous mode [ 1175.860224][ T3740] device bridge1626 left promiscuous mode [ 1175.866132][ T3740] device bridge1624 left promiscuous mode [ 1175.872879][ T3740] device bridge1622 left promiscuous mode [ 1175.878802][ T3740] device bridge1620 left promiscuous mode [ 1175.886626][ T3740] device bridge1618 left promiscuous mode [ 1175.893033][ T3740] device bridge1616 left promiscuous mode [ 1175.900005][ T3740] device bridge1614 left promiscuous mode [ 1175.905936][ T3740] device bridge1612 left promiscuous mode [ 1175.912646][ T3740] device bridge1610 left promiscuous mode [ 1175.918578][ T3740] device bridge1608 left promiscuous mode [ 1175.926539][ T3740] device bridge1606 left promiscuous mode [ 1175.933019][ T3740] device bridge1604 left promiscuous mode [ 1175.938945][ T3740] device bridge1602 left promiscuous mode [ 1175.945634][ T3740] device bridge1600 left promiscuous mode [ 1175.954314][ T3740] device bridge1598 left promiscuous mode [ 1175.960578][ T3740] device bridge1596 left promiscuous mode [ 1175.966479][ T3740] device bridge1594 left promiscuous mode [ 1175.973203][ T3740] device bridge1592 left promiscuous mode [ 1175.979287][ T3740] device bridge1590 left promiscuous mode [ 1175.985221][ T3740] device bridge1588 left promiscuous mode [ 1175.993443][ T3740] device bridge1586 left promiscuous mode [ 1176.000184][ T3740] device bridge1584 left promiscuous mode [ 1176.006121][ T3740] device bridge1582 left promiscuous mode [ 1176.013610][ T3740] device bridge1580 left promiscuous mode [ 1176.020366][ T3740] device bridge1578 left promiscuous mode [ 1176.026356][ T3740] device bridge1576 left promiscuous mode [ 1176.033472][ T3740] device bridge1574 left promiscuous mode [ 1176.039912][ T3740] device bridge1572 left promiscuous mode [ 1176.045835][ T3740] device bridge1570 left promiscuous mode [ 1176.052458][ T3740] device bridge1568 left promiscuous mode [ 1176.058376][ T3740] device bridge1566 left promiscuous mode [ 1176.064753][ T3740] device bridge1565 left promiscuous mode [ 1176.071632][ T3740] device bridge1562 left promiscuous mode [ 1176.077543][ T3740] device bridge1560 left promiscuous mode [ 1176.084032][ T3740] device bridge1558 left promiscuous mode [ 1176.090614][ T3740] device bridge1556 left promiscuous mode [ 1176.096566][ T3740] device bridge1554 left promiscuous mode [ 1176.103050][ T3740] device bridge1553 left promiscuous mode [ 1176.111382][ T3740] device bridge1550 left promiscuous mode [ 1176.117316][ T3740] device bridge1548 left promiscuous mode [ 1176.123992][ T3740] device bridge1546 left promiscuous mode [ 1176.131548][ T3740] device bridge1544 left promiscuous mode [ 1176.137477][ T3740] device bridge1542 left promiscuous mode [ 1176.143762][ T3740] device bridge1540 left promiscuous mode [ 1176.150415][ T3740] device bridge1538 left promiscuous mode [ 1176.156351][ T3740] device bridge1536 left promiscuous mode [ 1176.163211][ T3740] device bridge1534 left promiscuous mode [ 1176.169819][ T3740] device bridge1532 left promiscuous mode [ 1176.175775][ T3740] device bridge1530 left promiscuous mode [ 1176.182763][ T3740] device bridge1528 left promiscuous mode [ 1176.188683][ T3740] device bridge1526 left promiscuous mode [ 1176.195389][ T3740] device bridge1524 left promiscuous mode [ 1176.203557][ T3740] device bridge1522 left promiscuous mode [ 1176.210220][ T3740] device bridge1520 left promiscuous mode [ 1176.216152][ T3740] device bridge1518 left promiscuous mode [ 1176.223175][ T3740] device bridge1516 left promiscuous mode [ 1176.229356][ T3740] device bridge1514 left promiscuous mode [ 1176.235282][ T3740] device bridge1512 left promiscuous mode [ 1176.243824][ T3740] device bridge1510 left promiscuous mode [ 1176.250457][ T3740] device bridge1508 left promiscuous mode [ 1176.256360][ T3740] device bridge1506 left promiscuous mode [ 1176.264319][ T3740] device bridge1504 left promiscuous mode [ 1176.270925][ T3740] device bridge1502 left promiscuous mode [ 1176.276828][ T3740] device bridge1500 left promiscuous mode [ 1176.283656][ T3740] device bridge1498 left promiscuous mode [ 1176.290395][ T3740] device bridge1496 left promiscuous mode [ 1176.296303][ T3740] device bridge1494 left promiscuous mode [ 1176.303867][ T3740] device bridge1492 left promiscuous mode [ 1176.310224][ T3740] device bridge1490 left promiscuous mode [ 1176.316150][ T3740] device bridge1488 left promiscuous mode [ 1176.323189][ T3740] device bridge1486 left promiscuous mode [ 1176.329318][ T3740] device bridge1484 left promiscuous mode [ 1176.335454][ T3740] device bridge1482 left promiscuous mode [ 1176.343562][ T3740] device bridge1480 left promiscuous mode [ 1176.351364][ T3740] device bridge1478 left promiscuous mode [ 1176.357274][ T3740] device bridge1476 left promiscuous mode [ 1176.364294][ T3740] device bridge1474 left promiscuous mode [ 1176.370866][ T3740] device bridge1472 left promiscuous mode [ 1176.376807][ T3740] device bridge1470 left promiscuous mode [ 1176.383598][ T3740] device bridge1468 left promiscuous mode [ 1176.390298][ T3740] device bridge1466 left promiscuous mode [ 1176.396228][ T3740] device bridge1464 left promiscuous mode [ 1176.403213][ T3740] device bridge1462 left promiscuous mode [ 1176.409990][ T3740] device bridge1460 left promiscuous mode [ 1176.415936][ T3740] device bridge1458 left promiscuous mode [ 1176.423112][ T3740] device bridge1456 left promiscuous mode [ 1176.432321][ T3740] device bridge1454 left promiscuous mode [ 1176.438260][ T3740] device bridge1452 left promiscuous mode [ 1176.445062][ T3740] device bridge1450 left promiscuous mode [ 1176.452172][ T3740] device bridge1448 left promiscuous mode [ 1176.458308][ T3740] device bridge1446 left promiscuous mode [ 1176.464997][ T3740] device bridge1444 left promiscuous mode [ 1176.472699][ T3740] device bridge1442 left promiscuous mode [ 1176.478616][ T3740] device bridge1440 left promiscuous mode [ 1176.485515][ T3740] device bridge1438 left promiscuous mode [ 1176.493312][ T3740] device bridge1436 left promiscuous mode [ 1176.499955][ T3740] device bridge1434 left promiscuous mode [ 1176.505905][ T3740] device bridge1432 left promiscuous mode [ 1176.539870][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.542204][ T3740] device bridge1430 left promiscuous mode [ 1176.546141][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.552313][ T3740] device bridge1428 left promiscuous mode [ 1176.564811][ T3740] device bridge1426 left promiscuous mode [ 1176.580752][ T3740] device bridge1425 left promiscuous mode [ 1176.586905][ T3740] device bridge1422 left promiscuous mode [ 1176.612693][ T3740] device bridge1420 left promiscuous mode [ 1176.618743][ T3740] device bridge1418 left promiscuous mode [ 1176.631675][ T3740] device bridge1416 left promiscuous mode [ 1176.637718][ T3740] device bridge1414 left promiscuous mode [ 1176.648781][ T3740] device bridge1412 left promiscuous mode [ 1176.658901][ T3740] device bridge1410 left promiscuous mode [ 1176.680331][ T3740] device bridge1408 left promiscuous mode [ 1176.686381][ T3740] device bridge1406 left promiscuous mode [ 1176.700605][ T3740] device bridge1404 left promiscuous mode [ 1176.706661][ T3740] device bridge1402 left promiscuous mode [ 1176.720693][ T3740] device bridge1400 left promiscuous mode [ 1176.726742][ T3740] device bridge1398 left promiscuous mode [ 1176.740037][ T3740] device bridge1396 left promiscuous mode [ 1176.746093][ T3740] device bridge1394 left promiscuous mode [ 1176.761642][ T3740] device bridge1392 left promiscuous mode [ 1176.767692][ T3740] device bridge1390 left promiscuous mode [ 1176.780201][ T3740] device bridge1388 left promiscuous mode [ 1176.786136][ T3740] device bridge1386 left promiscuous mode [ 1176.794722][ T3740] device bridge1384 left promiscuous mode [ 1176.802164][ T3740] device bridge1382 left promiscuous mode [ 1176.808210][ T3740] device bridge1380 left promiscuous mode [ 1176.818052][ T3740] device bridge1378 left promiscuous mode [ 1176.825224][ T3740] device bridge1376 left promiscuous mode [ 1176.834849][ T3740] device bridge1374 left promiscuous mode [ 1176.841793][ T3740] device bridge1372 left promiscuous mode [ 1176.847851][ T3740] device bridge1370 left promiscuous mode [ 1176.855380][ T3740] device bridge1368 left promiscuous mode [ 1176.862183][ T3740] device bridge1366 left promiscuous mode [ 1176.868342][ T3740] device bridge1364 left promiscuous mode [ 1176.877127][ T3740] device bridge1362 left promiscuous mode [ 1176.884063][ T3740] device bridge1361 left promiscuous mode [ 1176.892592][ T3740] device bridge1358 left promiscuous mode [ 1176.898641][ T3740] device bridge1356 left promiscuous mode [ 1176.905684][ T3740] device bridge1354 left promiscuous mode [ 1176.914360][ T3740] device bridge1352 left promiscuous mode [ 1176.921824][ T3740] device bridge1350 left promiscuous mode [ 1176.927749][ T3740] device bridge1348 left promiscuous mode [ 1176.934744][ T3740] device bridge1346 left promiscuous mode [ 1176.941439][ T3740] device bridge1344 left promiscuous mode [ 1176.947343][ T3740] device bridge1342 left promiscuous mode [ 1176.954558][ T3740] device bridge1340 left promiscuous mode [ 1176.961237][ T3740] device bridge1338 left promiscuous mode [ 1176.967175][ T3740] device bridge1336 left promiscuous mode [ 1176.975365][ T3740] device bridge1334 left promiscuous mode [ 1176.981696][ T3740] device bridge1332 left promiscuous mode [ 1176.987620][ T3740] device bridge1330 left promiscuous mode [ 1176.995171][ T3740] device bridge1328 left promiscuous mode [ 1177.001741][ T3740] device bridge1326 left promiscuous mode [ 1177.007654][ T3740] device bridge1324 left promiscuous mode [ 1177.014154][ T3740] device bridge1322 left promiscuous mode [ 1177.021751][ T3740] device bridge1320 left promiscuous mode [ 1177.027662][ T3740] device bridge1318 left promiscuous mode [ 1177.034599][ T3740] device bridge1316 left promiscuous mode [ 1177.041014][ T3740] device bridge1314 left promiscuous mode [ 1177.046934][ T3740] device bridge1312 left promiscuous mode [ 1177.054008][ T3740] device bridge1310 left promiscuous mode [ 1177.060419][ T3740] device bridge1308 left promiscuous mode [ 1177.066325][ T3740] device bridge1306 left promiscuous mode [ 1177.074202][ T3740] device bridge1304 left promiscuous mode [ 1177.081620][ T3740] device bridge1302 left promiscuous mode [ 1177.087516][ T3740] device bridge1300 left promiscuous mode [ 1177.094389][ T3740] device bridge1298 left promiscuous mode [ 1177.100858][ T3740] device bridge1296 left promiscuous mode [ 1177.106787][ T3740] device bridge1294 left promiscuous mode [ 1177.113964][ T3740] device bridge1292 left promiscuous mode [ 1177.120669][ T3740] device bridge1290 left promiscuous mode [ 1177.126582][ T3740] device bridge1288 left promiscuous mode [ 1177.134198][ T3740] device bridge1286 left promiscuous mode [ 1177.140595][ T3740] device bridge1284 left promiscuous mode [ 1177.146498][ T3740] device bridge1282 left promiscuous mode [ 1177.153598][ T3740] device bridge1280 left promiscuous mode [ 1177.160236][ T3740] device bridge1278 left promiscuous mode [ 1177.166222][ T3740] device bridge1276 left promiscuous mode [ 1177.174160][ T3740] device bridge1274 left promiscuous mode [ 1177.181055][ T3740] device bridge1272 left promiscuous mode [ 1177.187122][ T3740] device bridge1268 left promiscuous mode [ 1177.193986][ T3740] device bridge1266 left promiscuous mode [ 1177.201142][ T3740] device bridge1264 left promiscuous mode [ 1177.207071][ T3740] device bridge1262 left promiscuous mode [ 1177.214653][ T3740] device bridge1260 left promiscuous mode [ 1177.220857][ T3740] device bridge1258 left promiscuous mode [ 1177.226776][ T3740] device bridge1256 left promiscuous mode [ 1177.235057][ T3740] device bridge1254 left promiscuous mode [ 1177.241565][ T3740] device bridge1252 left promiscuous mode [ 1177.247489][ T3740] device bridge1250 left promiscuous mode [ 1177.254603][ T3740] device bridge1248 left promiscuous mode [ 1177.261084][ T3740] device bridge1246 left promiscuous mode [ 1177.267168][ T3740] device bridge1244 left promiscuous mode [ 1177.274364][ T3740] device bridge1242 left promiscuous mode [ 1177.281355][ T3740] device bridge1240 left promiscuous mode [ 1177.287227][ T3740] device bridge1238 left promiscuous mode [ 1177.294535][ T3740] device bridge1236 left promiscuous mode [ 1177.300828][ T3740] device bridge1234 left promiscuous mode [ 1177.306751][ T3740] device bridge1232 left promiscuous mode [ 1177.315566][ T3740] device bridge1230 left promiscuous mode [ 1177.322139][ T3740] device bridge1228 left promiscuous mode [ 1177.328054][ T3740] device bridge1226 left promiscuous mode [ 1177.334733][ T3740] device bridge1224 left promiscuous mode [ 1177.341431][ T3740] device bridge1222 left promiscuous mode [ 1177.347555][ T3740] device bridge1220 left promiscuous mode [ 1177.355029][ T3740] device bridge1218 left promiscuous mode [ 1177.361672][ T3740] device bridge1216 left promiscuous mode [ 1177.367778][ T3740] device bridge1212 left promiscuous mode [ 1177.375376][ T3740] device bridge1210 left promiscuous mode [ 1177.381932][ T3740] device bridge1208 left promiscuous mode [ 1177.387842][ T3740] device bridge1206 left promiscuous mode [ 1177.395892][ T3740] device bridge1204 left promiscuous mode [ 1177.402325][ T3740] device bridge1202 left promiscuous mode [ 1177.408244][ T3740] device bridge1200 left promiscuous mode [ 1177.414796][ T3740] device bridge1198 left promiscuous mode [ 1177.422190][ T3740] device bridge1194 left promiscuous mode [ 1177.428114][ T3740] device bridge1192 left promiscuous mode [ 1177.435986][ T3740] device bridge1190 left promiscuous mode [ 1177.442676][ T3740] device bridge1188 left promiscuous mode [ 1177.448632][ T3740] device bridge1186 left promiscuous mode [ 1177.456675][ T3740] device bridge1184 left promiscuous mode [ 1177.463166][ T3740] device bridge1182 left promiscuous mode [ 1177.469263][ T3740] device bridge1180 left promiscuous mode [ 1177.475704][ T3740] device bridge1178 left promiscuous mode [ 1177.482781][ T3740] device bridge1176 left promiscuous mode [ 1177.488728][ T3740] device bridge1174 left promiscuous mode [ 1177.496032][ T3740] device bridge1170 left promiscuous mode [ 1177.502883][ T3740] device bridge1168 left promiscuous mode [ 1177.508804][ T3740] device bridge1166 left promiscuous mode [ 1177.517659][ T3740] device bridge1164 left promiscuous mode [ 1177.524353][ T3740] device bridge1162 left promiscuous mode [ 1177.532527][ T3740] device bridge1160 left promiscuous mode [ 1177.538468][ T3740] device bridge1158 left promiscuous mode [ 1177.545108][ T3740] device bridge1156 left promiscuous mode [ 1177.552079][ T3740] device bridge1154 left promiscuous mode [ 1177.558008][ T3740] device bridge1152 left promiscuous mode [ 1177.564960][ T3740] device bridge1150 left promiscuous mode [ 1177.571838][ T3740] device bridge1148 left promiscuous mode [ 1177.577775][ T3740] device bridge1146 left promiscuous mode [ 1177.584730][ T3740] device bridge1144 left promiscuous mode [ 1177.591865][ T3740] device bridge1142 left promiscuous mode [ 1177.597807][ T3740] device bridge1140 left promiscuous mode [ 1177.604909][ T3740] device bridge1138 left promiscuous mode [ 1177.611983][ T3740] device bridge1136 left promiscuous mode [ 1177.617915][ T3740] device bridge1134 left promiscuous mode [ 1177.625195][ T3740] device bridge1132 left promiscuous mode [ 1177.638775][ T3740] device bridge1130 left promiscuous mode [ 1177.647051][ T3740] device bridge1128 left promiscuous mode [ 1177.653434][ T3740] device bridge1126 left promiscuous mode [ 1177.661706][ T3740] device bridge1124 left promiscuous mode [ 1177.667640][ T3740] device bridge1122 left promiscuous mode [ 1177.674390][ T3740] device bridge1120 left promiscuous mode [ 1177.681012][ T3740] device bridge1118 left promiscuous mode [ 1177.686945][ T3740] device bridge1116 left promiscuous mode [ 1177.693688][ T3740] device bridge1114 left promiscuous mode [ 1177.700627][ T3740] device bridge1112 left promiscuous mode [ 1177.706556][ T3740] device bridge1110 left promiscuous mode [ 1177.714249][ T3740] device bridge1108 left promiscuous mode [ 1177.721211][ T3740] device bridge1106 left promiscuous mode [ 1177.727141][ T3740] device bridge1104 left promiscuous mode [ 1177.734014][ T3740] device bridge1102 left promiscuous mode [ 1177.740828][ T3740] device bridge1100 left promiscuous mode [ 1177.746787][ T3740] device bridge1098 left promiscuous mode [ 1177.755102][ T3740] device bridge1096 left promiscuous mode [ 1177.762018][ T3740] device bridge1094 left promiscuous mode [ 1177.767954][ T3740] device bridge1092 left promiscuous mode [ 1177.775033][ T3740] device bridge1090 left promiscuous mode [ 1177.782094][ T3740] device bridge1088 left promiscuous mode [ 1177.788022][ T3740] device bridge1086 left promiscuous mode [ 1177.795415][ T3740] device bridge1082 left promiscuous mode [ 1177.802073][ T3740] device bridge1080 left promiscuous mode [ 1177.808022][ T3740] device bridge1078 left promiscuous mode [ 1177.814291][ T3740] device bridge1076 left promiscuous mode [ 1177.821062][ T3740] device bridge1074 left promiscuous mode [ 1177.826990][ T3740] device bridge1072 left promiscuous mode [ 1177.834519][ T3740] device bridge1070 left promiscuous mode [ 1177.840943][ T3740] device bridge1068 left promiscuous mode [ 1177.846809][ T3740] device bridge1066 left promiscuous mode [ 1177.854152][ T3740] device bridge1064 left promiscuous mode [ 1177.860781][ T3740] device bridge1062 left promiscuous mode [ 1177.866751][ T3740] device bridge1060 left promiscuous mode [ 1177.878002][ T3740] device bridge1058 left promiscuous mode [ 1177.884499][ T3740] device bridge1056 left promiscuous mode [ 1177.891835][ T3740] device bridge1054 left promiscuous mode [ 1177.897775][ T3740] device bridge1052 left promiscuous mode [ 1177.904261][ T3740] device bridge1050 left promiscuous mode [ 1177.911331][ T3740] device bridge1048 left promiscuous mode [ 1177.917259][ T3740] device bridge1046 left promiscuous mode [ 1177.924443][ T3740] device bridge1044 left promiscuous mode [ 1177.931510][ T3740] device bridge1042 left promiscuous mode [ 1177.937450][ T3740] device bridge1040 left promiscuous mode [ 1177.943775][ T3740] device bridge1038 left promiscuous mode [ 1177.951421][ T3740] device bridge1036 left promiscuous mode [ 1177.957353][ T3740] device bridge1034 left promiscuous mode [ 1177.965465][ T3740] device bridge1032 left promiscuous mode [ 1177.972000][ T3740] device bridge1030 left promiscuous mode [ 1177.977921][ T3740] device bridge1028 left promiscuous mode [ 1177.984628][ T3740] device bridge1026 left promiscuous mode [ 1177.991348][ T3740] device bridge1024 left promiscuous mode [ 1177.997439][ T3740] device bridge1022 left promiscuous mode [ 1178.004009][ T3740] device bridge1020 left promiscuous mode [ 1178.010555][ T3740] device bridge1018 left promiscuous mode [ 1178.016493][ T3740] device bridge1016 left promiscuous mode [ 1178.025228][ T3740] device bridge1014 left promiscuous mode [ 1178.032093][ T3740] device bridge1012 left promiscuous mode [ 1178.038034][ T3740] device bridge1010 left promiscuous mode [ 1178.044680][ T3740] device bridge1008 left promiscuous mode [ 1178.051166][ T3740] device bridge1006 left promiscuous mode [ 1178.057081][ T3740] device bridge1004 left promiscuous mode [ 1178.064110][ T3740] device bridge1002 left promiscuous mode [ 1178.070959][ T3740] device bridge998 left promiscuous mode [ 1178.076804][ T3740] device bridge996 left promiscuous mode [ 1178.084720][ T3740] device bridge994 left promiscuous mode [ 1178.091262][ T3740] device bridge993 left promiscuous mode [ 1178.097240][ T3740] device bridge990 left promiscuous mode [ 1178.104402][ T3740] device bridge988 left promiscuous mode [ 1178.111025][ T3740] device bridge986 left promiscuous mode [ 1178.116863][ T3740] device bridge984 left promiscuous mode [ 1178.125142][ T3740] device bridge982 left promiscuous mode [ 1178.131558][ T3740] device bridge980 left promiscuous mode [ 1178.137384][ T3740] device bridge978 left promiscuous mode [ 1178.144344][ T3740] device bridge976 left promiscuous mode [ 1178.150757][ T3740] device bridge974 left promiscuous mode [ 1178.156598][ T3740] device bridge972 left promiscuous mode [ 1178.164100][ T3740] device bridge970 left promiscuous mode [ 1178.170879][ T3740] device bridge968 left promiscuous mode [ 1178.176707][ T3740] device bridge966 left promiscuous mode [ 1178.185201][ T3740] device bridge964 left promiscuous mode [ 1178.193130][ T3740] device bridge962 left promiscuous mode [ 1178.198959][ T3740] device bridge960 left promiscuous mode [ 1178.211102][ T3740] device bridge958 left promiscuous mode [ 1178.216929][ T3740] device bridge956 left promiscuous mode [ 1178.223472][ T3740] device bridge954 left promiscuous mode [ 1178.229965][ T3740] device bridge952 left promiscuous mode [ 1178.235826][ T3740] device bridge950 left promiscuous mode [ 1178.242959][ T3740] device bridge948 left promiscuous mode [ 1178.248811][ T3740] device bridge946 left promiscuous mode [ 1178.255835][ T3740] device bridge944 left promiscuous mode [ 1178.264924][ T3740] device bridge942 left promiscuous mode [ 1178.273141][ T3740] device bridge940 left promiscuous mode [ 1178.285208][ T3740] device bridge938 left promiscuous mode [ 1178.291802][ T3740] device bridge936 left promiscuous mode [ 1178.297631][ T3740] device bridge934 left promiscuous mode [ 1178.304616][ T3740] device bridge932 left promiscuous mode [ 1178.311648][ T3740] device bridge930 left promiscuous mode [ 1178.317474][ T3740] device bridge928 left promiscuous mode [ 1178.324486][ T3740] device bridge926 left promiscuous mode [ 1178.331818][ T3740] device bridge924 left promiscuous mode [ 1178.338150][ T3740] device bridge922 left promiscuous mode [ 1178.345484][ T3740] device bridge920 left promiscuous mode [ 1178.352172][ T3740] device bridge918 left promiscuous mode [ 1178.358803][ T3740] device bridge916 left promiscuous mode [ 1178.365473][ T3740] device bridge914 left promiscuous mode [ 1178.372973][ T3740] device bridge912 left promiscuous mode [ 1178.378816][ T3740] device bridge910 left promiscuous mode [ 1178.385384][ T3740] device bridge908 left promiscuous mode [ 1178.392033][ T3740] device bridge906 left promiscuous mode [ 1178.397891][ T3740] device bridge904 left promiscuous mode [ 1178.404794][ T3740] device bridge902 left promiscuous mode [ 1178.412395][ T3740] device bridge900 left promiscuous mode [ 1178.418256][ T3740] device bridge898 left promiscuous mode [ 1178.424570][ T3740] device bridge896 left promiscuous mode [ 1178.431471][ T3740] device bridge894 left promiscuous mode [ 1178.437313][ T3740] device bridge892 left promiscuous mode [ 1178.448058][ T3740] device bridge890 left promiscuous mode [ 1178.454727][ T3740] device bridge888 left promiscuous mode [ 1178.462905][ T3740] device bridge886 left promiscuous mode [ 1178.468899][ T3740] device bridge882 left promiscuous mode [ 1178.475396][ T3740] device bridge880 left promiscuous mode [ 1178.482149][ T3740] device bridge878 left promiscuous mode [ 1178.487996][ T3740] device bridge876 left promiscuous mode [ 1178.495093][ T3740] device bridge874 left promiscuous mode [ 1178.502328][ T3740] device bridge872 left promiscuous mode [ 1178.508164][ T3740] device bridge870 left promiscuous mode [ 1178.516620][ T3740] device bridge866 left promiscuous mode [ 1178.523582][ T3740] device bridge864 left promiscuous mode [ 1178.530841][ T3740] device bridge862 left promiscuous mode [ 1178.536689][ T3740] device bridge860 left promiscuous mode [ 1178.543488][ T3740] device bridge858 left promiscuous mode [ 1178.550247][ T3740] device bridge856 left promiscuous mode [ 1178.556129][ T3740] device bridge854 left promiscuous mode [ 1178.563109][ T3740] device bridge852 left promiscuous mode [ 1178.568929][ T3740] device bridge850 left promiscuous mode [ 1178.575383][ T3740] device bridge848 left promiscuous mode [ 1178.581761][ T3740] device bridge846 left promiscuous mode [ 1178.587594][ T3740] device bridge844 left promiscuous mode [ 1178.595778][ T3740] device bridge842 left promiscuous mode [ 1178.602649][ T3740] device bridge840 left promiscuous mode [ 1178.608467][ T3740] device bridge838 left promiscuous mode [ 1178.614895][ T3740] device bridge836 left promiscuous mode [ 1178.621593][ T3740] device bridge834 left promiscuous mode [ 1178.627559][ T3740] device bridge832 left promiscuous mode [ 1178.635453][ T3740] device bridge830 left promiscuous mode [ 1178.642105][ T3740] device bridge828 left promiscuous mode [ 1178.647933][ T3740] device bridge826 left promiscuous mode [ 1178.654677][ T3740] device bridge824 left promiscuous mode [ 1178.661010][ T3740] device bridge822 left promiscuous mode [ 1178.666835][ T3740] device bridge820 left promiscuous mode [ 1178.681859][ T3740] device bridge818 left promiscuous mode [ 1178.687706][ T3740] device bridge816 left promiscuous mode [ 1178.694776][ T3740] device bridge814 left promiscuous mode [ 1178.701179][ T3740] device bridge812 left promiscuous mode [ 1178.707048][ T3740] device bridge810 left promiscuous mode [ 1178.713626][ T3740] device bridge808 left promiscuous mode [ 1178.720663][ T3740] device bridge806 left promiscuous mode [ 1178.726500][ T3740] device bridge804 left promiscuous mode [ 1178.733794][ T3740] device bridge802 left promiscuous mode [ 1178.741193][ T3740] device bridge800 left promiscuous mode [ 1178.747032][ T3740] device bridge798 left promiscuous mode [ 1178.754100][ T3740] device bridge796 left promiscuous mode [ 1178.761877][ T3740] device bridge794 left promiscuous mode [ 1178.767749][ T3740] device bridge792 left promiscuous mode [ 1178.774289][ T3740] device bridge790 left promiscuous mode [ 1178.780680][ T3740] device bridge788 left promiscuous mode [ 1178.786522][ T3740] device bridge786 left promiscuous mode [ 1178.794370][ T3740] device bridge784 left promiscuous mode [ 1178.800489][ T3740] device bridge782 left promiscuous mode [ 1178.806301][ T3740] device bridge780 left promiscuous mode [ 1178.813231][ T3740] device bridge778 left promiscuous mode [ 1178.819055][ T3740] device bridge777 left promiscuous mode [ 1178.824986][ T3740] device bridge774 left promiscuous mode [ 1178.833578][ T3740] device bridge772 left promiscuous mode [ 1178.840414][ T3740] device bridge770 left promiscuous mode [ 1178.846255][ T3740] device bridge768 left promiscuous mode [ 1178.853814][ T3740] device bridge766 left promiscuous mode [ 1178.860015][ T3740] device bridge764 left promiscuous mode [ 1178.865833][ T3740] device bridge762 left promiscuous mode [ 1178.872687][ T3740] device bridge760 left promiscuous mode [ 1178.878503][ T3740] device bridge758 left promiscuous mode [ 1178.885192][ T3740] device bridge756 left promiscuous mode [ 1178.891521][ T3740] device bridge754 left promiscuous mode [ 1178.897432][ T3740] device bridge752 left promiscuous mode [ 1178.905261][ T3740] device bridge750 left promiscuous mode [ 1178.912340][ T3740] device bridge748 left promiscuous mode [ 1178.918171][ T3740] device bridge746 left promiscuous mode [ 1178.924675][ T3740] device bridge744 left promiscuous mode [ 1178.931059][ T3740] device bridge742 left promiscuous mode [ 1178.936866][ T3740] device bridge740 left promiscuous mode [ 1178.943544][ T3740] device bridge738 left promiscuous mode [ 1178.950031][ T3740] device bridge736 left promiscuous mode [ 1178.956061][ T3740] device bridge734 left promiscuous mode [ 1178.963896][ T3740] device bridge732 left promiscuous mode [ 1178.970627][ T3740] device bridge730 left promiscuous mode [ 1178.976464][ T3740] device bridge728 left promiscuous mode [ 1178.983145][ T3740] device bridge726 left promiscuous mode [ 1178.988953][ T3740] device bridge724 left promiscuous mode [ 1178.995981][ T3740] device bridge722 left promiscuous mode [ 1179.003082][ T3740] device bridge720 left promiscuous mode [ 1179.008891][ T3740] device bridge718 left promiscuous mode [ 1179.015476][ T3740] device bridge716 left promiscuous mode [ 1179.023512][ T3740] device bridge710 left promiscuous mode [ 1179.030042][ T3740] device bridge708 left promiscuous mode [ 1179.035885][ T3740] device bridge706 left promiscuous mode [ 1179.043393][ T3740] device bridge704 left promiscuous mode [ 1179.050221][ T3740] device bridge702 left promiscuous mode [ 1179.056058][ T3740] device bridge700 left promiscuous mode [ 1179.062802][ T3740] device bridge698 left promiscuous mode [ 1179.068666][ T3740] device bridge696 left promiscuous mode [ 1179.076895][ T3740] device bridge694 left promiscuous mode [ 1179.085633][ T3740] device bridge692 left promiscuous mode [ 1179.091931][ T3740] device bridge690 left promiscuous mode [ 1179.097752][ T3740] device bridge688 left promiscuous mode [ 1179.104598][ T3740] device bridge686 left promiscuous mode [ 1179.111291][ T3740] device bridge684 left promiscuous mode [ 1179.117113][ T3740] device bridge682 left promiscuous mode [ 1179.123750][ T3740] device bridge680 left promiscuous mode [ 1179.131374][ T3740] device bridge678 left promiscuous mode [ 1179.137209][ T3740] device bridge676 left promiscuous mode [ 1179.143625][ T3740] device bridge674 left promiscuous mode [ 1179.151162][ T3740] device bridge672 left promiscuous mode [ 1179.157020][ T3740] device bridge670 left promiscuous mode [ 1179.163780][ T3740] device bridge668 left promiscuous mode [ 1179.170488][ T3740] device bridge666 left promiscuous mode [ 1179.176336][ T3740] device bridge664 left promiscuous mode [ 1179.184298][ T3740] device bridge662 left promiscuous mode [ 1179.190928][ T3740] device bridge660 left promiscuous mode [ 1179.196762][ T3740] device bridge658 left promiscuous mode [ 1179.203977][ T3740] device bridge656 left promiscuous mode [ 1179.210436][ T3740] device bridge654 left promiscuous mode [ 1179.216273][ T3740] device bridge652 left promiscuous mode [ 1179.225034][ T3740] device bridge650 left promiscuous mode [ 1179.231648][ T3740] device bridge648 left promiscuous mode [ 1179.237464][ T3740] device bridge646 left promiscuous mode [ 1179.245174][ T3740] device bridge644 left promiscuous mode [ 1179.251628][ T3740] device bridge642 left promiscuous mode [ 1179.257474][ T3740] device bridge640 left promiscuous mode [ 1179.264386][ T3740] device bridge638 left promiscuous mode [ 1179.270763][ T3740] device bridge636 left promiscuous mode [ 1179.276610][ T3740] device bridge634 left promiscuous mode [ 1179.284236][ T3740] device bridge632 left promiscuous mode [ 1179.290519][ T3740] device bridge630 left promiscuous mode [ 1179.296566][ T3740] device bridge628 left promiscuous mode [ 1179.303994][ T3740] device bridge626 left promiscuous mode [ 1179.312207][ T3740] device bridge624 left promiscuous mode [ 1179.318060][ T3740] device bridge622 left promiscuous mode [ 1179.324821][ T3740] device bridge620 left promiscuous mode [ 1179.331918][ T3740] device bridge618 left promiscuous mode [ 1179.338556][ T3740] device bridge616 left promiscuous mode [ 1179.345177][ T3740] device bridge614 left promiscuous mode [ 1179.351571][ T3740] device bridge612 left promiscuous mode [ 1179.357389][ T3740] device bridge610 left promiscuous mode [ 1179.363988][ T3740] device bridge608 left promiscuous mode [ 1179.370786][ T3740] device bridge606 left promiscuous mode [ 1179.376633][ T3740] device bridge604 left promiscuous mode [ 1179.383554][ T3740] device bridge602 left promiscuous mode [ 1179.390438][ T3740] device bridge600 left promiscuous mode [ 1179.396621][ T3740] device bridge598 left promiscuous mode [ 1179.404372][ T3740] device bridge596 left promiscuous mode [ 1179.410826][ T3740] device bridge594 left promiscuous mode [ 1179.416720][ T3740] device bridge592 left promiscuous mode [ 1179.423903][ T3740] device bridge590 left promiscuous mode [ 1179.430216][ T3740] device bridge588 left promiscuous mode [ 1179.436063][ T3740] device bridge586 left promiscuous mode [ 1179.445420][ T3740] device bridge584 left promiscuous mode [ 1179.451957][ T3740] device bridge582 left promiscuous mode [ 1179.457783][ T3740] device bridge580 left promiscuous mode [ 1179.464566][ T3740] device bridge578 left promiscuous mode [ 1179.473023][ T3740] device bridge576 left promiscuous mode [ 1179.479026][ T3740] device bridge574 left promiscuous mode [ 1179.484903][ T3740] device bridge572 left promiscuous mode [ 1179.492710][ T3740] device bridge570 left promiscuous mode [ 1179.498568][ T3740] device bridge568 left promiscuous mode [ 1179.505206][ T3740] device bridge566 left promiscuous mode [ 1179.513666][ T3740] device bridge564 left promiscuous mode [ 1179.520398][ T3740] device bridge562 left promiscuous mode [ 1179.526453][ T3740] device bridge560 left promiscuous mode [ 1179.533008][ T3740] device bridge558 left promiscuous mode [ 1179.538842][ T3740] device bridge556 left promiscuous mode [ 1179.545560][ T3740] device bridge554 left promiscuous mode [ 1179.553747][ T3740] device bridge552 left promiscuous mode [ 1179.563523][ T3740] device bridge550 left promiscuous mode [ 1179.569902][ T3740] device bridge548 left promiscuous mode [ 1179.575739][ T3740] device bridge546 left promiscuous mode [ 1179.582965][ T3740] device bridge544 left promiscuous mode [ 1179.588795][ T3740] device bridge542 left promiscuous mode [ 1179.595509][ T3740] device bridge540 left promiscuous mode [ 1179.602481][ T3740] device bridge538 left promiscuous mode [ 1179.608324][ T3740] device bridge536 left promiscuous mode [ 1179.614861][ T3740] device bridge534 left promiscuous mode [ 1179.623554][ T3740] device bridge532 left promiscuous mode [ 1179.631057][ T3740] device bridge528 left promiscuous mode [ 1179.637116][ T3740] device bridge526 left promiscuous mode [ 1179.643605][ T3740] device bridge524 left promiscuous mode [ 1179.650438][ T3740] device bridge522 left promiscuous mode [ 1179.656316][ T3740] device bridge520 left promiscuous mode [ 1179.663589][ T3740] device bridge518 left promiscuous mode [ 1179.669952][ T3740] device bridge516 left promiscuous mode [ 1179.675773][ T3740] device bridge514 left promiscuous mode [ 1179.683611][ T3740] device bridge512 left promiscuous mode [ 1179.690132][ T3740] device bridge510 left promiscuous mode [ 1179.695987][ T3740] device bridge508 left promiscuous mode [ 1179.703424][ T3740] device bridge506 left promiscuous mode [ 1179.717377][ T3740] device bridge504 left promiscuous mode [ 1179.724268][ T3740] device bridge502 left promiscuous mode [ 1179.731985][ T3740] device bridge500 left promiscuous mode [ 1179.737833][ T3740] device bridge498 left promiscuous mode [ 1179.744594][ T3740] device bridge496 left promiscuous mode [ 1179.751208][ T3740] device bridge494 left promiscuous mode [ 1179.757055][ T3740] device bridge492 left promiscuous mode [ 1179.763784][ T3740] device bridge490 left promiscuous mode [ 1179.770443][ T3740] device bridge488 left promiscuous mode [ 1179.776313][ T3740] device bridge486 left promiscuous mode [ 1179.784294][ T3740] device bridge484 left promiscuous mode [ 1179.791708][ T3740] device bridge482 left promiscuous mode [ 1179.797575][ T3740] device bridge480 left promiscuous mode [ 1179.804422][ T3740] device bridge478 left promiscuous mode [ 1179.810825][ T3740] device bridge476 left promiscuous mode [ 1179.816708][ T3740] device bridge474 left promiscuous mode [ 1179.823783][ T3740] device bridge472 left promiscuous mode [ 1179.830179][ T3740] device bridge470 left promiscuous mode [ 1179.836141][ T3740] device bridge466 left promiscuous mode [ 1179.842684][ T3740] device bridge464 left promiscuous mode [ 1179.848527][ T3740] device bridge462 left promiscuous mode [ 1179.855773][ T3740] device bridge460 left promiscuous mode [ 1179.862049][ T3740] device bridge458 left promiscuous mode [ 1179.867874][ T3740] device bridge456 left promiscuous mode [ 1179.874546][ T3740] device bridge454 left promiscuous mode [ 1179.881607][ T3740] device bridge452 left promiscuous mode [ 1179.887438][ T3740] device bridge450 left promiscuous mode [ 1179.894113][ T3740] device bridge448 left promiscuous mode [ 1179.900775][ T3740] device bridge446 left promiscuous mode [ 1179.906585][ T3740] device bridge444 left promiscuous mode [ 1179.913107][ T3740] device bridge442 left promiscuous mode [ 1179.919993][ T3740] device bridge440 left promiscuous mode [ 1179.925833][ T3740] device bridge438 left promiscuous mode [ 1179.946302][ T3740] device bridge436 left promiscuous mode [ 1179.954151][ T3740] device bridge434 left promiscuous mode [ 1179.960789][ T3740] device bridge432 left promiscuous mode [ 1179.966640][ T3740] device bridge430 left promiscuous mode [ 1179.973241][ T3740] device bridge428 left promiscuous mode [ 1179.979186][ T3740] device bridge426 left promiscuous mode [ 1179.985042][ T3740] device bridge424 left promiscuous mode [ 1179.993169][ T3740] device bridge422 left promiscuous mode [ 1179.999229][ T3740] device bridge420 left promiscuous mode [ 1180.005255][ T3740] device bridge418 left promiscuous mode [ 1180.013903][ T3740] device bridge416 left promiscuous mode [ 1180.020719][ T3740] device bridge414 left promiscuous mode [ 1180.026566][ T3740] device bridge412 left promiscuous mode [ 1180.034194][ T3740] device bridge410 left promiscuous mode [ 1180.040837][ T3740] device bridge408 left promiscuous mode [ 1180.046708][ T3740] device bridge406 left promiscuous mode [ 1180.053482][ T3740] device bridge404 left promiscuous mode [ 1180.061128][ T3740] device bridge402 left promiscuous mode [ 1180.066977][ T3740] device bridge400 left promiscuous mode [ 1180.074670][ T3740] device bridge398 left promiscuous mode [ 1180.081749][ T3740] device bridge396 left promiscuous mode [ 1180.087593][ T3740] device bridge394 left promiscuous mode [ 1180.094101][ T3740] device bridge392 left promiscuous mode [ 1180.101027][ T3740] device bridge390 left promiscuous mode [ 1180.106868][ T3740] device bridge388 left promiscuous mode [ 1180.113634][ T3740] device bridge386 left promiscuous mode [ 1180.120416][ T3740] device bridge384 left promiscuous mode [ 1180.126299][ T3740] device bridge382 left promiscuous mode [ 1180.132876][ T3740] device bridge380 left promiscuous mode [ 1180.138781][ T3740] device bridge378 left promiscuous mode [ 1180.145230][ T3740] device bridge376 left promiscuous mode [ 1180.152687][ T3740] device bridge375 left promiscuous mode [ 1180.158451][ T3740] device bridge374 left promiscuous mode [ 1180.164847][ T3740] device bridge373 left promiscuous mode [ 1180.171771][ T3740] device bridge372 left promiscuous mode [ 1180.177531][ T3740] device bridge371 left promiscuous mode [ 1180.184035][ T3740] device bridge370 left promiscuous mode [ 1180.192298][ T3740] device bridge369 left promiscuous mode [ 1180.198078][ T3740] device bridge368 left promiscuous mode [ 1180.204231][ T3740] device bridge367 left promiscuous mode [ 1180.211339][ T3740] device bridge366 left promiscuous mode [ 1180.217110][ T3740] device bridge365 left promiscuous mode [ 1180.223579][ T3740] device bridge364 left promiscuous mode [ 1180.231564][ T3740] device bridge363 left promiscuous mode [ 1180.237329][ T3740] device bridge362 left promiscuous mode [ 1180.243820][ T3740] device bridge361 left promiscuous mode [ 1180.250623][ T3740] device bridge360 left promiscuous mode [ 1180.256386][ T3740] device bridge359 left promiscuous mode [ 1180.262499][ T3740] device bridge358 left promiscuous mode [ 1180.268336][ T3740] device bridge357 left promiscuous mode [ 1180.274838][ T3740] device bridge356 left promiscuous mode [ 1180.282581][ T3740] device bridge355 left promiscuous mode [ 1180.288441][ T3740] device bridge354 left promiscuous mode [ 1180.294728][ T3740] device bridge353 left promiscuous mode [ 1180.301316][ T3740] device bridge352 left promiscuous mode [ 1180.307085][ T3740] device bridge351 left promiscuous mode [ 1180.313649][ T3740] device bridge350 left promiscuous mode [ 1180.320366][ T3740] device bridge349 left promiscuous mode [ 1180.326133][ T3740] device bridge348 left promiscuous mode [ 1180.332683][ T3740] device bridge347 left promiscuous mode [ 1180.338428][ T3740] device bridge346 left promiscuous mode [ 1180.344724][ T3740] device bridge345 left promiscuous mode [ 1180.351369][ T3740] device bridge344 left promiscuous mode [ 1180.357126][ T3740] device bridge343 left promiscuous mode [ 1180.364758][ T3740] device bridge342 left promiscuous mode [ 1180.371019][ T3740] device bridge341 left promiscuous mode [ 1180.377034][ T3740] device bridge340 left promiscuous mode [ 1180.385810][ T3740] device bridge339 left promiscuous mode [ 1180.391965][ T3740] device bridge338 left promiscuous mode [ 1180.397714][ T3740] device bridge337 left promiscuous mode [ 1180.404467][ T3740] device bridge336 left promiscuous mode [ 1180.410763][ T3740] device bridge335 left promiscuous mode [ 1180.416602][ T3740] device bridge334 left promiscuous mode [ 1180.423166][ T3740] device bridge333 left promiscuous mode [ 1180.430877][ T3740] device bridge332 left promiscuous mode [ 1180.436741][ T3740] device bridge331 left promiscuous mode [ 1180.443207][ T3740] device bridge330 left promiscuous mode [ 1180.449297][ T3740] device bridge329 left promiscuous mode [ 1180.455086][ T3740] device bridge328 left promiscuous mode [ 1180.462974][ T3740] device bridge327 left promiscuous mode [ 1180.468747][ T3740] device bridge326 left promiscuous mode [ 1180.475369][ T3740] device bridge325 left promiscuous mode [ 1180.481891][ T3740] device bridge324 left promiscuous mode [ 1180.487658][ T3740] device bridge323 left promiscuous mode [ 1180.494435][ T3740] device bridge322 left promiscuous mode [ 1180.500813][ T3740] device bridge321 left promiscuous mode [ 1180.506586][ T3740] device bridge320 left promiscuous mode [ 1180.514781][ T3740] device bridge319 left promiscuous mode [ 1180.521147][ T3740] device bridge318 left promiscuous mode [ 1180.526916][ T3740] device bridge317 left promiscuous mode [ 1180.533367][ T3740] device bridge316 left promiscuous mode [ 1180.539258][ T3740] device bridge315 left promiscuous mode [ 1180.545036][ T3740] device bridge314 left promiscuous mode [ 1180.552017][ T3740] device bridge313 left promiscuous mode [ 1180.557840][ T3740] device bridge311 left promiscuous mode [ 1180.564300][ T3740] device bridge309 left promiscuous mode [ 1180.570755][ T3740] device bridge307 left promiscuous mode [ 1180.576608][ T3740] device bridge305 left promiscuous mode [ 1180.583195][ T3740] device bridge303 left promiscuous mode [ 1180.590425][ T3740] device bridge301 left promiscuous mode [ 1180.596644][ T3740] device bridge299 left promiscuous mode [ 1180.603092][ T3740] device bridge297 left promiscuous mode [ 1180.608915][ T3740] device bridge295 left promiscuous mode [ 1180.615234][ T3740] device bridge294 left promiscuous mode [ 1180.622395][ T3740] device bridge293 left promiscuous mode [ 1180.628161][ T3740] device bridge292 left promiscuous mode [ 1180.634373][ T3740] device bridge291 left promiscuous mode [ 1180.640969][ T3740] device bridge290 left promiscuous mode [ 1180.646759][ T3740] device bridge289 left promiscuous mode [ 1180.653511][ T3740] device bridge287 left promiscuous mode [ 1180.660161][ T3740] device bridge285 left promiscuous mode [ 1180.666044][ T3740] device bridge283 left promiscuous mode [ 1180.672939][ T3740] device bridge281 left promiscuous mode [ 1180.678757][ T3740] device bridge279 left promiscuous mode [ 1180.685116][ T3740] device bridge277 left promiscuous mode [ 1180.692149][ T3740] device bridge275 left promiscuous mode [ 1180.698003][ T3740] device bridge273 left promiscuous mode [ 1180.705105][ T3740] device bridge271 left promiscuous mode [ 1180.711466][ T3740] device bridge269 left promiscuous mode [ 1180.717303][ T3740] device bridge267 left promiscuous mode [ 1180.724833][ T3740] device bridge265 left promiscuous mode [ 1180.731215][ T3740] device bridge263 left promiscuous mode [ 1180.737046][ T3740] device bridge261 left promiscuous mode [ 1180.744227][ T3740] device bridge259 left promiscuous mode [ 1180.777988][ T3740] device bridge44 left promiscuous mode [ 1180.786255][ T3740] device bridge42 left promiscuous mode [ 1180.804586][ T3740] device bridge40 left promiscuous mode [ 1180.824331][ T3740] device bridge38 left promiscuous mode [ 1180.838227][ T3740] device bridge36 left promiscuous mode [ 1180.845245][ T3740] device bridge34 left promiscuous mode [ 1180.851322][ T3740] device bridge32 left promiscuous mode [ 1180.857093][ T3740] device bridge30 left promiscuous mode [ 1180.863441][ T3740] device bridge28 left promiscuous mode [ 1180.870491][ T3740] device bridge27 left promiscuous mode [ 1180.876192][ T3740] device bridge26 left promiscuous mode [ 1180.882517][ T3740] device bridge25 left promiscuous mode [ 1180.888216][ T3740] device bridge24 left promiscuous mode [ 1180.894416][ T3740] device bridge23 left promiscuous mode [ 1180.902966][ T3740] device bridge22 left promiscuous mode [ 1180.908725][ T3740] device bridge20 left promiscuous mode [ 1180.915457][ T3740] device bridge18 left promiscuous mode [ 1180.922293][ T3740] device bridge16 left promiscuous mode [ 1180.927980][ T3740] device bridge15 left promiscuous mode [ 1180.935390][ T3740] device bridge14 left promiscuous mode [ 1180.943069][ T3740] device bridge12 left promiscuous mode [ 1180.948748][ T3740] device bridge11 left promiscuous mode [ 1180.955722][ T3740] device bridge10 left promiscuous mode [ 1180.962397][ T3740] device bridge9 left promiscuous mode [ 1180.968067][ T3740] device bridge7 left promiscuous mode [ 1180.974510][ T3740] device bridge5 left promiscuous mode [ 1180.981578][ T3740] device bridge3 left promiscuous mode [ 1180.987263][ T3740] device bridge1 left promiscuous mode [ 1180.995742][ T3740] device veth1_macvtap left promiscuous mode [ 1181.003347][ T3740] device veth0_macvtap left promiscuous mode [ 1181.011167][ T3740] device veth1_vlan left promiscuous mode [ 1181.017270][ T3740] device veth0_vlan left promiscuous mode [ 1224.753687][ T3658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1224.762634][ T3658] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1224.771488][ T3658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1224.781022][ T3658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1224.790798][ T3658] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1224.798717][ T3658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1226.830853][ T6] Bluetooth: hci6: command 0x0409 tx timeout [ 1228.919567][ T6] Bluetooth: hci6: command 0x041b tx timeout [ 1230.999441][ T3691] Bluetooth: hci6: command 0x040f tx timeout [ 1233.079436][ T6] Bluetooth: hci6: command 0x0419 tx timeout [ 1237.960554][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.966896][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1280.989633][ T3691] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.238024][ T3658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1291.246664][ T3658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1291.256350][ T3658] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1291.264739][ T3658] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1291.272586][ T3658] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1291.281982][ T3658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1293.310160][T12411] Bluetooth: hci7: command 0x0409 tx timeout [ 1295.399995][ T6] Bluetooth: hci7: command 0x041b tx timeout [ 1297.480457][ T3691] Bluetooth: hci7: command 0x040f tx timeout [ 1299.390392][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.396684][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.551096][ T3691] Bluetooth: hci7: command 0x0419 tx timeout