last executing test programs: 25.448528456s ago: executing program 1 (id=2521): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r5, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 24.292837925s ago: executing program 1 (id=2523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x20088c2) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0}], 0x1, 0x20044000) 24.242329896s ago: executing program 1 (id=2524): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x8405}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x37a72000) 23.176858662s ago: executing program 1 (id=2529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xbf) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/error_log\x00', 0x1c9501, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 23.016642706s ago: executing program 1 (id=2533): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4) getdents(r0, 0x0, 0x54) 18.258761565s ago: executing program 1 (id=2544): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "01000000000000"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x8405}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x37a72000) 17.951305322s ago: executing program 32 (id=2544): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "01000000000000"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x8405}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x37a72000) 6.073358758s ago: executing program 3 (id=2593): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r4, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x80000000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, 0x0, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}}, 0x20}, 0x1, 0x0, 0x0, 0x200040fe}, 0x40000) 5.865352574s ago: executing program 3 (id=2594): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 5.275919478s ago: executing program 3 (id=2598): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4603000702810000000000000002003e00f9ffffffd90100000000000040000000000000008b00000000000000330d00000500380004007800070009000400000005000000090000000000000009000000000000000101004100000000010000000600000009000000000000000a0000000000000051e574640400000007200000000000000500000000000000ff7f00000000000080790000000000000000000000000000030000000000000051e57464"], 0x12b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.100629953s ago: executing program 3 (id=2602): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/276, 0x114}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r5, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 3.761159206s ago: executing program 3 (id=2605): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000000800)="$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") symlinkat(&(0x7f00000063c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000006400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000006440)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000006480)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000064c0)='./bus\x00', &(0x7f0000006500), 0x0, &(0x7f0000006540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.759650856s ago: executing program 2 (id=2612): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r4, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x80000000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, 0x0, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040fe}, 0x40000) 3.237171519s ago: executing program 0 (id=2606): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/276, 0x114}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r6, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) 2.978534895s ago: executing program 2 (id=2607): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.953715561s ago: executing program 0 (id=2608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 1.732802766s ago: executing program 0 (id=2609): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000900)={{0x3, 0x2, 0x6, 0x8, 0x4, 0x10000}, 0x252, [0x96a8, 0x8, 0xa, 0x9, 0x1000, 0x8000, 0x8, 0x10000, 0xf8000000, 0x1, 0x7ff, 0x7, 0x7, 0x2, 0x7, 0x1800000, 0x5, 0x6, 0x1, 0x4, 0x21bc, 0xffffffff, 0x4, 0x3, 0xd53, 0xfe62, 0xfffffffa, 0xfffffffc, 0x5, 0x2, 0x8, 0x1, 0x9, 0x8, 0xffffffff, 0x4, 0x1, 0x9, 0xa46d, 0x10, 0x101, 0x8, 0x6, 0x8, 0x6, 0x8, 0x2, 0x80000000, 0x9, 0x4, 0x57, 0x15, 0xd, 0x7, 0x0, 0x5, 0x7, 0xffff, 0x1ff, 0x7, 0x4, 0xbc07, 0x33cd, 0x0, 0x5, 0xfffffff6, 0x3ff, 0x6, 0x86e3, 0x3abe, 0xffffffff, 0x0, 0x9, 0x7, 0x5, 0x9, 0x0, 0xd0c, 0x8, 0xc, 0xf, 0xfffffffc, 0x4, 0xb, 0x1a, 0xfffffffc, 0x7, 0x1b03, 0x8, 0x0, 0x7fffffff, 0x7f, 0x9, 0xf, 0x6, 0x8, 0x3, 0x2, 0x2, 0x7, 0x4, 0x8, 0x50a, 0x9, 0xffffff6e, 0xfffff000, 0x6, 0x5, 0x1, 0x1, 0x1, 0x8, 0x2, 0x4, 0x6, 0x3, 0xffff, 0x1, 0x6, 0x2, 0xbd, 0x3, 0xae, 0x100, 0x13, 0xa, 0xbfe6, 0x8000, 0x2, 0xcc, 0x1000, 0x80000000, 0x14c528f1, 0x9, 0x4, 0x8, 0x1, 0x10, 0x4, 0x7fffffff, 0x8001, 0x400, 0x3, 0x4, 0xcc, 0x6, 0x2, 0x8, 0xb3cc, 0x7, 0x2, 0x9, 0x2, 0x5, 0x4, 0x80000001, 0x1, 0x1, 0xa, 0x6, 0x5, 0x6, 0x1, 0x26bf, 0x1, 0x9, 0x8, 0x5, 0x3, 0x2, 0xfff, 0x20000, 0x5, 0x1, 0x3d3, 0x2ef1, 0x9, 0x8, 0xfffffffa, 0x8, 0x0, 0x6, 0xff, 0x0, 0x0, 0x8, 0x5c, 0x40cd, 0x200000, 0x0, 0x5, 0xfffffff9, 0x200, 0x8, 0x7fff, 0x2, 0x3, 0x1, 0x6, 0x8, 0x1, 0x1, 0xfffffffe, 0x401, 0x0, 0x2, 0x57, 0x8001, 0x400, 0x1000, 0x8000, 0x3, 0x3, 0x3, 0x9, 0x5, 0x800, 0x8000, 0x3, 0xfffffffc, 0x2, 0x0, 0x9, 0x8, 0x8, 0x4, 0xd, 0x0, 0xaea, 0x1, 0x7, 0x5, 0x7fffffff, 0x3, 0x8, 0x7fffffff, 0x1, 0x8, 0x6, 0x80, 0xc5d, 0xb9, 0x9, 0x4, 0x6, 0x6, 0x1, 0x0, 0x1, 0x7, 0x4, 0x9, 0x10, 0xffffffff, 0x0, 0x2, 0x6, 0x2, 0x0, 0x7, 0xe0, 0x4, 0x7, 0x30000, 0x0, 0x6, 0x6, 0x2, 0x0, 0x6b, 0x1, 0x81, 0x7ff, 0x7f, 0xfffffff9, 0x9, 0x4, 0x4c3, 0x9, 0x9, 0x9, 0x8, 0xfffffff1, 0x10000, 0x3, 0x1000, 0x1e, 0x1, 0x2, 0x10001, 0x2, 0x1, 0x10000, 0x9, 0x8, 0x8, 0x30, 0x6, 0x6, 0x2, 0x7fff, 0x128f, 0x6, 0x2, 0x7, 0x2, 0x101, 0x5137b358, 0x6, 0xbcc, 0x3, 0x2, 0x1, 0x2, 0xff, 0xeae, 0x800, 0x9fd8, 0x8, 0x2, 0x3, 0xd, 0xffff, 0x5, 0x33, 0x7, 0x200, 0x7, 0x6, 0x4, 0x6, 0x8, 0xc05, 0x8, 0xffffff25, 0xf01, 0x7, 0x400, 0xb, 0x3, 0x177037d5, 0x6, 0x873, 0x8f, 0x7, 0x5, 0x9, 0x7fff, 0x2, 0x8, 0x7, 0x8, 0x2, 0x40, 0xfffffffc, 0x7, 0x6, 0x8, 0x4, 0x7, 0x45, 0x1, 0x3, 0x2, 0x10, 0x6795, 0x1000, 0x37, 0x9, 0xfffffffa, 0x7fffffff, 0x2, 0x8, 0x8, 0x1, 0x9, 0x400, 0x2, 0x3, 0x4, 0x1, 0x4, 0x80000001, 0x2d88, 0x10, 0x5, 0x742fc9db, 0xfffffff9, 0x8, 0xfffffff9, 0x8, 0xffffdb9f, 0x273c00, 0xfffffffd, 0xffff, 0x10, 0x4, 0x58b, 0x8, 0x8, 0x0, 0x5d2185f0, 0x23f, 0xfffffff7, 0xfffffff8, 0x4, 0x5b07840e, 0x0, 0x8, 0x7ff, 0xe17ffcf, 0x8, 0x2, 0x0, 0x401, 0x5, 0xfffffffb, 0x0, 0x3, 0x9, 0xb3, 0x9, 0x67, 0x8000, 0x3, 0x2, 0x2e, 0x1, 0x3, 0x4d55, 0x4, 0x0, 0x430, 0xff, 0xff5, 0x5, 0x1ce, 0x8, 0x0, 0x3, 0x8, 0x7864, 0xd41, 0x100, 0x6, 0xb, 0x4, 0x10000, 0x7, 0x8, 0x9, 0xd, 0x32, 0x6, 0x1, 0x9, 0x5, 0x500, 0x2, 0x80, 0x80, 0x6, 0x6, 0x0, 0x42, 0x1, 0x40, 0x100000, 0x81, 0x7, 0xafb, 0x3, 0x1, 0x1ff, 0x0, 0x3800000, 0x7, 0x1, 0x6, 0x80000001, 0x5, 0x2, 0x5b30, 0x23, 0x1ff, 0xffffffff, 0x8, 0xb9, 0x200, 0x6, 0x4, 0x5, 0x4d5, 0xfff, 0x7, 0x6, 0x10000, 0xfffffff7, 0xffff, 0xff, 0x9, 0x7, 0x0, 0x0, 0x100, 0x6, 0x4, 0x117, 0x6, 0x8, 0xa, 0x3, 0x400, 0x81, 0x85c0, 0x0, 0x2, 0xa98, 0x2, 0x6, 0x6, 0x3, 0x1, 0xff, 0x7, 0x1, 0xfff, 0x9e, 0xf, 0x4, 0x2, 0x10001, 0x1ff, 0x4d60, 0x634, 0x0, 0x8, 0xa436, 0x4, 0x2, 0x8, 0x1, 0x3a79, 0x2, 0x590, 0x3, 0x2, 0x9, 0x80, 0x95, 0x7, 0x9, 0x9, 0x9, 0xb, 0x7ff, 0x4, 0x10, 0xffff, 0x4, 0x7fffffff, 0x5, 0x9, 0x4, 0xffff, 0xffffffff, 0xfff, 0x2, 0x8, 0x2, 0x3, 0xffffffff, 0x5, 0x83c, 0x5, 0x2, 0x700, 0xffffff84, 0x76e1, 0x1, 0xdd33, 0x95b2, 0x2, 0xc, 0x5, 0x0, 0x7, 0xf4f, 0x9, 0x5, 0x6, 0x9, 0x7fffffff, 0xfffffffe, 0x10000, 0x7, 0x2, 0x10001, 0xb9ee, 0x751, 0x1, 0x8, 0x6, 0x0, 0x9, 0x6b4d, 0xa, 0x6, 0x1, 0x33, 0xffffffff, 0x2, 0x108, 0x0, 0x7, 0x9, 0x6, 0x1, 0xc, 0x9, 0x4, 0x6, 0x0, 0x0, 0x1000, 0x6, 0x8, 0xffff, 0x7fff, 0x9, 0x4, 0x5, 0x4bab495c, 0x9, 0x6, 0x7, 0x101, 0x1, 0x9, 0x1ff, 0x8, 0xb5ec, 0x1, 0x7, 0x2, 0x3, 0x4, 0x4, 0x6, 0xdf36, 0x3, 0xd, 0x2, 0x9, 0x3, 0x4, 0xffff4f42, 0x5, 0x94, 0x3, 0xfffffffb, 0x5, 0x6, 0x8f, 0x9, 0x5, 0x3, 0x1000, 0x1a4e, 0x401, 0x8, 0x7, 0xa7, 0x0, 0xe000000, 0x6, 0x6, 0x200, 0x8, 0x2, 0x2, 0x80000000, 0xffffffa3, 0x0, 0x0, 0xdc, 0x401, 0x0, 0xffffff5a, 0x7, 0x2, 0x7, 0x86f4, 0x7ff, 0x5, 0x8, 0x6, 0x9, 0x100, 0x6, 0xfff, 0x800, 0x4, 0x80000000, 0x7, 0x2, 0x66, 0x18000, 0xc2, 0x3, 0x9, 0x858, 0x4, 0x2e, 0xcee0, 0x8, 0x7, 0x9, 0x100, 0x7f, 0x2, 0x1, 0x100, 0x0, 0x8001, 0x4, 0x4, 0x46, 0xf50, 0xffffffff, 0x7, 0x4, 0x9, 0xfff, 0xa, 0xe, 0x8001, 0x8, 0xa2a, 0xdeea, 0x1, 0x3, 0x6, 0x7, 0xb40, 0x8, 0xa, 0x5, 0x2, 0x7, 0x4, 0x1ff, 0x4, 0x1000, 0x7, 0x2, 0x0, 0x1, 0x10, 0x5bc, 0x7fffffff, 0x5, 0x8c9f, 0x800, 0x2, 0xffff, 0x4, 0x2, 0xb, 0xfff, 0x6, 0x4, 0x10, 0x1, 0xfffff801, 0x59f, 0x2, 0x1, 0x5, 0x3, 0x6, 0x1, 0x10, 0x2, 0x7, 0x5, 0x100, 0x0, 0x5a, 0x3, 0x0, 0x48, 0x6, 0x8b, 0x0, 0xe53f, 0x800, 0x6, 0x4, 0x7, 0x0, 0x212, 0x9, 0x5, 0xb, 0x8, 0x80, 0x4, 0xfffffff0, 0x23, 0x6, 0x80000001, 0x5, 0xac, 0x7, 0x3ff, 0x4, 0x3c5f49b9, 0x1, 0xe55, 0x48, 0x597b, 0x8, 0x80000000, 0x1, 0x12ee, 0x5, 0x74, 0x8, 0x5, 0x0, 0x7, 0x1ff, 0x5, 0xf6, 0xffff1ee5, 0x9, 0x7, 0x0, 0x1ff, 0xffffffac, 0xfffffffa, 0x50, 0xd, 0x40, 0xf8b0, 0x7, 0x200, 0xe2, 0x2, 0x4, 0x9, 0xec4, 0x2, 0x3, 0x3, 0x0, 0x7, 0xfffffff1, 0xe59c, 0x6, 0x1, 0x6, 0xfff, 0x0, 0x100, 0x4, 0x5, 0x8fbe, 0x2dc5, 0x2, 0x6, 0x6, 0x9, 0x5, 0x5, 0x1000, 0x3, 0xe, 0x8, 0x6, 0x0, 0x7, 0x8, 0x0, 0x51c, 0x6, 0x3, 0x3, 0x200, 0x9, 0x1, 0x5, 0x63, 0x311b, 0x0, 0x778, 0x1, 0x8, 0x7, 0x1, 0xcb, 0x6, 0x1, 0x6d, 0x0, 0x9, 0x6, 0x8, 0x2, 0x8, 0x9, 0xfffffff7, 0x6, 0xffff, 0x5, 0x7, 0x4, 0xfffffff2, 0x80000001, 0x3, 0x6, 0x0, 0x400, 0x7, 0x200, 0xfffffff7, 0x7, 0xe4e, 0x9, 0x1, 0x6, 0xd, 0x1, 0x20, 0xd8, 0x80, 0x6, 0x2cf, 0x6, 0x1, 0x61, 0xe, 0x66000000, 0x8, 0x4, 0x8, 0x8, 0x6, 0x9, 0x9, 0x0, 0x1, 0x9, 0x3, 0x5, 0x1e4, 0x5, 0x49bd, 0x3ff, 0x10001, 0xda5c, 0x8, 0x5, 0xf535, 0x0, 0x0, 0x1, 0x6, 0x8, 0x7, 0x2, 0x7fb0, 0xe, 0x6, 0x9, 0x1, 0x81, 0xd, 0x1ff, 0x1, 0x3, 0xffff, 0x4, 0x200, 0x395e9388, 0x6, 0x90, 0x2, 0x80000001, 0x9, 0x2a, 0x9fe1, 0xffffff7f, 0x8b62, 0x5, 0x5, 0x9e, 0xbe, 0x80000001, 0x5, 0x7ff, 0x3, 0x800, 0xdad, 0x7, 0x8, 0x4, 0x101, 0x3, 0x0, 0xff, 0xa, 0xffffc1bf, 0x8, 0x5, 0x2, 0x7f, 0x9432, 0x6, 0xffffffff, 0x8, 0x5cc, 0x3]}) 1.415459274s ago: executing program 4 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket(0x1e, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) 1.16173906s ago: executing program 2 (id=2610): unshare(0x22020600) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") 919.849876ms ago: executing program 2 (id=2611): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020) 917.782526ms ago: executing program 0 (id=2620): unshare(0x22020600) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") 368.48343ms ago: executing program 3 (id=2613): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/276, 0x114}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r5, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 322.024411ms ago: executing program 4 (id=2614): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 307.104322ms ago: executing program 2 (id=2615): openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=',1', 0x2) 296.108812ms ago: executing program 0 (id=2616): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x1) 76.646667ms ago: executing program 0 (id=2617): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 52.684698ms ago: executing program 4 (id=2618): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r4, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 0s ago: executing program 2 (id=2619): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) kernel console output (not intermixed with test programs): 820 [ 988.620464][T32631] oom_kill_process+0x390/0x580 [ 988.625338][T32631] out_of_memory+0xe0e/0x1200 [ 988.630064][T32631] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 988.635717][T32631] ? print_unlock_imbalance_bug+0x160/0x160 [ 988.641620][T32631] ? mutex_lock_nested+0x20/0x20 [ 988.646581][T32631] ? unregister_oom_notifier+0x20/0x20 [ 988.652062][T32631] mem_cgroup_out_of_memory+0x2c2/0x390 [ 988.657620][T32631] ? try_charge_memcg+0xc8c/0x17c0 [ 988.662742][T32631] ? drain_local_stock+0x630/0x630 [ 988.667893][T32631] ? do_raw_spin_unlock+0x121/0x230 [ 988.673121][T32631] try_charge_memcg+0xc9c/0x17c0 [ 988.678163][T32631] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 988.684019][T32631] ? folio_flags+0x120/0x120 [ 988.688632][T32631] ? shmem_alloc_folio+0x1f4/0x2a0 [ 988.693766][T32631] ? percpu_ref_tryget+0x15/0x180 [ 988.698801][T32631] ? get_mem_cgroup_from_mm+0x38/0x290 [ 988.704271][T32631] charge_memcg+0x11b/0x3b0 [ 988.708799][T32631] ? __mem_cgroup_charge+0x80/0x80 [ 988.713973][T32631] ? get_mem_cgroup_from_mm+0x38/0x290 [ 988.719441][T32631] ? get_mem_cgroup_from_mm+0x38/0x290 [ 988.724909][T32631] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 988.730520][T32631] __mem_cgroup_charge+0x25/0x80 [ 988.735490][T32631] shmem_add_to_page_cache+0x8d3/0x1b80 [ 988.741071][T32631] ? xas_load+0x12b/0x140 [ 988.745436][T32631] ? shmem_alloc_folio+0x2a0/0x2a0 [ 988.750587][T32631] shmem_get_folio_gfp+0x1037/0x2b40 [ 988.755901][T32631] shmem_fault+0x1b8/0x820 [ 988.760334][T32631] ? zero_pipe_buf_get+0x10/0x10 [ 988.765284][T32631] ? handle_mm_fault+0xe6/0x4a40 [ 988.770230][T32631] ? __lock_acquire+0x7eb0/0x7eb0 [ 988.775267][T32631] __do_fault+0x13b/0x4d0 [ 988.779603][T32631] ? handle_mm_fault+0x3923/0x4a40 [ 988.784752][T32631] ? handle_mm_fault+0xe6/0x4a40 [ 988.789712][T32631] handle_mm_fault+0x393f/0x4a40 [ 988.794665][T32631] ? handle_mm_fault+0xe6/0x4a40 [ 988.799621][T32631] ? numa_migrate_prep+0x350/0x350 [ 988.804739][T32631] ? follow_page_pte+0x6dd/0x1ae0 [ 988.809778][T32631] ? pmd_lock+0x60/0x60 [ 988.813947][T32631] __get_user_pages+0x604/0x1580 [ 988.818907][T32631] ? populate_vma_page_range+0x380/0x380 [ 988.824591][T32631] populate_vma_page_range+0x2c1/0x380 [ 988.830072][T32631] ? fixup_user_fault+0x750/0x750 [ 988.835113][T32631] ? down_read+0x1ac/0x2e0 [ 988.839542][T32631] __mm_populate+0x260/0x390 [ 988.844146][T32631] ? faultin_page_range+0x8a0/0x8a0 [ 988.851572][T32631] ? up_write+0x1be/0x410 [ 988.856055][T32631] vm_mmap_pgoff+0x2da/0x3f0 [ 988.860804][T32631] ? account_locked_vm+0x200/0x200 [ 988.865951][T32631] ? ksys_mmap_pgoff+0xf3/0x720 [ 988.870818][T32631] ? __x64_sys_mmap+0x7a/0x130 [ 988.875594][T32631] do_syscall_64+0x55/0xb0 [ 988.880032][T32631] ? clear_bhb_loop+0x40/0x90 [ 988.884738][T32631] ? clear_bhb_loop+0x40/0x90 [ 988.889457][T32631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.895394][T32631] RIP: 0033:0x7f466299f559 [ 988.899850][T32631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.919512][T32631] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 988.927950][T32631] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 988.936116][T32631] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 988.944099][T32631] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 988.952286][T32631] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 988.960262][T32631] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 988.968361][T32631] [ 988.973367][T32631] memory: usage 307200kB, limit 307200kB, failcnt 7184 [ 988.980361][T32631] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 988.988408][T32631] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 988.995615][T32631] Memory cgroup stats for /syz1: [ 988.995778][T32631] cache 302043136 [ 989.004400][T32631] rss 4993024 [ 989.007810][T32631] rss_huge 0 [ 989.011026][T32631] shmem 302010368 [ 989.014671][T32631] mapped_file 8151040 [ 989.018806][T32631] dirty 32768 [ 989.022110][T32631] writeback 0 [ 989.025418][T32631] workingset_refault_anon 1898 [ 989.030325][T32631] workingset_refault_file 1737 [ 989.035121][T32631] swap 0 [ 989.038446][T32631] pgpgin 1545626 [ 989.042026][T32631] pgpgout 1471177 [ 989.045764][T32631] pgfault 969251 [ 989.049381][T32631] pgmajfault 754 [ 989.052943][T32631] inactive_anon 298635264 [ 989.057389][T32631] active_anon 8368128 [ 989.061392][T32631] inactive_file 32768 [ 989.065394][T32631] active_file 0 [ 989.068985][T32631] unevictable 0 [ 989.072601][T32631] hierarchical_memory_limit 314572800 [ 989.078137][T32631] hierarchical_memsw_limit 9223372036854771712 [ 989.084327][T32631] total_cache 302043136 [ 989.088788][T32631] total_rss 4993024 [ 989.092624][T32631] total_rss_huge 0 [ 989.096416][T32631] total_shmem 302010368 [ 989.100688][T32631] total_mapped_file 8151040 [ 989.105213][T32631] total_dirty 32768 [ 989.109382][T32631] total_writeback 0 [ 989.113213][T32631] total_workingset_refault_anon 1898 [ 989.119059][T32631] total_workingset_refault_file 1737 [ 989.125282][T32631] total_swap 0 [ 989.128763][T32631] total_pgpgin 1545626 [ 989.132850][T32631] total_pgpgout 1471177 [ 989.137099][T32631] total_pgfault 969251 [ 989.141192][T32631] total_pgmajfault 754 [ 989.145291][T32631] total_inactive_anon 298635264 [ 989.150302][T32631] total_active_anon 8368128 [ 989.155021][T32631] total_inactive_file 32768 [ 989.159892][T32631] total_active_file 0 [ 989.163901][T32631] total_unevictable 0 [ 989.168025][T32631] anon_cost 0 [ 989.171336][T32631] file_cost 0 [ 989.174640][T32631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2429,pid=32630,uid=0 [ 989.190661][T32631] Memory cgroup out of memory: Killed process 32630 (syz.1.2429) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 989.568842][T32744] syz.1.2434 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 989.578633][T32744] CPU: 0 PID: 32744 Comm: syz.1.2434 Not tainted syzkaller #0 [ 989.586134][T32744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 989.596227][T32744] Call Trace: [ 989.599538][T32744] [ 989.602523][T32744] dump_stack_lvl+0x18c/0x250 [ 989.607243][T32744] ? show_regs_print_info+0x20/0x20 [ 989.612476][T32744] ? load_image+0x420/0x420 [ 989.617009][T32744] ? ___ratelimit+0x478/0x610 [ 989.621731][T32744] ? radix_tree_cpu_dead+0x160/0x160 [ 989.627048][T32744] dump_header+0xd8/0x820 [ 989.631422][T32744] oom_kill_process+0x390/0x580 [ 989.636308][T32744] out_of_memory+0xe0e/0x1200 [ 989.641109][T32744] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 989.646894][T32744] ? print_unlock_imbalance_bug+0x160/0x160 [ 989.653715][T32744] ? mutex_lock_nested+0x20/0x20 [ 989.658704][T32744] ? unregister_oom_notifier+0x20/0x20 [ 989.664309][T32744] mem_cgroup_out_of_memory+0x2c2/0x390 [ 989.670169][T32744] ? try_charge_memcg+0xc8c/0x17c0 [ 989.675329][T32744] ? drain_local_stock+0x630/0x630 [ 989.680592][T32744] ? do_raw_spin_unlock+0x121/0x230 [ 989.686008][T32744] try_charge_memcg+0xc9c/0x17c0 [ 989.690997][T32744] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 989.696845][T32744] ? folio_flags+0x120/0x120 [ 989.701460][T32744] ? shmem_alloc_folio+0x1f4/0x2a0 [ 989.706589][T32744] ? percpu_ref_tryget+0x15/0x180 [ 989.711624][T32744] ? get_mem_cgroup_from_mm+0x38/0x290 [ 989.717094][T32744] charge_memcg+0x11b/0x3b0 [ 989.721641][T32744] ? __mem_cgroup_charge+0x80/0x80 [ 989.726818][T32744] ? get_mem_cgroup_from_mm+0x38/0x290 [ 989.732558][T32744] ? get_mem_cgroup_from_mm+0x38/0x290 [ 989.738208][T32744] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 989.743776][T32744] __mem_cgroup_charge+0x25/0x80 [ 989.748730][T32744] shmem_add_to_page_cache+0x8d3/0x1b80 [ 989.754303][T32744] ? xas_load+0x12b/0x140 [ 989.758663][T32744] ? shmem_alloc_folio+0x2a0/0x2a0 [ 989.763808][T32744] shmem_get_folio_gfp+0x1037/0x2b40 [ 989.769124][T32744] shmem_fault+0x1b8/0x820 [ 989.773558][T32744] ? zero_pipe_buf_get+0x10/0x10 [ 989.778507][T32744] ? handle_mm_fault+0xe6/0x4a40 [ 989.783447][T32744] ? __lock_acquire+0x7eb0/0x7eb0 [ 989.788484][T32744] __do_fault+0x13b/0x4d0 [ 989.792847][T32744] ? handle_mm_fault+0x3923/0x4a40 [ 989.797977][T32744] ? handle_mm_fault+0xe6/0x4a40 [ 989.802924][T32744] handle_mm_fault+0x393f/0x4a40 [ 989.807876][T32744] ? handle_mm_fault+0xe6/0x4a40 [ 989.812828][T32744] ? numa_migrate_prep+0x350/0x350 [ 989.817951][T32744] ? follow_page_pte+0x6dd/0x1ae0 [ 989.822996][T32744] ? pmd_lock+0x60/0x60 [ 989.828619][T32744] __get_user_pages+0x604/0x1580 [ 989.835013][T32744] ? populate_vma_page_range+0x380/0x380 [ 989.840777][T32744] populate_vma_page_range+0x2c1/0x380 [ 989.846253][T32744] ? fixup_user_fault+0x750/0x750 [ 989.851288][T32744] ? down_read+0x1ac/0x2e0 [ 989.855713][T32744] __mm_populate+0x260/0x390 [ 989.860376][T32744] ? faultin_page_range+0x8a0/0x8a0 [ 989.865593][T32744] ? up_write+0x1be/0x410 [ 989.869952][T32744] vm_mmap_pgoff+0x2da/0x3f0 [ 989.874760][T32744] ? account_locked_vm+0x200/0x200 [ 989.879911][T32744] ? ksys_mmap_pgoff+0xf3/0x720 [ 989.884778][T32744] ? __x64_sys_mmap+0x7a/0x130 [ 989.889587][T32744] do_syscall_64+0x55/0xb0 [ 989.894075][T32744] ? clear_bhb_loop+0x40/0x90 [ 989.898787][T32744] ? clear_bhb_loop+0x40/0x90 [ 989.903482][T32744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.909388][T32744] RIP: 0033:0x7f466299f559 [ 989.913808][T32744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.933570][T32744] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 989.942305][T32744] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 989.950486][T32744] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 989.958472][T32744] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 989.966799][T32744] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 989.974794][T32744] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 989.982790][T32744] [ 989.986751][T32744] memory: usage 307200kB, limit 307200kB, failcnt 7223 [ 989.993645][T32744] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 990.001616][T32744] kmem: usage 7368kB, limit 9007199254740988kB, failcnt 0 [ 990.008835][T32744] Memory cgroup stats for /syz1: [ 990.008989][T32744] cache 302030848 [ 990.017878][T32744] rss 4988928 [ 990.021178][T32744] rss_huge 0 [ 990.024389][T32744] shmem 301998080 [ 990.028078][T32744] mapped_file 8138752 [ 990.032073][T32744] dirty 32768 [ 990.035376][T32744] writeback 0 [ 990.038896][T32744] workingset_refault_anon 1898 [ 990.043675][T32744] workingset_refault_file 1737 [ 990.048518][T32744] swap 0 [ 990.052743][T32744] pgpgin 1547712 [ 990.056385][T32744] pgpgout 1473267 [ 990.060134][T32744] pgfault 971401 [ 990.063749][T32744] pgmajfault 754 [ 990.068111][T32744] inactive_anon 298635264 [ 990.072492][T32744] active_anon 8351744 [ 990.076571][T32744] inactive_file 32768 [ 990.081815][T32744] active_file 0 [ 990.085317][T32744] unevictable 0 [ 990.089201][T32744] hierarchical_memory_limit 314572800 [ 990.094625][T32744] hierarchical_memsw_limit 9223372036854771712 [ 990.100974][T32744] total_cache 302030848 [ 990.105150][T32744] total_rss 4988928 [ 990.109058][T32744] total_rss_huge 0 [ 990.112792][T32744] total_shmem 301998080 [ 990.117121][T32744] total_mapped_file 8138752 [ 990.121653][T32744] total_dirty 32768 [ 990.125494][T32744] total_writeback 0 [ 990.129407][T32744] total_workingset_refault_anon 1898 [ 990.134726][T32744] total_workingset_refault_file 1737 [ 990.140212][T32744] total_swap 0 [ 990.143612][T32744] total_pgpgin 1547712 [ 990.147748][T32744] total_pgpgout 1473267 [ 990.151921][T32744] total_pgfault 971401 [ 990.156091][T32744] total_pgmajfault 754 [ 990.160185][T32744] total_inactive_anon 298635264 [ 990.165059][T32744] total_active_anon 8351744 [ 990.169727][T32744] total_inactive_file 32768 [ 990.174260][T32744] total_active_file 0 [ 990.178339][T32744] total_unevictable 0 [ 990.182435][T32744] anon_cost 0 [ 990.185779][T32744] file_cost 0 [ 990.189079][T32744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2434,pid=32743,uid=0 [ 990.204340][T32744] Memory cgroup out of memory: Killed process 32743 (syz.1.2434) total-vm:102272kB, anon-rss:1268kB, file-rss:22656kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 990.310225][ T11] net_ratelimit: 13 callbacks suppressed [ 990.310247][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.436238][ T5946] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.503390][ T386] syz.1.2438 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 990.513140][ T386] CPU: 0 PID: 386 Comm: syz.1.2438 Not tainted syzkaller #0 [ 990.520464][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 990.530589][ T386] Call Trace: [ 990.533918][ T386] [ 990.536878][ T386] dump_stack_lvl+0x18c/0x250 [ 990.541615][ T386] ? show_regs_print_info+0x20/0x20 [ 990.546875][ T386] ? load_image+0x420/0x420 [ 990.547019][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.551392][ T386] ? ___ratelimit+0x478/0x610 [ 990.551419][ T386] ? radix_tree_cpu_dead+0x160/0x160 [ 990.551443][ T386] dump_header+0xd8/0x820 [ 990.573272][ T386] oom_kill_process+0x390/0x580 [ 990.578147][ T386] out_of_memory+0xe0e/0x1200 [ 990.582839][ T386] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 990.588511][ T386] ? print_unlock_imbalance_bug+0x160/0x160 [ 990.594591][ T386] ? mutex_lock_nested+0x20/0x20 [ 990.599651][ T386] ? unregister_oom_notifier+0x20/0x20 [ 990.605157][ T386] mem_cgroup_out_of_memory+0x2c2/0x390 [ 990.610780][ T386] ? try_charge_memcg+0xc8c/0x17c0 [ 990.616004][ T386] ? drain_local_stock+0x630/0x630 [ 990.621225][ T386] ? do_raw_spin_unlock+0x121/0x230 [ 990.626456][ T386] try_charge_memcg+0xc9c/0x17c0 [ 990.631556][ T386] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 990.637413][ T386] ? folio_flags+0x120/0x120 [ 990.642025][ T386] ? shmem_alloc_folio+0x1f4/0x2a0 [ 990.647201][ T386] ? percpu_ref_tryget+0x15/0x180 [ 990.652238][ T386] ? get_mem_cgroup_from_mm+0x38/0x290 [ 990.657710][ T386] charge_memcg+0x11b/0x3b0 [ 990.662245][ T386] ? __mem_cgroup_charge+0x80/0x80 [ 990.667379][ T386] ? get_mem_cgroup_from_mm+0x38/0x290 [ 990.672837][ T386] ? get_mem_cgroup_from_mm+0x38/0x290 [ 990.678316][ T386] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 990.683872][ T386] __mem_cgroup_charge+0x25/0x80 [ 990.688820][ T386] shmem_add_to_page_cache+0x8d3/0x1b80 [ 990.694375][ T386] ? xas_load+0x12b/0x140 [ 990.698749][ T386] ? shmem_alloc_folio+0x2a0/0x2a0 [ 990.703879][ T386] shmem_get_folio_gfp+0x1037/0x2b40 [ 990.709193][ T386] shmem_fault+0x1b8/0x820 [ 990.713665][ T386] ? zero_pipe_buf_get+0x10/0x10 [ 990.718630][ T386] ? handle_mm_fault+0xe6/0x4a40 [ 990.723641][ T386] ? __lock_acquire+0x7eb0/0x7eb0 [ 990.728732][ T386] __do_fault+0x13b/0x4d0 [ 990.733188][ T386] ? handle_mm_fault+0x3923/0x4a40 [ 990.738322][ T386] ? handle_mm_fault+0xe6/0x4a40 [ 990.743382][ T386] handle_mm_fault+0x393f/0x4a40 [ 990.748344][ T386] ? handle_mm_fault+0xe6/0x4a40 [ 990.753309][ T386] ? numa_migrate_prep+0x350/0x350 [ 990.758428][ T386] ? follow_page_pte+0x6dd/0x1ae0 [ 990.763474][ T386] ? pmd_lock+0x60/0x60 [ 990.767648][ T386] __get_user_pages+0x604/0x1580 [ 990.772619][ T386] ? populate_vma_page_range+0x380/0x380 [ 990.778466][ T386] populate_vma_page_range+0x2c1/0x380 [ 990.783956][ T386] ? fixup_user_fault+0x750/0x750 [ 990.789011][ T386] ? down_read+0x1ac/0x2e0 [ 990.793445][ T386] __mm_populate+0x260/0x390 [ 990.798057][ T386] ? faultin_page_range+0x8a0/0x8a0 [ 990.803270][ T386] ? up_write+0x1be/0x410 [ 990.807632][ T386] vm_mmap_pgoff+0x2da/0x3f0 [ 990.812234][ T386] ? account_locked_vm+0x200/0x200 [ 990.817359][ T386] ? ksys_mmap_pgoff+0xf3/0x720 [ 990.822233][ T386] ? __x64_sys_mmap+0x7a/0x130 [ 990.827009][ T386] do_syscall_64+0x55/0xb0 [ 990.831442][ T386] ? clear_bhb_loop+0x40/0x90 [ 990.836127][ T386] ? clear_bhb_loop+0x40/0x90 [ 990.840820][ T386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.846725][ T386] RIP: 0033:0x7f466299f559 [ 990.851152][ T386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.870779][ T386] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 990.879205][ T386] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 990.887277][ T386] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 990.895252][ T386] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 990.903225][ T386] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 990.911240][ T386] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 990.919248][ T386] [ 990.922965][ T386] memory: usage 307200kB, limit 307200kB, failcnt 7296 [ 990.930307][ T386] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 990.938301][ T386] kmem: usage 7372kB, limit 9007199254740988kB, failcnt 0 [ 990.945447][ T386] Memory cgroup stats for /syz1: [ 990.945699][ T386] cache 302030848 [ 990.954331][ T386] rss 4993024 [ 990.957680][ T386] rss_huge 0 [ 990.960896][ T386] shmem 301998080 [ 990.964543][ T386] mapped_file 8138752 [ 990.968582][ T386] dirty 32768 [ 990.971885][ T386] writeback 0 [ 990.975196][ T386] workingset_refault_anon 1898 [ 990.980238][ T386] workingset_refault_file 1737 [ 990.985019][ T386] swap 0 [ 990.987940][ T386] pgpgin 1549727 [ 990.991502][ T386] pgpgout 1475281 [ 990.995148][ T386] pgfault 973485 [ 990.998757][ T386] pgmajfault 754 [ 991.002324][ T386] inactive_anon 298635264 [ 991.006707][ T386] active_anon 8355840 [ 991.010786][ T386] inactive_file 32768 [ 991.014782][ T386] active_file 0 [ 991.018297][ T386] unevictable 0 [ 991.021768][ T386] hierarchical_memory_limit 314572800 [ 991.027213][ T386] hierarchical_memsw_limit 9223372036854771712 [ 991.033387][ T386] total_cache 302030848 [ 991.037672][ T386] total_rss 4993024 [ 991.041536][ T386] total_rss_huge 0 [ 991.045271][ T386] total_shmem 301998080 [ 991.049486][ T386] total_mapped_file 8138752 [ 991.054008][ T386] total_dirty 32768 [ 991.057870][ T386] total_writeback 0 [ 991.061692][ T386] total_workingset_refault_anon 1898 [ 991.067067][ T386] total_workingset_refault_file 1737 [ 991.072369][ T386] total_swap 0 [ 991.075874][ T386] total_pgpgin 1549727 [ 991.079963][ T386] total_pgpgout 1475281 [ 991.084129][ T386] total_pgfault 973485 [ 991.088267][ T386] total_pgmajfault 754 [ 991.092348][ T386] total_inactive_anon 298635264 [ 991.097262][ T386] total_active_anon 8355840 [ 991.101779][ T386] total_inactive_file 32768 [ 991.106352][ T386] total_active_file 0 [ 991.110347][ T386] total_unevictable 0 [ 991.114338][ T386] anon_cost 0 [ 991.117695][ T386] file_cost 0 [ 991.120995][ T386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2438,pid=384,uid=0 [ 991.136086][ T386] Memory cgroup out of memory: Killed process 384 (syz.1.2438) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 991.225301][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 991.491317][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 991.538775][ T403] syz.1.2445 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 991.548601][ T403] CPU: 0 PID: 403 Comm: syz.1.2445 Not tainted syzkaller #0 [ 991.555924][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 991.566015][ T403] Call Trace: [ 991.569330][ T403] [ 991.572288][ T403] dump_stack_lvl+0x18c/0x250 [ 991.577020][ T403] ? show_regs_print_info+0x20/0x20 [ 991.582326][ T403] ? load_image+0x420/0x420 [ 991.586871][ T403] ? ___ratelimit+0x478/0x610 [ 991.591594][ T403] ? radix_tree_cpu_dead+0x160/0x160 [ 991.596930][ T403] dump_header+0xd8/0x820 [ 991.601304][ T403] oom_kill_process+0x390/0x580 [ 991.606181][ T403] out_of_memory+0xe0e/0x1200 [ 991.611073][ T403] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 991.616713][ T403] ? print_unlock_imbalance_bug+0x160/0x160 [ 991.622654][ T403] ? mutex_lock_nested+0x20/0x20 [ 991.627601][ T403] ? unregister_oom_notifier+0x20/0x20 [ 991.633089][ T403] mem_cgroup_out_of_memory+0x2c2/0x390 [ 991.638640][ T403] ? try_charge_memcg+0xc8c/0x17c0 [ 991.643761][ T403] ? drain_local_stock+0x630/0x630 [ 991.649032][ T403] ? do_raw_spin_unlock+0x121/0x230 [ 991.654241][ T403] try_charge_memcg+0xc9c/0x17c0 [ 991.659285][ T403] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 991.665106][ T403] ? folio_flags+0x120/0x120 [ 991.669791][ T403] ? shmem_alloc_folio+0x1f4/0x2a0 [ 991.675127][ T403] ? percpu_ref_tryget+0x15/0x180 [ 991.680183][ T403] ? get_mem_cgroup_from_mm+0x38/0x290 [ 991.685665][ T403] charge_memcg+0x11b/0x3b0 [ 991.690185][ T403] ? __mem_cgroup_charge+0x80/0x80 [ 991.695301][ T403] ? get_mem_cgroup_from_mm+0x38/0x290 [ 991.700767][ T403] ? get_mem_cgroup_from_mm+0x38/0x290 [ 991.706237][ T403] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 991.711884][ T403] __mem_cgroup_charge+0x25/0x80 [ 991.717004][ T403] shmem_add_to_page_cache+0x8d3/0x1b80 [ 991.722560][ T403] ? xas_load+0x12b/0x140 [ 991.726905][ T403] ? shmem_alloc_folio+0x2a0/0x2a0 [ 991.732039][ T403] shmem_get_folio_gfp+0x1037/0x2b40 [ 991.737614][ T403] shmem_fault+0x1b8/0x820 [ 991.742178][ T403] ? zero_pipe_buf_get+0x10/0x10 [ 991.747145][ T403] ? handle_mm_fault+0xe6/0x4a40 [ 991.752096][ T403] ? __lock_acquire+0x7eb0/0x7eb0 [ 991.757134][ T403] __do_fault+0x13b/0x4d0 [ 991.761465][ T403] ? handle_mm_fault+0x3923/0x4a40 [ 991.766574][ T403] ? handle_mm_fault+0xe6/0x4a40 [ 991.771508][ T403] handle_mm_fault+0x393f/0x4a40 [ 991.776449][ T403] ? handle_mm_fault+0xe6/0x4a40 [ 991.781422][ T403] ? numa_migrate_prep+0x350/0x350 [ 991.786548][ T403] ? follow_page_pte+0x6dd/0x1ae0 [ 991.791887][ T403] ? pmd_lock+0x60/0x60 [ 991.796063][ T403] __get_user_pages+0x604/0x1580 [ 991.801040][ T403] ? populate_vma_page_range+0x380/0x380 [ 991.806685][ T403] populate_vma_page_range+0x2c1/0x380 [ 991.812509][ T403] ? fixup_user_fault+0x750/0x750 [ 991.817646][ T403] ? down_read+0x1ac/0x2e0 [ 991.822132][ T403] __mm_populate+0x260/0x390 [ 991.826947][ T403] ? faultin_page_range+0x8a0/0x8a0 [ 991.832178][ T403] ? up_write+0x1be/0x410 [ 991.836523][ T403] vm_mmap_pgoff+0x2da/0x3f0 [ 991.841129][ T403] ? account_locked_vm+0x200/0x200 [ 991.846254][ T403] ? ksys_mmap_pgoff+0xf3/0x720 [ 991.851285][ T403] ? __x64_sys_mmap+0x7a/0x130 [ 991.856078][ T403] do_syscall_64+0x55/0xb0 [ 991.861115][ T403] ? clear_bhb_loop+0x40/0x90 [ 991.865822][ T403] ? clear_bhb_loop+0x40/0x90 [ 991.870519][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.876413][ T403] RIP: 0033:0x7f466299f559 [ 991.880837][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.901645][ T403] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 991.910268][ T403] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 991.918250][ T403] RDX: b635773f06ebbee2 RSI: 0000000000b36000 RDI: 0000200000000000 [ 991.926232][ T403] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 991.934216][ T403] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 991.942226][ T403] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 991.950228][ T403] [ 991.953759][ T403] memory: usage 307200kB, limit 307200kB, failcnt 7338 [ 991.955519][ T1093] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 991.960677][ T403] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 991.960695][ T403] kmem: usage 7376kB, limit 9007199254740988kB, failcnt 0 [ 991.983893][ T403] Memory cgroup stats for /syz1: [ 991.984046][ T403] cache 302030848 [ 991.992718][ T403] rss 4988928 [ 991.996072][ T403] rss_huge 0 [ 991.999299][ T403] shmem 301998080 [ 992.003097][ T403] mapped_file 8138752 [ 992.007163][ T403] dirty 32768 [ 992.010477][ T403] writeback 0 [ 992.013789][ T403] workingset_refault_anon 1898 [ 992.018701][ T403] workingset_refault_file 1737 [ 992.023485][ T403] swap 0 [ 992.026421][ T403] pgpgin 1551775 [ 992.030004][ T403] pgpgout 1477330 [ 992.033664][ T403] pgfault 975673 [ 992.037291][ T403] pgmajfault 754 [ 992.040868][ T403] inactive_anon 90112 [ 992.044867][ T403] active_anon 306896896 [ 992.049130][ T403] inactive_file 32768 [ 992.053129][ T403] active_file 0 [ 992.056678][ T403] unevictable 0 [ 992.060160][ T403] hierarchical_memory_limit 314572800 [ 992.065627][ T403] hierarchical_memsw_limit 9223372036854771712 [ 992.071821][ T403] total_cache 302030848 [ 992.076081][ T403] total_rss 4988928 [ 992.079912][ T403] total_rss_huge 0 [ 992.083658][ T403] total_shmem 301998080 [ 992.087935][ T403] total_mapped_file 8138752 [ 992.088365][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 992.092480][ T403] total_dirty 32768 [ 992.092491][ T403] total_writeback 0 [ 992.092498][ T403] total_workingset_refault_anon 1898 [ 992.092507][ T403] total_workingset_refault_file 1737 [ 992.092515][ T403] total_swap 0 [ 992.092523][ T403] total_pgpgin 1551775 [ 992.092531][ T403] total_pgpgout 1477330 [ 992.092538][ T403] total_pgfault 975673 [ 992.135894][ T403] total_pgmajfault 754 [ 992.140082][ T403] total_inactive_anon 90112 [ 992.144871][ T403] total_active_anon 306896896 [ 992.149746][ T403] total_inactive_file 32768 [ 992.154537][ T403] total_active_file 0 [ 992.158722][ T403] total_unevictable 0 [ 992.162735][ T403] anon_cost 0 [ 992.166121][ T403] file_cost 0 [ 992.169436][ T403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2445,pid=402,uid=0 [ 992.184561][ T403] Memory cgroup out of memory: Killed process 402 (syz.1.2445) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 992.215838][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 992.335845][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 992.457587][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 993.674929][ T838] syz.1.2460 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 993.684582][ T838] CPU: 0 PID: 838 Comm: syz.1.2460 Not tainted syzkaller #0 [ 993.691904][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 993.701986][ T838] Call Trace: [ 993.705293][ T838] [ 993.708409][ T838] dump_stack_lvl+0x18c/0x250 [ 993.713151][ T838] ? show_regs_print_info+0x20/0x20 [ 993.718456][ T838] ? load_image+0x420/0x420 [ 993.723010][ T838] ? ___ratelimit+0x478/0x610 [ 993.727731][ T838] ? radix_tree_cpu_dead+0x160/0x160 [ 993.733156][ T838] dump_header+0xd8/0x820 [ 993.737513][ T838] oom_kill_process+0x390/0x580 [ 993.742558][ T838] out_of_memory+0xe0e/0x1200 [ 993.747788][ T838] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 993.753463][ T838] ? print_unlock_imbalance_bug+0x160/0x160 [ 993.759397][ T838] ? mutex_lock_nested+0x20/0x20 [ 993.764358][ T838] ? unregister_oom_notifier+0x20/0x20 [ 993.769878][ T838] mem_cgroup_out_of_memory+0x2c2/0x390 [ 993.775482][ T838] ? try_charge_memcg+0xc8c/0x17c0 [ 993.780631][ T838] ? drain_local_stock+0x630/0x630 [ 993.785770][ T838] ? do_raw_spin_unlock+0x121/0x230 [ 993.790996][ T838] try_charge_memcg+0xc9c/0x17c0 [ 993.795955][ T838] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 993.801864][ T838] ? folio_flags+0x120/0x120 [ 993.806590][ T838] ? shmem_alloc_folio+0x1f4/0x2a0 [ 993.811931][ T838] ? percpu_ref_tryget+0x15/0x180 [ 993.816995][ T838] ? get_mem_cgroup_from_mm+0x38/0x290 [ 993.822465][ T838] charge_memcg+0x11b/0x3b0 [ 993.826979][ T838] ? __mem_cgroup_charge+0x80/0x80 [ 993.832106][ T838] ? get_mem_cgroup_from_mm+0x38/0x290 [ 993.837574][ T838] ? get_mem_cgroup_from_mm+0x38/0x290 [ 993.843400][ T838] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 993.848967][ T838] __mem_cgroup_charge+0x25/0x80 [ 993.853920][ T838] shmem_add_to_page_cache+0x8d3/0x1b80 [ 993.859481][ T838] ? xas_load+0x12b/0x140 [ 993.863833][ T838] ? shmem_alloc_folio+0x2a0/0x2a0 [ 993.868969][ T838] shmem_get_folio_gfp+0x1037/0x2b40 [ 993.874316][ T838] shmem_fault+0x1b8/0x820 [ 993.878751][ T838] ? zero_pipe_buf_get+0x10/0x10 [ 993.883697][ T838] ? handle_mm_fault+0xe6/0x4a40 [ 993.888643][ T838] ? __lock_acquire+0x7eb0/0x7eb0 [ 993.893732][ T838] __do_fault+0x13b/0x4d0 [ 993.898087][ T838] ? handle_mm_fault+0x3923/0x4a40 [ 993.903227][ T838] ? handle_mm_fault+0xe6/0x4a40 [ 993.908175][ T838] handle_mm_fault+0x393f/0x4a40 [ 993.913210][ T838] ? handle_mm_fault+0xe6/0x4a40 [ 993.918196][ T838] ? numa_migrate_prep+0x350/0x350 [ 993.923336][ T838] ? follow_page_pte+0x6dd/0x1ae0 [ 993.928390][ T838] ? pmd_lock+0x60/0x60 [ 993.932669][ T838] __get_user_pages+0x604/0x1580 [ 993.937635][ T838] ? populate_vma_page_range+0x380/0x380 [ 993.943301][ T838] populate_vma_page_range+0x2c1/0x380 [ 993.948774][ T838] ? fixup_user_fault+0x750/0x750 [ 993.953851][ T838] ? down_read+0x1ac/0x2e0 [ 993.958282][ T838] __mm_populate+0x260/0x390 [ 993.962884][ T838] ? faultin_page_range+0x8a0/0x8a0 [ 993.968093][ T838] ? up_write+0x1be/0x410 [ 993.972436][ T838] vm_mmap_pgoff+0x2da/0x3f0 [ 993.977127][ T838] ? account_locked_vm+0x200/0x200 [ 993.982349][ T838] ? ksys_mmap_pgoff+0xf3/0x720 [ 993.987214][ T838] ? __x64_sys_mmap+0x7a/0x130 [ 993.992017][ T838] do_syscall_64+0x55/0xb0 [ 993.996448][ T838] ? clear_bhb_loop+0x40/0x90 [ 994.001140][ T838] ? clear_bhb_loop+0x40/0x90 [ 994.005920][ T838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.011841][ T838] RIP: 0033:0x7f466299f559 [ 994.016287][ T838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.036081][ T838] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 994.044544][ T838] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 994.052611][ T838] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 994.060588][ T838] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 994.068571][ T838] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 994.076566][ T838] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 994.084734][ T838] [ 994.093976][ T838] memory: usage 307200kB, limit 307200kB, failcnt 7482 [ 994.101557][ T838] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 994.109527][ T838] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 994.116761][ T838] Memory cgroup stats for /syz1: [ 994.116916][ T838] cache 302043136 [ 994.125595][ T838] rss 4988928 [ 994.129025][ T838] rss_huge 0 [ 994.132249][ T838] shmem 302010368 [ 994.135929][ T838] mapped_file 8151040 [ 994.140014][ T838] dirty 32768 [ 994.143321][ T838] writeback 0 [ 994.146674][ T838] workingset_refault_anon 1898 [ 994.151539][ T838] workingset_refault_file 1752 [ 994.156362][ T838] swap 0 [ 994.159238][ T838] pgpgin 1554436 [ 994.162806][ T838] pgpgout 1479988 [ 994.166490][ T838] pgfault 978830 [ 994.170050][ T838] pgmajfault 754 [ 994.173620][ T838] inactive_anon 294539264 [ 994.178007][ T838] active_anon 12460032 [ 994.182111][ T838] inactive_file 32768 [ 994.186295][ T838] active_file 0 [ 994.189789][ T838] unevictable 0 [ 994.193274][ T838] hierarchical_memory_limit 314572800 [ 994.198762][ T838] hierarchical_memsw_limit 9223372036854771712 [ 994.205041][ T838] total_cache 302043136 [ 994.209295][ T838] total_rss 4988928 [ 994.213129][ T838] total_rss_huge 0 [ 994.214332][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.216886][ T838] total_shmem 302010368 [ 994.216897][ T838] total_mapped_file 8151040 [ 994.216906][ T838] total_dirty 32768 [ 994.216914][ T838] total_writeback 0 [ 994.239696][ T838] total_workingset_refault_anon 1898 [ 994.245011][ T838] total_workingset_refault_file 1752 [ 994.250396][ T838] total_swap 0 [ 994.253799][ T838] total_pgpgin 1554436 [ 994.258007][ T838] total_pgpgout 1479988 [ 994.262190][ T838] total_pgfault 978830 [ 994.266401][ T838] total_pgmajfault 754 [ 994.270499][ T838] total_inactive_anon 294539264 [ 994.275384][ T838] total_active_anon 12460032 [ 994.280298][ T838] total_inactive_file 32768 [ 994.284835][ T838] total_active_file 0 [ 994.288911][ T838] total_unevictable 0 [ 994.292913][ T838] anon_cost 0 [ 994.296248][ T838] file_cost 0 [ 994.299561][ T838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2460,pid=837,uid=0 [ 994.315146][ T838] Memory cgroup out of memory: Killed process 837 (syz.1.2460) total-vm:102272kB, anon-rss:1316kB, file-rss:22656kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 994.426998][ T28] audit: type=1326 audit(1792632930.011:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=839 comm="syz.2.2461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7c99f559 code=0x0 [ 995.067729][ T849] syz.1.2466 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 995.078279][ T849] CPU: 0 PID: 849 Comm: syz.1.2466 Not tainted syzkaller #0 [ 995.086062][ T849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 995.096187][ T849] Call Trace: [ 995.099506][ T849] [ 995.102474][ T849] dump_stack_lvl+0x18c/0x250 [ 995.107208][ T849] ? show_regs_print_info+0x20/0x20 [ 995.112663][ T849] ? load_image+0x420/0x420 [ 995.117257][ T849] ? ___ratelimit+0x478/0x610 [ 995.121980][ T849] ? radix_tree_cpu_dead+0x160/0x160 [ 995.127346][ T849] dump_header+0xd8/0x820 [ 995.131747][ T849] oom_kill_process+0x390/0x580 [ 995.136739][ T849] out_of_memory+0xe0e/0x1200 [ 995.141469][ T849] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 995.147176][ T849] ? print_unlock_imbalance_bug+0x160/0x160 [ 995.153387][ T849] ? mutex_lock_nested+0x20/0x20 [ 995.158367][ T849] ? unregister_oom_notifier+0x20/0x20 [ 995.163891][ T849] mem_cgroup_out_of_memory+0x2c2/0x390 [ 995.169500][ T849] ? try_charge_memcg+0xc8c/0x17c0 [ 995.174658][ T849] ? drain_local_stock+0x630/0x630 [ 995.179816][ T849] ? do_raw_spin_unlock+0x121/0x230 [ 995.185094][ T849] try_charge_memcg+0xc9c/0x17c0 [ 995.190096][ T849] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 995.196038][ T849] ? folio_flags+0x120/0x120 [ 995.200663][ T849] ? shmem_alloc_folio+0x1f4/0x2a0 [ 995.205819][ T849] ? percpu_ref_tryget+0x15/0x180 [ 995.210879][ T849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 995.216393][ T849] charge_memcg+0x11b/0x3b0 [ 995.220952][ T849] ? __mem_cgroup_charge+0x80/0x80 [ 995.226104][ T849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 995.231687][ T849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 995.237193][ T849] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 995.242778][ T849] __mem_cgroup_charge+0x25/0x80 [ 995.247798][ T849] shmem_add_to_page_cache+0x8d3/0x1b80 [ 995.253386][ T849] ? xas_load+0x11d/0x140 [ 995.257767][ T849] ? shmem_alloc_folio+0x2a0/0x2a0 [ 995.262951][ T849] shmem_get_folio_gfp+0x1037/0x2b40 [ 995.268319][ T849] shmem_fault+0x1b8/0x820 [ 995.272795][ T849] ? zero_pipe_buf_get+0x10/0x10 [ 995.277779][ T849] ? handle_mm_fault+0xe6/0x4a40 [ 995.282883][ T849] ? __lock_acquire+0x7eb0/0x7eb0 [ 995.287992][ T849] __do_fault+0x13b/0x4d0 [ 995.292363][ T849] ? handle_mm_fault+0x3923/0x4a40 [ 995.297525][ T849] ? handle_mm_fault+0xe6/0x4a40 [ 995.302499][ T849] handle_mm_fault+0x393f/0x4a40 [ 995.307472][ T849] ? handle_mm_fault+0xe6/0x4a40 [ 995.312454][ T849] ? numa_migrate_prep+0x350/0x350 [ 995.317594][ T849] ? follow_page_pte+0x6dd/0x1ae0 [ 995.322659][ T849] ? pmd_lock+0x60/0x60 [ 995.326866][ T849] __get_user_pages+0x604/0x1580 [ 995.331884][ T849] ? populate_vma_page_range+0x380/0x380 [ 995.337579][ T849] populate_vma_page_range+0x2c1/0x380 [ 995.343078][ T849] ? fixup_user_fault+0x750/0x750 [ 995.348143][ T849] ? down_read+0x1ac/0x2e0 [ 995.352596][ T849] __mm_populate+0x260/0x390 [ 995.357230][ T849] ? faultin_page_range+0x8a0/0x8a0 [ 995.362467][ T849] ? up_write+0x1be/0x410 [ 995.366827][ T849] vm_mmap_pgoff+0x2da/0x3f0 [ 995.371465][ T849] ? account_locked_vm+0x200/0x200 [ 995.376613][ T849] ? ksys_mmap_pgoff+0xf3/0x720 [ 995.381491][ T849] ? __x64_sys_mmap+0x7a/0x130 [ 995.386317][ T849] do_syscall_64+0x55/0xb0 [ 995.390761][ T849] ? clear_bhb_loop+0x40/0x90 [ 995.395465][ T849] ? clear_bhb_loop+0x40/0x90 [ 995.400185][ T849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.406126][ T849] RIP: 0033:0x7f466299f559 [ 995.410582][ T849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.430228][ T849] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 995.438678][ T849] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 995.446686][ T849] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 995.454694][ T849] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 995.462707][ T849] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 995.470722][ T849] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 995.478761][ T849] [ 995.482382][ T849] memory: usage 307200kB, limit 307200kB, failcnt 7538 [ 995.489310][ T849] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 995.497265][ T849] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 995.504493][ T849] Memory cgroup stats for /syz1: [ 995.504653][ T849] cache 302051328 [ 995.513394][ T849] rss 4988928 [ 995.516782][ T849] rss_huge 0 [ 995.520004][ T849] shmem 302018560 [ 995.523745][ T849] mapped_file 8159232 [ 995.527783][ T849] dirty 32768 [ 995.531082][ T849] writeback 0 [ 995.534383][ T849] workingset_refault_anon 1898 [ 995.539259][ T849] workingset_refault_file 1752 [ 995.544038][ T849] swap 0 [ 995.546958][ T849] pgpgin 1556561 [ 995.550524][ T849] pgpgout 1482111 [ 995.554176][ T849] pgfault 981083 [ 995.557824][ T849] pgmajfault 754 [ 995.561384][ T849] inactive_anon 286683136 [ 995.565776][ T849] active_anon 20324352 [ 995.569866][ T849] inactive_file 32768 [ 995.573886][ T849] active_file 0 [ 995.577665][ T849] unevictable 0 [ 995.581249][ T849] hierarchical_memory_limit 314572800 [ 995.586801][ T849] hierarchical_memsw_limit 9223372036854771712 [ 995.593288][ T849] total_cache 302051328 [ 995.597509][ T849] total_rss 4988928 [ 995.601341][ T849] total_rss_huge 0 [ 995.605087][ T849] total_shmem 302018560 [ 995.609365][ T849] total_mapped_file 8159232 [ 995.613886][ T849] total_dirty 32768 [ 995.617751][ T849] total_writeback 0 [ 995.621618][ T849] total_workingset_refault_anon 1898 [ 995.626967][ T849] total_workingset_refault_file 1752 [ 995.632443][ T849] total_swap 0 [ 995.636176][ T849] total_pgpgin 1556561 [ 995.640260][ T849] total_pgpgout 1482111 [ 995.644428][ T849] total_pgfault 981083 [ 995.648558][ T849] total_pgmajfault 754 [ 995.652640][ T849] total_inactive_anon 286683136 [ 995.657808][ T849] total_active_anon 20324352 [ 995.662436][ T849] total_inactive_file 32768 [ 995.667015][ T849] total_active_file 0 [ 995.671007][ T849] total_unevictable 0 [ 995.675083][ T849] anon_cost 0 [ 995.678756][ T849] file_cost 0 [ 995.682058][ T849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2466,pid=848,uid=0 [ 995.697117][ T849] Memory cgroup out of memory: Killed process 848 (syz.1.2466) total-vm:102272kB, anon-rss:1396kB, file-rss:22656kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 995.937771][ T11] net_ratelimit: 18 callbacks suppressed [ 995.937792][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 996.102720][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 996.402786][ T1200] syz.1.2470 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 996.412581][ T1200] CPU: 1 PID: 1200 Comm: syz.1.2470 Not tainted syzkaller #0 [ 996.419997][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 996.430091][ T1200] Call Trace: [ 996.433378][ T1200] [ 996.436314][ T1200] dump_stack_lvl+0x18c/0x250 [ 996.441015][ T1200] ? show_regs_print_info+0x20/0x20 [ 996.446228][ T1200] ? load_image+0x420/0x420 [ 996.450736][ T1200] ? ___ratelimit+0x478/0x610 [ 996.455418][ T1200] ? radix_tree_cpu_dead+0x160/0x160 [ 996.460714][ T1200] dump_header+0xd8/0x820 [ 996.465053][ T1200] oom_kill_process+0x390/0x580 [ 996.469927][ T1200] out_of_memory+0xe0e/0x1200 [ 996.474622][ T1200] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 996.480262][ T1200] ? print_unlock_imbalance_bug+0x160/0x160 [ 996.486161][ T1200] ? mutex_lock_nested+0x20/0x20 [ 996.491137][ T1200] ? unregister_oom_notifier+0x20/0x20 [ 996.496664][ T1200] mem_cgroup_out_of_memory+0x2c2/0x390 [ 996.502235][ T1200] ? try_charge_memcg+0xc8c/0x17c0 [ 996.507365][ T1200] ? drain_local_stock+0x630/0x630 [ 996.512494][ T1200] ? do_raw_spin_unlock+0x121/0x230 [ 996.517745][ T1200] try_charge_memcg+0xc9c/0x17c0 [ 996.522710][ T1200] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 996.528563][ T1200] ? folio_flags+0x120/0x120 [ 996.533203][ T1200] ? shmem_alloc_folio+0x1f4/0x2a0 [ 996.538360][ T1200] ? percpu_ref_tryget+0x15/0x180 [ 996.543451][ T1200] ? get_mem_cgroup_from_mm+0x38/0x290 [ 996.548938][ T1200] charge_memcg+0x11b/0x3b0 [ 996.553462][ T1200] ? __mem_cgroup_charge+0x80/0x80 [ 996.558583][ T1200] ? get_mem_cgroup_from_mm+0x38/0x290 [ 996.564055][ T1200] ? get_mem_cgroup_from_mm+0x38/0x290 [ 996.569525][ T1200] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 996.575079][ T1200] __mem_cgroup_charge+0x25/0x80 [ 996.580028][ T1200] shmem_add_to_page_cache+0x8d3/0x1b80 [ 996.585581][ T1200] ? xas_load+0x12b/0x140 [ 996.589931][ T1200] ? shmem_alloc_folio+0x2a0/0x2a0 [ 996.595202][ T1200] shmem_get_folio_gfp+0x1037/0x2b40 [ 996.600706][ T1200] shmem_fault+0x1b8/0x820 [ 996.605183][ T1200] ? zero_pipe_buf_get+0x10/0x10 [ 996.610167][ T1200] ? handle_mm_fault+0xe6/0x4a40 [ 996.615144][ T1200] ? __lock_acquire+0x7eb0/0x7eb0 [ 996.620228][ T1200] __do_fault+0x13b/0x4d0 [ 996.624569][ T1200] ? handle_mm_fault+0x3923/0x4a40 [ 996.629687][ T1200] ? handle_mm_fault+0xe6/0x4a40 [ 996.634629][ T1200] handle_mm_fault+0x393f/0x4a40 [ 996.639572][ T1200] ? handle_mm_fault+0xe6/0x4a40 [ 996.644529][ T1200] ? numa_migrate_prep+0x350/0x350 [ 996.649651][ T1200] ? follow_page_pte+0x6dd/0x1ae0 [ 996.654694][ T1200] ? pmd_lock+0x60/0x60 [ 996.658867][ T1200] __get_user_pages+0x604/0x1580 [ 996.663826][ T1200] ? populate_vma_page_range+0x380/0x380 [ 996.669485][ T1200] populate_vma_page_range+0x2c1/0x380 [ 996.674961][ T1200] ? fixup_user_fault+0x750/0x750 [ 996.680002][ T1200] ? down_read+0x1ac/0x2e0 [ 996.684424][ T1200] __mm_populate+0x260/0x390 [ 996.689030][ T1200] ? faultin_page_range+0x8a0/0x8a0 [ 996.694240][ T1200] ? up_write+0x1be/0x410 [ 996.698575][ T1200] vm_mmap_pgoff+0x2da/0x3f0 [ 996.703184][ T1200] ? account_locked_vm+0x200/0x200 [ 996.708307][ T1200] ? ksys_mmap_pgoff+0xf3/0x720 [ 996.713236][ T1200] ? __x64_sys_mmap+0x7a/0x130 [ 996.718104][ T1200] do_syscall_64+0x55/0xb0 [ 996.722535][ T1200] ? clear_bhb_loop+0x40/0x90 [ 996.727222][ T1200] ? clear_bhb_loop+0x40/0x90 [ 996.731929][ T1200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.737829][ T1200] RIP: 0033:0x7f466299f559 [ 996.742249][ T1200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.761863][ T1200] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 996.770289][ T1200] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 996.778267][ T1200] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 996.786420][ T1200] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 996.794399][ T1200] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 996.802377][ T1200] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 996.810374][ T1200] [ 996.815450][ T1200] memory: usage 307152kB, limit 307200kB, failcnt 7575 [ 996.822574][ T1200] memory+swap: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 996.830591][ T1200] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 996.837793][ T1200] Memory cgroup stats for /syz1: [ 996.837930][ T1200] cache 301998080 [ 996.840028][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 996.842882][ T1200] rss 4993024 [ 996.842895][ T1200] rss_huge 0 [ 996.842903][ T1200] shmem 301965312 [ 996.842911][ T1200] mapped_file 8105984 [ 996.842918][ T1200] dirty 32768 [ 996.842925][ T1200] writeback 0 [ 996.875959][ T1200] workingset_refault_anon 1898 [ 996.880753][ T1200] workingset_refault_file 1752 [ 996.885542][ T1200] swap 0 [ 996.888511][ T1200] pgpgin 1558602 [ 996.892076][ T1200] pgpgout 1484164 [ 996.895823][ T1200] pgfault 983263 [ 996.899390][ T1200] pgmajfault 754 [ 996.902949][ T1200] inactive_anon 12042240 [ 996.907319][ T1200] active_anon 294916096 [ 996.911492][ T1200] inactive_file 32768 [ 996.915490][ T1200] active_file 0 [ 996.919242][ T1200] unevictable 0 [ 996.922725][ T1200] hierarchical_memory_limit 314572800 [ 996.928192][ T1200] hierarchical_memsw_limit 9223372036854771712 [ 996.934369][ T1200] total_cache 301998080 [ 996.938594][ T1200] total_rss 4993024 [ 996.942420][ T1200] total_rss_huge 0 [ 996.946223][ T1200] total_shmem 301965312 [ 996.950394][ T1200] total_mapped_file 8105984 [ 996.954915][ T1200] total_dirty 32768 [ 996.958811][ T1200] total_writeback 0 [ 996.962646][ T1200] total_workingset_refault_anon 1898 [ 996.968193][ T1200] total_workingset_refault_file 1752 [ 996.973496][ T1200] total_swap 0 [ 996.976950][ T1200] total_pgpgin 1558602 [ 996.981070][ T1200] total_pgpgout 1484164 [ 996.985256][ T1200] total_pgfault 983263 [ 996.989467][ T1200] total_pgmajfault 754 [ 996.993562][ T1200] total_inactive_anon 12042240 [ 996.998597][ T1200] total_active_anon 294916096 [ 997.003308][ T1200] total_inactive_file 32768 [ 997.008963][ T1200] total_active_file 0 [ 997.013253][ T1200] total_unevictable 0 [ 997.017354][ T1200] anon_cost 0 [ 997.020676][ T1200] file_cost 0 [ 997.023987][ T1200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2470,pid=1199,uid=0 [ 997.042066][ T1200] Memory cgroup out of memory: Killed process 1199 (syz.1.2470) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 997.145908][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 997.275465][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 997.396919][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 997.550515][ T1422] syz.1.2475 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 997.560347][ T1422] CPU: 1 PID: 1422 Comm: syz.1.2475 Not tainted syzkaller #0 [ 997.567769][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 997.578131][ T1422] Call Trace: [ 997.581443][ T1422] [ 997.584403][ T1422] dump_stack_lvl+0x18c/0x250 [ 997.589127][ T1422] ? show_regs_print_info+0x20/0x20 [ 997.594361][ T1422] ? load_image+0x420/0x420 [ 997.598901][ T1422] ? ___ratelimit+0x478/0x610 [ 997.604313][ T1422] ? radix_tree_cpu_dead+0x160/0x160 [ 997.609650][ T1422] dump_header+0xd8/0x820 [ 997.614042][ T1422] oom_kill_process+0x390/0x580 [ 997.618934][ T1422] out_of_memory+0xe0e/0x1200 [ 997.623653][ T1422] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 997.629404][ T1422] ? print_unlock_imbalance_bug+0x160/0x160 [ 997.636355][ T1422] ? mutex_lock_nested+0x20/0x20 [ 997.641699][ T1422] ? unregister_oom_notifier+0x20/0x20 [ 997.647231][ T1422] mem_cgroup_out_of_memory+0x2c2/0x390 [ 997.652811][ T1422] ? try_charge_memcg+0xc8c/0x17c0 [ 997.657953][ T1422] ? drain_local_stock+0x630/0x630 [ 997.663119][ T1422] ? do_raw_spin_unlock+0x121/0x230 [ 997.668630][ T1422] try_charge_memcg+0xc9c/0x17c0 [ 997.673621][ T1422] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 997.679560][ T1422] ? folio_flags+0x120/0x120 [ 997.684174][ T1422] ? shmem_alloc_folio+0x1f4/0x2a0 [ 997.689406][ T1422] ? percpu_ref_tryget+0x15/0x180 [ 997.694485][ T1422] ? get_mem_cgroup_from_mm+0x38/0x290 [ 997.699973][ T1422] charge_memcg+0x11b/0x3b0 [ 997.704485][ T1422] ? __mem_cgroup_charge+0x80/0x80 [ 997.709610][ T1422] ? get_mem_cgroup_from_mm+0x38/0x290 [ 997.715077][ T1422] ? get_mem_cgroup_from_mm+0x38/0x290 [ 997.720554][ T1422] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 997.726117][ T1422] __mem_cgroup_charge+0x25/0x80 [ 997.731067][ T1422] shmem_add_to_page_cache+0x8d3/0x1b80 [ 997.736642][ T1422] ? xas_load+0x12b/0x140 [ 997.741015][ T1422] ? shmem_alloc_folio+0x2a0/0x2a0 [ 997.746159][ T1422] shmem_get_folio_gfp+0x1037/0x2b40 [ 997.751565][ T1422] shmem_fault+0x1b8/0x820 [ 997.756020][ T1422] ? zero_pipe_buf_get+0x10/0x10 [ 997.760984][ T1422] ? handle_mm_fault+0xe6/0x4a40 [ 997.765937][ T1422] ? __lock_acquire+0x7eb0/0x7eb0 [ 997.770978][ T1422] __do_fault+0x13b/0x4d0 [ 997.775321][ T1422] ? handle_mm_fault+0x3923/0x4a40 [ 997.780441][ T1422] ? handle_mm_fault+0xe6/0x4a40 [ 997.785390][ T1422] handle_mm_fault+0x393f/0x4a40 [ 997.790346][ T1422] ? handle_mm_fault+0xe6/0x4a40 [ 997.795296][ T1422] ? numa_migrate_prep+0x350/0x350 [ 997.800418][ T1422] ? follow_page_pte+0x6dd/0x1ae0 [ 997.805460][ T1422] ? pmd_lock+0x60/0x60 [ 997.809636][ T1422] __get_user_pages+0x604/0x1580 [ 997.814599][ T1422] ? populate_vma_page_range+0x380/0x380 [ 997.820255][ T1422] populate_vma_page_range+0x2c1/0x380 [ 997.825935][ T1422] ? fixup_user_fault+0x750/0x750 [ 997.831006][ T1422] ? down_read+0x1ac/0x2e0 [ 997.835642][ T1422] __mm_populate+0x260/0x390 [ 997.840430][ T1422] ? faultin_page_range+0x8a0/0x8a0 [ 997.846659][ T1422] ? up_write+0x1be/0x410 [ 997.851177][ T1422] vm_mmap_pgoff+0x2da/0x3f0 [ 997.855789][ T1422] ? account_locked_vm+0x200/0x200 [ 997.861525][ T1422] ? ksys_mmap_pgoff+0xf3/0x720 [ 997.866387][ T1422] ? __x64_sys_mmap+0x7a/0x130 [ 997.871168][ T1422] do_syscall_64+0x55/0xb0 [ 997.875599][ T1422] ? clear_bhb_loop+0x40/0x90 [ 997.880284][ T1422] ? clear_bhb_loop+0x40/0x90 [ 997.884972][ T1422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.890965][ T1422] RIP: 0033:0x7f466299f559 [ 997.895391][ T1422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.915033][ T1422] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 997.923461][ T1422] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 997.931471][ T1422] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 997.939464][ T1422] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 997.947444][ T1422] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 997.955420][ T1422] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 997.963424][ T1422] [ 997.967179][ T1422] memory: usage 307188kB, limit 307200kB, failcnt 7603 [ 997.974075][ T1422] memory+swap: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 997.982092][ T1422] kmem: usage 7360kB, limit 9007199254740988kB, failcnt 0 [ 997.990188][ T1422] Memory cgroup stats for /syz1: [ 997.990381][ T1422] cache 302034944 [ 997.999076][ T1422] rss 4988928 [ 998.002558][ T1422] rss_huge 0 [ 998.005930][ T1422] shmem 302002176 [ 998.009608][ T1422] mapped_file 8142848 [ 998.013622][ T1422] dirty 32768 [ 998.016986][ T1422] writeback 0 [ 998.020296][ T1422] workingset_refault_anon 1898 [ 998.025132][ T1422] workingset_refault_file 1752 [ 998.030534][ T1422] swap 0 [ 998.033415][ T1422] pgpgin 1560651 [ 998.037068][ T1422] pgpgout 1486205 [ 998.040793][ T1422] pgfault 985431 [ 998.044457][ T1422] pgmajfault 754 [ 998.048149][ T1422] inactive_anon 12042240 [ 998.052414][ T1422] active_anon 294948864 [ 998.056654][ T1422] inactive_file 32768 [ 998.060656][ T1422] active_file 0 [ 998.064133][ T1422] unevictable 0 [ 998.067698][ T1422] hierarchical_memory_limit 314572800 [ 998.073083][ T1422] hierarchical_memsw_limit 9223372036854771712 [ 998.079316][ T1422] total_cache 302034944 [ 998.083501][ T1422] total_rss 4988928 [ 998.087407][ T1422] total_rss_huge 0 [ 998.091430][ T1422] total_shmem 302002176 [ 998.095702][ T1422] total_mapped_file 8142848 [ 998.100279][ T1422] total_dirty 32768 [ 998.104153][ T1422] total_writeback 0 [ 998.108045][ T1422] total_workingset_refault_anon 1898 [ 998.113343][ T1422] total_workingset_refault_file 1752 [ 998.118791][ T1422] total_swap 0 [ 998.122178][ T1422] total_pgpgin 1560651 [ 998.126336][ T1422] total_pgpgout 1486205 [ 998.130516][ T1422] total_pgfault 985431 [ 998.134597][ T1422] total_pgmajfault 754 [ 998.138772][ T1422] total_inactive_anon 12042240 [ 998.143547][ T1422] total_active_anon 294948864 [ 998.148329][ T1422] total_inactive_file 32768 [ 998.152852][ T1422] total_active_file 0 [ 998.156891][ T1422] total_unevictable 0 [ 998.160884][ T1422] anon_cost 0 [ 998.164176][ T1422] file_cost 0 [ 998.167551][ T1422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2475,pid=1420,uid=0 [ 998.182714][ T1422] Memory cgroup out of memory: Killed process 1420 (syz.1.2475) total-vm:200580kB, anon-rss:1364kB, file-rss:21632kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 998.553690][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 998.845779][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 998.908857][ T1536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 998.965712][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.020372][ T1535] syz.1.2482 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 999.030337][ T1535] CPU: 0 PID: 1535 Comm: syz.1.2482 Not tainted syzkaller #0 [ 999.037747][ T1535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 999.047828][ T1535] Call Trace: [ 999.051119][ T1535] [ 999.054055][ T1535] dump_stack_lvl+0x18c/0x250 [ 999.058758][ T1535] ? show_regs_print_info+0x20/0x20 [ 999.064020][ T1535] ? load_image+0x420/0x420 [ 999.068625][ T1535] ? ___ratelimit+0x478/0x610 [ 999.073321][ T1535] ? radix_tree_cpu_dead+0x160/0x160 [ 999.078619][ T1535] dump_header+0xd8/0x820 [ 999.082966][ T1535] oom_kill_process+0x390/0x580 [ 999.087838][ T1535] out_of_memory+0xe0e/0x1200 [ 999.092540][ T1535] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 999.098188][ T1535] ? print_unlock_imbalance_bug+0x160/0x160 [ 999.104097][ T1535] ? mutex_lock_nested+0x20/0x20 [ 999.109060][ T1535] ? unregister_oom_notifier+0x20/0x20 [ 999.114540][ T1535] mem_cgroup_out_of_memory+0x2c2/0x390 [ 999.120102][ T1535] ? try_charge_memcg+0xc8c/0x17c0 [ 999.125221][ T1535] ? drain_local_stock+0x630/0x630 [ 999.130352][ T1535] ? do_raw_spin_unlock+0x121/0x230 [ 999.135657][ T1535] try_charge_memcg+0xc9c/0x17c0 [ 999.140710][ T1535] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 999.146537][ T1535] ? folio_flags+0x120/0x120 [ 999.151141][ T1535] ? shmem_alloc_folio+0x1f4/0x2a0 [ 999.156273][ T1535] ? percpu_ref_tryget+0x15/0x180 [ 999.161311][ T1535] ? get_mem_cgroup_from_mm+0x38/0x290 [ 999.166783][ T1535] charge_memcg+0x11b/0x3b0 [ 999.171302][ T1535] ? __mem_cgroup_charge+0x80/0x80 [ 999.176424][ T1535] ? get_mem_cgroup_from_mm+0x38/0x290 [ 999.181897][ T1535] ? get_mem_cgroup_from_mm+0x38/0x290 [ 999.187517][ T1535] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 999.193592][ T1535] __mem_cgroup_charge+0x25/0x80 [ 999.198566][ T1535] shmem_add_to_page_cache+0x8d3/0x1b80 [ 999.204131][ T1535] ? xas_load+0x12b/0x140 [ 999.208481][ T1535] ? shmem_alloc_folio+0x2a0/0x2a0 [ 999.213612][ T1535] shmem_get_folio_gfp+0x1037/0x2b40 [ 999.218931][ T1535] shmem_fault+0x1b8/0x820 [ 999.223412][ T1535] ? zero_pipe_buf_get+0x10/0x10 [ 999.228359][ T1535] ? handle_mm_fault+0xe6/0x4a40 [ 999.233304][ T1535] ? __lock_acquire+0x7eb0/0x7eb0 [ 999.238343][ T1535] __do_fault+0x13b/0x4d0 [ 999.242682][ T1535] ? handle_mm_fault+0x3923/0x4a40 [ 999.247801][ T1535] ? handle_mm_fault+0xe6/0x4a40 [ 999.252750][ T1535] handle_mm_fault+0x393f/0x4a40 [ 999.257707][ T1535] ? handle_mm_fault+0xe6/0x4a40 [ 999.262668][ T1535] ? numa_migrate_prep+0x350/0x350 [ 999.267784][ T1535] ? follow_page_pte+0x6dd/0x1ae0 [ 999.272826][ T1535] ? pmd_lock+0x60/0x60 [ 999.277001][ T1535] __get_user_pages+0x604/0x1580 [ 999.282014][ T1535] ? populate_vma_page_range+0x380/0x380 [ 999.287695][ T1535] populate_vma_page_range+0x2c1/0x380 [ 999.293193][ T1535] ? fixup_user_fault+0x750/0x750 [ 999.298243][ T1535] ? down_read+0x1ac/0x2e0 [ 999.302678][ T1535] __mm_populate+0x260/0x390 [ 999.307305][ T1535] ? faultin_page_range+0x8a0/0x8a0 [ 999.312543][ T1535] ? up_write+0x1be/0x410 [ 999.316887][ T1535] vm_mmap_pgoff+0x2da/0x3f0 [ 999.321499][ T1535] ? account_locked_vm+0x200/0x200 [ 999.326625][ T1535] ? ksys_mmap_pgoff+0xf3/0x720 [ 999.331591][ T1535] ? __x64_sys_mmap+0x7a/0x130 [ 999.336368][ T1535] do_syscall_64+0x55/0xb0 [ 999.340801][ T1535] ? clear_bhb_loop+0x40/0x90 [ 999.345499][ T1535] ? clear_bhb_loop+0x40/0x90 [ 999.350191][ T1535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.356101][ T1535] RIP: 0033:0x7f466299f559 [ 999.360536][ T1535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.380179][ T1535] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 999.388609][ T1535] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 999.396592][ T1535] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 999.404576][ T1535] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 999.412555][ T1535] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 999.420534][ T1535] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 999.428532][ T1535] [ 999.432566][ T1535] memory: usage 307188kB, limit 307200kB, failcnt 7624 [ 999.439526][ T1535] memory+swap: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 999.447509][ T1535] kmem: usage 7360kB, limit 9007199254740988kB, failcnt 0 [ 999.451227][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.454622][ T1535] Memory cgroup stats for /syz1: [ 999.454758][ T1535] cache 302030848 [ 999.470732][ T1535] rss 4993024 [ 999.474042][ T1535] rss_huge 0 [ 999.477540][ T1535] shmem 301998080 [ 999.481193][ T1535] mapped_file 8138752 [ 999.485186][ T1535] dirty 32768 [ 999.488539][ T1535] writeback 0 [ 999.491848][ T1535] workingset_refault_anon 1898 [ 999.496787][ T1535] workingset_refault_file 1752 [ 999.501572][ T1535] swap 0 [ 999.504462][ T1535] pgpgin 1562700 [ 999.508093][ T1535] pgpgout 1488254 [ 999.511753][ T1535] pgfault 987615 [ 999.515330][ T1535] pgmajfault 754 [ 999.518944][ T1535] inactive_anon 12042240 [ 999.523212][ T1535] active_anon 294948864 [ 999.527559][ T1535] inactive_file 32768 [ 999.531570][ T1535] active_file 0 [ 999.535064][ T1535] unevictable 0 [ 999.538590][ T1535] hierarchical_memory_limit 314572800 [ 999.543985][ T1535] hierarchical_memsw_limit 9223372036854771712 [ 999.550248][ T1535] total_cache 302030848 [ 999.554423][ T1535] total_rss 4993024 [ 999.558334][ T1535] total_rss_huge 0 [ 999.562079][ T1535] total_shmem 301998080 [ 999.566329][ T1535] total_mapped_file 8138752 [ 999.570854][ T1535] total_dirty 32768 [ 999.574689][ T1535] total_writeback 0 [ 999.578588][ T1535] total_workingset_refault_anon 1898 [ 999.583899][ T1535] total_workingset_refault_file 1752 [ 999.590781][ T1535] total_swap 0 [ 999.594495][ T1535] total_pgpgin 1562700 [ 999.598651][ T1535] total_pgpgout 1488254 [ 999.602922][ T1535] total_pgfault 987615 [ 999.607065][ T1535] total_pgmajfault 754 [ 999.611243][ T1535] total_inactive_anon 12042240 [ 999.616081][ T1535] total_active_anon 294948864 [ 999.620783][ T1535] total_inactive_file 32768 [ 999.625319][ T1535] total_active_file 0 [ 999.629381][ T1535] total_unevictable 0 [ 999.633378][ T1535] anon_cost 0 [ 999.636771][ T1535] file_cost 0 [ 999.640076][ T1535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2482,pid=1534,uid=0 [ 999.655225][ T1535] Memory cgroup out of memory: Killed process 1534 (syz.1.2482) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1000.660197][ T1652] syz.1.2487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1000.669931][ T1652] CPU: 1 PID: 1652 Comm: syz.1.2487 Not tainted syzkaller #0 [ 1000.677454][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1000.687551][ T1652] Call Trace: [ 1000.690909][ T1652] [ 1000.693876][ T1652] dump_stack_lvl+0x18c/0x250 [ 1000.698612][ T1652] ? show_regs_print_info+0x20/0x20 [ 1000.703872][ T1652] ? load_image+0x420/0x420 [ 1000.708427][ T1652] ? ___ratelimit+0x478/0x610 [ 1000.713364][ T1652] ? radix_tree_cpu_dead+0x160/0x160 [ 1000.718714][ T1652] dump_header+0xd8/0x820 [ 1000.723118][ T1652] oom_kill_process+0x390/0x580 [ 1000.728050][ T1652] out_of_memory+0xe0e/0x1200 [ 1000.732782][ T1652] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1000.738458][ T1652] ? print_unlock_imbalance_bug+0x160/0x160 [ 1000.744399][ T1652] ? mutex_lock_nested+0x20/0x20 [ 1000.749438][ T1652] ? unregister_oom_notifier+0x20/0x20 [ 1000.754942][ T1652] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1000.760511][ T1652] ? try_charge_memcg+0xc8c/0x17c0 [ 1000.765656][ T1652] ? drain_local_stock+0x630/0x630 [ 1000.770805][ T1652] ? do_raw_spin_unlock+0x121/0x230 [ 1000.776033][ T1652] try_charge_memcg+0xc9c/0x17c0 [ 1000.781004][ T1652] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1000.786831][ T1652] ? folio_flags+0x120/0x120 [ 1000.791428][ T1652] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1000.796556][ T1652] ? percpu_ref_tryget+0x15/0x180 [ 1000.801634][ T1652] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1000.807128][ T1652] charge_memcg+0x11b/0x3b0 [ 1000.811657][ T1652] ? __mem_cgroup_charge+0x80/0x80 [ 1000.816790][ T1652] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1000.822257][ T1652] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1000.827734][ T1652] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1000.833320][ T1652] __mem_cgroup_charge+0x25/0x80 [ 1000.838298][ T1652] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1000.843855][ T1652] ? xas_load+0x12b/0x140 [ 1000.848198][ T1652] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1000.853332][ T1652] shmem_get_folio_gfp+0x1037/0x2b40 [ 1000.858651][ T1652] shmem_fault+0x1b8/0x820 [ 1000.863087][ T1652] ? zero_pipe_buf_get+0x10/0x10 [ 1000.868033][ T1652] ? handle_mm_fault+0xe6/0x4a40 [ 1000.872978][ T1652] ? __lock_acquire+0x7eb0/0x7eb0 [ 1000.878018][ T1652] __do_fault+0x13b/0x4d0 [ 1000.882367][ T1652] ? handle_mm_fault+0x3923/0x4a40 [ 1000.887483][ T1652] ? handle_mm_fault+0xe6/0x4a40 [ 1000.892434][ T1652] handle_mm_fault+0x393f/0x4a40 [ 1000.897385][ T1652] ? handle_mm_fault+0xe6/0x4a40 [ 1000.902337][ T1652] ? numa_migrate_prep+0x350/0x350 [ 1000.907449][ T1652] ? follow_page_pte+0x6dd/0x1ae0 [ 1000.912487][ T1652] ? pmd_lock+0x60/0x60 [ 1000.916654][ T1652] __get_user_pages+0x604/0x1580 [ 1000.921620][ T1652] ? populate_vma_page_range+0x380/0x380 [ 1000.927274][ T1652] populate_vma_page_range+0x2c1/0x380 [ 1000.932755][ T1652] ? fixup_user_fault+0x750/0x750 [ 1000.937791][ T1652] ? __mm_populate+0x18d/0x390 [ 1000.942570][ T1652] __mm_populate+0x260/0x390 [ 1000.947169][ T1652] ? faultin_page_range+0x8a0/0x8a0 [ 1000.952383][ T1652] ? up_write+0x1be/0x410 [ 1000.956795][ T1652] vm_mmap_pgoff+0x2da/0x3f0 [ 1000.961421][ T1652] ? account_locked_vm+0x200/0x200 [ 1000.966557][ T1652] ? ksys_mmap_pgoff+0xf3/0x720 [ 1000.971417][ T1652] ? __x64_sys_mmap+0x7a/0x130 [ 1000.976193][ T1652] do_syscall_64+0x55/0xb0 [ 1000.980628][ T1652] ? clear_bhb_loop+0x40/0x90 [ 1000.985318][ T1652] ? clear_bhb_loop+0x40/0x90 [ 1000.990015][ T1652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.995938][ T1652] RIP: 0033:0x7f466299f559 [ 1001.000364][ T1652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.019998][ T1652] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1001.028435][ T1652] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1001.036419][ T1652] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 1001.044408][ T1652] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1001.052397][ T1652] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1001.060378][ T1652] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1001.068369][ T1652] [ 1001.072731][ T1652] memory: usage 307200kB, limit 307200kB, failcnt 7676 [ 1001.078622][ T49] net_ratelimit: 2 callbacks suppressed [ 1001.078641][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1001.082636][ T1652] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1001.101021][ T1652] kmem: usage 7364kB, limit 9007199254740988kB, failcnt 0 [ 1001.108277][ T1652] Memory cgroup stats for /syz1: [ 1001.108417][ T1652] cache 302039040 [ 1001.117061][ T1652] rss 4993024 [ 1001.120389][ T1652] rss_huge 0 [ 1001.123701][ T1652] shmem 302006272 [ 1001.127684][ T1652] mapped_file 8146944 [ 1001.131696][ T1652] dirty 32768 [ 1001.135057][ T1652] writeback 0 [ 1001.138555][ T1652] workingset_refault_anon 1898 [ 1001.143341][ T1652] workingset_refault_file 1752 [ 1001.148298][ T1652] swap 0 [ 1001.151171][ T1652] pgpgin 1564717 [ 1001.154819][ T1652] pgpgout 1490269 [ 1001.158722][ T1652] pgfault 989699 [ 1001.162286][ T1652] pgmajfault 754 [ 1001.167002][ T1652] inactive_anon 12042240 [ 1001.172206][ T1652] active_anon 294957056 [ 1001.177510][ T1652] inactive_file 32768 [ 1001.181576][ T1652] active_file 0 [ 1001.185058][ T1652] unevictable 0 [ 1001.188637][ T1652] hierarchical_memory_limit 314572800 [ 1001.194029][ T1652] hierarchical_memsw_limit 9223372036854771712 [ 1001.200299][ T1652] total_cache 302039040 [ 1001.204470][ T1652] total_rss 4993024 [ 1001.208359][ T1652] total_rss_huge 0 [ 1001.212102][ T1652] total_shmem 302006272 [ 1001.216305][ T1652] total_mapped_file 8146944 [ 1001.220824][ T1652] total_dirty 32768 [ 1001.222091][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1001.224708][ T1652] total_writeback 0 [ 1001.224719][ T1652] total_workingset_refault_anon 1898 [ 1001.241365][ T1652] total_workingset_refault_file 1752 [ 1001.246753][ T1652] total_swap 0 [ 1001.250137][ T1652] total_pgpgin 1564717 [ 1001.254222][ T1652] total_pgpgout 1490269 [ 1001.258479][ T1652] total_pgfault 989699 [ 1001.262572][ T1652] total_pgmajfault 754 [ 1001.266732][ T1652] total_inactive_anon 12042240 [ 1001.271604][ T1652] total_active_anon 294957056 [ 1001.276361][ T1652] total_inactive_file 32768 [ 1001.280887][ T1652] total_active_file 0 [ 1001.284888][ T1652] total_unevictable 0 [ 1001.289072][ T1652] anon_cost 0 [ 1001.292378][ T1652] file_cost 0 [ 1001.295752][ T1652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2487,pid=1627,uid=0 [ 1001.310998][ T1652] Memory cgroup out of memory: Killed process 1627 (syz.1.2487) total-vm:102272kB, anon-rss:1268kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1001.428410][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1002.075382][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1002.236924][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1002.389217][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1002.590026][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1002.609300][ T1927] syz.1.2495 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1002.619035][ T1927] CPU: 1 PID: 1927 Comm: syz.1.2495 Not tainted syzkaller #0 [ 1002.626530][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1002.636627][ T1927] Call Trace: [ 1002.639925][ T1927] [ 1002.642876][ T1927] dump_stack_lvl+0x18c/0x250 [ 1002.647602][ T1927] ? show_regs_print_info+0x20/0x20 [ 1002.652847][ T1927] ? load_image+0x420/0x420 [ 1002.657380][ T1927] ? ___ratelimit+0x478/0x610 [ 1002.662099][ T1927] ? radix_tree_cpu_dead+0x160/0x160 [ 1002.667458][ T1927] dump_header+0xd8/0x820 [ 1002.671864][ T1927] oom_kill_process+0x390/0x580 [ 1002.676836][ T1927] out_of_memory+0xe0e/0x1200 [ 1002.681576][ T1927] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1002.687265][ T1927] ? print_unlock_imbalance_bug+0x160/0x160 [ 1002.693209][ T1927] ? mutex_lock_nested+0x20/0x20 [ 1002.698195][ T1927] ? unregister_oom_notifier+0x20/0x20 [ 1002.703714][ T1927] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1002.709309][ T1927] ? try_charge_memcg+0xc8c/0x17c0 [ 1002.714466][ T1927] ? drain_local_stock+0x630/0x630 [ 1002.719629][ T1927] ? do_raw_spin_unlock+0x121/0x230 [ 1002.724896][ T1927] try_charge_memcg+0xc9c/0x17c0 [ 1002.729932][ T1927] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1002.735791][ T1927] ? folio_flags+0x120/0x120 [ 1002.740429][ T1927] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1002.745589][ T1927] ? percpu_ref_tryget+0x15/0x180 [ 1002.750647][ T1927] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1002.756141][ T1927] charge_memcg+0x11b/0x3b0 [ 1002.760681][ T1927] ? __mem_cgroup_charge+0x80/0x80 [ 1002.765826][ T1927] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1002.771319][ T1927] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1002.776823][ T1927] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1002.782434][ T1927] __mem_cgroup_charge+0x25/0x80 [ 1002.787423][ T1927] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1002.793000][ T1927] ? xas_load+0x12b/0x140 [ 1002.797372][ T1927] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1002.802535][ T1927] shmem_get_folio_gfp+0x1037/0x2b40 [ 1002.807897][ T1927] shmem_fault+0x1b8/0x820 [ 1002.812399][ T1927] ? zero_pipe_buf_get+0x10/0x10 [ 1002.817368][ T1927] ? handle_mm_fault+0xe6/0x4a40 [ 1002.822336][ T1927] ? __lock_acquire+0x7eb0/0x7eb0 [ 1002.827401][ T1927] __do_fault+0x13b/0x4d0 [ 1002.831756][ T1927] ? handle_mm_fault+0x3923/0x4a40 [ 1002.836916][ T1927] ? handle_mm_fault+0xe6/0x4a40 [ 1002.841896][ T1927] handle_mm_fault+0x393f/0x4a40 [ 1002.846894][ T1927] ? handle_mm_fault+0xe6/0x4a40 [ 1002.851944][ T1927] ? numa_migrate_prep+0x350/0x350 [ 1002.857094][ T1927] ? follow_page_pte+0x6dd/0x1ae0 [ 1002.862165][ T1927] ? pmd_lock+0x60/0x60 [ 1002.866373][ T1927] __get_user_pages+0x604/0x1580 [ 1002.871458][ T1927] ? populate_vma_page_range+0x380/0x380 [ 1002.877203][ T1927] populate_vma_page_range+0x2c1/0x380 [ 1002.882706][ T1927] ? fixup_user_fault+0x750/0x750 [ 1002.887789][ T1927] ? down_read+0x1ac/0x2e0 [ 1002.892287][ T1927] __mm_populate+0x260/0x390 [ 1002.896927][ T1927] ? faultin_page_range+0x8a0/0x8a0 [ 1002.902154][ T1927] ? up_write+0x1be/0x410 [ 1002.906539][ T1927] vm_mmap_pgoff+0x2da/0x3f0 [ 1002.911155][ T1927] ? account_locked_vm+0x200/0x200 [ 1002.916294][ T1927] ? ksys_mmap_pgoff+0xf3/0x720 [ 1002.921155][ T1927] ? __x64_sys_mmap+0x7a/0x130 [ 1002.925928][ T1927] do_syscall_64+0x55/0xb0 [ 1002.930356][ T1927] ? clear_bhb_loop+0x40/0x90 [ 1002.935077][ T1927] ? clear_bhb_loop+0x40/0x90 [ 1002.939777][ T1927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.945694][ T1927] RIP: 0033:0x7f466299f559 [ 1002.950132][ T1927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.969838][ T1927] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1002.978264][ T1927] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1002.986259][ T1927] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 1002.994342][ T1927] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1003.002384][ T1927] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1003.010372][ T1927] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1003.018377][ T1927] [ 1003.022153][ T1927] memory: usage 307200kB, limit 307200kB, failcnt 7738 [ 1003.029475][ T1927] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1003.037497][ T1927] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 1003.044734][ T1927] Memory cgroup stats for /syz1: [ 1003.044890][ T1927] cache 302047232 [ 1003.053608][ T1927] rss 4993024 [ 1003.057049][ T1927] rss_huge 0 [ 1003.060280][ T1927] shmem 302014464 [ 1003.063931][ T1927] mapped_file 8155136 [ 1003.067991][ T1927] dirty 32768 [ 1003.071299][ T1927] writeback 0 [ 1003.074599][ T1927] workingset_refault_anon 1898 [ 1003.079735][ T1927] workingset_refault_file 1752 [ 1003.084522][ T1927] swap 0 [ 1003.087485][ T1927] pgpgin 1566873 [ 1003.091189][ T1927] pgpgout 1492423 [ 1003.094839][ T1927] pgfault 992048 [ 1003.098456][ T1927] pgmajfault 754 [ 1003.102020][ T1927] inactive_anon 286683136 [ 1003.106421][ T1927] active_anon 20324352 [ 1003.110504][ T1927] inactive_file 32768 [ 1003.114499][ T1927] active_file 0 [ 1003.118120][ T1927] unevictable 0 [ 1003.121600][ T1927] hierarchical_memory_limit 314572800 [ 1003.127046][ T1927] hierarchical_memsw_limit 9223372036854771712 [ 1003.133221][ T1927] total_cache 302047232 [ 1003.137521][ T1927] total_rss 4993024 [ 1003.141447][ T1927] total_rss_huge 0 [ 1003.145190][ T1927] total_shmem 302014464 [ 1003.149995][ T1927] total_mapped_file 8155136 [ 1003.155378][ T1927] total_dirty 32768 [ 1003.160567][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1003.171092][ T1927] total_writeback 0 [ 1003.175021][ T1927] total_workingset_refault_anon 1898 [ 1003.180406][ T1927] total_workingset_refault_file 1752 [ 1003.185809][ T1927] total_swap 0 [ 1003.189211][ T1927] total_pgpgin 1566873 [ 1003.193359][ T1927] total_pgpgout 1492423 [ 1003.197656][ T1927] total_pgfault 992048 [ 1003.201747][ T1927] total_pgmajfault 754 [ 1003.205893][ T1927] total_inactive_anon 286683136 [ 1003.210849][ T1927] total_active_anon 20324352 [ 1003.215464][ T1927] total_inactive_file 32768 [ 1003.220101][ T1927] total_active_file 0 [ 1003.224110][ T1927] total_unevictable 0 [ 1003.228170][ T1927] anon_cost 0 [ 1003.231476][ T1927] file_cost 0 [ 1003.234779][ T1927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2495,pid=1919,uid=0 [ 1003.250396][ T1927] Memory cgroup out of memory: Killed process 1919 (syz.1.2495) total-vm:102272kB, anon-rss:1364kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1003.349730][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1003.546435][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1004.295418][ T2187] syz.1.2500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1004.305141][ T2187] CPU: 1 PID: 2187 Comm: syz.1.2500 Not tainted syzkaller #0 [ 1004.312556][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1004.322644][ T2187] Call Trace: [ 1004.325950][ T2187] [ 1004.328906][ T2187] dump_stack_lvl+0x18c/0x250 [ 1004.333630][ T2187] ? show_regs_print_info+0x20/0x20 [ 1004.338872][ T2187] ? load_image+0x420/0x420 [ 1004.343402][ T2187] ? ___ratelimit+0x478/0x610 [ 1004.348110][ T2187] ? radix_tree_cpu_dead+0x160/0x160 [ 1004.353518][ T2187] dump_header+0xd8/0x820 [ 1004.357899][ T2187] oom_kill_process+0x390/0x580 [ 1004.362795][ T2187] out_of_memory+0xe0e/0x1200 [ 1004.367511][ T2187] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1004.373187][ T2187] ? print_unlock_imbalance_bug+0x160/0x160 [ 1004.379113][ T2187] ? mutex_lock_nested+0x20/0x20 [ 1004.384083][ T2187] ? unregister_oom_notifier+0x20/0x20 [ 1004.389590][ T2187] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1004.395188][ T2187] ? try_charge_memcg+0xc8c/0x17c0 [ 1004.400360][ T2187] ? drain_local_stock+0x630/0x630 [ 1004.405542][ T2187] ? do_raw_spin_unlock+0x121/0x230 [ 1004.410784][ T2187] try_charge_memcg+0xc9c/0x17c0 [ 1004.415777][ T2187] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1004.421630][ T2187] ? folio_flags+0x120/0x120 [ 1004.426309][ T2187] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1004.431483][ T2187] ? percpu_ref_tryget+0x15/0x180 [ 1004.436547][ T2187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1004.442054][ T2187] charge_memcg+0x11b/0x3b0 [ 1004.446611][ T2187] ? __mem_cgroup_charge+0x80/0x80 [ 1004.451764][ T2187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1004.457287][ T2187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1004.462799][ T2187] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1004.468389][ T2187] __mem_cgroup_charge+0x25/0x80 [ 1004.473371][ T2187] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1004.478946][ T2187] ? xas_load+0x12b/0x140 [ 1004.483333][ T2187] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1004.488544][ T2187] shmem_get_folio_gfp+0x1037/0x2b40 [ 1004.493897][ T2187] shmem_fault+0x1b8/0x820 [ 1004.498343][ T2187] ? zero_pipe_buf_get+0x10/0x10 [ 1004.503296][ T2187] ? handle_mm_fault+0xe6/0x4a40 [ 1004.508243][ T2187] ? __lock_acquire+0x7eb0/0x7eb0 [ 1004.513288][ T2187] __do_fault+0x13b/0x4d0 [ 1004.517621][ T2187] ? handle_mm_fault+0x3923/0x4a40 [ 1004.522755][ T2187] ? handle_mm_fault+0xe6/0x4a40 [ 1004.527698][ T2187] handle_mm_fault+0x393f/0x4a40 [ 1004.532650][ T2187] ? handle_mm_fault+0xe6/0x4a40 [ 1004.537601][ T2187] ? numa_migrate_prep+0x350/0x350 [ 1004.542719][ T2187] ? follow_page_pte+0x6dd/0x1ae0 [ 1004.547761][ T2187] ? pmd_lock+0x60/0x60 [ 1004.551934][ T2187] __get_user_pages+0x604/0x1580 [ 1004.556898][ T2187] ? populate_vma_page_range+0x380/0x380 [ 1004.562551][ T2187] populate_vma_page_range+0x2c1/0x380 [ 1004.568019][ T2187] ? fixup_user_fault+0x750/0x750 [ 1004.573055][ T2187] ? down_read+0x1ac/0x2e0 [ 1004.577483][ T2187] __mm_populate+0x260/0x390 [ 1004.582094][ T2187] ? faultin_page_range+0x8a0/0x8a0 [ 1004.587302][ T2187] ? up_write+0x1be/0x410 [ 1004.591639][ T2187] vm_mmap_pgoff+0x2da/0x3f0 [ 1004.596243][ T2187] ? account_locked_vm+0x200/0x200 [ 1004.601364][ T2187] ? ksys_mmap_pgoff+0xf3/0x720 [ 1004.606226][ T2187] ? __x64_sys_mmap+0x7a/0x130 [ 1004.610999][ T2187] do_syscall_64+0x55/0xb0 [ 1004.615424][ T2187] ? clear_bhb_loop+0x40/0x90 [ 1004.620135][ T2187] ? clear_bhb_loop+0x40/0x90 [ 1004.624825][ T2187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.630727][ T2187] RIP: 0033:0x7f466299f559 [ 1004.635238][ T2187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.655024][ T2187] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1004.663445][ T2187] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1004.671449][ T2187] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 1004.679434][ T2187] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1004.687530][ T2187] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1004.695510][ T2187] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1004.703502][ T2187] [ 1004.707192][ T2187] memory: usage 307200kB, limit 307200kB, failcnt 7807 [ 1004.714090][ T2187] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1004.722237][ T2187] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 1004.729464][ T2187] Memory cgroup stats for /syz1: [ 1004.729622][ T2187] cache 302043136 [ 1004.738277][ T2187] rss 4993024 [ 1004.741590][ T2187] rss_huge 0 [ 1004.744812][ T2187] shmem 302010368 [ 1004.748610][ T2187] mapped_file 8151040 [ 1004.752617][ T2187] dirty 32768 [ 1004.755966][ T2187] writeback 0 [ 1004.759263][ T2187] workingset_refault_anon 1898 [ 1004.764043][ T2187] workingset_refault_file 1752 [ 1004.768928][ T2187] swap 0 [ 1004.771791][ T2187] pgpgin 1568925 [ 1004.775350][ T2187] pgpgout 1494476 [ 1004.779050][ T2187] pgfault 994243 [ 1004.782610][ T2187] pgmajfault 754 [ 1004.786253][ T2187] inactive_anon 12042240 [ 1004.790504][ T2187] active_anon 294961152 [ 1004.794668][ T2187] inactive_file 32768 [ 1004.798724][ T2187] active_file 0 [ 1004.802194][ T2187] unevictable 0 [ 1004.805758][ T2187] hierarchical_memory_limit 314572800 [ 1004.811231][ T2187] hierarchical_memsw_limit 9223372036854771712 [ 1004.817460][ T2187] total_cache 302043136 [ 1004.821627][ T2187] total_rss 4993024 [ 1004.825446][ T2187] total_rss_huge 0 [ 1004.829255][ T2187] total_shmem 302010368 [ 1004.833422][ T2187] total_mapped_file 8151040 [ 1004.838016][ T2187] total_dirty 32768 [ 1004.841843][ T2187] total_writeback 0 [ 1004.845761][ T2187] total_workingset_refault_anon 1898 [ 1004.851064][ T2187] total_workingset_refault_file 1752 [ 1004.856436][ T2187] total_swap 0 [ 1004.859845][ T2187] total_pgpgin 1568925 [ 1004.863992][ T2187] total_pgpgout 1494476 [ 1004.868271][ T2187] total_pgfault 994243 [ 1004.872753][ T2187] total_pgmajfault 754 [ 1004.877497][ T2187] total_inactive_anon 12042240 [ 1004.882287][ T2187] total_active_anon 294961152 [ 1004.887080][ T2187] total_inactive_file 32768 [ 1004.891614][ T2187] total_active_file 0 [ 1004.895718][ T2187] total_unevictable 0 [ 1004.899723][ T2187] anon_cost 0 [ 1004.903024][ T2187] file_cost 0 [ 1004.906450][ T2187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2500,pid=2185,uid=0 [ 1004.921678][ T2187] Memory cgroup out of memory: Killed process 2185 (syz.1.2500) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1005.719832][ T2308] syz.1.2511 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1005.729539][ T2308] CPU: 0 PID: 2308 Comm: syz.1.2511 Not tainted syzkaller #0 [ 1005.736943][ T2308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1005.747024][ T2308] Call Trace: [ 1005.750321][ T2308] [ 1005.753266][ T2308] dump_stack_lvl+0x18c/0x250 [ 1005.758081][ T2308] ? show_regs_print_info+0x20/0x20 [ 1005.763322][ T2308] ? load_image+0x420/0x420 [ 1005.767853][ T2308] ? ___ratelimit+0x478/0x610 [ 1005.772572][ T2308] ? radix_tree_cpu_dead+0x160/0x160 [ 1005.777908][ T2308] dump_header+0xd8/0x820 [ 1005.782286][ T2308] oom_kill_process+0x390/0x580 [ 1005.787184][ T2308] out_of_memory+0xe0e/0x1200 [ 1005.791909][ T2308] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1005.797592][ T2308] ? print_unlock_imbalance_bug+0x160/0x160 [ 1005.803541][ T2308] ? mutex_lock_nested+0x20/0x20 [ 1005.808512][ T2308] ? unregister_oom_notifier+0x20/0x20 [ 1005.814084][ T2308] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1005.819757][ T2308] ? try_charge_memcg+0xc8c/0x17c0 [ 1005.824994][ T2308] ? drain_local_stock+0x630/0x630 [ 1005.830152][ T2308] ? do_raw_spin_unlock+0x121/0x230 [ 1005.835570][ T2308] try_charge_memcg+0xc9c/0x17c0 [ 1005.840572][ T2308] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1005.846434][ T2308] ? folio_flags+0x120/0x120 [ 1005.851056][ T2308] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1005.856198][ T2308] ? percpu_ref_tryget+0x15/0x180 [ 1005.861236][ T2308] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1005.866702][ T2308] charge_memcg+0x11b/0x3b0 [ 1005.871215][ T2308] ? __mem_cgroup_charge+0x80/0x80 [ 1005.876340][ T2308] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1005.881807][ T2308] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1005.887269][ T2308] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1005.892818][ T2308] __mem_cgroup_charge+0x25/0x80 [ 1005.897763][ T2308] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1005.903314][ T2308] ? xas_load+0x12b/0x140 [ 1005.907662][ T2308] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1005.912789][ T2308] shmem_get_folio_gfp+0x1037/0x2b40 [ 1005.918104][ T2308] shmem_fault+0x1b8/0x820 [ 1005.922532][ T2308] ? zero_pipe_buf_get+0x10/0x10 [ 1005.927473][ T2308] ? handle_mm_fault+0xe6/0x4a40 [ 1005.932409][ T2308] ? __lock_acquire+0x7eb0/0x7eb0 [ 1005.937441][ T2308] __do_fault+0x13b/0x4d0 [ 1005.941792][ T2308] ? handle_mm_fault+0x3923/0x4a40 [ 1005.946907][ T2308] ? handle_mm_fault+0xe6/0x4a40 [ 1005.951844][ T2308] handle_mm_fault+0x393f/0x4a40 [ 1005.956873][ T2308] ? handle_mm_fault+0xe6/0x4a40 [ 1005.961825][ T2308] ? numa_migrate_prep+0x350/0x350 [ 1005.966939][ T2308] ? follow_page_pte+0x6dd/0x1ae0 [ 1005.971976][ T2308] ? pmd_lock+0x60/0x60 [ 1005.976142][ T2308] __get_user_pages+0x604/0x1580 [ 1005.981203][ T2308] ? populate_vma_page_range+0x380/0x380 [ 1005.986851][ T2308] populate_vma_page_range+0x2c1/0x380 [ 1005.992405][ T2308] ? fixup_user_fault+0x750/0x750 [ 1005.997437][ T2308] ? down_read+0x1ac/0x2e0 [ 1006.001863][ T2308] __mm_populate+0x260/0x390 [ 1006.006459][ T2308] ? faultin_page_range+0x8a0/0x8a0 [ 1006.011662][ T2308] ? up_write+0x1be/0x410 [ 1006.016065][ T2308] vm_mmap_pgoff+0x2da/0x3f0 [ 1006.020668][ T2308] ? account_locked_vm+0x200/0x200 [ 1006.025796][ T2308] ? ksys_mmap_pgoff+0xf3/0x720 [ 1006.030659][ T2308] ? __x64_sys_mmap+0x7a/0x130 [ 1006.035424][ T2308] do_syscall_64+0x55/0xb0 [ 1006.039845][ T2308] ? clear_bhb_loop+0x40/0x90 [ 1006.044524][ T2308] ? clear_bhb_loop+0x40/0x90 [ 1006.049247][ T2308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.055231][ T2308] RIP: 0033:0x7f466299f559 [ 1006.059649][ T2308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.079261][ T2308] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1006.087695][ T2308] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1006.095665][ T2308] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1006.103651][ T2308] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1006.111623][ T2308] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1006.119607][ T2308] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1006.127594][ T2308] [ 1006.131577][ T2308] memory: usage 307200kB, limit 307200kB, failcnt 7940 [ 1006.132793][ T66] net_ratelimit: 14 callbacks suppressed [ 1006.133176][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1006.138821][ T2308] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1006.159845][ T2308] kmem: usage 7356kB, limit 9007199254740988kB, failcnt 0 [ 1006.167022][ T2308] Memory cgroup stats for /syz1: [ 1006.167175][ T2308] cache 302043136 [ 1006.175832][ T2308] rss 4988928 [ 1006.179143][ T2308] rss_huge 0 [ 1006.182358][ T2308] shmem 301965312 [ 1006.186051][ T2308] mapped_file 8151040 [ 1006.190043][ T2308] dirty 77824 [ 1006.193339][ T2308] writeback 0 [ 1006.196746][ T2308] workingset_refault_anon 1898 [ 1006.201523][ T2308] workingset_refault_file 1831 [ 1006.206356][ T2308] swap 0 [ 1006.209217][ T2308] pgpgin 1571218 [ 1006.212768][ T2308] pgpgout 1496770 [ 1006.216462][ T2308] pgfault 996733 [ 1006.220018][ T2308] pgmajfault 755 [ 1006.223571][ T2308] inactive_anon 294649856 [ 1006.227969][ T2308] active_anon 12304384 [ 1006.232048][ T2308] inactive_file 0 [ 1006.235741][ T2308] active_file 77824 [ 1006.239566][ T2308] unevictable 0 [ 1006.243034][ T2308] hierarchical_memory_limit 314572800 [ 1006.248463][ T2308] hierarchical_memsw_limit 9223372036854771712 [ 1006.254632][ T2308] total_cache 302043136 [ 1006.258931][ T2308] total_rss 4988928 [ 1006.262752][ T2308] total_rss_huge 0 [ 1006.266519][ T2308] total_shmem 301965312 [ 1006.270692][ T2308] total_mapped_file 8151040 [ 1006.273503][T29009] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1006.275183][ T2308] total_dirty 77824 [ 1006.275194][ T2308] total_writeback 0 [ 1006.275202][ T2308] total_workingset_refault_anon 1898 [ 1006.275211][ T2308] total_workingset_refault_file 1831 [ 1006.301342][ T2308] total_swap 0 [ 1006.304733][ T2308] total_pgpgin 1571218 [ 1006.308896][ T2308] total_pgpgout 1496770 [ 1006.313072][ T2308] total_pgfault 996733 [ 1006.317218][ T2308] total_pgmajfault 755 [ 1006.321312][ T2308] total_inactive_anon 294649856 [ 1006.326248][ T2308] total_active_anon 12304384 [ 1006.330865][ T2308] total_inactive_file 0 [ 1006.335040][ T2308] total_active_file 77824 [ 1006.339478][ T2308] total_unevictable 0 [ 1006.343480][ T2308] anon_cost 0 [ 1006.347084][ T2308] file_cost 0 [ 1006.350412][ T2308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2511,pid=2307,uid=0 [ 1006.365617][ T2308] Memory cgroup out of memory: Killed process 2307 (syz.1.2511) total-vm:102272kB, anon-rss:1396kB, file-rss:22656kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1006.420334][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1006.776500][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1006.820429][ T2429] syz.1.2514 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1006.830201][ T2429] CPU: 1 PID: 2429 Comm: syz.1.2514 Not tainted syzkaller #0 [ 1006.837589][ T2429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1006.847682][ T2429] Call Trace: [ 1006.851002][ T2429] [ 1006.853932][ T2429] dump_stack_lvl+0x18c/0x250 [ 1006.858621][ T2429] ? show_regs_print_info+0x20/0x20 [ 1006.863852][ T2429] ? load_image+0x420/0x420 [ 1006.868374][ T2429] ? ___ratelimit+0x478/0x610 [ 1006.873069][ T2429] ? radix_tree_cpu_dead+0x160/0x160 [ 1006.878357][ T2429] dump_header+0xd8/0x820 [ 1006.882703][ T2429] oom_kill_process+0x390/0x580 [ 1006.887586][ T2429] out_of_memory+0xe0e/0x1200 [ 1006.892301][ T2429] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1006.897953][ T2429] ? print_unlock_imbalance_bug+0x160/0x160 [ 1006.903854][ T2429] ? mutex_lock_nested+0x20/0x20 [ 1006.908802][ T2429] ? unregister_oom_notifier+0x20/0x20 [ 1006.914279][ T2429] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1006.919837][ T2429] ? try_charge_memcg+0xc8c/0x17c0 [ 1006.924955][ T2429] ? drain_local_stock+0x630/0x630 [ 1006.930106][ T2429] ? do_raw_spin_unlock+0x121/0x230 [ 1006.935331][ T2429] try_charge_memcg+0xc9c/0x17c0 [ 1006.940346][ T2429] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1006.946173][ T2429] ? folio_flags+0x120/0x120 [ 1006.950770][ T2429] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1006.955900][ T2429] ? percpu_ref_tryget+0x15/0x180 [ 1006.960933][ T2429] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1006.966399][ T2429] charge_memcg+0x11b/0x3b0 [ 1006.970913][ T2429] ? __mem_cgroup_charge+0x80/0x80 [ 1006.976032][ T2429] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1006.981493][ T2429] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1006.987137][ T2429] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1006.992689][ T2429] __mem_cgroup_charge+0x25/0x80 [ 1006.997639][ T2429] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1007.003296][ T2429] ? xas_load+0x12b/0x140 [ 1007.007660][ T2429] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1007.012897][ T2429] shmem_get_folio_gfp+0x1037/0x2b40 [ 1007.018209][ T2429] shmem_fault+0x1b8/0x820 [ 1007.022642][ T2429] ? zero_pipe_buf_get+0x10/0x10 [ 1007.027593][ T2429] ? handle_mm_fault+0xe6/0x4a40 [ 1007.032540][ T2429] ? __lock_acquire+0x7eb0/0x7eb0 [ 1007.037578][ T2429] __do_fault+0x13b/0x4d0 [ 1007.041914][ T2429] ? handle_mm_fault+0x3923/0x4a40 [ 1007.047043][ T2429] ? handle_mm_fault+0xe6/0x4a40 [ 1007.051985][ T2429] handle_mm_fault+0x393f/0x4a40 [ 1007.056932][ T2429] ? handle_mm_fault+0xe6/0x4a40 [ 1007.061881][ T2429] ? numa_migrate_prep+0x350/0x350 [ 1007.066993][ T2429] ? follow_page_pte+0x6dd/0x1ae0 [ 1007.072026][ T2429] ? pmd_lock+0x60/0x60 [ 1007.076192][ T2429] __get_user_pages+0x604/0x1580 [ 1007.081240][ T2429] ? populate_vma_page_range+0x380/0x380 [ 1007.086885][ T2429] populate_vma_page_range+0x2c1/0x380 [ 1007.092357][ T2429] ? fixup_user_fault+0x750/0x750 [ 1007.097411][ T2429] ? down_read+0x1ac/0x2e0 [ 1007.101830][ T2429] __mm_populate+0x260/0x390 [ 1007.106450][ T2429] ? faultin_page_range+0x8a0/0x8a0 [ 1007.112034][ T2429] ? up_write+0x1be/0x410 [ 1007.116392][ T2429] vm_mmap_pgoff+0x2da/0x3f0 [ 1007.121008][ T2429] ? account_locked_vm+0x200/0x200 [ 1007.126134][ T2429] ? ksys_mmap_pgoff+0xf3/0x720 [ 1007.131007][ T2429] ? __x64_sys_mmap+0x7a/0x130 [ 1007.135784][ T2429] do_syscall_64+0x55/0xb0 [ 1007.140236][ T2429] ? clear_bhb_loop+0x40/0x90 [ 1007.144944][ T2429] ? clear_bhb_loop+0x40/0x90 [ 1007.149636][ T2429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.155630][ T2429] RIP: 0033:0x7f466299f559 [ 1007.160060][ T2429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.179674][ T2429] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1007.188095][ T2429] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1007.196156][ T2429] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 1007.204137][ T2429] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1007.212115][ T2429] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1007.220087][ T2429] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1007.228094][ T2429] [ 1007.231929][ T2429] memory: usage 307200kB, limit 307200kB, failcnt 7972 [ 1007.239044][ T2429] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1007.247058][ T2429] kmem: usage 7364kB, limit 9007199254740988kB, failcnt 0 [ 1007.254199][ T2429] Memory cgroup stats for /syz1: [ 1007.254353][ T2429] cache 302026752 [ 1007.263011][ T2429] rss 4993024 [ 1007.266368][ T2429] rss_huge 0 [ 1007.269590][ T2429] shmem 301948928 [ 1007.273241][ T2429] mapped_file 8134656 [ 1007.277291][ T2429] dirty 77824 [ 1007.280615][ T2429] writeback 0 [ 1007.284004][ T2429] workingset_refault_anon 1898 [ 1007.289007][ T2429] workingset_refault_file 1831 [ 1007.293799][ T2429] swap 0 [ 1007.296745][ T2429] pgpgin 1573221 [ 1007.300332][ T2429] pgpgout 1498776 [ 1007.304071][ T2429] pgfault 998803 [ 1007.307725][ T2429] pgmajfault 755 [ 1007.311382][ T2429] inactive_anon 20238336 [ 1007.315982][ T2429] active_anon 286703616 [ 1007.320160][ T2429] inactive_file 0 [ 1007.323873][ T2429] active_file 77824 [ 1007.327786][ T2429] unevictable 0 [ 1007.331261][ T2429] hierarchical_memory_limit 314572800 [ 1007.336751][ T2429] hierarchical_memsw_limit 9223372036854771712 [ 1007.342927][ T2429] total_cache 302026752 [ 1007.347210][ T2429] total_rss 4993024 [ 1007.351458][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.359028][ T2429] total_rss_huge 0 [ 1007.362780][ T2429] total_shmem 301948928 [ 1007.367078][ T2429] total_mapped_file 8134656 [ 1007.371616][ T2429] total_dirty 77824 [ 1007.375449][ T2429] total_writeback 0 [ 1007.379362][ T2429] total_workingset_refault_anon 1898 [ 1007.384676][ T2429] total_workingset_refault_file 1831 [ 1007.390077][ T2429] total_swap 0 [ 1007.393538][ T2429] total_pgpgin 1573221 [ 1007.397893][ T2429] total_pgpgout 1498776 [ 1007.402083][ T2429] total_pgfault 998803 [ 1007.406270][ T2429] total_pgmajfault 755 [ 1007.410509][ T2429] total_inactive_anon 20238336 [ 1007.415854][ T2429] total_active_anon 286703616 [ 1007.421116][ T2429] total_inactive_file 0 [ 1007.425316][ T2429] total_active_file 77824 [ 1007.429781][ T2429] total_unevictable 0 [ 1007.433808][ T2429] anon_cost 0 [ 1007.437770][ T2429] file_cost 0 [ 1007.441433][ T2429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2514,pid=2426,uid=0 [ 1007.456653][ T2429] Memory cgroup out of memory: Killed process 2426 (syz.1.2514) total-vm:102272kB, anon-rss:1268kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1007.500231][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.816140][ T2565] syz.1.2521 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1007.825825][ T2565] CPU: 0 PID: 2565 Comm: syz.1.2521 Not tainted syzkaller #0 [ 1007.833237][ T2565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1007.843322][ T2565] Call Trace: [ 1007.846625][ T2565] [ 1007.849583][ T2565] dump_stack_lvl+0x18c/0x250 [ 1007.854306][ T2565] ? show_regs_print_info+0x20/0x20 [ 1007.859552][ T2565] ? load_image+0x420/0x420 [ 1007.864089][ T2565] ? ___ratelimit+0x478/0x610 [ 1007.868807][ T2565] ? radix_tree_cpu_dead+0x160/0x160 [ 1007.874124][ T2565] dump_header+0xd8/0x820 [ 1007.878492][ T2565] oom_kill_process+0x390/0x580 [ 1007.883391][ T2565] out_of_memory+0xe0e/0x1200 [ 1007.888154][ T2565] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1007.893829][ T2565] ? print_unlock_imbalance_bug+0x160/0x160 [ 1007.899757][ T2565] ? mutex_lock_nested+0x20/0x20 [ 1007.904733][ T2565] ? unregister_oom_notifier+0x20/0x20 [ 1007.910251][ T2565] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1007.915835][ T2565] ? try_charge_memcg+0xc8c/0x17c0 [ 1007.920982][ T2565] ? drain_local_stock+0x630/0x630 [ 1007.926153][ T2565] ? do_raw_spin_unlock+0x121/0x230 [ 1007.931396][ T2565] try_charge_memcg+0xc9c/0x17c0 [ 1007.936383][ T2565] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1007.942238][ T2565] ? folio_flags+0x120/0x120 [ 1007.946866][ T2565] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1007.952027][ T2565] ? percpu_ref_tryget+0x15/0x180 [ 1007.957087][ T2565] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1007.962581][ T2565] charge_memcg+0x11b/0x3b0 [ 1007.967129][ T2565] ? __mem_cgroup_charge+0x80/0x80 [ 1007.972281][ T2565] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1007.977768][ T2565] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1007.983248][ T2565] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1007.988808][ T2565] __mem_cgroup_charge+0x25/0x80 [ 1007.993759][ T2565] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1007.999313][ T2565] ? xas_load+0x12b/0x140 [ 1008.003681][ T2565] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1008.008849][ T2565] shmem_get_folio_gfp+0x1037/0x2b40 [ 1008.014198][ T2565] shmem_fault+0x1b8/0x820 [ 1008.018668][ T2565] ? zero_pipe_buf_get+0x10/0x10 [ 1008.023627][ T2565] ? handle_mm_fault+0xe6/0x4a40 [ 1008.028580][ T2565] ? __lock_acquire+0x7eb0/0x7eb0 [ 1008.033616][ T2565] __do_fault+0x13b/0x4d0 [ 1008.037960][ T2565] ? handle_mm_fault+0x3923/0x4a40 [ 1008.043157][ T2565] ? handle_mm_fault+0xe6/0x4a40 [ 1008.048115][ T2565] handle_mm_fault+0x393f/0x4a40 [ 1008.053066][ T2565] ? handle_mm_fault+0xe6/0x4a40 [ 1008.058022][ T2565] ? numa_migrate_prep+0x350/0x350 [ 1008.063148][ T2565] ? follow_page_pte+0x6dd/0x1ae0 [ 1008.068319][ T2565] ? pmd_lock+0x60/0x60 [ 1008.072505][ T2565] __get_user_pages+0x604/0x1580 [ 1008.077470][ T2565] ? populate_vma_page_range+0x380/0x380 [ 1008.083122][ T2565] populate_vma_page_range+0x2c1/0x380 [ 1008.089253][ T2565] ? fixup_user_fault+0x750/0x750 [ 1008.094301][ T2565] ? down_read+0x1ac/0x2e0 [ 1008.098733][ T2565] __mm_populate+0x260/0x390 [ 1008.103335][ T2565] ? faultin_page_range+0x8a0/0x8a0 [ 1008.108545][ T2565] ? up_write+0x1be/0x410 [ 1008.112904][ T2565] vm_mmap_pgoff+0x2da/0x3f0 [ 1008.117537][ T2565] ? account_locked_vm+0x200/0x200 [ 1008.122701][ T2565] ? ksys_mmap_pgoff+0xf3/0x720 [ 1008.127590][ T2565] ? __x64_sys_mmap+0x7a/0x130 [ 1008.132448][ T2565] do_syscall_64+0x55/0xb0 [ 1008.136871][ T2565] ? clear_bhb_loop+0x40/0x90 [ 1008.141563][ T2565] ? clear_bhb_loop+0x40/0x90 [ 1008.146270][ T2565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.152170][ T2565] RIP: 0033:0x7f466299f559 [ 1008.156592][ T2565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.176208][ T2565] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1008.184632][ T2565] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1008.192612][ T2565] RDX: b635773f07ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 1008.200788][ T2565] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1008.208769][ T2565] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1008.216745][ T2565] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1008.224736][ T2565] [ 1008.229737][ T2565] memory: usage 307200kB, limit 307200kB, failcnt 8017 [ 1008.236696][ T2565] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1008.244617][ T2565] kmem: usage 7376kB, limit 9007199254740988kB, failcnt 0 [ 1008.251820][ T2565] Memory cgroup stats for /syz1: [ 1008.251975][ T2565] cache 301985792 [ 1008.260599][ T2565] rss 4993024 [ 1008.263903][ T2565] rss_huge 0 [ 1008.267161][ T2565] shmem 301907968 [ 1008.270814][ T2565] mapped_file 8093696 [ 1008.274832][ T2565] dirty 77824 [ 1008.278170][ T2565] writeback 0 [ 1008.281492][ T2565] workingset_refault_anon 1898 [ 1008.286336][ T2565] workingset_refault_file 1831 [ 1008.291122][ T2565] swap 0 [ 1008.293987][ T2565] pgpgin 1575282 [ 1008.297601][ T2565] pgpgout 1500847 [ 1008.301255][ T2565] pgfault 1001063 [ 1008.304901][ T2565] pgmajfault 755 [ 1008.308527][ T2565] inactive_anon 294858752 [ 1008.312884][ T2565] active_anon 12042240 [ 1008.317004][ T2565] inactive_file 0 [ 1008.320653][ T2565] active_file 77824 [ 1008.324480][ T2565] unevictable 0 [ 1008.328004][ T2565] hierarchical_memory_limit 314572800 [ 1008.333416][ T2565] hierarchical_memsw_limit 9223372036854771712 [ 1008.339627][ T2565] total_cache 301985792 [ 1008.343928][ T2565] total_rss 4993024 [ 1008.347828][ T2565] total_rss_huge 0 [ 1008.351560][ T2565] total_shmem 301907968 [ 1008.355907][ T2565] total_mapped_file 8093696 [ 1008.360430][ T2565] total_dirty 77824 [ 1008.364251][ T2565] total_writeback 0 [ 1008.368101][ T2565] total_workingset_refault_anon 1898 [ 1008.373398][ T2565] total_workingset_refault_file 1831 [ 1008.378757][ T2565] total_swap 0 [ 1008.382143][ T2565] total_pgpgin 1575282 [ 1008.386299][ T2565] total_pgpgout 1500847 [ 1008.390465][ T2565] total_pgfault 1001063 [ 1008.394634][ T2565] total_pgmajfault 755 [ 1008.398756][ T2565] total_inactive_anon 294858752 [ 1008.403628][ T2565] total_active_anon 12042240 [ 1008.408571][ T2565] total_inactive_file 0 [ 1008.412756][ T2565] total_active_file 77824 [ 1008.417127][ T2565] total_unevictable 0 [ 1008.421120][ T2565] anon_cost 0 [ 1008.424420][ T2565] file_cost 0 [ 1008.427780][ T2565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2521,pid=2564,uid=0 [ 1008.443472][ T2565] Memory cgroup out of memory: Killed process 2564 (syz.1.2521) total-vm:102272kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1008.708228][ T5946] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.901221][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1009.065449][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1009.090825][ T2702] syz.1.2524 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1009.100497][ T2702] CPU: 0 PID: 2702 Comm: syz.1.2524 Not tainted syzkaller #0 [ 1009.107910][ T2702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1009.117992][ T2702] Call Trace: [ 1009.121294][ T2702] [ 1009.124280][ T2702] dump_stack_lvl+0x18c/0x250 [ 1009.129005][ T2702] ? show_regs_print_info+0x20/0x20 [ 1009.134238][ T2702] ? load_image+0x420/0x420 [ 1009.138781][ T2702] ? ___ratelimit+0x478/0x610 [ 1009.143493][ T2702] ? radix_tree_cpu_dead+0x160/0x160 [ 1009.148915][ T2702] dump_header+0xd8/0x820 [ 1009.153292][ T2702] oom_kill_process+0x390/0x580 [ 1009.158188][ T2702] out_of_memory+0xe0e/0x1200 [ 1009.162913][ T2702] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1009.168586][ T2702] ? print_unlock_imbalance_bug+0x160/0x160 [ 1009.174491][ T2702] ? mutex_lock_nested+0x20/0x20 [ 1009.179434][ T2702] ? unregister_oom_notifier+0x20/0x20 [ 1009.184910][ T2702] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1009.190465][ T2702] ? try_charge_memcg+0xc8c/0x17c0 [ 1009.195593][ T2702] ? drain_local_stock+0x630/0x630 [ 1009.200719][ T2702] ? do_raw_spin_unlock+0x121/0x230 [ 1009.205925][ T2702] try_charge_memcg+0xc9c/0x17c0 [ 1009.210877][ T2702] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1009.216693][ T2702] ? folio_flags+0x120/0x120 [ 1009.221290][ T2702] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1009.226418][ T2702] ? percpu_ref_tryget+0x15/0x180 [ 1009.231454][ T2702] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1009.236924][ T2702] charge_memcg+0x11b/0x3b0 [ 1009.241443][ T2702] ? __mem_cgroup_charge+0x80/0x80 [ 1009.246593][ T2702] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1009.252059][ T2702] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1009.257528][ T2702] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1009.263113][ T2702] __mem_cgroup_charge+0x25/0x80 [ 1009.268061][ T2702] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1009.273617][ T2702] ? xas_load+0x12b/0x140 [ 1009.277981][ T2702] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1009.283114][ T2702] shmem_get_folio_gfp+0x1037/0x2b40 [ 1009.288425][ T2702] shmem_fault+0x1b8/0x820 [ 1009.292857][ T2702] ? zero_pipe_buf_get+0x10/0x10 [ 1009.297808][ T2702] ? handle_mm_fault+0xe6/0x4a40 [ 1009.302751][ T2702] ? __lock_acquire+0x7eb0/0x7eb0 [ 1009.307787][ T2702] __do_fault+0x13b/0x4d0 [ 1009.312123][ T2702] ? handle_mm_fault+0x3923/0x4a40 [ 1009.317236][ T2702] ? handle_mm_fault+0xe6/0x4a40 [ 1009.322179][ T2702] handle_mm_fault+0x393f/0x4a40 [ 1009.327125][ T2702] ? handle_mm_fault+0xe6/0x4a40 [ 1009.332075][ T2702] ? numa_migrate_prep+0x350/0x350 [ 1009.337189][ T2702] ? follow_page_pte+0x6dd/0x1ae0 [ 1009.342272][ T2702] ? pmd_lock+0x60/0x60 [ 1009.346453][ T2702] __get_user_pages+0x604/0x1580 [ 1009.351414][ T2702] ? populate_vma_page_range+0x380/0x380 [ 1009.357060][ T2702] populate_vma_page_range+0x2c1/0x380 [ 1009.362824][ T2702] ? fixup_user_fault+0x750/0x750 [ 1009.368347][ T2702] ? down_read+0x1ac/0x2e0 [ 1009.372823][ T2702] __mm_populate+0x260/0x390 [ 1009.377447][ T2702] ? faultin_page_range+0x8a0/0x8a0 [ 1009.382668][ T2702] ? up_write+0x1be/0x410 [ 1009.387005][ T2702] vm_mmap_pgoff+0x2da/0x3f0 [ 1009.391612][ T2702] ? account_locked_vm+0x200/0x200 [ 1009.396744][ T2702] ? ksys_mmap_pgoff+0xf3/0x720 [ 1009.401608][ T2702] ? __x64_sys_mmap+0x7a/0x130 [ 1009.406416][ T2702] do_syscall_64+0x55/0xb0 [ 1009.410853][ T2702] ? clear_bhb_loop+0x40/0x90 [ 1009.415536][ T2702] ? clear_bhb_loop+0x40/0x90 [ 1009.420230][ T2702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1009.426136][ T2702] RIP: 0033:0x7f466299f559 [ 1009.430563][ T2702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.450182][ T2702] RSP: 002b:00007f46637f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1009.458602][ T2702] RAX: ffffffffffffffda RBX: 00007f4662c25fa0 RCX: 00007f466299f559 [ 1009.466584][ T2702] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1009.474601][ T2702] RBP: 00007f4662a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1009.482753][ T2702] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1009.490732][ T2702] R13: 00007f4662c26038 R14: 00007f4662c25fa0 R15: 00007fffb52fc848 [ 1009.498721][ T2702] [ 1009.502209][ T2702] memory: usage 307200kB, limit 307200kB, failcnt 8093 [ 1009.509137][ T2702] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1009.517430][ T2702] kmem: usage 7368kB, limit 9007199254740988kB, failcnt 0 [ 1009.524576][ T2702] Memory cgroup stats for /syz1: [ 1009.524727][ T2702] cache 302026752 [ 1009.533355][ T2702] rss 4988928 [ 1009.536695][ T2702] rss_huge 0 [ 1009.539905][ T2702] shmem 301948928 [ 1009.543546][ T2702] mapped_file 8134656 [ 1009.547814][ T2702] dirty 77824 [ 1009.551128][ T2702] writeback 0 [ 1009.554444][ T2702] workingset_refault_anon 1898 [ 1009.559329][ T2702] workingset_refault_file 1831 [ 1009.564123][ T2702] swap 0 [ 1009.567054][ T2702] pgpgin 1577391 [ 1009.570619][ T2702] pgpgout 1502947 [ 1009.574261][ T2702] pgfault 1003300 [ 1009.577948][ T2702] pgmajfault 755 [ 1009.581526][ T2702] inactive_anon 20254720 [ 1009.585849][ T2702] active_anon 286683136 [ 1009.590025][ T2702] inactive_file 0 [ 1009.593674][ T2702] active_file 77824 [ 1009.597549][ T2702] unevictable 0 [ 1009.601026][ T2702] hierarchical_memory_limit 314572800 [ 1009.606470][ T2702] hierarchical_memsw_limit 9223372036854771712 [ 1009.612652][ T2702] total_cache 302026752 [ 1009.616879][ T2702] total_rss 4988928 [ 1009.620703][ T2702] total_rss_huge 0 [ 1009.624436][ T2702] total_shmem 301948928 [ 1009.628666][ T2702] total_mapped_file 8134656 [ 1009.633187][ T2702] total_dirty 77824 [ 1009.637111][ T2702] total_writeback 0 [ 1009.640985][ T2702] total_workingset_refault_anon 1898 [ 1009.646320][ T2702] total_workingset_refault_file 1831 [ 1009.651618][ T2702] total_swap 0 [ 1009.654998][ T2702] total_pgpgin 1577391 [ 1009.659137][ T2702] total_pgpgout 1502947 [ 1009.663305][ T2702] total_pgfault 1003300 [ 1009.667545][ T2702] total_pgmajfault 755 [ 1009.671629][ T2702] total_inactive_anon 20254720 [ 1009.676465][ T2702] total_active_anon 286683136 [ 1009.681161][ T2702] total_inactive_file 0 [ 1009.685335][ T2702] total_active_file 77824 [ 1009.689837][ T2702] total_unevictable 0 [ 1009.693826][ T2702] anon_cost 0 [ 1009.697193][ T2702] file_cost 0 [ 1009.700820][ T2702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2524,pid=2700,uid=0 [ 1009.716078][ T2702] Memory cgroup out of memory: Killed process 2700 (syz.1.2524) total-vm:102272kB, anon-rss:1396kB, file-rss:22656kB, shmem-rss:7808kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1009.792701][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1010.704145][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1011.044943][ T2849] syz.1.2533 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1011.057074][ T2849] CPU: 0 PID: 2849 Comm: syz.1.2533 Not tainted syzkaller #0 [ 1011.064514][ T2849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1011.074601][ T2849] Call Trace: [ 1011.077900][ T2849] [ 1011.080870][ T2849] dump_stack_lvl+0x18c/0x250 [ 1011.085588][ T2849] ? show_regs_print_info+0x20/0x20 [ 1011.090819][ T2849] ? load_image+0x420/0x420 [ 1011.095349][ T2849] ? ___ratelimit+0x478/0x610 [ 1011.100054][ T2849] ? radix_tree_cpu_dead+0x160/0x160 [ 1011.105374][ T2849] dump_header+0xd8/0x820 [ 1011.109744][ T2849] oom_kill_process+0x390/0x580 [ 1011.114673][ T2849] out_of_memory+0xe0e/0x1200 [ 1011.119392][ T2849] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1011.125060][ T2849] ? print_unlock_imbalance_bug+0x160/0x160 [ 1011.131079][ T2849] ? mutex_lock_nested+0x20/0x20 [ 1011.136048][ T2849] ? unregister_oom_notifier+0x20/0x20 [ 1011.141703][ T2849] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1011.147285][ T2849] ? try_charge_memcg+0xc8c/0x17c0 [ 1011.152439][ T2849] ? drain_local_stock+0x630/0x630 [ 1011.157590][ T2849] ? do_raw_spin_unlock+0x121/0x230 [ 1011.162826][ T2849] try_charge_memcg+0xc9c/0x17c0 [ 1011.167805][ T2849] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1011.173649][ T2849] ? folio_flags+0x120/0x120 [ 1011.178267][ T2849] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1011.183424][ T2849] ? percpu_ref_tryget+0x15/0x180 [ 1011.188478][ T2849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1011.193974][ T2849] charge_memcg+0x11b/0x3b0 [ 1011.198519][ T2849] ? __mem_cgroup_charge+0x80/0x80 [ 1011.203672][ T2849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1011.209157][ T2849] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1011.214638][ T2849] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1011.220222][ T2849] __mem_cgroup_charge+0x25/0x80 [ 1011.225186][ T2849] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1011.230765][ T2849] ? xas_load+0x12b/0x140 [ 1011.235141][ T2849] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1011.240296][ T2849] ? page_copy_sane+0x4e/0x270 [ 1011.245179][ T2849] shmem_get_folio_gfp+0x1037/0x2b40 [ 1011.250534][ T2849] shmem_write_begin+0xf2/0x430 [ 1011.255411][ T2849] generic_perform_write+0x2fe/0x5c0 [ 1011.260734][ T2849] ? generic_file_direct_write+0x3e0/0x3e0 [ 1011.266581][ T2849] ? file_update_time+0x192/0x1a0 [ 1011.271638][ T2849] shmem_file_write_iter+0xfb/0x120 [ 1011.276868][ T2849] vfs_write+0x474/0x9a0 [ 1011.281228][ T2849] ? file_end_write+0x250/0x250 [ 1011.286107][ T2849] ? __fget_files+0x3fc/0x460 [ 1011.290822][ T2849] ? __fdget_pos+0x1d8/0x330 [ 1011.295438][ T2849] ? ksys_write+0x74/0x260 [ 1011.300033][ T2849] ksys_write+0x151/0x260 [ 1011.305127][ T2849] ? __ia32_sys_read+0x90/0x90 [ 1011.310027][ T2849] ? lockdep_hardirqs_on+0x98/0x150 [ 1011.315436][ T2849] do_syscall_64+0x55/0xb0 [ 1011.319906][ T2849] ? clear_bhb_loop+0x40/0x90 [ 1011.324618][ T2849] ? clear_bhb_loop+0x40/0x90 [ 1011.329355][ T2849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1011.335373][ T2849] RIP: 0033:0x7f466295fd8e [ 1011.339811][ T2849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1011.359443][ T2849] RSP: 002b:00007f46637f1da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1011.367892][ T2849] RAX: ffffffffffffffda RBX: 00007f46637f26c0 RCX: 00007f466295fd8e [ 1011.375888][ T2849] RDX: 0000000001000000 RSI: 00007f46587f7000 RDI: 0000000000000003 [ 1011.383890][ T2849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.391894][ T2849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1011.399910][ T2849] R13: 00007f46637f1ee0 R14: 00007f46637f1ea0 R15: 00007f46587f7000 [ 1011.410016][ T2849] [ 1011.430187][ T66] net_ratelimit: 6 callbacks suppressed [ 1011.430205][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1011.432484][ T2849] memory: usage 307200kB, limit 307200kB, failcnt 8145 [ 1011.454615][ T2849] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1011.462613][ T2849] kmem: usage 7364kB, limit 9007199254740988kB, failcnt 0 [ 1011.470047][ T2849] Memory cgroup stats for /syz1: [ 1011.470206][ T2849] cache 302059520 [ 1011.479238][ T2849] rss 4972544 [ 1011.500688][ T2849] rss_huge 0 [ 1011.611867][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1011.620889][ T2849] shmem 301981696 [ 1011.624567][ T2849] mapped_file 77824 [ 1011.638106][ T2849] dirty 77824 [ 1011.762836][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1011.792772][ T2849] writeback 0 [ 1011.810072][ T2849] workingset_refault_anon 1898 [ 1011.827844][ T2849] workingset_refault_file 1831 [ 1011.848136][ T2849] swap 0 [ 1011.851063][ T2849] pgpgin 1579430 [ 1011.854711][ T2849] pgpgout 1504982 [ 1011.876373][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1011.894235][ T2849] pgfault 1007558 [ 1011.918881][ T2849] pgmajfault 755 [ 1011.922524][ T2849] inactive_anon 294912000 [ 1011.931935][ T2849] active_anon 12042240 [ 1011.940881][ T2849] inactive_file 0 [ 1011.958023][ T2849] active_file 77824 [ 1011.966047][ T2849] unevictable 0 [ 1011.976294][ T2849] hierarchical_memory_limit 314572800 [ 1011.981732][ T2849] hierarchical_memsw_limit 9223372036854771712 [ 1012.007040][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.025804][ T2849] total_cache 302059520 [ 1012.033535][ T2849] total_rss 4972544 [ 1012.038347][ T2849] total_rss_huge 0 [ 1012.049586][ T2849] total_shmem 301981696 [ 1012.059743][ T2849] total_mapped_file 77824 [ 1012.090032][ T2849] total_dirty 77824 [ 1012.093916][ T2849] total_writeback 0 [ 1012.097884][ T2849] total_workingset_refault_anon 1898 [ 1012.103198][ T2849] total_workingset_refault_file 1831 [ 1012.108797][ T2849] total_swap 0 [ 1012.112199][ T2849] total_pgpgin 1579430 [ 1012.116369][ T2849] total_pgpgout 1504982 [ 1012.121064][ T2849] total_pgfault 1007558 [ 1012.125902][ T2849] total_pgmajfault 755 [ 1012.130012][ T2849] total_inactive_anon 294912000 [ 1012.134884][ T2849] total_active_anon 12042240 [ 1012.139661][ T2849] total_inactive_file 0 [ 1012.143846][ T2849] total_active_file 77824 [ 1012.147241][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.154726][ T2849] total_unevictable 0 [ 1012.163403][ T2849] anon_cost 0 [ 1012.167149][ T2849] file_cost 0 [ 1012.170457][ T2849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor,pid=5776,uid=0 [ 1012.195936][ T2849] Memory cgroup out of memory: Killed process 5776 (syz-executor) total-vm:98300kB, anon-rss:1248kB, file-rss:21760kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 1012.276837][ T5048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1013.946581][ T66] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1014.146781][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1014.288597][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1014.853778][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.990518][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.101737][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.203983][ T66] batman_adv: batadv0: Removing interface: netdevsim0 [ 1015.216212][ T3507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2547'. [ 1015.224248][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.840699][ T66] tipc: Left network mode [ 1016.377219][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1016.404194][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.426393][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.439475][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.453335][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1016.462793][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1016.542294][ T66] bond1: (slave ip6gretap1): Removing an active aggregator [ 1016.558660][ T66] bond1: (slave ip6gretap1): Releasing backup interface [ 1016.567867][ T66] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 92:4d:07:1c:e8:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1016.730606][ T3726] rxe_eth0 speed is unknown, defaulting to 1000 [ 1018.596062][ T51] Bluetooth: hci0: command tx timeout [ 1018.777062][ T3726] chnl_net:caif_netlink_parms(): no params data found [ 1019.650666][ T3726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.666012][ T3726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.673494][ T3726] bridge_slave_0: entered allmulticast mode [ 1019.681669][ T3726] bridge_slave_0: entered promiscuous mode [ 1019.712369][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.728056][ T3726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.735527][ T3726] bridge_slave_1: entered allmulticast mode [ 1019.874594][ T3726] bridge_slave_1: entered promiscuous mode [ 1020.279427][ T3726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.620777][ T3726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.696041][ T51] Bluetooth: hci0: command tx timeout [ 1020.774978][ T66] hsr_slave_0: left promiscuous mode [ 1020.791131][ T66] hsr_slave_1: left promiscuous mode [ 1020.810492][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.835137][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.857993][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.877523][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.898201][ T66] bridge_slave_1: left allmulticast mode [ 1020.909412][ T66] bridge_slave_1: left promiscuous mode [ 1020.933050][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.968701][ T66] bridge_slave_0: left allmulticast mode [ 1020.983263][ T66] bridge_slave_0: left promiscuous mode [ 1021.002581][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.074684][ T66] veth1_macvtap: left promiscuous mode [ 1021.083680][ T66] veth0_macvtap: left promiscuous mode [ 1021.093497][ T66] veth1_vlan: left promiscuous mode [ 1021.100466][ T66] veth0_vlan: left promiscuous mode [ 1021.420007][ T66] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1021.810274][ T66] bond1 (unregistering): Released all slaves [ 1022.775880][ T51] Bluetooth: hci0: command tx timeout [ 1023.289825][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1023.339467][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1023.391724][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.448578][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.940626][ T66] bond0 (unregistering): Released all slaves [ 1024.078057][ T3726] team0: Port device team_slave_0 added [ 1024.100390][ T3726] team0: Port device team_slave_1 added [ 1024.169358][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.186734][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.237846][ T3726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.252864][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.262867][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.327976][ T3726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.582789][ T3726] hsr_slave_0: entered promiscuous mode [ 1024.606751][ T3726] hsr_slave_1: entered promiscuous mode [ 1024.647941][ T3726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.664236][ T3726] Cannot create hsr debugfs directory [ 1024.842373][ T5781] Bluetooth: hci0: command tx timeout [ 1025.380845][ T66] IPVS: stop unused estimator thread 0... [ 1025.408866][ T3726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.437461][ T3726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.529148][ T3726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.578978][ T3726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.479056][ T3726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.524022][ T3726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.541505][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.548767][T10335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.621669][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.628915][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.879991][ T5834] 9pnet_fd: p9_fd_create_unix (5834): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 1027.303438][ T3726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.104739][ T3726] veth0_vlan: entered promiscuous mode [ 1029.168259][ T3726] veth1_vlan: entered promiscuous mode [ 1029.246422][ T3726] veth0_macvtap: entered promiscuous mode [ 1029.271272][ T3726] veth1_macvtap: entered promiscuous mode [ 1029.320704][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.355782][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.385135][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.401276][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.436388][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.466715][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.507662][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.578781][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.862175][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.942818][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.013818][ T3726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.134604][ T3726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.188870][ T3726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.229872][ T3726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.459236][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.472318][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.557929][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.574882][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.383423][ T6307] overlayfs: failed to clone upperpath [ 1033.326591][ T6594] [ 1033.328972][ T6594] ====================================================== [ 1033.336005][ T6594] WARNING: possible circular locking dependency detected [ 1033.343089][ T6594] syzkaller #0 Not tainted [ 1033.347538][ T6594] ------------------------------------------------------ [ 1033.354670][ T6594] syz.4.2618/6594 is trying to acquire lock: [ 1033.360747][ T6594] ffffffff8e920350 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 1033.370112][ T6594] [ 1033.370112][ T6594] but task is already holding lock: [ 1033.377488][ T6594] ffff88804af56ef0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1033.387276][ T6594] [ 1033.387276][ T6594] which lock already depends on the new lock. [ 1033.387276][ T6594] [ 1033.397699][ T6594] [ 1033.397699][ T6594] the existing dependency chain (in reverse order) is: [ 1033.406739][ T6594] [ 1033.406739][ T6594] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 1033.415463][ T6594] down_write+0x97/0x200 [ 1033.420337][ T6594] configfs_depend_item_unlocked+0x157/0x460 [ 1033.426862][ T6594] usbg_make_tpg+0x1e1/0x550 [ 1033.432001][ T6594] target_fabric_make_tpg+0xa4/0x6d0 [ 1033.437829][ T6594] configfs_mkdir+0x515/0x9e0 [ 1033.443050][ T6594] vfs_mkdir+0x2a5/0x470 [ 1033.447831][ T6594] do_mkdirat+0x1dc/0x450 [ 1033.452700][ T6594] __x64_sys_mkdirat+0x89/0xa0 [ 1033.458023][ T6594] do_syscall_64+0x55/0xb0 [ 1033.463025][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.469476][ T6594] [ 1033.469476][ T6594] -> #1 (tpg_instances_lock){+.+.}-{3:3}: [ 1033.477405][ T6594] __mutex_lock+0x135/0xc80 [ 1033.482435][ T6594] usbg_make_tpg+0xf9/0x550 [ 1033.487462][ T6594] target_fabric_make_tpg+0xa4/0x6d0 [ 1033.493308][ T6594] configfs_mkdir+0x515/0x9e0 [ 1033.498507][ T6594] vfs_mkdir+0x2a5/0x470 [ 1033.503274][ T6594] do_mkdirat+0x1dc/0x450 [ 1033.508121][ T6594] __x64_sys_mkdirat+0x89/0xa0 [ 1033.513406][ T6594] do_syscall_64+0x55/0xb0 [ 1033.518357][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.524778][ T6594] [ 1033.524778][ T6594] -> #0 (&subsys->su_mutex){+.+.}-{3:3}: [ 1033.532664][ T6594] __lock_acquire+0x3a07/0x7eb0 [ 1033.538048][ T6594] lock_acquire+0x19e/0x420 [ 1033.543072][ T6594] __mutex_lock+0x135/0xc80 [ 1033.548092][ T6594] configfs_rmdir+0x63c/0x980 [ 1033.553318][ T6594] vfs_rmdir+0x352/0x4b0 [ 1033.558170][ T6594] do_rmdir+0x29f/0x590 [ 1033.562845][ T6594] __x64_sys_rmdir+0x49/0x50 [ 1033.567956][ T6594] do_syscall_64+0x55/0xb0 [ 1033.572898][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.579315][ T6594] [ 1033.579315][ T6594] other info that might help us debug this: [ 1033.579315][ T6594] [ 1033.589562][ T6594] Chain exists of: [ 1033.589562][ T6594] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#23 [ 1033.589562][ T6594] [ 1033.604077][ T6594] Possible unsafe locking scenario: [ 1033.604077][ T6594] [ 1033.611523][ T6594] CPU0 CPU1 [ 1033.616879][ T6594] ---- ---- [ 1033.622233][ T6594] lock(&sb->s_type->i_mutex_key#23); [ 1033.627696][ T6594] lock(tpg_instances_lock); [ 1033.634884][ T6594] lock(&sb->s_type->i_mutex_key#23); [ 1033.642869][ T6594] lock(&subsys->su_mutex); [ 1033.647457][ T6594] [ 1033.647457][ T6594] *** DEADLOCK *** [ 1033.647457][ T6594] [ 1033.655620][ T6594] 3 locks held by syz.4.2618/6594: [ 1033.660723][ T6594] #0: ffff888019758418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1033.669952][ T6594] #1: ffff888148e955a0 (&default_group_class[depth - 1]#7/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 1033.680747][ T6594] #2: ffff88804af56ef0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1033.690842][ T6594] [ 1033.690842][ T6594] stack backtrace: [ 1033.696719][ T6594] CPU: 1 PID: 6594 Comm: syz.4.2618 Not tainted syzkaller #0 [ 1033.704080][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1033.714130][ T6594] Call Trace: [ 1033.717417][ T6594] [ 1033.720477][ T6594] dump_stack_lvl+0x18c/0x250 [ 1033.725187][ T6594] ? load_image+0x420/0x420 [ 1033.729697][ T6594] ? show_regs_print_info+0x20/0x20 [ 1033.734899][ T6594] ? print_circular_bug+0x12b/0x1a0 [ 1033.740102][ T6594] check_noncircular+0x2fc/0x400 [ 1033.745042][ T6594] ? print_deadlock_bug+0x5d0/0x5d0 [ 1033.750435][ T6594] ? lockdep_lock+0xf5/0x230 [ 1033.755042][ T6594] ? _find_first_zero_bit+0xd6/0x100 [ 1033.760334][ T6594] __lock_acquire+0x3a07/0x7eb0 [ 1033.765198][ T6594] ? verify_lock_unused+0x140/0x140 [ 1033.770402][ T6594] ? verify_lock_unused+0x140/0x140 [ 1033.775600][ T6594] lock_acquire+0x19e/0x420 [ 1033.780103][ T6594] ? configfs_rmdir+0x63c/0x980 [ 1033.784980][ T6594] ? __might_sleep+0xe0/0xe0 [ 1033.789568][ T6594] ? read_lock_is_recursive+0x20/0x20 [ 1033.794947][ T6594] __mutex_lock+0x135/0xc80 [ 1033.799450][ T6594] ? configfs_rmdir+0x63c/0x980 [ 1033.804303][ T6594] ? configfs_rmdir+0x63c/0x980 [ 1033.809149][ T6594] ? mutex_lock_nested+0x20/0x20 [ 1033.814084][ T6594] ? __lock_acquire+0x7eb0/0x7eb0 [ 1033.819107][ T6594] ? lockref_put_or_lock+0x72/0xb0 [ 1033.824224][ T6594] ? dput+0x3b/0x1e0 [ 1033.828112][ T6594] ? dput+0x3b/0x1e0 [ 1033.832011][ T6594] configfs_rmdir+0x63c/0x980 [ 1033.836695][ T6594] vfs_rmdir+0x352/0x4b0 [ 1033.840943][ T6594] do_rmdir+0x29f/0x590 [ 1033.845095][ T6594] ? __check_object_size+0x4fc/0xa40 [ 1033.850378][ T6594] ? d_delete_notify+0x150/0x150 [ 1033.855313][ T6594] ? getname_flags+0x20a/0x500 [ 1033.860071][ T6594] __x64_sys_rmdir+0x49/0x50 [ 1033.864672][ T6594] do_syscall_64+0x55/0xb0 [ 1033.869087][ T6594] ? clear_bhb_loop+0x40/0x90 [ 1033.873763][ T6594] ? clear_bhb_loop+0x40/0x90 [ 1033.878437][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.884327][ T6594] RIP: 0033:0x7f099359f559 [ 1033.888741][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.908435][ T6594] RSP: 002b:00007f09943be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1033.916849][ T6594] RAX: ffffffffffffffda RBX: 00007f0993825fa0 RCX: 00007f099359f559 [ 1033.924818][ T6594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001640 [ 1033.932786][ T6594] RBP: 00007f0993636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1033.940754][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.948724][ T6594] R13: 00007f0993826038 R14: 00007f0993825fa0 R15: 00007ffee4691218 [ 1033.956697][ T6594]