Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. [ 89.685384][ T5824] cgroup: Unknown subsys name 'net' [ 89.855363][ T5824] cgroup: Unknown subsys name 'cpuset' [ 89.864551][ T5824] cgroup: Unknown subsys name 'rlimit' [ 90.060912][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.085825][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.094689][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.103040][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.108043][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.113311][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.118877][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.129290][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.134033][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.140566][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.153635][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.155489][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.166885][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.175795][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.176507][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.191981][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.194104][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.201244][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.208883][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.217115][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.707513][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.888998][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.932487][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 90.994356][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.144263][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.152209][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.160282][ T5830] bridge_slave_0: entered allmulticast mode [ 91.167741][ T5830] bridge_slave_0: entered promiscuous mode [ 91.207660][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.215800][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.223185][ T5830] bridge_slave_1: entered allmulticast mode [ 91.231118][ T5830] bridge_slave_1: entered promiscuous mode [ 91.301972][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.309317][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.317299][ T5832] bridge_slave_0: entered allmulticast mode [ 91.324906][ T5832] bridge_slave_0: entered promiscuous mode [ 91.372460][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.381562][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.388770][ T5832] bridge_slave_1: entered allmulticast mode [ 91.396752][ T5832] bridge_slave_1: entered promiscuous mode [ 91.403927][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.411274][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.418473][ T5831] bridge_slave_0: entered allmulticast mode [ 91.426049][ T5831] bridge_slave_0: entered promiscuous mode [ 91.437523][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.447262][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.455927][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.463421][ T5833] bridge_slave_0: entered allmulticast mode [ 91.471192][ T5833] bridge_slave_0: entered promiscuous mode [ 91.492324][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.499640][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.506829][ T5831] bridge_slave_1: entered allmulticast mode [ 91.514680][ T5831] bridge_slave_1: entered promiscuous mode [ 91.524386][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.549175][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.556864][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.564287][ T5833] bridge_slave_1: entered allmulticast mode [ 91.572081][ T5833] bridge_slave_1: entered promiscuous mode [ 91.637931][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.663438][ T5830] team0: Port device team_slave_0 added [ 91.685404][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.697867][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.710836][ T5830] team0: Port device team_slave_1 added [ 91.720352][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.745259][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.776132][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.840248][ T5832] team0: Port device team_slave_0 added [ 91.861519][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.868505][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.895120][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.923173][ T5832] team0: Port device team_slave_1 added [ 91.931603][ T5831] team0: Port device team_slave_0 added [ 91.938256][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.946316][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.972599][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.985776][ T5833] team0: Port device team_slave_0 added [ 92.007097][ T5831] team0: Port device team_slave_1 added [ 92.025024][ T5833] team0: Port device team_slave_1 added [ 92.114794][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.121948][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.148533][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.205375][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.212941][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.239551][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.260603][ T5834] Bluetooth: hci2: command tx timeout [ 92.260607][ T52] Bluetooth: hci1: command tx timeout [ 92.272844][ T5150] Bluetooth: hci3: command tx timeout [ 92.289325][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.296656][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.323311][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.335520][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.343627][ T5150] Bluetooth: hci0: command tx timeout [ 92.349985][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.376181][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.418585][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.427038][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.453116][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.465212][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.472480][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.499280][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.518976][ T5830] hsr_slave_0: entered promiscuous mode [ 92.527213][ T5830] hsr_slave_1: entered promiscuous mode [ 92.611204][ T5832] hsr_slave_0: entered promiscuous mode [ 92.618098][ T5832] hsr_slave_1: entered promiscuous mode [ 92.625272][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.631553][ T5832] Cannot create hsr debugfs directory [ 92.740258][ T5831] hsr_slave_0: entered promiscuous mode [ 92.746898][ T5831] hsr_slave_1: entered promiscuous mode [ 92.753770][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 92.759782][ T5831] Cannot create hsr debugfs directory [ 92.771461][ T5833] hsr_slave_0: entered promiscuous mode [ 92.778101][ T5833] hsr_slave_1: entered promiscuous mode [ 92.784897][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.790893][ T5833] Cannot create hsr debugfs directory [ 93.312901][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.329354][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.341207][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.375570][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.475777][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.488297][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.502314][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.522657][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.648686][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.663744][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.701774][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.733710][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.808840][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.823696][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.836176][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.847841][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.884518][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.944782][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.990025][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.997364][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.037145][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.050662][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.057905][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.116471][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.141281][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.148438][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.173148][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.180423][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.233071][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.292827][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.322740][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.339882][ T5834] Bluetooth: hci3: command tx timeout [ 94.340013][ T52] Bluetooth: hci2: command tx timeout [ 94.345574][ T5150] Bluetooth: hci1: command tx timeout [ 94.366428][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.373631][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.408640][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.415913][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.420820][ T5150] Bluetooth: hci0: command tx timeout [ 94.442486][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.476397][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.495144][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.502471][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.528399][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.535702][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.596221][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.707479][ T5830] veth0_vlan: entered promiscuous mode [ 94.737597][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.756207][ T5830] veth1_vlan: entered promiscuous mode [ 94.806308][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.844191][ T5832] veth0_vlan: entered promiscuous mode [ 94.875400][ T5832] veth1_vlan: entered promiscuous mode [ 94.907251][ T5830] veth0_macvtap: entered promiscuous mode [ 94.924904][ T5830] veth1_macvtap: entered promiscuous mode [ 94.944780][ T5833] veth0_vlan: entered promiscuous mode [ 94.985980][ T5833] veth1_vlan: entered promiscuous mode [ 94.998019][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.033852][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.041456][ T5831] veth0_vlan: entered promiscuous mode [ 95.047950][ T5832] veth0_macvtap: entered promiscuous mode [ 95.078536][ T3577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092694][ T5832] veth1_macvtap: entered promiscuous mode [ 95.102058][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.111624][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.128465][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.140894][ T5831] veth1_vlan: entered promiscuous mode [ 95.198976][ T5833] veth0_macvtap: entered promiscuous mode [ 95.222356][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.242366][ T5833] veth1_macvtap: entered promiscuous mode [ 95.259041][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.293972][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.316512][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.330417][ T5831] veth0_macvtap: entered promiscuous mode [ 95.337938][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.351886][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374900][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.390654][ T5831] veth1_macvtap: entered promiscuous mode [ 95.406494][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program [ 95.433092][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.931927][ T5905] cgroup: fork rejected by pids controller in /syz1 [ 96.594751][ T5150] Bluetooth: hci1: command tx timeout [ 96.600652][ T5838] Bluetooth: hci0: command tx timeout [ 96.606164][ T52] Bluetooth: hci3: command tx timeout [ 96.612051][ T5834] Bluetooth: hci2: command tx timeout [ 97.662640][ T10] cfg80211: failed to load regulatory.db [ 98.671924][ C0] sched: DL replenish lagged too much [ 98.672143][ T5838] Bluetooth: hci0: command tx timeout [ 98.683444][ T5150] Bluetooth: hci1: command tx timeout [ 98.688920][ T5834] Bluetooth: hci2: command tx timeout [ 98.695698][ T52] Bluetooth: hci3: command tx timeout [ 98.701372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.492185][ T5913] syz-executor636 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.502644][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz-executor636 Not tainted syzkaller #0 PREEMPT(full) [ 99.502667][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.502685][ T5913] Call Trace: [ 99.502693][ T5913] [ 99.502700][ T5913] dump_stack_lvl+0x189/0x250 [ 99.502727][ T5913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.502745][ T5913] ? __pfx__printk+0x10/0x10 [ 99.502784][ T5913] dump_header+0xd4/0x4c0 [ 99.502805][ T5913] oom_kill_process+0x263/0x800 [ 99.502836][ T5913] out_of_memory+0x898/0x1120 [ 99.502859][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.502886][ T5913] ? __pfx___mutex_lock+0x10/0x10 [ 99.502913][ T5913] ? __pfx_out_of_memory+0x10/0x10 [ 99.502947][ T5913] mem_cgroup_out_of_memory+0x13f/0x230 [ 99.502973][ T5913] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 99.503003][ T5913] ? do_raw_spin_unlock+0x122/0x240 [ 99.503027][ T5913] ? _raw_spin_unlock+0x28/0x50 [ 99.503042][ T5913] ? memcg1_oom_prepare+0x37f/0x450 [ 99.503070][ T5913] try_charge_memcg+0xde4/0x1280 [ 99.503086][ T5913] ? rcu_is_watching+0x15/0xb0 [ 99.503120][ T5913] ? __pfx_try_charge_memcg+0x10/0x10 [ 99.503137][ T5913] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 99.503166][ T5913] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 99.503191][ T5913] charge_memcg+0x9f/0x180 [ 99.503220][ T5913] __mem_cgroup_charge+0x25/0x80 [ 99.503253][ T5913] shmem_alloc_and_add_folio+0x790/0xf40 [ 99.503283][ T5913] ? filemap_get_entry+0xad/0x2f0 [ 99.503306][ T5913] ? filemap_get_entry+0xad/0x2f0 [ 99.503331][ T5913] ? filemap_get_entry+0x28f/0x2f0 [ 99.503358][ T5913] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 99.503385][ T5913] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 99.503414][ T5913] shmem_get_folio_gfp+0x59d/0x1660 [ 99.503447][ T5913] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.503477][ T5913] shmem_write_begin+0x16c/0x330 [ 99.503506][ T5913] generic_perform_write+0x2c5/0x900 [ 99.503536][ T5913] ? __pfx_generic_perform_write+0x10/0x10 [ 99.503552][ T5913] ? down_write+0x162/0x1f0 [ 99.503581][ T5913] ? file_update_time_flags+0x2cb/0x4e0 [ 99.503609][ T5913] shmem_file_write_iter+0xf8/0x120 [ 99.503631][ T5913] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 99.503656][ T5913] __kernel_write_iter+0x428/0x910 [ 99.503684][ T5913] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 99.503709][ T5913] ? __pfx___kernel_write_iter+0x10/0x10 [ 99.503741][ T5913] ? __asan_memset+0x22/0x50 [ 99.503765][ T5913] ? iov_iter_bvec+0xb8/0x180 [ 99.503792][ T5913] dump_user_range+0x8a0/0xc90 [ 99.503826][ T5913] ? __pfx_dump_user_range+0x10/0x10 [ 99.503845][ T5913] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 99.503877][ T5913] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 99.503910][ T5913] ? dump_emit+0xa6/0xe0 [ 99.503927][ T5913] ? elf_core_dump+0x2cd0/0x3960 [ 99.503952][ T5913] elf_core_dump+0x3369/0x3960 [ 99.503994][ T5913] ? __pfx_elf_core_dump+0x10/0x10 [ 99.504017][ T5913] ? kasan_save_track+0x4f/0x80 [ 99.504052][ T5913] ? kasan_save_track+0x3e/0x80 [ 99.504076][ T5913] ? __kasan_kmalloc+0x93/0xb0 [ 99.504108][ T5913] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 99.504171][ T5913] ? coredump_write+0x343/0x18b0 [ 99.504193][ T5913] ? vfs_coredump+0x3321/0x3e60 [ 99.504211][ T5913] ? get_signal+0x1108/0x1340 [ 99.504238][ T5913] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 99.504259][ T5913] ? irqentry_exit+0x177/0x660 [ 99.504276][ T5913] ? exc_page_fault+0xab/0x100 [ 99.504292][ T5913] ? asm_exc_page_fault+0x26/0x30 [ 99.504353][ T5913] ? 0xffffffffff600000 [ 99.504391][ T5913] coredump_write+0x1121/0x18b0 [ 99.504431][ T5913] ? __pfx_coredump_write+0x10/0x10 [ 99.504469][ T5913] ? unshare_files+0xa9/0x140 [ 99.504490][ T5913] vfs_coredump+0x3321/0x3e60 [ 99.504532][ T5913] ? __pfx_vfs_coredump+0x10/0x10 [ 99.504551][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.504579][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.504614][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.504644][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.504672][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.504705][ T5913] ? unwind_next_frame+0xa5/0x23d0 [ 99.504730][ T5913] ? unwind_next_frame+0xa5/0x23d0 [ 99.504749][ T5913] ? is_bpf_text_address+0x26/0x2b0 [ 99.504785][ T5913] ? is_bpf_text_address+0x26/0x2b0 [ 99.504813][ T5913] ? is_bpf_text_address+0x292/0x2b0 [ 99.504835][ T5913] ? is_bpf_text_address+0x26/0x2b0 [ 99.504861][ T5913] ? kernel_text_address+0xa5/0xe0 [ 99.504883][ T5913] ? __kernel_text_address+0xd/0x40 [ 99.504903][ T5913] ? unwind_get_return_address+0x4d/0x90 [ 99.504920][ T5913] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.504943][ T5913] ? arch_stack_walk+0xfc/0x150 [ 99.504971][ T5913] ? stack_trace_save+0x9c/0xe0 [ 99.504998][ T5913] ? stack_depot_save_flags+0x40/0x850 [ 99.505020][ T5913] ? __lock_acquire+0x6b6/0x2cf0 [ 99.505049][ T5913] ? kasan_save_track+0x4f/0x80 [ 99.505073][ T5913] ? kasan_save_track+0x3e/0x80 [ 99.505096][ T5913] ? kasan_save_free_info+0x46/0x50 [ 99.505117][ T5913] ? __kasan_slab_free+0x5c/0x80 [ 99.505131][ T5913] ? kmem_cache_free+0x197/0x620 [ 99.505155][ T5913] ? get_signal+0xa4b/0x1340 [ 99.505176][ T5913] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 99.505195][ T5913] ? irqentry_exit+0x177/0x660 [ 99.505212][ T5913] ? exc_page_fault+0xab/0x100 [ 99.505234][ T5913] ? asm_exc_page_fault+0x26/0x30 [ 99.505303][ T5913] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.505319][ T5913] ? lockdep_hardirqs_on+0x98/0x140 [ 99.505341][ T5913] get_signal+0x1108/0x1340 [ 99.505384][ T5913] arch_do_signal_or_restart+0x9a/0x7a0 [ 99.505409][ T5913] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.505443][ T5913] ? local_irq_enable_exit_to_user+0x5/0x10 [ 99.505473][ T5913] irqentry_exit+0x177/0x660 [ 99.505498][ T5913] exc_page_fault+0xab/0x100 [ 99.505519][ T5913] asm_exc_page_fault+0x26/0x30 [ 99.505535][ T5913] RIP: 0033:0x7f0a29c9b144 [ 99.505552][ T5913] Code: 00 e9 42 ff ff ff 41 89 45 00 e9 48 ff ff ff bf 01 00 00 00 e8 2d ba 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 ec 08 <64> 8b 04 25 ac ff ff ff 85 c0 75 40 48 8b 46 10 64 8b 14 25 a8 ff [ 99.505566][ T5913] RSP: 002b:00007fff4ee495b0 EFLAGS: 00010202 [ 99.505583][ T5913] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f0a29cdcd09 [ 99.505593][ T5913] RDX: 00007fff4ee495c0 RSI: 00007fff4ee496f0 RDI: 000000000000000b [ 99.505604][ T5913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000003 [ 99.505614][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 99.505623][ T5913] R13: 00007fff4ef47790 R14: 00007fff4ef477d0 R15: 0000000000000000 [ 99.505652][ T5913] [ 99.505659][ T5913] memory: usage 307200kB, limit 307200kB, failcnt 77 [ 100.150762][ T5913] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 100.158678][ T5913] kmem: usage 4712kB, limit 9007199254740988kB, failcnt 0 [ 100.165830][ T5913] Memory cgroup stats for /syz1: [ 100.166033][ T5913] cache 305201152 [ 100.174675][ T5913] rss 4546560 [ 100.177986][ T5913] rss_huge 0 [ 100.181220][ T5913] shmem 305201152 [ 100.184873][ T5913] mapped_file 11755520 [ 100.188950][ T5913] dirty 0 [ 100.191936][ T5913] writeback 0 [ 100.195269][ T5913] workingset_refault_anon 0 [ 100.199862][ T5913] workingset_refault_file 0 [ 100.204381][ T5913] swap 0 [ 100.207247][ T5913] swapcached 0 [ 100.210746][ T5913] pgpgin 95430 [ 100.214137][ T5913] pgpgout 19808 [ 100.217616][ T5913] pgfault 15485 [ 100.221223][ T5913] pgmajfault 0 [ 100.224611][ T5913] inactive_anon 0 [ 100.228355][ T5913] active_anon 309747712 [ 100.232577][ T5913] inactive_file 0 [ 100.236224][ T5913] active_file 0 [ 100.239732][ T5913] unevictable 0 [ 100.243204][ T5913] hierarchical_memory_limit 314572800 [ 100.248593][ T5913] hierarchical_memsw_limit 9223372036854771712 [ 100.254799][ T5913] total_cache 305201152 [ 100.258976][ T5913] total_rss 4546560 [ 100.262959][ T5913] total_rss_huge 0 [ 100.266696][ T5913] total_shmem 305201152 [ 100.270920][ T5913] total_mapped_file 11755520 [ 100.275526][ T5913] total_dirty 0 [ 100.279001][ T5913] total_writeback 0 [ 100.282879][ T5913] total_workingset_refault_anon 0 [ 100.287957][ T5913] total_workingset_refault_file 0 [ 100.293152][ T5913] total_swap 0 [ 100.296544][ T5913] total_swapcached 0 [ 100.300493][ T5913] total_pgpgin 95430 [ 100.304406][ T5913] total_pgpgout 19808 [ 100.308407][ T5913] total_pgfault 15485 [ 100.312437][ T5913] total_pgmajfault 0 [ 100.316355][ T5913] total_inactive_anon 0 [ 100.320569][ T5913] total_active_anon 309747712 [ 100.325266][ T5913] total_inactive_file 0 [ 100.329503][ T5913] total_active_file 0 [ 100.333501][ T5913] total_unevictable 0 [ 100.337508][ T5913] anon_cost 0 [ 100.340862][ T5913] file_cost 0 [ 100.344171][ T5913] Tasks state (memory values in pages): [ 100.349772][ T5913] [ pid ] uid tgid total_vm rss rss_anon rss_file rss_shmem pgtables_bytes swapents oom_score_adj name [ 100.361738][ T5913] [ 5830] 0 5830 6444 160 0 160 0 36864 0 0 syz-executor636 [ 100.374427][ T5913] [ 5905] 0 5905 6444 2976 0 128 2848 69632 0 1000 syz-executor636 [ 100.386855][ T5913] [ 5913] 0 5913 6667 2368 224 32 2112 69632 0 1000 syz-executor636 [ 100.399321][ T5913] [ 5924] 0 5924 6588 192 160 32 0 49152 0 1000 syz-executor636 [ 100.411781][ T5913] [ 5927] 0 5927 6667 2784 256 32 2496 69632 0 1000 syz-executor636 [ 100.424267][ T5913] [ 5928] 0 5928 6608 192 160 32 0 49152 0 1000 syz-executor636 [ 100.436675][ T5913] [ 5929] 0 5929 6624 256 224 32 0 49152 0 1000 syz-executor636 [ 100.449093][ T5913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor636,pid=5905,uid=0 [ 100.464566][ T5913] Memory cgroup out of memory: Killed process 5905 (syz-executor636) total-vm:25776kB, anon-rss:0kB, file-rss:512kB, shmem-rss:11392kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 101.950402][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.004609][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.014845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.023761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.032639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.058548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! executing program [ 103.281394][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.532127][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.779294][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.819868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 104.577042][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.139784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.392070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.644505][ T3449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.657707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.666440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! executing program [ 107.814410][ T3449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.884443][ T3449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.142782][ T1339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 110.494149][ T6020] cgroup: fork rejected by pids controller in /syz2 [ 115.204303][ T6065] syz-executor636 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 115.214765][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz-executor636 Not tainted syzkaller #0 PREEMPT(full) [ 115.214788][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.214799][ T6065] Call Trace: [ 115.214808][ T6065] [ 115.214816][ T6065] dump_stack_lvl+0x189/0x250 [ 115.214841][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.214860][ T6065] ? __pfx__printk+0x10/0x10 [ 115.214898][ T6065] dump_header+0xd4/0x4c0 [ 115.214920][ T6065] oom_kill_process+0x263/0x800 [ 115.214951][ T6065] out_of_memory+0x898/0x1120 [ 115.214974][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.215001][ T6065] ? __pfx___mutex_lock+0x10/0x10 [ 115.215029][ T6065] ? __pfx_out_of_memory+0x10/0x10 [ 115.215063][ T6065] mem_cgroup_out_of_memory+0x13f/0x230 [ 115.215090][ T6065] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 115.215119][ T6065] ? do_raw_spin_unlock+0x122/0x240 [ 115.215143][ T6065] ? _raw_spin_unlock+0x28/0x50 [ 115.215158][ T6065] ? memcg1_oom_prepare+0x37f/0x450 [ 115.215186][ T6065] try_charge_memcg+0xde4/0x1280 [ 115.215202][ T6065] ? rcu_is_watching+0x15/0xb0 [ 115.215235][ T6065] ? __pfx_try_charge_memcg+0x10/0x10 [ 115.215253][ T6065] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 115.215282][ T6065] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 115.215307][ T6065] charge_memcg+0x9f/0x180 [ 115.215336][ T6065] __mem_cgroup_charge+0x25/0x80 [ 115.215365][ T6065] shmem_alloc_and_add_folio+0x790/0xf40 [ 115.215395][ T6065] ? filemap_get_entry+0xad/0x2f0 [ 115.215418][ T6065] ? filemap_get_entry+0xad/0x2f0 [ 115.215443][ T6065] ? filemap_get_entry+0x28f/0x2f0 [ 115.215470][ T6065] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 115.215497][ T6065] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 115.215526][ T6065] shmem_get_folio_gfp+0x59d/0x1660 [ 115.215560][ T6065] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 115.215589][ T6065] shmem_write_begin+0x16c/0x330 [ 115.215625][ T6065] generic_perform_write+0x2c5/0x900 [ 115.215655][ T6065] ? __pfx_generic_perform_write+0x10/0x10 [ 115.215671][ T6065] ? down_write+0x162/0x1f0 [ 115.215700][ T6065] ? file_update_time_flags+0x2cb/0x4e0 [ 115.215729][ T6065] shmem_file_write_iter+0xf8/0x120 [ 115.215753][ T6065] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 115.215778][ T6065] __kernel_write_iter+0x428/0x910 [ 115.215806][ T6065] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 115.215831][ T6065] ? __pfx___kernel_write_iter+0x10/0x10 [ 115.215863][ T6065] ? __asan_memset+0x22/0x50 [ 115.215888][ T6065] ? iov_iter_bvec+0xb8/0x180 [ 115.215915][ T6065] dump_user_range+0x8a0/0xc90 [ 115.215949][ T6065] ? __pfx_dump_user_range+0x10/0x10 [ 115.215968][ T6065] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 115.216001][ T6065] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 115.216033][ T6065] ? dump_emit+0xa6/0xe0 [ 115.216050][ T6065] ? elf_core_dump+0x2cd0/0x3960 [ 115.216076][ T6065] elf_core_dump+0x3369/0x3960 [ 115.216117][ T6065] ? __pfx_elf_core_dump+0x10/0x10 [ 115.216140][ T6065] ? kasan_save_track+0x4f/0x80 [ 115.216165][ T6065] ? kasan_save_track+0x3e/0x80 [ 115.216189][ T6065] ? __kasan_kmalloc+0x93/0xb0 [ 115.216204][ T6065] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 115.216230][ T6065] ? coredump_write+0x343/0x18b0 [ 115.216249][ T6065] ? vfs_coredump+0x3321/0x3e60 [ 115.216266][ T6065] ? get_signal+0x1108/0x1340 [ 115.216288][ T6065] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 115.216308][ T6065] ? irqentry_exit+0x177/0x660 [ 115.216326][ T6065] ? exc_page_fault+0xab/0x100 [ 115.216341][ T6065] ? asm_exc_page_fault+0x26/0x30 [ 115.216405][ T6065] ? 0xffffffffff600000 [ 115.216435][ T6065] coredump_write+0x1121/0x18b0 [ 115.216475][ T6065] ? __pfx_coredump_write+0x10/0x10 [ 115.216513][ T6065] ? unshare_files+0xa9/0x140 [ 115.216534][ T6065] vfs_coredump+0x3321/0x3e60 [ 115.216577][ T6065] ? __pfx_vfs_coredump+0x10/0x10 [ 115.216603][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.216631][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.216666][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.216697][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.216724][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.216758][ T6065] ? unwind_next_frame+0xa5/0x23d0 [ 115.216782][ T6065] ? unwind_next_frame+0xa5/0x23d0 [ 115.216802][ T6065] ? is_bpf_text_address+0x26/0x2b0 [ 115.216837][ T6065] ? is_bpf_text_address+0x26/0x2b0 [ 115.216866][ T6065] ? is_bpf_text_address+0x292/0x2b0 [ 115.216888][ T6065] ? is_bpf_text_address+0x26/0x2b0 [ 115.216915][ T6065] ? kernel_text_address+0xa5/0xe0 [ 115.216937][ T6065] ? __kernel_text_address+0xd/0x40 [ 115.216957][ T6065] ? unwind_get_return_address+0x4d/0x90 [ 115.216974][ T6065] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 115.216998][ T6065] ? arch_stack_walk+0xfc/0x150 [ 115.217026][ T6065] ? stack_trace_save+0x9c/0xe0 [ 115.217051][ T6065] ? stack_depot_save_flags+0x40/0x850 [ 115.217074][ T6065] ? __lock_acquire+0x6b6/0x2cf0 [ 115.217103][ T6065] ? kasan_save_track+0x4f/0x80 [ 115.217128][ T6065] ? kasan_save_track+0x3e/0x80 [ 115.217151][ T6065] ? kasan_save_free_info+0x46/0x50 [ 115.217172][ T6065] ? __kasan_slab_free+0x5c/0x80 [ 115.217187][ T6065] ? kmem_cache_free+0x197/0x620 [ 115.217211][ T6065] ? get_signal+0xa4b/0x1340 [ 115.217232][ T6065] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 115.217251][ T6065] ? irqentry_exit+0x177/0x660 [ 115.217268][ T6065] ? exc_page_fault+0xab/0x100 [ 115.217284][ T6065] ? asm_exc_page_fault+0x26/0x30 [ 115.217355][ T6065] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.217372][ T6065] ? lockdep_hardirqs_on+0x98/0x140 [ 115.217393][ T6065] get_signal+0x1108/0x1340 [ 115.217438][ T6065] arch_do_signal_or_restart+0x9a/0x7a0 [ 115.217463][ T6065] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.217517][ T6065] ? local_irq_enable_exit_to_user+0x5/0x10 [ 115.217548][ T6065] irqentry_exit+0x177/0x660 [ 115.217574][ T6065] exc_page_fault+0xab/0x100 [ 115.217601][ T6065] asm_exc_page_fault+0x26/0x30 [ 115.217618][ T6065] RIP: 0033:0x7f0a29c9b144 [ 115.217634][ T6065] Code: 00 e9 42 ff ff ff 41 89 45 00 e9 48 ff ff ff bf 01 00 00 00 e8 2d ba 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 ec 08 <64> 8b 04 25 ac ff ff ff 85 c0 75 40 48 8b 46 10 64 8b 14 25 a8 ff [ 115.217649][ T6065] RSP: 002b:00007fff4ee495b0 EFLAGS: 00010202 [ 115.217664][ T6065] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f0a29cdcd09 [ 115.217675][ T6065] RDX: 00007fff4ee495c0 RSI: 00007fff4ee496f0 RDI: 000000000000000b [ 115.217687][ T6065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000003 [ 115.217696][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 115.217706][ T6065] R13: 00007fff4ef47790 R14: 00007fff4ef477d0 R15: 0000000000000000 [ 115.217735][ T6065] [ 115.217742][ T6065] memory: usage 307200kB, limit 307200kB, failcnt 97 [ 115.861636][ T6065] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 115.869584][ T6065] kmem: usage 4836kB, limit 9007199254740988kB, failcnt 0 [ 115.876716][ T6065] Memory cgroup stats for /syz2: [ 115.876890][ T6065] cache 307474432 [ 115.885518][ T6065] rss 2146304 [ 115.888832][ T6065] rss_huge 0 [ 115.892106][ T6065] shmem 307474432 [ 115.895768][ T6065] mapped_file 11755520 [ 115.899888][ T6065] dirty 0 [ 115.902845][ T6065] writeback 0 [ 115.906146][ T6065] workingset_refault_anon 0 [ 115.910730][ T6065] workingset_refault_file 0 [ 115.915247][ T6065] swap 0 [ 115.918119][ T6065] swapcached 0 [ 115.921616][ T6065] pgpgin 106223 [ 115.925094][ T6065] pgpgout 30632 [ 115.928662][ T6065] pgfault 16273 [ 115.932191][ T6065] pgmajfault 0 [ 115.935585][ T6065] inactive_anon 0 [ 115.939258][ T6065] active_anon 309620736 [ 115.943479][ T6065] inactive_file 0 [ 115.947136][ T6065] active_file 0 [ 115.950652][ T6065] unevictable 0 [ 115.954131][ T6065] hierarchical_memory_limit 314572800 [ 115.959584][ T6065] hierarchical_memsw_limit 9223372036854771712 [ 115.965756][ T6065] total_cache 307474432 [ 115.969945][ T6065] total_rss 2146304 [ 115.973772][ T6065] total_rss_huge 0 [ 115.977510][ T6065] total_shmem 307474432 [ 115.981718][ T6065] total_mapped_file 11755520 [ 115.986327][ T6065] total_dirty 0 [ 115.989843][ T6065] total_writeback 0 [ 115.993677][ T6065] total_workingset_refault_anon 0 [ 115.998715][ T6065] total_workingset_refault_file 0 [ 116.003809][ T6065] total_swap 0 [ 116.007227][ T6065] total_swapcached 0 [ 116.011188][ T6065] total_pgpgin 106223 [ 116.015193][ T6065] total_pgpgout 30632 [ 116.019190][ T6065] total_pgfault 16273 [ 116.023237][ T6065] total_pgmajfault 0 [ 116.027151][ T6065] total_inactive_anon 0 [ 116.031344][ T6065] total_active_anon 309620736 [ 116.036036][ T6065] total_inactive_file 0 [ 116.040263][ T6065] total_active_file 0 [ 116.044257][ T6065] total_unevictable 0 [ 116.048259][ T6065] anon_cost 0 [ 116.051599][ T6065] file_cost 0 [ 116.054901][ T6065] Tasks state (memory values in pages): [ 116.060503][ T6065] [ pid ] uid tgid total_vm rss rss_anon rss_file rss_shmem pgtables_bytes swapents oom_score_adj name [ 116.072458][ T6065] [ 5832] 0 5832 6444 128 0 128 0 36864 0 0 syz-executor636 [ 116.085022][ T6065] [ 6020] 0 6020 6444 2976 0 128 2848 69632 0 1000 syz-executor636 [ 116.097424][ T6065] [ 6046] 0 6046 6667 1312 256 32 1024 57344 0 1000 syz-executor636 [ 116.109983][ T6065] [ 6065] 0 6065 6667 1088 256 32 800 57344 0 1000 syz-executor636 [ 116.122426][ T6065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor636,pid=6020,uid=0 [ 116.137842][ T6065] Memory cgroup out of memory: Killed process 6020 (syz-executor636) total-vm:25776kB, anon-rss:0kB, file-rss:512kB, shmem-rss:11392kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 216.719372][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 216.726541][ C1] rcu: (detected by 1, t=10502 jiffies, g=11241, q=1646 ncpus=2) [ 216.734388][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10501 (4294958775-4294948274), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 216.747807][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g11241 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 216.759056][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 216.769282][ C1] rcu: RCU grace-period kthread stack dump: [ 216.775332][ C1] task:rcu_preempt state:R running task stack:27728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 216.788913][ C1] Call Trace: [ 216.792349][ C1] [ 216.795332][ C1] __schedule+0x150e/0x5070 [ 216.799953][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 216.805303][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.811264][ C1] ? __pfx___schedule+0x10/0x10 [ 216.816233][ C1] ? schedule+0x91/0x360 [ 216.820534][ C1] schedule+0x165/0x360 [ 216.824733][ C1] schedule_timeout+0x12b/0x270 [ 216.829630][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 216.835046][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 216.840979][ C1] ? __pfx_process_timeout+0x10/0x10 [ 216.846357][ C1] ? prepare_to_swait_event+0x341/0x380 [ 216.851948][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 216.856856][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 216.862122][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 216.868065][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 216.873416][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 216.878687][ C1] ? finish_swait+0xcd/0x1f0 [ 216.883335][ C1] rcu_gp_kthread+0x99/0x390 [ 216.887979][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 216.893234][ C1] ? __kthread_parkme+0x7b/0x200 [ 216.898226][ C1] ? __kthread_parkme+0x1a1/0x200 [ 216.903359][ C1] kthread+0x711/0x8a0 [ 216.907475][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 216.912723][ C1] ? __pfx_kthread+0x10/0x10 [ 216.917358][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.922609][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 216.927870][ C1] ? __pfx_kthread+0x10/0x10 [ 216.932503][ C1] ret_from_fork+0x599/0xb30 [ 216.937143][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 216.942359][ C1] ? __switch_to_asm+0x39/0x70 [ 216.947160][ C1] ? __switch_to_asm+0x33/0x70 [ 216.951959][ C1] ? __pfx_kthread+0x10/0x10 [ 216.956597][ C1] ret_from_fork_asm+0x1a/0x30 [ 216.961433][ C1] [ 216.964483][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 216.970857][ C1] Sending NMI from CPU 1 to CPUs 0: [ 216.976102][ C0] NMI backtrace for cpu 0 [ 216.976131][ C0] CPU: 0 UID: 0 PID: 6046 Comm: syz-executor636 Not tainted syzkaller #0 PREEMPT(full) [ 216.976150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.976160][ C0] RIP: 0010:mlock_drain_local+0x415/0x480 [ 216.976183][ C0] Code: e8 f0 35 17 00 e9 81 fd ff ff e8 f6 8d b0 ff 48 c7 c7 c0 3b 44 8e 4c 89 f6 e8 67 a1 c0 02 e9 b1 fd ff ff 48 c7 c1 20 94 cf 99 <80> e1 07 80 c1 03 38 c1 0f 8c dc fd ff ff 48 c7 c7 20 94 cf 99 e8 [ 216.976197][ C0] RSP: 0000:ffffc9000493dbc8 EFLAGS: 00000202 [ 216.976214][ C0] RAX: 0000000000000004 RBX: ffffffff821166e9 RCX: ffffffff99cf9420 [ 216.976226][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 216.976235][ C0] RBP: 0000000000000000 R08: ffffffff821166e9 R09: ffff8880b86345e0 [ 216.976247][ C0] R10: ffffc9000493ddb0 R11: fffff52000927bbe R12: dffffc0000000000 [ 216.976259][ C0] R13: ffff888025061e80 R14: ffff8880b86345e0 R15: ffffffff8dccddd0 [ 216.976272][ C0] FS: 0000000000000000(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 [ 216.976285][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.976297][ C0] CR2: 00007fff4ee48ff8 CR3: 000000002ebb6000 CR4: 00000000003526f0 [ 216.976313][ C0] Call Trace: [ 216.976321][ C0] [ 216.976331][ C0] shrink_lruvec+0x215/0x2980 [ 216.976353][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.976390][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 216.976409][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.976455][ C0] ? mem_cgroup_iter+0x3e7/0x460 [ 216.976476][ C0] ? page_counter_calculate_protection+0x188/0x470 [ 216.976499][ C0] ? mem_cgroup_iter+0x3b/0x460 [ 216.976520][ C0] shrink_node+0xaa9/0x35b0 [ 216.976558][ C0] ? __pfx_shrink_node+0x10/0x10 [ 216.976574][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 216.976600][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 216.976620][ C0] ? _raw_spin_unlock+0x28/0x50 [ 216.976635][ C0] ? vmpressure_prio+0xe8/0x150 [ 216.976658][ C0] do_try_to_free_pages+0x668/0x1960 [ 216.976678][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.976712][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 216.976738][ C0] try_to_free_mem_cgroup_pages+0x2ea/0x7a0 [ 216.976760][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 216.976789][ C0] ? cgroup_file_notify+0x110/0x190 [ 216.976814][ C0] try_charge_memcg+0xa2d/0x1280 [ 216.976829][ C0] ? rcu_is_watching+0x15/0xb0 [ 216.976854][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 216.976870][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 216.976894][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 216.976916][ C0] charge_memcg+0x9f/0x180 [ 216.976942][ C0] __mem_cgroup_charge+0x25/0x80 [ 216.976967][ C0] shmem_alloc_and_add_folio+0x790/0xf40 [ 216.976992][ C0] ? filemap_get_entry+0xad/0x2f0 [ 216.977015][ C0] ? filemap_get_entry+0xad/0x2f0 [ 216.977038][ C0] ? filemap_get_entry+0x28f/0x2f0 [ 216.977068][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 216.977092][ C0] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 216.977116][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 216.977141][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 216.977167][ C0] shmem_write_begin+0x16c/0x330 [ 216.977191][ C0] generic_perform_write+0x2c5/0x900 [ 216.977215][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 216.977230][ C0] ? down_write+0x162/0x1f0 [ 216.977254][ C0] ? file_update_time_flags+0x2cb/0x4e0 [ 216.977279][ C0] shmem_file_write_iter+0xf8/0x120 [ 216.977301][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 216.977325][ C0] __kernel_write_iter+0x428/0x910 [ 216.977350][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 216.977373][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 216.977400][ C0] ? __asan_memset+0x22/0x50 [ 216.977424][ C0] ? iov_iter_bvec+0xb8/0x180 [ 216.977448][ C0] dump_user_range+0x8a0/0xc90 [ 216.977474][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 216.977493][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 216.977521][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 216.977549][ C0] ? dump_emit+0xa6/0xe0 [ 216.977566][ C0] ? elf_core_dump+0x2cd0/0x3960 [ 216.977588][ C0] elf_core_dump+0x3369/0x3960 [ 216.977619][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 216.977640][ C0] ? kasan_save_track+0x4f/0x80 [ 216.977664][ C0] ? kasan_save_track+0x3e/0x80 [ 216.977688][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 216.977702][ C0] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 216.977727][ C0] ? coredump_write+0x343/0x18b0 [ 216.977746][ C0] ? vfs_coredump+0x3321/0x3e60 [ 216.977763][ C0] ? get_signal+0x1108/0x1340 [ 216.977784][ C0] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 216.977805][ C0] ? irqentry_exit+0x177/0x660 [ 216.977822][ C0] ? exc_page_fault+0xab/0x100 [ 216.977838][ C0] ? asm_exc_page_fault+0x26/0x30 [ 216.977878][ C0] ? 0xffffffffff600000 [ 216.977907][ C0] coredump_write+0x1121/0x18b0 [ 216.977937][ C0] ? __pfx_coredump_write+0x10/0x10 [ 216.977966][ C0] ? unshare_files+0xa9/0x140 [ 216.977984][ C0] vfs_coredump+0x3321/0x3e60 [ 216.978015][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 216.978033][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978063][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978092][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978118][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978142][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978170][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 216.978189][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 216.978206][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 216.978235][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 216.978259][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 216.978280][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 216.978304][ C0] ? kernel_text_address+0xa5/0xe0 [ 216.978325][ C0] ? __kernel_text_address+0xd/0x40 [ 216.978345][ C0] ? unwind_get_return_address+0x4d/0x90 [ 216.978361][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 216.978387][ C0] ? arch_stack_walk+0xfc/0x150 [ 216.978409][ C0] ? stack_trace_save+0x9c/0xe0 [ 216.978431][ C0] ? stack_depot_save_flags+0x40/0x850 [ 216.978452][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 216.978477][ C0] ? kasan_save_track+0x4f/0x80 [ 216.978501][ C0] ? kasan_save_track+0x3e/0x80 [ 216.978524][ C0] ? kasan_save_free_info+0x46/0x50 [ 216.978544][ C0] ? __kasan_slab_free+0x5c/0x80 [ 216.978558][ C0] ? kmem_cache_free+0x197/0x620 [ 216.978581][ C0] ? get_signal+0xa4b/0x1340 [ 216.978601][ C0] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 216.978620][ C0] ? irqentry_exit+0x177/0x660 [ 216.978636][ C0] ? exc_page_fault+0xab/0x100 [ 216.978652][ C0] ? asm_exc_page_fault+0x26/0x30 [ 216.978695][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.978710][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 216.978729][ C0] get_signal+0x1108/0x1340 [ 216.978762][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 216.978784][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.978810][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 216.978838][ C0] irqentry_exit+0x177/0x660 [ 216.978860][ C0] exc_page_fault+0xab/0x100 [ 216.978878][ C0] asm_exc_page_fault+0x26/0x30 [ 216.978894][ C0] RIP: 0033:0x7f0a29c9b144 [ 216.978914][ C0] Code: 00 e9 42 ff ff ff 41 89 45 00 e9 48 ff ff ff bf 01 00 00 00 e8 2d ba 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 ec 08 <64> 8b 04 25 ac ff ff ff 85 c0 75 40 48 8b 46 10 64 8b 14 25 a8 ff [ 216.978928][ C0] RSP: 002b:00007fff4ee495b0 EFLAGS: 00010202 [ 216.978942][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f0a29cdcd09 [ 216.978952][ C0] RDX: 00007fff4ee495c0 RSI: 00007fff4ee496f0 RDI: 000000000000000b [ 216.978963][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000003 [ 216.978972][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 216.978982][ C0] R13: 00007fff4ef47790 R14: 00007fff4ef477d0 R15: 0000000000000000 [ 216.979002][ C0] [ 216.979015][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.909 msecs