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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "cf369ecf84bc27dce9f7db9127b1ceb47a539d1c9736c733af76806ba2bbf344f99918988f3b85d962f742a8ef22abe1ae1b974a"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x14010810}, 0xf596bdadadd0d44) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) 03:03:41 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:41 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r10, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:42 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:42 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) [ 80.948545][ T4204] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 80.960023][ T4204] CPU: 1 PID: 4204 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 80.970020][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 80.981768][ T4204] Call Trace: [ 80.985158][ T4204] [ 80.988171][ T4204] dump_stack_lvl+0xda/0x130 [ 80.992789][ T4204] dump_stack+0x15/0x20 [ 80.997021][ T4204] dump_header+0x82/0x2d0 [ 81.001374][ T4204] oom_kill_process+0x33a/0x4c0 [ 81.006282][ T4204] out_of_memory+0x9ca/0xbf0 [ 81.010923][ T4204] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 81.017018][ T4204] mem_cgroup_out_of_memory+0x139/0x190 [ 81.022579][ T4204] try_charge_memcg+0x759/0xd20 [ 81.027514][ T4204] ? __swap_duplicate+0x29b/0x2b0 [ 81.032540][ T4204] ? radix_tree_lookup+0xf9/0x150 [ 81.037588][ T4204] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 81.043671][ T4204] __read_swap_cache_async+0x2b9/0x510 [ 81.049171][ T4204] swap_cluster_readahead+0x276/0x3f0 [ 81.054556][ T4204] swapin_readahead+0xe2/0x7a0 [ 81.059473][ T4204] ? __filemap_get_folio+0x41a/0x5a0 [ 81.064779][ T4204] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 81.070484][ T4204] ? swap_cache_get_folio+0x6e/0x200 [ 81.075929][ T4204] do_swap_page+0x44c/0x1570 [ 81.080531][ T4204] ? __rcu_read_lock+0x35/0x50 [ 81.085468][ T4204] ? pte_offset_map_nolock+0x124/0x1d0 [ 81.090936][ T4204] handle_mm_fault+0x7f6/0x27b0 [ 81.095966][ T4204] exc_page_fault+0x2f7/0x6d0 [ 81.100712][ T4204] asm_exc_page_fault+0x26/0x30 [ 81.105652][ T4204] RIP: 0010:__get_user_8+0x11/0x20 [ 81.110848][ T4204] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 81.130484][ T4204] RSP: 0018:ffffc900015bfe38 EFLAGS: 00050202 [ 81.136548][ T4204] RAX: 0000555556880da8 RBX: ffffc900015bfe40 RCX: ffffffff81448b63 [ 81.144531][ T4204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811cfeaa50 [ 81.152508][ T4204] RBP: ffffc900015bff00 R08: 000188811cfeaa57 R09: 0000000000000000 [ 81.160481][ T4204] R10: 0001ffffffffffff R11: 000000000000b7c2 R12: ffff88811cfea080 [ 81.168460][ T4204] R13: ffff88811cfeaa50 R14: ffffc900015bff58 R15: ffffc900015bffd8 [ 81.176455][ T4204] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 81.182424][ T4204] __rseq_handle_notify_resume+0xc7/0xbf0 [ 81.188149][ T4204] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 81.194159][ T4204] ? __se_sys_clock_nanosleep+0x202/0x230 [ 81.199892][ T4204] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 81.205807][ T4204] syscall_exit_to_user_mode+0x8e/0x130 [ 81.211387][ T4204] do_syscall_64+0x65/0x120 [ 81.215905][ T4204] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 81.221807][ T4204] RIP: 0033:0x7f9fdba92135 [ 81.226230][ T4204] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 81.245937][ T4204] RSP: 002b:00007ffd53fcf490 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 81.254379][ T4204] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 00007f9fdba92135 [ 81.262357][ T4204] RDX: 00007ffd53fcf4d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.270339][ T4204] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 81.278399][ T4204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013c16 [ 81.286382][ T4204] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 00000000000138d5 [ 81.294362][ T4204] [ 81.298046][ T4204] memory: usage 307200kB, limit 307200kB, failcnt 3413 [ 81.305173][ T4204] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 81.313127][ T4204] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 81.320614][ T4204] Memory cgroup stats for /syz0: [ 81.320838][ T4204] cache 16384 [ 81.329411][ T4204] rss 8192 [ 81.332539][ T4204] shmem 0 [ 81.335527][ T4204] mapped_file 0 [ 81.339100][ T4204] dirty 0 [ 81.342076][ T4204] writeback 8192 [ 81.345666][ T4204] workingset_refault_anon 562 [ 81.350341][ T4204] workingset_refault_file 24 [ 81.354935][ T4204] swap 159744 [ 81.358393][ T4204] swapcached 8192 [ 81.362089][ T4204] pgpgin 2639 [ 81.365545][ T4204] pgpgout 2633 [ 81.369092][ T4204] pgfault 6437 [ 81.372611][ T4204] pgmajfault 214 [ 81.376229][ T4204] inactive_anon 0 [ 81.379903][ T4204] active_anon 0 [ 81.383358][ T4204] inactive_file 4096 [ 81.387345][ T4204] active_file 12288 [ 81.391241][ T4204] unevictable 0 [ 81.394729][ T4204] hierarchical_memory_limit 314572800 [ 81.400118][ T4204] hierarchical_memsw_limit 9223372036854771712 [ 81.406301][ T4204] total_cache 16384 [ 81.410123][ T4204] total_rss 8192 [ 81.413663][ T4204] total_shmem 0 [ 81.417172][ T4204] total_mapped_file 0 [ 81.421143][ T4204] total_dirty 0 [ 81.424586][ T4204] total_writeback 8192 [ 81.428670][ T4204] total_workingset_refault_anon 562 [ 81.433855][ T4204] total_workingset_refault_file 24 [ 81.439010][ T4204] total_swap 159744 [ 81.442874][ T4204] total_swapcached 8192 [ 81.447118][ T4204] total_pgpgin 2639 [ 81.451034][ T4204] total_pgpgout 2633 [ 81.454918][ T4204] total_pgfault 6437 [ 81.458853][ T4204] total_pgmajfault 214 [ 81.462960][ T4204] total_inactive_anon 0 [ 81.467239][ T4204] total_active_anon 0 [ 81.471211][ T4204] total_inactive_file 4096 [ 81.475637][ T4204] total_active_file 12288 [ 81.479999][ T4204] total_unevictable 0 [ 81.483982][ T4204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4204,uid=0 [ 81.499272][ T4204] Memory cgroup out of memory: Killed process 4204 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:43 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:43 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r9, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000003000)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000001d00)={0x1298, 0x13, 0x400, 0x70bd2b, 0x25dfdbff, {0x50, 0x40, 0x81, 0x2, {0x4e21, 0x4e21, [0x80000000, 0xb2, 0x6, 0x78], [0x6, 0x0, 0x7fff, 0x7fffffff], r8, [0x3000, 0x1]}, 0xffff0000, 0xfbb9}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "c051e5c5b83677b90080e388a5e45fce42ef2f440a552502ae4d0c67782cc5031631e210c79b87"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "8eec216374f782cd52d778a93d6f65c3792f4a12cb36b539421b2ff218259f8dd7ddd67f959a92d707f3218bee55383a7a3c82c83e16866cd6d97a1ac2b5e02c1a5b38f314c7e27e31dd6ec758804cbaacb4dc7a6ee5cee7af5e60bef540d594dfc61ddf5bc12fffc92e61a473ef6bdae0ea28dd298647add6296e182d031ed7ca104886235a12a574cd467f8dfb2ea1c7840ffa03fdf4f046cf68c5793f8345b377dd168d80d1b87a68b654257cfa5606f834a49b37b7ae876fa31100a0fed3dabe59ef2e71ca2d543fdc991ed152170948d428f2a53aaf6f0e65adc1e2695155e13a340509c931622e7958c479507a0ae3da28"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "2f610295519a2910e529d693a055f31cbe6371ef3da7065086424e7e84887f31fc80be0e5bea198c78d475eea2114ed850a72a0f312c300656a93a190db12b9f252bd24daf5002768b1acadede80427f31c20fc1196fe81990d74a7f8f9a43dc18c35ed392d94398ee9d2c53c32187f678974051d1878d4a7bdffe47f8a37d7db064960b671ae56264791b8dc4738280ce"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "02c9bf3c42cebed9c70c5ae751eb1e08f52d628860e6ecc581f62c57081e0af8f401db9cfa031babf6f9e0ca775693fb2dce15c6cc1082992edd7136b4558c827b5191c681428a883cf0536c6d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "cf369ecf84bc27dce9f7db9127b1ceb47a539d1c9736c733af76806ba2bbf344f99918988f3b85d962f742a8ef22abe1ae1b974a"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x14010810}, 0xf596bdadadd0d44) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) 03:03:43 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) 03:03:43 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) 03:03:43 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r10, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:43 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:44 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:44 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r9, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000003000)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000001d00)={0x1298, 0x13, 0x400, 0x70bd2b, 0x25dfdbff, {0x50, 0x40, 0x81, 0x2, {0x4e21, 0x4e21, [0x80000000, 0xb2, 0x6, 0x78], [0x6, 0x0, 0x7fff, 0x7fffffff], r8, [0x3000, 0x1]}, 0xffff0000, 0xfbb9}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "c051e5c5b83677b90080e388a5e45fce42ef2f440a552502ae4d0c67782cc5031631e210c79b87"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "8eec216374f782cd52d778a93d6f65c3792f4a12cb36b539421b2ff218259f8dd7ddd67f959a92d707f3218bee55383a7a3c82c83e16866cd6d97a1ac2b5e02c1a5b38f314c7e27e31dd6ec758804cbaacb4dc7a6ee5cee7af5e60bef540d594dfc61ddf5bc12fffc92e61a473ef6bdae0ea28dd298647add6296e182d031ed7ca104886235a12a574cd467f8dfb2ea1c7840ffa03fdf4f046cf68c5793f8345b377dd168d80d1b87a68b654257cfa5606f834a49b37b7ae876fa31100a0fed3dabe59ef2e71ca2d543fdc991ed152170948d428f2a53aaf6f0e65adc1e2695155e13a340509c931622e7958c479507a0ae3da28"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "2f610295519a2910e529d693a055f31cbe6371ef3da7065086424e7e84887f31fc80be0e5bea198c78d475eea2114ed850a72a0f312c300656a93a190db12b9f252bd24daf5002768b1acadede80427f31c20fc1196fe81990d74a7f8f9a43dc18c35ed392d94398ee9d2c53c32187f678974051d1878d4a7bdffe47f8a37d7db064960b671ae56264791b8dc4738280ce"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "02c9bf3c42cebed9c70c5ae751eb1e08f52d628860e6ecc581f62c57081e0af8f401db9cfa031babf6f9e0ca775693fb2dce15c6cc1082992edd7136b4558c827b5191c681428a883cf0536c6d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "cf369ecf84bc27dce9f7db9127b1ceb47a539d1c9736c733af76806ba2bbf344f99918988f3b85d962f742a8ef22abe1ae1b974a"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x14010810}, 0xf596bdadadd0d44) 03:03:44 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) 03:03:44 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 03:03:44 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r10, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:45 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) [ 84.202531][ T4236] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.213930][ T4236] CPU: 0 PID: 4236 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 84.223976][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.234030][ T4236] Call Trace: [ 84.237303][ T4236] [ 84.240666][ T4236] dump_stack_lvl+0xda/0x130 [ 84.245261][ T4236] dump_stack+0x15/0x20 [ 84.249442][ T4236] dump_header+0x82/0x2d0 [ 84.253778][ T4236] oom_kill_process+0x33a/0x4c0 [ 84.258632][ T4236] out_of_memory+0x9ca/0xbf0 [ 84.263296][ T4236] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 84.269409][ T4236] mem_cgroup_out_of_memory+0x139/0x190 [ 84.275097][ T4236] try_charge_memcg+0x759/0xd20 [ 84.280086][ T4236] ? __swap_duplicate+0x29b/0x2b0 [ 84.285110][ T4236] ? radix_tree_lookup+0xf9/0x150 [ 84.290147][ T4236] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 84.296248][ T4236] __read_swap_cache_async+0x2b9/0x510 [ 84.301733][ T4236] swap_cluster_readahead+0x276/0x3f0 [ 84.307180][ T4236] swapin_readahead+0xe2/0x7a0 [ 84.312030][ T4236] ? __filemap_get_folio+0x41a/0x5a0 [ 84.317387][ T4236] ? save_fpregs_to_fpstate+0xfe/0x150 [ 84.322858][ T4236] ? swap_cache_get_folio+0x6e/0x200 [ 84.328200][ T4236] do_swap_page+0x44c/0x1570 [ 84.332791][ T4236] ? __schedule+0x5d8/0x920 [ 84.337420][ T4236] ? xas_load+0x3ae/0x3c0 [ 84.342188][ T4236] ? __rcu_read_lock+0x35/0x50 [ 84.346973][ T4236] ? pte_offset_map_nolock+0x124/0x1d0 [ 84.352493][ T4236] handle_mm_fault+0x7f6/0x27b0 [ 84.357402][ T4236] exc_page_fault+0x2f7/0x6d0 [ 84.362088][ T4236] asm_exc_page_fault+0x26/0x30 [ 84.366992][ T4236] RIP: 0010:__get_user_8+0x11/0x20 [ 84.372102][ T4236] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 84.391736][ T4236] RSP: 0018:ffffc90000f73e58 EFLAGS: 00050202 [ 84.397806][ T4236] RAX: 000055555693eda8 RBX: ffffc90000f73e60 RCX: ffffffff81448b63 [ 84.405832][ T4236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811cd6aa50 [ 84.413893][ T4236] RBP: ffffc90000f73f20 R08: 000188811cd6aa57 R09: 0000000000000000 [ 84.421875][ T4236] R10: 0001ffffffffffff R11: 0001c90000f73ee8 R12: ffff88811cd6a080 [ 84.429929][ T4236] R13: ffff88811cd6aa50 R14: ffffc90000f73f58 R15: ffffc90000f73fd8 [ 84.437910][ T4236] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 84.443885][ T4236] __rseq_handle_notify_resume+0xc7/0xbf0 [ 84.449632][ T4236] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 84.455635][ T4236] ? task_mm_cid_work+0x8a/0x1b0 [ 84.460642][ T4236] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 84.466541][ T4236] irqentry_exit_to_user_mode+0xcf/0x130 [ 84.472186][ T4236] irqentry_exit+0x12/0x40 [ 84.476624][ T4236] asm_exc_page_fault+0x26/0x30 [ 84.481493][ T4236] RIP: 0033:0x7fca7be2cd14 [ 84.485961][ T4236] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 84.505943][ T4236] RSP: 002b:00007ffd8aceab60 EFLAGS: 00010202 [ 84.512056][ T4236] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 0000000000000000 [ 84.520040][ T4236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555693e788 [ 84.528014][ T4236] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 84.536025][ T4236] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000148db [ 84.544010][ T4236] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 000000000001459a [ 84.552009][ T4236] [ 84.555146][ T4236] memory: usage 8412kB, limit 307200kB, failcnt 3782 [ 84.561977][ T4236] memory+swap: usage 8572kB, limit 9007199254740988kB, failcnt 0 [ 84.569708][ T4236] kmem: usage 8400kB, limit 9007199254740988kB, failcnt 0 [ 84.576837][ T4236] Memory cgroup stats for /syz4: [ 84.608764][ T4236] cache 12288 [ 84.617062][ T4236] rss 61440 [ 84.620162][ T4236] shmem 0 [ 84.623088][ T4236] mapped_file 0 [ 84.626586][ T4236] dirty 0 [ 84.629509][ T4236] writeback 0 [ 84.632784][ T4236] workingset_refault_anon 581 [ 84.637480][ T4236] workingset_refault_file 30 [ 84.642054][ T4236] swap 73728 [ 84.645279][ T4236] swapcached 90112 [ 84.649072][ T4236] pgpgin 1819 [ 84.652348][ T4236] pgpgout 1794 [ 84.655735][ T4236] pgfault 4609 [ 84.659105][ T4236] pgmajfault 216 [ 84.662644][ T4236] inactive_anon 86016 [ 84.666634][ T4236] active_anon 4096 [ 84.670408][ T4236] inactive_file 0 [ 84.674029][ T4236] active_file 12288 [ 84.677842][ T4236] unevictable 0 [ 84.681359][ T4236] hierarchical_memory_limit 314572800 [ 84.686743][ T4236] hierarchical_memsw_limit 9223372036854771712 [ 84.692880][ T4236] total_cache 12288 [ 84.696761][ T4236] total_rss 61440 [ 84.700390][ T4236] total_shmem 0 [ 84.703891][ T4236] total_mapped_file 0 [ 84.707878][ T4236] total_dirty 0 [ 84.711355][ T4236] total_writeback 0 [ 84.715147][ T4236] total_workingset_refault_anon 581 [ 84.720376][ T4236] total_workingset_refault_file 30 [ 84.725647][ T4236] total_swap 73728 [ 84.729441][ T4236] total_swapcached 90112 [ 84.733743][ T4236] total_pgpgin 1819 [ 84.737683][ T4236] total_pgpgout 1794 [ 84.742084][ T4236] total_pgfault 4609 [ 84.746026][ T4236] total_pgmajfault 216 [ 84.750077][ T4236] total_inactive_anon 86016 [ 84.754599][ T4236] total_active_anon 4096 03:03:46 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) [ 84.758871][ T4236] total_inactive_file 0 [ 84.763007][ T4236] total_active_file 12288 [ 84.767356][ T4236] total_unevictable 0 [ 84.771323][ T4236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4235,uid=0 [ 84.786539][ T4236] Memory cgroup out of memory: Killed process 4235 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:03:46 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:46 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) 03:03:46 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:46 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r10, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:46 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r8, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) [ 86.107883][ T3130] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 86.119188][ T3130] CPU: 0 PID: 3130 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 86.129185][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 86.139816][ T3130] Call Trace: [ 86.143106][ T3130] [ 86.146040][ T3130] dump_stack_lvl+0xda/0x130 [ 86.150755][ T3130] dump_stack+0x15/0x20 [ 86.155020][ T3130] dump_header+0x82/0x2d0 [ 86.159460][ T3130] oom_kill_process+0x33a/0x4c0 [ 86.164357][ T3130] out_of_memory+0x9ca/0xbf0 [ 86.168994][ T3130] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 86.175100][ T3130] mem_cgroup_out_of_memory+0x139/0x190 [ 86.180778][ T3130] try_charge_memcg+0x759/0xd20 [ 86.185765][ T3130] ? __swap_duplicate+0x29b/0x2b0 [ 86.190861][ T3130] ? radix_tree_lookup+0xf9/0x150 [ 86.195905][ T3130] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 86.202000][ T3130] __read_swap_cache_async+0x2b9/0x510 [ 86.207540][ T3130] swap_cluster_readahead+0x276/0x3f0 [ 86.212949][ T3130] swapin_readahead+0xe2/0x7a0 [ 86.217759][ T3130] ? __filemap_get_folio+0x41a/0x5a0 [ 86.223050][ T3130] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 86.228686][ T3130] ? swap_cache_get_folio+0x6e/0x200 [ 86.234159][ T3130] do_swap_page+0x44c/0x1570 [ 86.238878][ T3130] ? __rcu_read_lock+0x35/0x50 [ 86.243648][ T3130] ? pte_offset_map_nolock+0x124/0x1d0 [ 86.249168][ T3130] handle_mm_fault+0x7f6/0x27b0 [ 86.254115][ T3130] exc_page_fault+0x2f7/0x6d0 [ 86.258806][ T3130] asm_exc_page_fault+0x26/0x30 [ 86.263712][ T3130] RIP: 0010:__get_user_8+0x11/0x20 [ 86.268888][ T3130] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 86.288497][ T3130] RSP: 0018:ffffc90000f7be38 EFLAGS: 00050202 [ 86.294604][ T3130] RAX: 000055555693dda8 RBX: ffffc90000f7be40 RCX: ffffffff81448b63 [ 86.302583][ T3130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888101205b10 [ 86.310557][ T3130] RBP: ffffc90000f7bf00 R08: 0001888101205b17 R09: 0000000000000000 [ 86.318531][ T3130] R10: 0001ffffffffffff R11: 000000000000a3c4 R12: ffff888101205140 [ 86.326551][ T3130] R13: ffff888101205b10 R14: ffffc90000f7bf58 R15: ffffc90000f7bfd8 [ 86.334529][ T3130] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 86.340505][ T3130] __rseq_handle_notify_resume+0xc7/0xbf0 [ 86.346299][ T3130] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 86.352294][ T3130] ? __se_sys_clock_nanosleep+0x202/0x230 [ 86.358062][ T3130] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 86.363959][ T3130] syscall_exit_to_user_mode+0x8e/0x130 [ 86.369602][ T3130] do_syscall_64+0x65/0x120 [ 86.374119][ T3130] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 86.380042][ T3130] RIP: 0033:0x7f56ac2910f3 [ 86.384453][ T3130] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 86.404110][ T3130] RSP: 002b:00007ffc3882b278 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 86.412538][ T3130] RAX: 0000000000000000 RBX: 000000000000008c RCX: 00007f56ac2910f3 [ 86.420552][ T3130] RDX: 00007ffc3882b290 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.428523][ T3130] RBP: 00007ffc3882b31c R08: 0000000000000010 R09: 00007ffc3884e0b0 [ 86.436501][ T3130] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 86.444472][ T3130] R13: 0000000000014c93 R14: 0000000000014c8b R15: 0000000000000006 [ 86.452450][ T3130] [ 86.455625][ T3130] memory: usage 307200kB, limit 307200kB, failcnt 3674 [ 86.462506][ T3130] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 86.470413][ T3130] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 86.477721][ T3130] Memory cgroup stats for /syz3: [ 86.484129][ T3130] cache 16384 [ 86.492412][ T3130] rss 0 [ 86.495171][ T3130] shmem 0 [ 86.498141][ T3130] mapped_file 0 [ 86.501589][ T3130] dirty 0 [ 86.504518][ T3130] writeback 0 [ 86.507909][ T3130] workingset_refault_anon 584 [ 86.512573][ T3130] workingset_refault_file 41 [ 86.517233][ T3130] swap 131072 [ 86.520512][ T3130] swapcached 16384 [ 86.524220][ T3130] pgpgin 1954 [ 86.527514][ T3130] pgpgout 1946 [ 86.530883][ T3130] pgfault 4771 [ 86.534250][ T3130] pgmajfault 234 [ 86.537820][ T3130] inactive_anon 16384 [ 86.541791][ T3130] active_anon 0 [ 86.545243][ T3130] inactive_file 4096 [ 86.549244][ T3130] active_file 12288 [ 86.553163][ T3130] unevictable 0 [ 86.556651][ T3130] hierarchical_memory_limit 314572800 [ 86.562022][ T3130] hierarchical_memsw_limit 9223372036854771712 [ 86.568407][ T3130] total_cache 16384 [ 86.572267][ T3130] total_rss 0 [ 86.575568][ T3130] total_shmem 0 [ 86.579024][ T3130] total_mapped_file 0 [ 86.583007][ T3130] total_dirty 0 [ 86.586486][ T3130] total_writeback 0 [ 86.590337][ T3130] total_workingset_refault_anon 584 [ 86.595626][ T3130] total_workingset_refault_file 41 [ 86.600729][ T3130] total_swap 131072 [ 86.604522][ T3130] total_swapcached 16384 [ 86.608858][ T3130] total_pgpgin 1954 [ 86.612723][ T3130] total_pgpgout 1946 [ 86.616664][ T3130] total_pgfault 4771 [ 86.620618][ T3130] total_pgmajfault 234 [ 86.624696][ T3130] total_inactive_anon 16384 [ 86.629238][ T3130] total_active_anon 0 [ 86.633207][ T3130] total_inactive_file 4096 [ 86.637675][ T3130] total_active_file 12288 [ 86.641990][ T3130] total_unevictable 0 03:03:48 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 03:03:48 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r10, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:48 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:48 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:48 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvmsg$can_raw(r8, &(0x7f0000001c40)={&(0x7f0000001880)=@tipc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/160, 0xa0}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/100, 0x64}], 0x4, &(0x7f0000001c00)}, 0x2143) [ 86.646406][ T3130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4259,uid=0 [ 86.662227][ T3130] Memory cgroup out of memory: Killed process 4259 (syz-executor.3) total-vm:46308kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:03:48 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:49 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 87.772581][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 87.783695][ T3086] CPU: 1 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 87.793778][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 87.803840][ T3086] Call Trace: [ 87.807157][ T3086] [ 87.810170][ T3086] dump_stack_lvl+0xda/0x130 [ 87.814766][ T3086] dump_stack+0x15/0x20 [ 87.818938][ T3086] dump_header+0x82/0x2d0 [ 87.823275][ T3086] oom_kill_process+0x33a/0x4c0 [ 87.828198][ T3086] out_of_memory+0x9ca/0xbf0 [ 87.832800][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 87.838926][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 87.844575][ T3086] try_charge_memcg+0x759/0xd20 [ 87.849478][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 87.854504][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 87.859533][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 87.865696][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 87.871173][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 87.876551][ T3086] swapin_readahead+0xe2/0x7a0 [ 87.881324][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 87.886677][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 87.891975][ T3086] do_swap_page+0x44c/0x1570 [ 87.896589][ T3086] ? __rcu_read_lock+0x35/0x50 [ 87.901416][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 87.906916][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 87.911779][ T3086] ? mas_walk+0x204/0x320 [ 87.916159][ T3086] exc_page_fault+0x3ff/0x6d0 [ 87.920919][ T3086] asm_exc_page_fault+0x26/0x30 [ 87.925805][ T3086] RIP: 0033:0x7fd7c761c0f5 [ 87.930227][ T3086] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 87.949826][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00010246 [ 87.955887][ T3086] RAX: 0000000000000000 RBX: 000000000000006f RCX: 00007fd7c761c0f3 [ 87.963924][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 03:03:49 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 87.972002][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 87.979960][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 87.987913][ T3086] R13: 0000000000015616 R14: 00000000000152bf R15: 000000000000000f [ 87.995897][ T3086] [ 87.999705][ T3086] memory: usage 400kB, limit 307200kB, failcnt 5378 [ 88.007093][ T3086] memory+swap: usage 328kB, limit 9007199254740988kB, failcnt 0 [ 88.014971][ T3086] kmem: usage 56kB, limit 9007199254740988kB, failcnt 0 [ 88.021962][ T3086] Memory cgroup stats for /syz5: [ 88.030254][ T3086] cache 12288 [ 88.038621][ T3086] rss 0 [ 88.041376][ T3086] shmem 0 [ 88.044317][ T3086] mapped_file 0 [ 88.047830][ T3086] dirty 0 [ 88.050758][ T3086] writeback 0 [ 88.054087][ T3086] workingset_refault_anon 643 [ 88.058789][ T3086] workingset_refault_file 24 [ 88.063373][ T3086] swap 126976 [ 88.066659][ T3086] swapcached 8192 [ 88.070331][ T3086] pgpgin 1600 [ 88.073603][ T3086] pgpgout 1595 [ 88.077072][ T3086] pgfault 4119 [ 88.080437][ T3086] pgmajfault 247 [ 88.083984][ T3086] inactive_anon 8192 [ 88.087902][ T3086] active_anon 0 [ 88.091347][ T3086] inactive_file 8192 [ 88.095228][ T3086] active_file 4096 [ 88.099045][ T3086] unevictable 0 [ 88.102502][ T3086] hierarchical_memory_limit 314572800 [ 88.107909][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 88.114054][ T3086] total_cache 12288 [ 88.117868][ T3086] total_rss 0 [ 88.121138][ T3086] total_shmem 0 [ 88.124584][ T3086] total_mapped_file 0 [ 88.128686][ T3086] total_dirty 0 [ 88.132148][ T3086] total_writeback 0 [ 88.135972][ T3086] total_workingset_refault_anon 643 [ 88.141505][ T3086] total_workingset_refault_file 24 [ 88.146684][ T3086] total_swap 126976 [ 88.150524][ T3086] total_swapcached 8192 [ 88.154761][ T3086] total_pgpgin 1600 [ 88.158651][ T3086] total_pgpgout 1595 [ 88.162654][ T3086] total_pgfault 4119 [ 88.166558][ T3086] total_pgmajfault 247 [ 88.170689][ T3086] total_inactive_anon 8192 [ 88.175099][ T3086] total_active_anon 0 [ 88.179172][ T3086] total_inactive_file 8192 [ 88.183634][ T3086] total_active_file 4096 [ 88.187993][ T3086] total_unevictable 0 [ 88.191972][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4270,uid=0 [ 88.207293][ T3086] Memory cgroup out of memory: OOM victim 4270 (syz-executor.5) is already exiting. Skip killing the task [ 88.220258][ T3088] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 88.231331][ T3088] CPU: 1 PID: 3088 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 88.241317][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 88.251429][ T3088] Call Trace: [ 88.254727][ T3088] [ 88.257726][ T3088] dump_stack_lvl+0xda/0x130 [ 88.262331][ T3088] dump_stack+0x15/0x20 [ 88.266503][ T3088] dump_header+0x82/0x2d0 [ 88.270907][ T3088] oom_kill_process+0x33a/0x4c0 [ 88.275813][ T3088] out_of_memory+0x9ca/0xbf0 [ 88.280466][ T3088] mem_cgroup_out_of_memory+0x139/0x190 [ 88.286039][ T3088] try_charge_memcg+0x759/0xd20 [ 88.290951][ T3088] ? __swap_duplicate+0x29b/0x2b0 [ 88.295974][ T3088] ? radix_tree_lookup+0xf9/0x150 [ 88.301055][ T3088] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 88.307184][ T3088] __read_swap_cache_async+0x2b9/0x510 [ 88.312726][ T3088] swap_cluster_readahead+0x276/0x3f0 [ 88.318195][ T3088] swapin_readahead+0xe2/0x7a0 [ 88.323008][ T3088] ? __filemap_get_folio+0x41a/0x5a0 [ 88.328335][ T3088] ? swap_cache_get_folio+0x6e/0x200 [ 88.333669][ T3088] do_swap_page+0x44c/0x1570 [ 88.338399][ T3088] ? __rcu_read_lock+0x35/0x50 [ 88.343176][ T3088] ? pte_offset_map_nolock+0x124/0x1d0 [ 88.348661][ T3088] handle_mm_fault+0x7f6/0x27b0 [ 88.353534][ T3088] ? mas_walk+0x204/0x320 [ 88.357879][ T3088] exc_page_fault+0x3ff/0x6d0 [ 88.362764][ T3088] asm_exc_page_fault+0x26/0x30 [ 88.367641][ T3088] RIP: 0033:0x7f9fdba13b60 [ 88.372051][ T3088] Code: 53 48 81 ec b8 06 00 00 89 74 24 0c be 01 00 00 00 89 54 24 08 ba 06 00 00 00 e8 4b 4f 05 00 89 c5 83 f8 ff 0f 84 68 01 00 00 <41> 8b 44 24 28 85 c0 0f 84 2e 01 00 00 48 8d 5c 24 20 45 31 f6 b9 [ 88.391691][ T3088] RSP: 002b:00007ffd53fcf040 EFLAGS: 00010283 [ 88.397763][ T3088] RAX: 0000000000000000 RBX: 00007ffd53fcf0c0 RCX: 0000000000000000 [ 88.405806][ T3088] RDX: 00007f9fdbb66e68 RSI: 0000005d784685a8 RDI: 0000000000000058 [ 88.413866][ T3088] RBP: 0000000000000003 R08: 00007ffd53fcf05c R09: 00007ffd53fcf477 [ 88.421863][ T3088] R10: 00007ffd53fcf0c0 R11: 0000000000000212 R12: 00007f9fdbb67140 03:03:49 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:49 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) [ 88.429871][ T3088] R13: 00007ffd53fcf05c R14: 0000000000000000 R15: 00007f9fdbb67ec0 [ 88.437849][ T3088] [ 88.441217][ T3088] memory: usage 307200kB, limit 307200kB, failcnt 5159 [ 88.448104][ T3088] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 88.456093][ T3088] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 88.463449][ T3088] Memory cgroup stats for /syz2: [ 88.463639][ T3088] cache 4096 [ 88.471911][ T3088] rss 8192 [ 88.474926][ T3088] shmem 0 [ 88.477940][ T3088] mapped_file 0 [ 88.481403][ T3088] dirty 0 [ 88.484376][ T3088] writeback 0 [ 88.487741][ T3088] workingset_refault_anon 596 [ 88.492474][ T3088] workingset_refault_file 37 [ 88.497124][ T3088] swap 147456 [ 88.500468][ T3088] swapcached 8192 [ 88.504149][ T3088] pgpgin 1932 [ 88.507466][ T3088] pgpgout 1929 [ 88.510938][ T3088] pgfault 4613 [ 88.514315][ T3088] pgmajfault 226 [ 88.517904][ T3088] inactive_anon 0 [ 88.521631][ T3088] active_anon 0 [ 88.525076][ T3088] inactive_file 0 [ 88.528717][ T3088] active_file 4096 [ 88.532423][ T3088] unevictable 0 [ 88.535892][ T3088] hierarchical_memory_limit 314572800 [ 88.541769][ T3088] hierarchical_memsw_limit 9223372036854771712 [ 88.547944][ T3088] total_cache 4096 [ 88.551657][ T3088] total_rss 8192 [ 88.555251][ T3088] total_shmem 0 [ 88.558715][ T3088] total_mapped_file 0 [ 88.562684][ T3088] total_dirty 0 [ 88.566761][ T3088] total_writeback 0 [ 88.570560][ T3088] total_workingset_refault_anon 596 [ 88.576389][ T3088] total_workingset_refault_file 37 [ 88.581564][ T3088] total_swap 147456 [ 88.585365][ T3088] total_swapcached 8192 [ 88.589560][ T3088] total_pgpgin 1932 [ 88.593405][ T3088] total_pgpgout 1929 [ 88.597332][ T3088] total_pgfault 4613 [ 88.601229][ T3088] total_pgmajfault 226 [ 88.605290][ T3088] total_inactive_anon 0 [ 88.609456][ T3088] total_active_anon 0 [ 88.613489][ T3088] total_inactive_file 0 [ 88.617674][ T3088] total_active_file 4096 [ 88.621943][ T3088] total_unevictable 0 [ 88.625931][ T3088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4271,uid=0 [ 88.641181][ T3088] Memory cgroup out of memory: Killed process 4272 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:50 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:50 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840), 0x80) [ 88.999235][ T4281] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 89.010635][ T4281] CPU: 0 PID: 4281 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 89.020627][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 89.030717][ T4281] Call Trace: [ 89.033998][ T4281] [ 89.036939][ T4281] dump_stack_lvl+0xda/0x130 [ 89.041543][ T4281] dump_stack+0x15/0x20 [ 89.045771][ T4281] dump_header+0x82/0x2d0 [ 89.050165][ T4281] oom_kill_process+0x33a/0x4c0 [ 89.055034][ T4281] out_of_memory+0x9ca/0xbf0 [ 89.059659][ T4281] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 89.065769][ T4281] mem_cgroup_out_of_memory+0x139/0x190 [ 89.071324][ T4281] try_charge_memcg+0x759/0xd20 [ 89.076201][ T4281] ? __swap_duplicate+0x29b/0x2b0 [ 89.081313][ T4281] ? radix_tree_lookup+0xf9/0x150 [ 89.086518][ T4281] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 89.092625][ T4281] __read_swap_cache_async+0x2b9/0x510 [ 89.098130][ T4281] swap_cluster_readahead+0x276/0x3f0 [ 89.103563][ T4281] swapin_readahead+0xe2/0x7a0 [ 89.108414][ T4281] ? __filemap_get_folio+0x41a/0x5a0 [ 89.113726][ T4281] ? swap_cache_get_folio+0x6e/0x200 [ 89.119080][ T4281] do_swap_page+0x44c/0x1570 [ 89.123681][ T4281] ? exc_page_fault+0x3a6/0x6d0 [ 89.128571][ T4281] ? __rcu_read_lock+0x35/0x50 [ 89.133407][ T4281] ? pte_offset_map_nolock+0x124/0x1d0 [ 89.138920][ T4281] handle_mm_fault+0x7f6/0x27b0 [ 89.143787][ T4281] ? mas_walk+0x204/0x320 [ 89.148135][ T4281] exc_page_fault+0x3ff/0x6d0 [ 89.152915][ T4281] asm_exc_page_fault+0x26/0x30 [ 89.157796][ T4281] RIP: 0033:0x7fca7be9e104 [ 89.162213][ T4281] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff [ 89.181838][ T4281] RSP: 002b:00007ffd8aceaaf0 EFLAGS: 00010206 [ 89.188028][ T4281] RAX: 00000000fffffffa RBX: 00007fca7bfa1f80 RCX: 0000000000000000 [ 89.196003][ T4281] RDX: 00007ffd8aceab30 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.204046][ T4281] RBP: 00007fca7bfa3980 R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 89.212025][ T4281] R10: 0000000000000000 R11: 0000000000003dc0 R12: 0000000000015b9f [ 89.220010][ T4281] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 000000000001585e [ 89.227990][ T4281] [ 89.231621][ T4281] memory: usage 307200kB, limit 307200kB, failcnt 3419 [ 89.239010][ T4281] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0 [ 89.247034][ T4281] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 89.254324][ T4281] Memory cgroup stats for /syz1: [ 89.254444][ T4281] cache 12288 [ 89.262675][ T4281] rss 8192 [ 89.265712][ T4281] shmem 0 [ 89.268646][ T4281] mapped_file 0 [ 89.272142][ T4281] dirty 0 [ 89.275073][ T4281] writeback 4096 [ 89.278619][ T4281] workingset_refault_anon 494 [ 89.283283][ T4281] workingset_refault_file 52 [ 89.287900][ T4281] swap 126976 [ 89.291203][ T4281] swapcached 28672 [ 89.294913][ T4281] pgpgin 2965 [ 89.298218][ T4281] pgpgout 2955 [ 89.301596][ T4281] pgfault 7487 [ 89.304975][ T4281] pgmajfault 218 [ 89.308601][ T4281] inactive_anon 4096 [ 89.312494][ T4281] active_anon 0 [ 89.316039][ T4281] inactive_file 12288 [ 89.320022][ T4281] active_file 0 [ 89.323475][ T4281] unevictable 0 [ 89.326957][ T4281] hierarchical_memory_limit 314572800 [ 89.332368][ T4281] hierarchical_memsw_limit 9223372036854771712 [ 89.338699][ T4281] total_cache 12288 [ 89.342507][ T4281] total_rss 8192 [ 89.346089][ T4281] total_shmem 0 [ 89.349537][ T4281] total_mapped_file 0 [ 89.353522][ T4281] total_dirty 0 [ 89.357070][ T4281] total_writeback 4096 [ 89.361135][ T4281] total_workingset_refault_anon 494 [ 89.366521][ T4281] total_workingset_refault_file 52 [ 89.371717][ T4281] total_swap 126976 [ 89.375676][ T4281] total_swapcached 28672 [ 89.379916][ T4281] total_pgpgin 2965 [ 89.383746][ T4281] total_pgpgout 2955 [ 89.387674][ T4281] total_pgfault 7487 [ 89.391623][ T4281] total_pgmajfault 218 [ 89.395716][ T4281] total_inactive_anon 4096 [ 89.400128][ T4281] total_active_anon 0 [ 89.404104][ T4281] total_inactive_file 12288 [ 89.408658][ T4281] total_active_file 0 [ 89.412638][ T4281] total_unevictable 0 [ 89.416749][ T4281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4281,uid=0 [ 89.432042][ T4281] Memory cgroup out of memory: Killed process 4281 (syz-executor.1) total-vm:46572kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:51 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) 03:03:51 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) 03:03:51 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:51 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:51 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:51 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) pipe2$watch_queue(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r11, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 90.774143][ T4301] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 90.785512][ T4301] CPU: 1 PID: 4301 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 90.795599][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 90.805683][ T4301] Call Trace: [ 90.808960][ T4301] [ 90.811891][ T4301] dump_stack_lvl+0xda/0x130 [ 90.816553][ T4301] dump_stack+0x15/0x20 [ 90.820805][ T4301] dump_header+0x82/0x2d0 [ 90.825183][ T4301] oom_kill_process+0x33a/0x4c0 [ 90.830130][ T4301] out_of_memory+0x9ca/0xbf0 [ 90.834723][ T4301] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 90.840798][ T4301] mem_cgroup_out_of_memory+0x139/0x190 [ 90.846352][ T4301] try_charge_memcg+0x759/0xd20 [ 90.851269][ T4301] ? __swap_duplicate+0x29b/0x2b0 [ 90.856303][ T4301] ? radix_tree_lookup+0xf9/0x150 [ 90.861366][ T4301] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 90.867437][ T4301] __read_swap_cache_async+0x2b9/0x510 [ 90.872924][ T4301] swap_cluster_readahead+0x276/0x3f0 [ 90.878309][ T4301] swapin_readahead+0xe2/0x7a0 [ 90.883130][ T4301] ? __filemap_get_folio+0x41a/0x5a0 [ 90.888482][ T4301] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 90.894047][ T4301] ? swap_cache_get_folio+0x6e/0x200 [ 90.899366][ T4301] do_swap_page+0x44c/0x1570 [ 90.903971][ T4301] ? __rcu_read_lock+0x35/0x50 [ 90.908736][ T4301] ? pte_offset_map_nolock+0x124/0x1d0 [ 90.914229][ T4301] handle_mm_fault+0x7f6/0x27b0 [ 90.919103][ T4301] ? mas_walk+0x204/0x320 [ 90.923480][ T4301] exc_page_fault+0x3ff/0x6d0 [ 90.928205][ T4301] asm_exc_page_fault+0x26/0x30 [ 90.933122][ T4301] RIP: 0033:0x7ff768af9d14 [ 90.937608][ T4301] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 90.957226][ T4301] RSP: 002b:00007fffd24738d0 EFLAGS: 00010202 [ 90.963390][ T4301] RAX: 0000000000000000 RBX: 00007ff768c6ef80 RCX: 0000000000000000 [ 90.971417][ T4301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556f78788 [ 90.979405][ T4301] RBP: 00007ff768c70980 R08: 0000000000000000 R09: 00007fffd25c20b0 [ 90.987396][ T4301] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001630e [ 90.995443][ T4301] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 0000000000015fcd [ 91.003434][ T4301] [ 91.006551][ T4301] memory: usage 8432kB, limit 307200kB, failcnt 4280 [ 91.013287][ T4301] memory+swap: usage 8556kB, limit 9007199254740988kB, failcnt 0 [ 91.021085][ T4301] kmem: usage 8400kB, limit 9007199254740988kB, failcnt 0 [ 91.028229][ T4301] Memory cgroup stats for /syz4: [ 91.132614][ T4301] cache 12288 [ 91.140907][ T4301] rss 0 [ 91.143699][ T4301] shmem 0 [ 91.146653][ T4301] mapped_file 0 [ 91.150148][ T4301] dirty 0 [ 91.153095][ T4301] writeback 0 [ 91.156476][ T4301] workingset_refault_anon 644 [ 91.161143][ T4301] workingset_refault_file 34 [ 91.165764][ T4301] swap 126976 [ 91.169046][ T4301] swapcached 20480 [ 91.172757][ T4301] pgpgin 1982 [ 91.176054][ T4301] pgpgout 1974 [ 91.179428][ T4301] pgfault 5187 [ 91.182819][ T4301] pgmajfault 247 [ 91.186384][ T4301] inactive_anon 20480 [ 91.190368][ T4301] active_anon 0 [ 91.193913][ T4301] inactive_file 12288 [ 91.197910][ T4301] active_file 0 [ 91.201379][ T4301] unevictable 0 [ 91.204829][ T4301] hierarchical_memory_limit 314572800 [ 91.210301][ T4301] hierarchical_memsw_limit 9223372036854771712 [ 91.216466][ T4301] total_cache 12288 [ 91.220274][ T4301] total_rss 0 [ 91.223552][ T4301] total_shmem 0 [ 91.227038][ T4301] total_mapped_file 0 [ 91.231097][ T4301] total_dirty 0 [ 91.234550][ T4301] total_writeback 0 [ 91.238451][ T4301] total_workingset_refault_anon 644 [ 91.243652][ T4301] total_workingset_refault_file 34 [ 91.248785][ T4301] total_swap 126976 [ 91.252589][ T4301] total_swapcached 20480 [ 91.256912][ T4301] total_pgpgin 1982 [ 91.260727][ T4301] total_pgpgout 1974 [ 91.264617][ T4301] total_pgfault 5187 [ 91.268601][ T4301] total_pgmajfault 247 [ 91.272667][ T4301] total_inactive_anon 20480 [ 91.277184][ T4301] total_active_anon 0 [ 91.281208][ T4301] total_inactive_file 12288 [ 91.285762][ T4301] total_active_file 0 [ 91.289736][ T4301] total_unevictable 0 [ 91.293711][ T4301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4301,uid=0 [ 91.310548][ T4301] Memory cgroup out of memory: Killed process 4301 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 91.411147][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 91.422259][ T3089] CPU: 0 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 91.432329][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 91.442451][ T3089] Call Trace: [ 91.445723][ T3089] [ 91.448721][ T3089] dump_stack_lvl+0xda/0x130 [ 91.453391][ T3089] dump_stack+0x15/0x20 [ 91.457804][ T3089] dump_header+0x82/0x2d0 [ 91.462205][ T3089] oom_kill_process+0x33a/0x4c0 [ 91.467097][ T3089] out_of_memory+0x9ca/0xbf0 [ 91.471748][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 91.477948][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 91.483577][ T3089] try_charge_memcg+0x759/0xd20 [ 91.488443][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 91.493539][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 91.498578][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 91.504651][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 91.510196][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 91.515616][ T3089] swapin_readahead+0xe2/0x7a0 [ 91.520396][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 91.525803][ T3089] ? get_page_from_freelist+0x1414/0x1460 [ 91.531537][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 91.536830][ T3089] do_swap_page+0x44c/0x1570 [ 91.541500][ T3089] ? __rcu_read_lock+0x35/0x50 [ 91.546265][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 91.551800][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 91.556659][ T3089] exc_page_fault+0x2f7/0x6d0 [ 91.561356][ T3089] asm_exc_page_fault+0x26/0x30 [ 91.566270][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 91.571437][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 91.591157][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 91.597227][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 91.605202][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 91.613188][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 91.621226][ T3089] R10: 0001ffffffffffff R11: 000000000000a14c R12: ffff888103d68000 [ 91.629265][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 91.637393][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 91.643310][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 91.649053][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 91.655084][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 91.660990][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 91.666925][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 91.672573][ T3089] do_syscall_64+0x65/0x120 [ 91.677132][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 91.683210][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 91.687766][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 91.707498][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 91.715923][ T3089] RAX: 0000000000000000 RBX: 00000000000000fe RCX: 00007fca7be9e0f3 [ 91.723908][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.731881][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 91.739855][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 91.747912][ T3089] R13: 0000000000016393 R14: 000000000001603f R15: 000000000000000e [ 91.756152][ T3089] [ 91.759313][ T3089] memory: usage 84kB, limit 307200kB, failcnt 4186 [ 91.766299][ T3089] memory+swap: usage 208kB, limit 9007199254740988kB, failcnt 0 [ 91.773929][ T3089] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 91.781154][ T3089] Memory cgroup stats for /syz1: [ 91.782676][ T3089] cache 16384 [ 91.790972][ T3089] rss 0 [ 91.793725][ T3089] shmem 0 [ 91.796681][ T3089] mapped_file 0 [ 91.800136][ T3089] dirty 0 [ 91.803205][ T3089] writeback 0 [ 91.806499][ T3089] workingset_refault_anon 522 03:03:53 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:53 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) [ 91.811168][ T3089] workingset_refault_file 53 [ 91.815895][ T3089] swap 126976 [ 91.819171][ T3089] swapcached 0 [ 91.822530][ T3089] pgpgin 3018 [ 91.825821][ T3089] pgpgout 3014 [ 91.829239][ T3089] pgfault 7581 [ 91.832601][ T3089] pgmajfault 228 [ 91.836168][ T3089] inactive_anon 0 [ 91.839869][ T3089] active_anon 0 [ 91.843322][ T3089] inactive_file 12288 [ 91.847412][ T3089] active_file 4096 [ 91.851129][ T3089] unevictable 0 [ 91.854676][ T3089] hierarchical_memory_limit 314572800 [ 91.860093][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 91.866252][ T3089] total_cache 16384 [ 91.870129][ T3089] total_rss 0 [ 91.873420][ T3089] total_shmem 0 [ 91.876903][ T3089] total_mapped_file 0 [ 91.880947][ T3089] total_dirty 0 [ 91.884416][ T3089] total_writeback 0 [ 91.888254][ T3089] total_workingset_refault_anon 522 [ 91.893443][ T3089] total_workingset_refault_file 53 [ 91.898625][ T3089] total_swap 126976 [ 91.902434][ T3089] total_swapcached 0 [ 91.906457][ T3089] total_pgpgin 3018 [ 91.910267][ T3089] total_pgpgout 3014 [ 91.914166][ T3089] total_pgfault 7581 [ 91.918085][ T3089] total_pgmajfault 228 [ 91.922149][ T3089] total_inactive_anon 0 [ 91.926328][ T3089] total_active_anon 0 [ 91.930395][ T3089] total_inactive_file 12288 [ 91.934979][ T3089] total_active_file 4096 [ 91.939243][ T3089] total_unevictable 0 [ 91.943226][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4309,uid=0 [ 91.958411][ T3089] Memory cgroup out of memory: OOM victim 4309 (syz-executor.1) is already exiting. Skip killing the task 03:03:53 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:53 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:53 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:53 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:54 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) [ 92.652766][ T4321] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 92.664152][ T4321] CPU: 0 PID: 4321 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 92.674232][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 92.684305][ T4321] Call Trace: [ 92.687584][ T4321] [ 92.690524][ T4321] dump_stack_lvl+0xda/0x130 [ 92.695137][ T4321] dump_stack+0x15/0x20 [ 92.699335][ T4321] dump_header+0x82/0x2d0 [ 92.703732][ T4321] oom_kill_process+0x33a/0x4c0 [ 92.708597][ T4321] out_of_memory+0x9ca/0xbf0 [ 92.713239][ T4321] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 92.719365][ T4321] mem_cgroup_out_of_memory+0x139/0x190 [ 92.724980][ T4321] try_charge_memcg+0x759/0xd20 [ 92.729895][ T4321] ? __swap_duplicate+0x29b/0x2b0 [ 92.734993][ T4321] ? radix_tree_lookup+0xf9/0x150 [ 92.740072][ T4321] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 92.746177][ T4321] __read_swap_cache_async+0x2b9/0x510 [ 92.751691][ T4321] swap_cluster_readahead+0x276/0x3f0 [ 92.757113][ T4321] swapin_readahead+0xe2/0x7a0 [ 92.761919][ T4321] ? __filemap_get_folio+0x41a/0x5a0 [ 92.767225][ T4321] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 92.772864][ T4321] ? swap_cache_get_folio+0x6e/0x200 [ 92.778241][ T4321] do_swap_page+0x44c/0x1570 [ 92.782933][ T4321] ? __rcu_read_lock+0x35/0x50 [ 92.787826][ T4321] ? pte_offset_map_nolock+0x124/0x1d0 [ 92.793462][ T4321] handle_mm_fault+0x7f6/0x27b0 [ 92.798345][ T4321] ? mas_walk+0x204/0x320 [ 92.802699][ T4321] exc_page_fault+0x3ff/0x6d0 [ 92.807398][ T4321] asm_exc_page_fault+0x26/0x30 [ 92.812336][ T4321] RIP: 0033:0x7fc472c66d14 [ 92.816758][ T4321] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 92.836435][ T4321] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 92.842550][ T4321] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 [ 92.850519][ T4321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 92.858518][ T4321] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 92.866485][ T4321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000016a23 [ 92.874460][ T4321] R13: ffffffffffffffff R14: 00007fc472830000 R15: 00000000000166e2 [ 92.882434][ T4321] [ 92.885800][ T4321] memory: usage 307196kB, limit 307200kB, failcnt 5434 [ 92.892710][ T4321] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 92.900935][ T4321] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 92.908237][ T4321] Memory cgroup stats for /syz2: [ 92.908427][ T4321] cache 12288 [ 92.916759][ T4321] rss 16384 [ 92.919857][ T4321] shmem 0 [ 92.922831][ T4321] mapped_file 0 [ 92.926351][ T4321] dirty 0 [ 92.929346][ T4321] writeback 0 [ 92.932616][ T4321] workingset_refault_anon 647 [ 92.937298][ T4321] workingset_refault_file 40 [ 92.941887][ T4321] swap 139264 [ 92.945160][ T4321] swapcached 16384 [ 92.948961][ T4321] pgpgin 2061 [ 92.952253][ T4321] pgpgout 2054 [ 92.955634][ T4321] pgfault 4950 [ 92.959011][ T4321] pgmajfault 246 [ 92.962553][ T4321] inactive_anon 0 [ 92.966225][ T4321] active_anon 0 [ 92.969688][ T4321] inactive_file 0 [ 92.973318][ T4321] active_file 12288 [ 92.977225][ T4321] unevictable 0 [ 92.980692][ T4321] hierarchical_memory_limit 314572800 [ 92.986154][ T4321] hierarchical_memsw_limit 9223372036854771712 [ 92.992344][ T4321] total_cache 12288 [ 92.996177][ T4321] total_rss 16384 [ 92.999810][ T4321] total_shmem 0 [ 93.003264][ T4321] total_mapped_file 0 [ 93.007325][ T4321] total_dirty 0 [ 93.010777][ T4321] total_writeback 0 [ 93.014586][ T4321] total_workingset_refault_anon 647 [ 93.019839][ T4321] total_workingset_refault_file 40 [ 93.024967][ T4321] total_swap 139264 [ 93.028797][ T4321] total_swapcached 16384 [ 93.033054][ T4321] total_pgpgin 2061 [ 93.036920][ T4321] total_pgpgout 2054 [ 93.040854][ T4321] total_pgfault 4950 [ 93.044735][ T4321] total_pgmajfault 246 [ 93.049096][ T4321] total_inactive_anon 0 [ 93.053287][ T4321] total_active_anon 0 [ 93.057407][ T4321] total_inactive_file 0 [ 93.061555][ T4321] total_active_file 12288 [ 93.065979][ T4321] total_unevictable 0 [ 93.069964][ T4321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4321,uid=0 [ 93.085239][ T4321] Memory cgroup out of memory: Killed process 4321 (syz-executor.2) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:54 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:55 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) 03:03:55 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:55 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:55 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:55 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) [ 94.474951][ T4341] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 94.486383][ T4341] CPU: 0 PID: 4341 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 94.496467][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 94.506572][ T4341] Call Trace: [ 94.509845][ T4341] [ 94.512813][ T4341] dump_stack_lvl+0xda/0x130 [ 94.517458][ T4341] dump_stack+0x15/0x20 [ 94.521653][ T4341] dump_header+0x82/0x2d0 [ 94.526056][ T4341] oom_kill_process+0x33a/0x4c0 [ 94.530926][ T4341] out_of_memory+0x9ca/0xbf0 [ 94.535519][ T4341] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 94.541586][ T4341] mem_cgroup_out_of_memory+0x139/0x190 [ 94.547172][ T4341] try_charge_memcg+0x759/0xd20 [ 94.552211][ T4341] ? __swap_duplicate+0x29b/0x2b0 [ 94.557287][ T4341] ? radix_tree_lookup+0xf9/0x150 [ 94.562322][ T4341] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 94.568404][ T4341] __read_swap_cache_async+0x2b9/0x510 [ 94.573947][ T4341] swap_cluster_readahead+0x276/0x3f0 [ 94.579497][ T4341] swapin_readahead+0xe2/0x7a0 [ 94.584362][ T4341] ? __filemap_get_folio+0x41a/0x5a0 [ 94.589649][ T4341] ? update_load_avg+0x1f7/0x7c0 [ 94.594644][ T4341] ? swap_cache_get_folio+0x6e/0x200 [ 94.600059][ T4341] do_swap_page+0x44c/0x1570 [ 94.604772][ T4341] ? __schedule+0x5d8/0x920 [ 94.609394][ T4341] ? xas_load+0x3ae/0x3c0 [ 94.613809][ T4341] ? __rcu_read_lock+0x35/0x50 [ 94.618601][ T4341] ? pte_offset_map_nolock+0x124/0x1d0 [ 94.624162][ T4341] handle_mm_fault+0x7f6/0x27b0 [ 94.629130][ T4341] exc_page_fault+0x2f7/0x6d0 [ 94.633812][ T4341] asm_exc_page_fault+0x26/0x30 [ 94.638669][ T4341] RIP: 0010:__get_user_8+0x11/0x20 [ 94.643791][ T4341] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 94.663430][ T4341] RSP: 0018:ffffc90001613e58 EFLAGS: 00050202 [ 94.669507][ T4341] RAX: 0000555556560da8 RBX: ffffc90001613e60 RCX: ffffffff81448b63 [ 94.677578][ T4341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888124063a90 [ 94.685553][ T4341] RBP: ffffc90001613f20 R08: 0001888124063a97 R09: 0000000000000000 [ 94.693548][ T4341] R10: 0001ffffffffffff R11: 0001c90001613ee8 R12: ffff8881240630c0 [ 94.701604][ T4341] R13: ffff888124063a90 R14: ffffc90001613f58 R15: ffffc90001613fd8 [ 94.709586][ T4341] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 94.715503][ T4341] __rseq_handle_notify_resume+0xc7/0xbf0 [ 94.721255][ T4341] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 94.727294][ T4341] ? task_mm_cid_work+0x116/0x1b0 [ 94.732395][ T4341] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 94.738342][ T4341] irqentry_exit_to_user_mode+0xcf/0x130 [ 94.743983][ T4341] irqentry_exit+0x12/0x40 [ 94.748505][ T4341] asm_exc_page_fault+0x26/0x30 [ 94.753419][ T4341] RIP: 0033:0x7fc472c689cc [ 94.757894][ T4341] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d e5 f6 16 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 94.777620][ T4341] RSP: 002b:00007ffeafb95010 EFLAGS: 00010286 [ 94.783696][ T4341] RAX: 0000000000000000 RBX: 00007fc472ddc018 RCX: 0000000000000000 [ 94.791671][ T4341] RDX: ffffffff81333600 RSI: 00007fc472630008 RDI: 00007fc472ddc018 [ 94.799656][ T4341] RBP: 0000000081333000 R08: 0000001b2cd20000 R09: 0000000000000000 [ 94.807640][ T4341] R10: 0000000000000001 R11: 0000000000004182 R12: 0000000000000000 [ 94.815633][ T4341] R13: 0000000000000001 R14: 00007fc472dd0000 R15: ffffffff81333600 03:03:56 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 94.823683][ T4341] ? __x64_sys_bpf+0x10/0x50 [ 94.828367][ T4341] ? __x64_sys_bpf+0x10/0x50 [ 94.832977][ T4341] [ 94.836131][ T4341] memory: usage 307200kB, limit 307200kB, failcnt 5830 [ 94.843156][ T4341] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 94.851127][ T4341] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 94.858446][ T4341] Memory cgroup stats for /syz2: [ 95.038707][ T4341] cache 16384 [ 95.046974][ T4341] rss 0 [ 95.049734][ T4341] shmem 0 [ 95.052660][ T4341] mapped_file 0 [ 95.056211][ T4341] dirty 0 [ 95.059178][ T4341] writeback 0 [ 95.062456][ T4341] workingset_refault_anon 683 [ 95.067147][ T4341] workingset_refault_file 41 [ 95.071983][ T4341] swap 122880 [ 95.075262][ T4341] swapcached 28672 [ 95.079008][ T4341] pgpgin 2122 [ 95.082380][ T4341] pgpgout 2111 [ 95.085809][ T4341] pgfault 5096 [ 95.089170][ T4341] pgmajfault 254 [ 95.092712][ T4341] inactive_anon 28672 [ 95.096757][ T4341] active_anon 0 [ 95.100216][ T4341] inactive_file 4096 [ 95.104103][ T4341] active_file 12288 [ 95.107971][ T4341] unevictable 0 [ 95.111500][ T4341] hierarchical_memory_limit 314572800 [ 95.116948][ T4341] hierarchical_memsw_limit 9223372036854771712 [ 95.123152][ T4341] total_cache 16384 [ 95.126970][ T4341] total_rss 0 [ 95.130284][ T4341] total_shmem 0 [ 95.133726][ T4341] total_mapped_file 0 [ 95.137770][ T4341] total_dirty 0 [ 95.141299][ T4341] total_writeback 0 [ 95.145335][ T4341] total_workingset_refault_anon 683 [ 95.150599][ T4341] total_workingset_refault_file 41 [ 95.155816][ T4341] total_swap 122880 [ 95.159609][ T4341] total_swapcached 28672 [ 95.163952][ T4341] total_pgpgin 2122 [ 95.167801][ T4341] total_pgpgout 2111 [ 95.171683][ T4341] total_pgfault 5096 [ 95.175574][ T4341] total_pgmajfault 254 [ 95.179678][ T4341] total_inactive_anon 28672 [ 95.184216][ T4341] total_active_anon 0 [ 95.188202][ T4341] total_inactive_file 4096 [ 95.192615][ T4341] total_active_file 12288 [ 95.196962][ T4341] total_unevictable 0 [ 95.200931][ T4341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4341,uid=0 [ 95.216192][ T4341] Memory cgroup out of memory: Killed process 4341 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:56 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:56 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:56 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:56 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:56 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:56 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:03:57 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:57 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) 03:03:57 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 96.454899][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 96.466000][ T3089] CPU: 1 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 96.476020][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 96.486199][ T3089] Call Trace: [ 96.489479][ T3089] [ 96.492494][ T3089] dump_stack_lvl+0xda/0x130 [ 96.497176][ T3089] dump_stack+0x15/0x20 [ 96.501407][ T3089] dump_header+0x82/0x2d0 [ 96.505805][ T3089] oom_kill_process+0x33a/0x4c0 [ 96.510694][ T3089] out_of_memory+0x9ca/0xbf0 [ 96.515335][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 96.521498][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 96.527223][ T3089] try_charge_memcg+0x759/0xd20 [ 96.532150][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 96.537189][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 96.542293][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 96.548467][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 96.554011][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 96.559466][ T3089] swapin_readahead+0xe2/0x7a0 [ 96.564242][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 96.569530][ T3089] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 96.575274][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 96.580650][ T3089] do_swap_page+0x44c/0x1570 [ 96.585311][ T3089] ? __rcu_read_lock+0x35/0x50 [ 96.590067][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 96.595598][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 96.600460][ T3089] exc_page_fault+0x2f7/0x6d0 [ 96.605186][ T3089] asm_exc_page_fault+0x26/0x30 [ 96.610062][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 96.615169][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 96.634777][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 96.640852][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 96.648972][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 96.657050][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 96.665057][ T3089] R10: 0001ffffffffffff R11: 0000000000009b54 R12: ffff888103d68000 [ 96.673059][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 96.681033][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 96.686939][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 96.692732][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 96.698795][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 96.704609][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 96.710563][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 96.716110][ T3089] do_syscall_64+0x65/0x120 [ 96.720608][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 96.726507][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 96.730959][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 96.750669][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 96.759132][ T3089] RAX: 0000000000000000 RBX: 0000000000000107 RCX: 00007fca7be9e0f3 [ 96.767138][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.775159][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 96.783140][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 96.791236][ T3089] R13: 0000000000017812 R14: 00000000000174a3 R15: 000000000000000e [ 96.799218][ T3089] [ 96.802459][ T3089] memory: usage 8368kB, limit 307200kB, failcnt 4502 [ 96.809436][ T3089] memory+swap: usage 8508kB, limit 9007199254740988kB, failcnt 0 [ 96.817187][ T3089] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 96.824298][ T3089] Memory cgroup stats for /syz1: [ 96.984643][ T3089] cache 12288 [ 96.992968][ T3089] rss 0 [ 96.995838][ T3089] shmem 0 [ 96.998767][ T3089] mapped_file 0 [ 97.002298][ T3089] dirty 0 [ 97.005226][ T3089] writeback 0 [ 97.008530][ T3089] workingset_refault_anon 563 [ 97.013216][ T3089] workingset_refault_file 55 [ 97.017890][ T3089] swap 143360 [ 97.021251][ T3089] swapcached 0 [ 97.024622][ T3089] pgpgin 3130 [ 97.027933][ T3089] pgpgout 3127 [ 97.031324][ T3089] pgfault 7866 [ 97.034685][ T3089] pgmajfault 245 [ 97.038250][ T3089] inactive_anon 0 [ 97.041947][ T3089] active_anon 0 [ 97.045456][ T3089] inactive_file 0 [ 97.049133][ T3089] active_file 12288 [ 97.052933][ T3089] unevictable 0 [ 97.056427][ T3089] hierarchical_memory_limit 314572800 [ 97.061827][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 97.068076][ T3089] total_cache 12288 [ 97.071880][ T3089] total_rss 0 [ 97.075271][ T3089] total_shmem 0 [ 97.078755][ T3089] total_mapped_file 0 [ 97.082753][ T3089] total_dirty 0 [ 97.086278][ T3089] total_writeback 0 [ 97.090163][ T3089] total_workingset_refault_anon 563 [ 97.095376][ T3089] total_workingset_refault_file 55 [ 97.100509][ T3089] total_swap 143360 [ 97.104307][ T3089] total_swapcached 0 [ 97.108202][ T3089] total_pgpgin 3130 [ 97.112002][ T3089] total_pgpgout 3127 [ 97.116004][ T3089] total_pgfault 7866 [ 97.119954][ T3089] total_pgmajfault 245 [ 97.124028][ T3089] total_inactive_anon 0 [ 97.128183][ T3089] total_active_anon 0 [ 97.132192][ T3089] total_inactive_file 0 [ 97.136352][ T3089] total_active_file 12288 [ 97.141139][ T3089] total_unevictable 0 [ 97.145249][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4359,uid=0 [ 97.160460][ T3089] Memory cgroup out of memory: Killed process 4363 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:03:58 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:03:58 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:58 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:03:58 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) 03:03:59 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:03:59 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) [ 97.824866][ T4381] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 97.836284][ T4381] CPU: 1 PID: 4381 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 97.846263][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 97.856333][ T4381] Call Trace: [ 97.859609][ T4381] [ 97.863067][ T4381] dump_stack_lvl+0xda/0x130 [ 97.867714][ T4381] dump_stack+0x15/0x20 [ 97.871878][ T4381] dump_header+0x82/0x2d0 [ 97.876225][ T4381] oom_kill_process+0x33a/0x4c0 [ 97.881087][ T4381] out_of_memory+0x9ca/0xbf0 [ 97.885766][ T4381] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 97.891853][ T4381] mem_cgroup_out_of_memory+0x139/0x190 [ 97.897461][ T4381] try_charge_memcg+0x759/0xd20 [ 97.902461][ T4381] ? __swap_duplicate+0x29b/0x2b0 [ 97.907498][ T4381] ? radix_tree_lookup+0xf9/0x150 [ 97.912537][ T4381] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 97.918633][ T4381] __read_swap_cache_async+0x2b9/0x510 [ 97.924117][ T4381] swap_cluster_readahead+0x276/0x3f0 [ 97.929509][ T4381] swapin_readahead+0xe2/0x7a0 [ 97.934418][ T4381] ? __filemap_get_folio+0x41a/0x5a0 [ 97.939708][ T4381] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 97.945341][ T4381] ? swap_cache_get_folio+0x6e/0x200 [ 97.950645][ T4381] do_swap_page+0x44c/0x1570 [ 97.955320][ T4381] ? __rcu_read_lock+0x35/0x50 [ 97.960097][ T4381] ? pte_offset_map_nolock+0x124/0x1d0 [ 97.965710][ T4381] handle_mm_fault+0x7f6/0x27b0 [ 97.970642][ T4381] ? mas_walk+0x204/0x320 [ 97.974970][ T4381] exc_page_fault+0x3ff/0x6d0 [ 97.979715][ T4381] asm_exc_page_fault+0x26/0x30 [ 97.984587][ T4381] RIP: 0033:0x7f9fdba20d14 [ 97.988994][ T4381] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 98.008650][ T4381] RSP: 002b:00007ffd53fcf500 EFLAGS: 00010202 [ 98.014794][ T4381] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 0000000000000000 [ 98.022774][ T4381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556880788 [ 98.030755][ T4381] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 98.038739][ T4381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000017edb [ 98.046745][ T4381] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 0000000000017b9a [ 98.054716][ T4381] [ 98.058084][ T4381] memory: usage 307200kB, limit 307200kB, failcnt 4480 [ 98.064958][ T4381] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 98.072949][ T4381] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 98.080248][ T4381] Memory cgroup stats for /syz0: [ 98.080368][ T4381] cache 8192 [ 98.088608][ T4381] rss 16384 [ 98.092032][ T4381] shmem 0 [ 98.094972][ T4381] mapped_file 0 [ 98.098474][ T4381] dirty 0 [ 98.101438][ T4381] writeback 0 [ 98.104739][ T4381] workingset_refault_anon 730 [ 98.109435][ T4381] workingset_refault_file 31 [ 98.114025][ T4381] swap 151552 [ 98.117334][ T4381] swapcached 16384 [ 98.121057][ T4381] pgpgin 3079 [ 98.124400][ T4381] pgpgout 3073 [ 98.127879][ T4381] pgfault 7615 [ 98.131248][ T4381] pgmajfault 281 [ 98.134779][ T4381] inactive_anon 0 [ 98.138421][ T4381] active_anon 0 [ 98.142057][ T4381] inactive_file 8192 [ 98.146047][ T4381] active_file 0 [ 98.149497][ T4381] unevictable 0 [ 98.152951][ T4381] hierarchical_memory_limit 314572800 [ 98.158344][ T4381] hierarchical_memsw_limit 9223372036854771712 [ 98.164551][ T4381] total_cache 8192 [ 98.168427][ T4381] total_rss 16384 [ 98.172062][ T4381] total_shmem 0 [ 98.175719][ T4381] total_mapped_file 0 [ 98.179693][ T4381] total_dirty 0 [ 98.183191][ T4381] total_writeback 0 [ 98.187170][ T4381] total_workingset_refault_anon 730 [ 98.192388][ T4381] total_workingset_refault_file 31 [ 98.197532][ T4381] total_swap 151552 [ 98.201354][ T4381] total_swapcached 16384 [ 98.205601][ T4381] total_pgpgin 3079 [ 98.209414][ T4381] total_pgpgout 3073 [ 98.213401][ T4381] total_pgfault 7615 [ 98.217394][ T4381] total_pgmajfault 281 [ 98.221449][ T4381] total_inactive_anon 0 [ 98.225713][ T4381] total_active_anon 0 [ 98.229688][ T4381] total_inactive_file 8192 [ 98.234138][ T4381] total_active_file 0 [ 98.238239][ T4381] total_unevictable 0 [ 98.242208][ T4381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4381,uid=0 [ 98.257503][ T4381] Memory cgroup out of memory: Killed process 4381 (syz-executor.0) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:00 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:00 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:04:00 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) [ 98.872501][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 98.883596][ T3106] CPU: 1 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 98.893576][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 98.903633][ T3106] Call Trace: [ 98.906964][ T3106] [ 98.909889][ T3106] dump_stack_lvl+0xda/0x130 [ 98.914486][ T3106] dump_stack+0x15/0x20 [ 98.918655][ T3106] dump_header+0x82/0x2d0 [ 98.922992][ T3106] oom_kill_process+0x33a/0x4c0 [ 98.927890][ T3106] out_of_memory+0x9ca/0xbf0 [ 98.932487][ T3106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 98.938557][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 98.944220][ T3106] try_charge_memcg+0x759/0xd20 [ 98.949108][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 98.954119][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 98.959210][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 98.965391][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 98.971238][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 98.976635][ T3106] swapin_readahead+0xe2/0x7a0 [ 98.981453][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 98.986835][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 98.992144][ T3106] do_swap_page+0x44c/0x1570 [ 98.996741][ T3106] ? __rcu_read_lock+0x35/0x50 [ 99.001527][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 99.007002][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 99.011917][ T3106] ? mas_walk+0x204/0x320 [ 99.016268][ T3106] exc_page_fault+0x3ff/0x6d0 03:04:00 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 99.020962][ T3106] asm_exc_page_fault+0x26/0x30 [ 99.025825][ T3106] RIP: 0033:0x7ff768b1b5ce [ 99.030249][ T3106] Code: ff 0f 1f 00 8d 47 01 eb 16 0f 1f 00 48 83 c0 01 8b b4 85 5c 08 00 00 85 f6 0f 85 fd 00 00 00 89 c7 83 f8 04 75 e6 48 8b 4d 60 <48> 8b 41 08 48 83 e0 f8 48 39 85 88 08 00 00 0f 82 4a 02 00 00 48 [ 99.050006][ T3106] RSP: 002b:00007fffd24728b0 EFLAGS: 00010246 [ 99.056097][ T3106] RAX: 0000000000000004 RBX: 0000000000008040 RCX: 0000555556f797d0 [ 99.064110][ T3106] RDX: 00007ff768c41e20 RSI: 0000000000000000 RDI: 0000000000000004 03:04:00 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 99.072250][ T3106] RBP: 00007ff768c41660 R08: 0000000000000010 R09: 00007fffd25c20b0 [ 99.080804][ T3106] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 99.088779][ T3106] R13: 0000000000000076 R14: 00007ff768c416c0 R15: 0000000000000000 [ 99.096762][ T3106] [ 99.099897][ T3106] memory: usage 307200kB, limit 307200kB, failcnt 4596 [ 99.106826][ T3106] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 99.114773][ T3106] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 99.122097][ T3106] Memory cgroup stats for /syz1: [ 99.122254][ T3106] cache 8192 [ 99.130653][ T3106] rss 8192 [ 99.133685][ T3106] shmem 0 [ 99.136721][ T3106] mapped_file 0 [ 99.140256][ T3106] dirty 0 [ 99.143259][ T3106] writeback 0 [ 99.146566][ T3106] workingset_refault_anon 580 [ 99.151236][ T3106] workingset_refault_file 56 [ 99.155844][ T3106] swap 135168 [ 99.159185][ T3106] swapcached 8192 [ 99.162904][ T3106] pgpgin 3171 [ 99.166204][ T3106] pgpgout 3167 [ 99.169645][ T3106] pgfault 7988 [ 99.173011][ T3106] pgmajfault 250 [ 99.176570][ T3106] inactive_anon 0 [ 99.180191][ T3106] active_anon 0 [ 99.183635][ T3106] inactive_file 8192 [ 99.187535][ T3106] active_file 0 [ 99.190981][ T3106] unevictable 0 [ 99.194422][ T3106] hierarchical_memory_limit 314572800 [ 99.199830][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 99.205984][ T3106] total_cache 8192 [ 99.209707][ T3106] total_rss 8192 [ 99.213351][ T3106] total_shmem 0 [ 99.216904][ T3106] total_mapped_file 0 [ 99.220874][ T3106] total_dirty 0 [ 99.224331][ T3106] total_writeback 0 [ 99.228146][ T3106] total_workingset_refault_anon 580 [ 99.233432][ T3106] total_workingset_refault_file 56 [ 99.238564][ T3106] total_swap 135168 [ 99.242370][ T3106] total_swapcached 8192 [ 99.246666][ T3106] total_pgpgin 3171 [ 99.250460][ T3106] total_pgpgout 3167 [ 99.254769][ T3106] total_pgfault 7988 [ 99.258671][ T3106] total_pgmajfault 250 [ 99.262787][ T3106] total_inactive_anon 0 [ 99.266942][ T3106] total_active_anon 0 [ 99.270979][ T3106] total_inactive_file 8192 [ 99.275385][ T3106] total_active_file 0 [ 99.279403][ T3106] total_unevictable 0 [ 99.283418][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4384,uid=0 [ 99.298708][ T3106] Memory cgroup out of memory: Killed process 4385 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 99.453507][ T4398] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 99.464926][ T4398] CPU: 0 PID: 4398 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 99.474949][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 99.485023][ T4398] Call Trace: [ 99.488297][ T4398] [ 99.491237][ T4398] dump_stack_lvl+0xda/0x130 [ 99.495915][ T4398] dump_stack+0x15/0x20 [ 99.500080][ T4398] dump_header+0x82/0x2d0 [ 99.504462][ T4398] oom_kill_process+0x33a/0x4c0 [ 99.509385][ T4398] out_of_memory+0x9ca/0xbf0 [ 99.514025][ T4398] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 99.520126][ T4398] mem_cgroup_out_of_memory+0x139/0x190 [ 99.525763][ T4398] try_charge_memcg+0x759/0xd20 [ 99.530683][ T4398] ? __swap_duplicate+0x29b/0x2b0 [ 99.535710][ T4398] ? radix_tree_lookup+0xf9/0x150 [ 99.540747][ T4398] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 99.546825][ T4398] __read_swap_cache_async+0x2b9/0x510 [ 99.552464][ T4398] swap_cluster_readahead+0x276/0x3f0 [ 99.557961][ T4398] swapin_readahead+0xe2/0x7a0 [ 99.562739][ T4398] ? __filemap_get_folio+0x41a/0x5a0 [ 99.568030][ T4398] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 99.573694][ T4398] ? swap_cache_get_folio+0x6e/0x200 [ 99.579003][ T4398] do_swap_page+0x44c/0x1570 [ 99.583680][ T4398] ? __rcu_read_lock+0x35/0x50 [ 99.588456][ T4398] ? pte_offset_map_nolock+0x124/0x1d0 [ 99.593921][ T4398] handle_mm_fault+0x7f6/0x27b0 [ 99.598876][ T4398] ? mas_walk+0x204/0x320 [ 99.603218][ T4398] exc_page_fault+0x3ff/0x6d0 [ 99.607915][ T4398] asm_exc_page_fault+0x26/0x30 [ 99.612760][ T4398] RIP: 0033:0x7f9fdba20d14 [ 99.617193][ T4398] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 99.636817][ T4398] RSP: 002b:00007ffd53fcf500 EFLAGS: 00010202 [ 99.642886][ T4398] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 0000000000000000 03:04:01 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 99.650869][ T4398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556880788 [ 99.658911][ T4398] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 99.666981][ T4398] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000184bc [ 99.675014][ T4398] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 000000000001817b [ 99.683016][ T4398] [ 99.686217][ T4398] memory: usage 307200kB, limit 307200kB, failcnt 4625 [ 99.693108][ T4398] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 99.701015][ T4398] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 99.708557][ T4398] Memory cgroup stats for /syz0: [ 99.708721][ T4398] cache 12288 [ 99.716963][ T4398] rss 0 [ 99.719878][ T4398] shmem 0 [ 99.722812][ T4398] mapped_file 0 [ 99.726299][ T4398] dirty 0 [ 99.729230][ T4398] writeback 16384 [ 99.732855][ T4398] workingset_refault_anon 756 [ 99.737534][ T4398] workingset_refault_file 32 [ 99.742149][ T4398] swap 151552 [ 99.745480][ T4398] swapcached 16384 [ 99.749220][ T4398] pgpgin 3132 [ 99.752504][ T4398] pgpgout 3125 [ 99.755909][ T4398] pgfault 7716 [ 99.759456][ T4398] pgmajfault 289 [ 99.763002][ T4398] inactive_anon 0 [ 99.766645][ T4398] active_anon 0 [ 99.770113][ T4398] inactive_file 12288 [ 99.774120][ T4398] active_file 0 [ 99.777612][ T4398] unevictable 0 [ 99.781063][ T4398] hierarchical_memory_limit 314572800 [ 99.786522][ T4398] hierarchical_memsw_limit 9223372036854771712 [ 99.792675][ T4398] total_cache 12288 [ 99.796511][ T4398] total_rss 0 [ 99.799791][ T4398] total_shmem 0 [ 99.803249][ T4398] total_mapped_file 0 [ 99.807236][ T4398] total_dirty 0 [ 99.810722][ T4398] total_writeback 16384 [ 99.814881][ T4398] total_workingset_refault_anon 756 [ 99.820180][ T4398] total_workingset_refault_file 32 [ 99.825374][ T4398] total_swap 151552 [ 99.829240][ T4398] total_swapcached 16384 [ 99.833477][ T4398] total_pgpgin 3132 [ 99.837298][ T4398] total_pgpgout 3125 [ 99.841233][ T4398] total_pgfault 7716 [ 99.845180][ T4398] total_pgmajfault 289 [ 99.849275][ T4398] total_inactive_anon 0 [ 99.853431][ T4398] total_active_anon 0 [ 99.857504][ T4398] total_inactive_file 12288 [ 99.861989][ T4398] total_active_file 0 [ 99.866017][ T4398] total_unevictable 0 [ 99.869993][ T4398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4398,uid=0 [ 99.885262][ T4398] Memory cgroup out of memory: Killed process 4398 (syz-executor.0) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:02 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:02 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 100.727093][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 100.738322][ T3086] CPU: 1 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 100.748398][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 100.758496][ T3086] Call Trace: [ 100.761783][ T3086] [ 100.764731][ T3086] dump_stack_lvl+0xda/0x130 [ 100.769332][ T3086] dump_stack+0x15/0x20 [ 100.773479][ T3086] dump_header+0x82/0x2d0 [ 100.777806][ T3086] oom_kill_process+0x33a/0x4c0 [ 100.782654][ T3086] out_of_memory+0x9ca/0xbf0 [ 100.787435][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 100.793621][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 100.799170][ T3086] try_charge_memcg+0x759/0xd20 [ 100.804100][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 100.809117][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 100.814162][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 100.820297][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 100.825781][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 100.831163][ T3086] swapin_readahead+0xe2/0x7a0 [ 100.836012][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 100.841338][ T3086] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 100.846886][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 100.852258][ T3086] do_swap_page+0x44c/0x1570 [ 100.856930][ T3086] ? __rcu_read_lock+0x35/0x50 [ 100.861702][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 100.867211][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 100.872062][ T3086] exc_page_fault+0x2f7/0x6d0 [ 100.876764][ T3086] asm_exc_page_fault+0x26/0x30 [ 100.881669][ T3086] RIP: 0010:__get_user_8+0x11/0x20 [ 100.886774][ T3086] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 100.906446][ T3086] RSP: 0018:ffffc90000eabe38 EFLAGS: 00050202 [ 100.912501][ T3086] RAX: 0000555555c17da8 RBX: ffffc90000eabe40 RCX: ffffffff81448b63 [ 100.920673][ T3086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d69a10 [ 100.928632][ T3086] RBP: ffffc90000eabf00 R08: 0001888103d69a17 R09: 0000000000000000 [ 100.936590][ T3086] R10: 0001ffffffffffff R11: 0000000000009f4d R12: ffff888103d69040 [ 100.944659][ T3086] R13: ffff888103d69a10 R14: ffffc90000eabf58 R15: ffffc90000eabfd8 [ 100.952652][ T3086] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 100.958543][ T3086] __rseq_handle_notify_resume+0xc7/0xbf0 [ 100.964251][ T3086] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 100.970226][ T3086] ? __se_sys_clock_nanosleep+0x202/0x230 [ 100.975936][ T3086] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 100.981838][ T3086] syscall_exit_to_user_mode+0x8e/0x130 [ 100.987375][ T3086] do_syscall_64+0x65/0x120 [ 100.991932][ T3086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 100.997835][ T3086] RIP: 0033:0x7fd7c761c0f3 [ 101.002276][ T3086] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 101.021875][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 101.030348][ T3086] RAX: 0000000000000000 RBX: 000000000000008b RCX: 00007fd7c761c0f3 [ 101.038309][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.046277][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 101.054243][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 101.062200][ T3086] R13: 000000000001871a R14: 000000000001831e R15: 000000000000000f [ 101.070160][ T3086] [ 101.073261][ T3086] memory: usage 307200kB, limit 307200kB, failcnt 6070 [ 101.080286][ T3086] memory+swap: usage 299288kB, limit 9007199254740988kB, failcnt 0 [ 101.088196][ T3086] kmem: usage 273108kB, limit 9007199254740988kB, failcnt 0 [ 101.095483][ T3086] Memory cgroup stats for /syz5: [ 101.096744][ T3086] cache 12288 [ 101.104944][ T3086] rss 0 [ 101.107708][ T3086] shmem 0 [ 101.110631][ T3086] mapped_file 0 [ 101.114172][ T3086] dirty 0 [ 101.117130][ T3086] writeback 0 [ 101.120438][ T3086] workingset_refault_anon 748 [ 101.125121][ T3086] workingset_refault_file 34 [ 101.129737][ T3086] swap 151552 [ 101.133026][ T3086] swapcached 0 [ 101.136493][ T3086] pgpgin 1963 [ 101.139880][ T3086] pgpgout 1960 [ 101.143235][ T3086] pgfault 5155 [ 101.146664][ T3086] pgmajfault 285 [ 101.150211][ T3086] inactive_anon 0 [ 101.153851][ T3086] active_anon 0 [ 101.157315][ T3086] inactive_file 0 [ 101.160948][ T3086] active_file 12288 [ 101.164774][ T3086] unevictable 0 [ 101.168260][ T3086] hierarchical_memory_limit 314572800 [ 101.173701][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 101.179870][ T3086] total_cache 12288 [ 101.183717][ T3086] total_rss 0 [ 101.187057][ T3086] total_shmem 0 [ 101.190501][ T3086] total_mapped_file 0 [ 101.194469][ T3086] total_dirty 0 [ 101.198003][ T3086] total_writeback 0 [ 101.201800][ T3086] total_workingset_refault_anon 748 [ 101.207048][ T3086] total_workingset_refault_file 34 [ 101.212157][ T3086] total_swap 151552 [ 101.215981][ T3086] total_swapcached 0 [ 101.219876][ T3086] total_pgpgin 1963 [ 101.223682][ T3086] total_pgpgout 1960 [ 101.227611][ T3086] total_pgfault 5155 [ 101.231506][ T3086] total_pgmajfault 285 [ 101.235809][ T3086] total_inactive_anon 0 [ 101.240120][ T3086] total_active_anon 0 [ 101.244268][ T3086] total_inactive_file 0 [ 101.248630][ T3086] total_active_file 12288 [ 101.253400][ T3086] total_unevictable 0 [ 101.257488][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4401,uid=0 03:04:02 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:02 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) 03:04:02 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 101.272923][ T3086] Memory cgroup out of memory: Killed process 4402 (syz-executor.5) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:02 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:04:03 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:03 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:03 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:04 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) 03:04:04 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:04 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:04:04 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 103.385223][ T4437] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 103.396627][ T4437] CPU: 1 PID: 4437 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 103.406715][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 103.416769][ T4437] Call Trace: [ 103.420055][ T4437] [ 103.422982][ T4437] dump_stack_lvl+0xda/0x130 [ 103.427734][ T4437] dump_stack+0x15/0x20 [ 103.431887][ T4437] dump_header+0x82/0x2d0 [ 103.436232][ T4437] oom_kill_process+0x33a/0x4c0 [ 103.441091][ T4437] out_of_memory+0x9ca/0xbf0 [ 103.445722][ T4437] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 103.451803][ T4437] mem_cgroup_out_of_memory+0x139/0x190 [ 103.457373][ T4437] try_charge_memcg+0x759/0xd20 [ 103.462235][ T4437] ? __swap_duplicate+0x29b/0x2b0 [ 103.467344][ T4437] ? radix_tree_lookup+0xf9/0x150 [ 103.472495][ T4437] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 103.478593][ T4437] __read_swap_cache_async+0x2b9/0x510 [ 103.484138][ T4437] swap_cluster_readahead+0x276/0x3f0 [ 103.489526][ T4437] swapin_readahead+0xe2/0x7a0 [ 103.494318][ T4437] ? __filemap_get_folio+0x41a/0x5a0 [ 103.499615][ T4437] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 103.505196][ T4437] ? swap_cache_get_folio+0x6e/0x200 [ 103.510517][ T4437] do_swap_page+0x44c/0x1570 [ 103.515114][ T4437] ? __rcu_read_lock+0x35/0x50 [ 103.519935][ T4437] ? pte_offset_map_nolock+0x124/0x1d0 [ 103.525411][ T4437] handle_mm_fault+0x7f6/0x27b0 [ 103.530329][ T4437] ? mas_walk+0x204/0x320 [ 103.534721][ T4437] exc_page_fault+0x3ff/0x6d0 [ 103.541016][ T4437] asm_exc_page_fault+0x26/0x30 [ 103.546095][ T4437] RIP: 0033:0x7fc472c68a14 [ 103.550691][ T4437] Code: 00 25 ff 0f 00 00 83 f0 3d 8d 3c c0 89 f8 c1 e8 04 31 f8 69 c0 2d eb d4 27 89 c7 c1 ef 0f 31 f8 48 31 d0 25 ff 0f 00 00 09 c5 <80> 3d 96 cc c9 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 [ 103.570362][ T4437] RSP: 002b:00007ffeafb95010 EFLAGS: 00010282 [ 103.576476][ T4437] RAX: 0000000000000889 RBX: 00007fc472ddc018 RCX: 000000000002c399 [ 103.584532][ T4437] RDX: ffffffff8156face RSI: 0000000080000000 RDI: 000000000001a4f1 [ 103.592511][ T4437] RBP: 000000008156f889 R08: 0000001b2cd20000 R09: 0000000000001bef [ 103.600514][ T4437] R10: 000000008156fbf3 R11: 0000000000004812 R12: 000000000002c399 [ 103.608485][ T4437] R13: 0000000000000001 R14: 00007fc472dd0000 R15: ffffffff8156face [ 103.616534][ T4437] ? page_counter_charge+0x19e/0x1c0 [ 103.621843][ T4437] ? page_counter_charge+0x19e/0x1c0 [ 103.627232][ T4437] [ 103.630404][ T4437] memory: usage 307200kB, limit 307200kB, failcnt 6398 [ 103.637399][ T4437] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 103.645292][ T4437] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 103.652762][ T4437] Memory cgroup stats for /syz2: [ 103.652946][ T4437] cache 4096 [ 103.661241][ T4437] rss 8192 [ 103.664256][ T4437] shmem 0 [ 103.667205][ T4437] mapped_file 0 [ 103.670716][ T4437] dirty 0 [ 103.673637][ T4437] writeback 4096 [ 103.677185][ T4437] workingset_refault_anon 809 [ 103.681893][ T4437] workingset_refault_file 44 [ 103.686639][ T4437] swap 131072 [ 103.689913][ T4437] swapcached 20480 [ 103.693623][ T4437] pgpgin 2371 [ 103.696931][ T4437] pgpgout 2365 [ 103.700294][ T4437] pgfault 5726 [ 103.703646][ T4437] pgmajfault 307 [ 103.707207][ T4437] inactive_anon 8192 [ 103.711087][ T4437] active_anon 0 [ 103.714534][ T4437] inactive_file 0 [ 103.718196][ T4437] active_file 4096 [ 103.721944][ T4437] unevictable 0 [ 103.725427][ T4437] hierarchical_memory_limit 314572800 [ 103.730785][ T4437] hierarchical_memsw_limit 9223372036854771712 [ 103.736957][ T4437] total_cache 4096 [ 103.740672][ T4437] total_rss 8192 [ 103.744210][ T4437] total_shmem 0 [ 103.747685][ T4437] total_mapped_file 0 [ 103.751724][ T4437] total_dirty 0 [ 103.755178][ T4437] total_writeback 4096 [ 103.759253][ T4437] total_workingset_refault_anon 809 [ 103.764441][ T4437] total_workingset_refault_file 44 [ 103.769560][ T4437] total_swap 131072 [ 103.773434][ T4437] total_swapcached 20480 [ 103.777677][ T4437] total_pgpgin 2371 [ 103.781479][ T4437] total_pgpgout 2365 [ 103.785392][ T4437] total_pgfault 5726 [ 103.789565][ T4437] total_pgmajfault 307 [ 103.793626][ T4437] total_inactive_anon 8192 [ 103.798069][ T4437] total_active_anon 0 [ 103.802038][ T4437] total_inactive_file 0 [ 103.806233][ T4437] total_active_file 4096 [ 103.810467][ T4437] total_unevictable 0 [ 103.814490][ T4437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4437,uid=0 [ 103.829984][ T4437] Memory cgroup out of memory: Killed process 4437 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:05 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 104.079415][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 104.090523][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 104.100512][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 104.110918][ T3086] Call Trace: [ 104.114190][ T3086] [ 104.117122][ T3086] dump_stack_lvl+0xda/0x130 [ 104.121762][ T3086] dump_stack+0x15/0x20 [ 104.125915][ T3086] dump_header+0x82/0x2d0 [ 104.130377][ T3086] oom_kill_process+0x33a/0x4c0 [ 104.135241][ T3086] out_of_memory+0x9ca/0xbf0 [ 104.139835][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 104.146025][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 104.151596][ T3086] try_charge_memcg+0x759/0xd20 [ 104.156550][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 104.161575][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 104.166612][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 104.172771][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 104.178402][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 104.183791][ T3086] swapin_readahead+0xe2/0x7a0 [ 104.188577][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 104.193939][ T3086] ? get_page_from_freelist+0x1414/0x1460 [ 104.199673][ T3086] ? pcpu_block_update+0x396/0x3b0 [ 104.204807][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 104.210190][ T3086] do_swap_page+0x44c/0x1570 [ 104.214840][ T3086] ? mod_objcg_state+0x357/0x580 [ 104.219791][ T3086] ? __rcu_read_lock+0x35/0x50 [ 104.224565][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 104.230078][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 104.234939][ T3086] exc_page_fault+0x2f7/0x6d0 [ 104.239649][ T3086] asm_exc_page_fault+0x26/0x30 [ 104.244515][ T3086] RIP: 0010:__get_user_8+0x11/0x20 [ 104.249630][ T3086] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 104.269377][ T3086] RSP: 0018:ffffc90000eabe38 EFLAGS: 00050202 [ 104.275530][ T3086] RAX: 0000555555c17da8 RBX: ffffc90000eabe40 RCX: ffffffff81448b63 [ 104.283511][ T3086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d69a10 [ 104.291495][ T3086] RBP: ffffc90000eabf00 R08: 0001888103d69a17 R09: 0000000000000000 [ 104.299643][ T3086] R10: 0001ffffffffffff R11: 000000000000538c R12: ffff888103d69040 [ 104.307676][ T3086] R13: ffff888103d69a10 R14: ffffc90000eabf58 R15: ffffc90000eabfd8 [ 104.315715][ T3086] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 104.321620][ T3086] __rseq_handle_notify_resume+0xc7/0xbf0 03:04:05 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 104.327459][ T3086] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 104.333454][ T3086] ? __se_sys_clock_nanosleep+0x202/0x230 [ 104.339181][ T3086] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 104.345076][ T3086] syscall_exit_to_user_mode+0x8e/0x130 [ 104.350626][ T3086] do_syscall_64+0x65/0x120 [ 104.355133][ T3086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 104.361040][ T3086] RIP: 0033:0x7fd7c761c0f3 [ 104.365503][ T3086] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 104.385118][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 104.393538][ T3086] RAX: 0000000000000000 RBX: 0000000000000091 RCX: 00007fd7c761c0f3 [ 104.401509][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.409485][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 104.417460][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 104.425455][ T3086] R13: 00000000000195b1 R14: 0000000000019259 R15: 000000000000000e [ 104.433610][ T3086] [ 104.436809][ T3086] memory: usage 8376kB, limit 307200kB, failcnt 6282 [ 104.443475][ T3086] memory+swap: usage 8524kB, limit 9007199254740988kB, failcnt 0 [ 104.451375][ T3086] kmem: usage 8368kB, limit 9007199254740988kB, failcnt 0 03:04:06 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) [ 104.458505][ T3086] Memory cgroup stats for /syz5: [ 104.636435][ T3086] cache 8192 [ 104.644583][ T3086] rss 0 [ 104.647392][ T3086] shmem 0 [ 104.650325][ T3086] mapped_file 0 [ 104.653776][ T3086] dirty 0 [ 104.656827][ T3086] writeback 0 [ 104.660102][ T3086] workingset_refault_anon 781 [ 104.664762][ T3086] workingset_refault_file 36 [ 104.669395][ T3086] swap 126976 [ 104.672674][ T3086] swapcached 0 [ 104.676076][ T3086] pgpgin 2048 [ 104.679352][ T3086] pgpgout 2046 [ 104.682712][ T3086] pgfault 5350 [ 104.686186][ T3086] pgmajfault 296 [ 104.689793][ T3086] inactive_anon 0 [ 104.693520][ T3086] active_anon 0 [ 104.697043][ T3086] inactive_file 0 [ 104.700664][ T3086] active_file 8192 [ 104.704426][ T3086] unevictable 0 [ 104.708022][ T3086] hierarchical_memory_limit 314572800 [ 104.713387][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 104.719577][ T3086] total_cache 8192 [ 104.723286][ T3086] total_rss 0 [ 104.726575][ T3086] total_shmem 0 [ 104.730026][ T3086] total_mapped_file 0 [ 104.733993][ T3086] total_dirty 0 [ 104.737467][ T3086] total_writeback 0 [ 104.741261][ T3086] total_workingset_refault_anon 781 [ 104.746547][ T3086] total_workingset_refault_file 36 [ 104.751645][ T3086] total_swap 126976 [ 104.755554][ T3086] total_swapcached 0 [ 104.759457][ T3086] total_pgpgin 2048 [ 104.763294][ T3086] total_pgpgout 2046 [ 104.767264][ T3086] total_pgfault 5350 [ 104.771147][ T3086] total_pgmajfault 296 [ 104.775239][ T3086] total_inactive_anon 0 [ 104.779399][ T3086] total_active_anon 0 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 104.783378][ T3086] total_inactive_file 0 [ 104.787563][ T3086] total_active_file 8192 [ 104.791794][ T3086] total_unevictable 0 [ 104.795784][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4446,uid=0 [ 104.811110][ T3086] Memory cgroup out of memory: OOM victim 4446 (syz-executor.5) is already exiting. Skip killing the task 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)}, 0x10) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:06 executing program 2: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000000700)) 03:04:06 executing program 2: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) 03:04:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 105.602789][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 105.613914][ T3106] CPU: 1 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 105.623901][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 105.634030][ T3106] Call Trace: [ 105.637312][ T3106] [ 105.640282][ T3106] dump_stack_lvl+0xda/0x130 [ 105.644935][ T3106] dump_stack+0x15/0x20 [ 105.649098][ T3106] dump_header+0x82/0x2d0 [ 105.653540][ T3106] oom_kill_process+0x33a/0x4c0 [ 105.658418][ T3106] out_of_memory+0x9ca/0xbf0 [ 105.663017][ T3106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 105.669098][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 105.674679][ T3106] try_charge_memcg+0x759/0xd20 [ 105.679543][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 105.684687][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 105.689740][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 105.695840][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 105.701320][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 105.706714][ T3106] swapin_readahead+0xe2/0x7a0 [ 105.711532][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 105.716825][ T3106] ? pcpu_block_update+0x396/0x3b0 [ 105.721947][ T3106] ? delete_from_swap_cache+0xa9/0xd0 [ 105.727402][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 105.732833][ T3106] do_swap_page+0x44c/0x1570 [ 105.737444][ T3106] ? __rcu_read_lock+0x35/0x50 [ 105.742240][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 105.747720][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 105.752580][ T3106] exc_page_fault+0x2f7/0x6d0 [ 105.757271][ T3106] asm_exc_page_fault+0x26/0x30 [ 105.762129][ T3106] RIP: 0010:__get_user_8+0x11/0x20 [ 105.767431][ T3106] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 105.787048][ T3106] RSP: 0018:ffffc90000f2be38 EFLAGS: 00050202 [ 105.793114][ T3106] RAX: 0000555556f78da8 RBX: ffffc90000f2be40 RCX: ffffffff81448b63 [ 105.801177][ T3106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810109ba90 [ 105.809149][ T3106] RBP: ffffc90000f2bf00 R08: 000188810109ba97 R09: 0000000000000000 [ 105.817127][ T3106] R10: 0001ffffffffffff R11: 000000000000b224 R12: ffff88810109b0c0 [ 105.825100][ T3106] R13: ffff88810109ba90 R14: ffffc90000f2bf58 R15: ffffc90000f2bfd8 [ 105.833132][ T3106] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 105.839030][ T3106] __rseq_handle_notify_resume+0xc7/0xbf0 [ 105.844826][ T3106] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 105.850816][ T3106] ? __se_sys_clock_nanosleep+0x202/0x230 [ 105.856596][ T3106] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 105.862512][ T3106] syscall_exit_to_user_mode+0x8e/0x130 [ 105.868122][ T3106] do_syscall_64+0x65/0x120 [ 105.872635][ T3106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 105.878543][ T3106] RIP: 0033:0x7ff768b6b0f3 [ 105.882976][ T3106] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 105.902587][ T3106] RSP: 002b:00007fffd2473ab8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 105.911132][ T3106] RAX: 0000000000000000 RBX: 00000000000000ae RCX: 00007ff768b6b0f3 [ 105.919111][ T3106] RDX: 00007fffd2473ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.927081][ T3106] RBP: 00007fffd2473b5c R08: 0000000000000010 R09: 00007fffd25c20b0 [ 105.935064][ T3106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 105.943035][ T3106] R13: 0000000000019bc6 R14: 000000000001986e R15: 0000000000000007 [ 105.951010][ T3106] [ 105.954216][ T3106] memory: usage 8368kB, limit 307200kB, failcnt 5074 [ 105.961014][ T3106] memory+swap: usage 8508kB, limit 9007199254740988kB, failcnt 0 [ 105.968796][ T3106] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 03:04:07 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 105.975979][ T3106] Memory cgroup stats for /syz4: [ 106.118563][ T3106] cache 8192 [ 106.126750][ T3106] rss 0 [ 106.129580][ T3106] shmem 0 [ 106.132522][ T3106] mapped_file 0 [ 106.136087][ T3106] dirty 0 [ 106.139027][ T3106] writeback 0 [ 106.142384][ T3106] workingset_refault_anon 781 [ 106.147159][ T3106] workingset_refault_file 43 [ 106.151741][ T3106] swap 147456 [ 106.155100][ T3106] swapcached 0 [ 106.158489][ T3106] pgpgin 2344 [ 106.161788][ T3106] pgpgout 2342 [ 106.165225][ T3106] pgfault 6112 [ 106.168643][ T3106] pgmajfault 303 [ 106.172222][ T3106] inactive_anon 0 [ 106.175885][ T3106] active_anon 0 [ 106.179417][ T3106] inactive_file 8192 [ 106.183299][ T3106] active_file 0 [ 106.186772][ T3106] unevictable 0 [ 106.190242][ T3106] hierarchical_memory_limit 314572800 [ 106.195627][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 106.201787][ T3106] total_cache 8192 [ 106.205750][ T3106] total_rss 0 [ 106.209040][ T3106] total_shmem 0 [ 106.212529][ T3106] total_mapped_file 0 [ 106.216523][ T3106] total_dirty 0 [ 106.220016][ T3106] total_writeback 0 [ 106.223857][ T3106] total_workingset_refault_anon 781 [ 106.229074][ T3106] total_workingset_refault_file 43 [ 106.234187][ T3106] total_swap 147456 [ 106.238009][ T3106] total_swapcached 0 [ 106.241941][ T3106] total_pgpgin 2344 [ 106.245773][ T3106] total_pgpgout 2342 [ 106.249680][ T3106] total_pgfault 6112 [ 106.253590][ T3106] total_pgmajfault 303 [ 106.257685][ T3106] total_inactive_anon 0 [ 106.261852][ T3106] total_active_anon 0 [ 106.265857][ T3106] total_inactive_file 8192 [ 106.270263][ T3106] total_active_file 0 [ 106.274244][ T3106] total_unevictable 0 [ 106.278245][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4456,uid=0 [ 106.293491][ T3106] Memory cgroup out of memory: Killed process 4458 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:07 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:08 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) 03:04:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:08 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:08 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 107.280602][ T4499] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 107.292058][ T4499] CPU: 1 PID: 4499 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 107.302189][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 107.312252][ T4499] Call Trace: [ 107.315576][ T4499] [ 107.318505][ T4499] dump_stack_lvl+0xda/0x130 [ 107.323149][ T4499] dump_stack+0x15/0x20 [ 107.327313][ T4499] dump_header+0x82/0x2d0 [ 107.331644][ T4499] oom_kill_process+0x33a/0x4c0 [ 107.336669][ T4499] out_of_memory+0x9ca/0xbf0 [ 107.341342][ T4499] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 107.347479][ T4499] mem_cgroup_out_of_memory+0x139/0x190 [ 107.353051][ T4499] try_charge_memcg+0x759/0xd20 [ 107.357968][ T4499] ? __swap_duplicate+0x29b/0x2b0 [ 107.363026][ T4499] ? radix_tree_lookup+0xf9/0x150 [ 107.368065][ T4499] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 107.374179][ T4499] __read_swap_cache_async+0x2b9/0x510 [ 107.379723][ T4499] swap_cluster_readahead+0x380/0x3f0 [ 107.385174][ T4499] ? __rcu_read_unlock+0x4d/0x70 [ 107.390253][ T4499] swapin_readahead+0xe2/0x7a0 [ 107.395137][ T4499] ? __filemap_get_folio+0x41a/0x5a0 [ 107.400439][ T4499] ? swap_cache_get_folio+0x6e/0x200 [ 107.405729][ T4499] do_swap_page+0x44c/0x1570 [ 107.410437][ T4499] ? exc_page_fault+0x3a6/0x6d0 [ 107.415302][ T4499] ? __rcu_read_lock+0x35/0x50 [ 107.420128][ T4499] ? pte_offset_map_nolock+0x124/0x1d0 [ 107.425607][ T4499] handle_mm_fault+0x7f6/0x27b0 [ 107.430527][ T4499] ? mas_walk+0x204/0x320 [ 107.434875][ T4499] exc_page_fault+0x3ff/0x6d0 [ 107.439623][ T4499] asm_exc_page_fault+0x26/0x30 [ 107.444510][ T4499] RIP: 0033:0x7fd7c761c0e3 [ 107.448957][ T4499] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 107.468658][ T4499] RSP: 002b:00007ffc502d0f38 EFLAGS: 00010293 [ 107.474753][ T4499] RAX: 00000000fffffffa RBX: 00007fd7c771ff80 RCX: 0000000000000000 [ 107.482737][ T4499] RDX: 00007ffc502d0f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.490721][ T4499] RBP: 00007fd7c7721980 R08: 0000000000000010 R09: 00007ffc503440b0 [ 107.498776][ T4499] R10: 0000000000000000 R11: 0000000000004ade R12: 000000000001a2f2 [ 107.506752][ T4499] R13: ffffffffffffffff R14: 00007fd7c7174000 R15: 0000000000019fb1 [ 107.514807][ T4499] [ 107.518485][ T4499] memory: usage 307200kB, limit 307200kB, failcnt 6476 [ 107.525776][ T4499] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 107.533782][ T4499] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 107.541413][ T4499] Memory cgroup stats for /syz5: [ 107.541675][ T4499] cache 12288 [ 107.550096][ T4499] rss 8192 [ 107.553246][ T4499] shmem 0 [ 107.556249][ T4499] mapped_file 0 [ 107.559973][ T4499] dirty 0 [ 107.563009][ T4499] writeback 0 [ 107.566368][ T4499] workingset_refault_anon 807 [ 107.571031][ T4499] workingset_refault_file 38 [ 107.575627][ T4499] swap 147456 [ 107.578898][ T4499] swapcached 8192 [ 107.582513][ T4499] pgpgin 2126 [ 107.585830][ T4499] pgpgout 2121 [ 107.589257][ T4499] pgfault 5542 [ 107.592615][ T4499] pgmajfault 311 [ 107.596173][ T4499] inactive_anon 8192 [ 107.600054][ T4499] active_anon 0 [ 107.603499][ T4499] inactive_file 12288 [ 107.607488][ T4499] active_file 0 [ 107.610943][ T4499] unevictable 0 [ 107.614397][ T4499] hierarchical_memory_limit 314572800 [ 107.619900][ T4499] hierarchical_memsw_limit 9223372036854771712 [ 107.626248][ T4499] total_cache 12288 [ 107.630045][ T4499] total_rss 8192 [ 107.633597][ T4499] total_shmem 0 [ 107.637076][ T4499] total_mapped_file 0 [ 107.641080][ T4499] total_dirty 0 [ 107.644525][ T4499] total_writeback 0 [ 107.648402][ T4499] total_workingset_refault_anon 807 [ 107.653579][ T4499] total_workingset_refault_file 38 [ 107.658700][ T4499] total_swap 147456 [ 107.662493][ T4499] total_swapcached 8192 [ 107.666682][ T4499] total_pgpgin 2126 [ 107.670600][ T4499] total_pgpgout 2121 [ 107.674511][ T4499] total_pgfault 5542 [ 107.678438][ T4499] total_pgmajfault 311 [ 107.682502][ T4499] total_inactive_anon 8192 [ 107.687015][ T4499] total_active_anon 0 [ 107.690995][ T4499] total_inactive_file 12288 [ 107.695508][ T4499] total_active_file 0 [ 107.699483][ T4499] total_unevictable 0 [ 107.703546][ T4499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4499,uid=0 [ 107.718786][ T4499] Memory cgroup out of memory: Killed process 4499 (syz-executor.5) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 107.753830][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 107.764953][ T3106] CPU: 0 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 107.775001][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 107.785127][ T3106] Call Trace: [ 107.788404][ T3106] [ 107.791329][ T3106] dump_stack_lvl+0xda/0x130 [ 107.795976][ T3106] dump_stack+0x15/0x20 [ 107.800145][ T3106] dump_header+0x82/0x2d0 [ 107.804547][ T3106] oom_kill_process+0x33a/0x4c0 [ 107.809403][ T3106] out_of_memory+0x9ca/0xbf0 [ 107.814119][ T3106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 107.820217][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 107.825769][ T3106] try_charge_memcg+0x759/0xd20 [ 107.830762][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 107.835784][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 107.840829][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 107.846905][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 107.852369][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 107.857760][ T3106] swapin_readahead+0xe2/0x7a0 [ 107.862532][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 107.867880][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 107.873207][ T3106] do_swap_page+0x44c/0x1570 [ 107.877801][ T3106] ? __rcu_read_lock+0x35/0x50 [ 107.882641][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 107.888104][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 107.892985][ T3106] exc_page_fault+0x2f7/0x6d0 [ 107.897690][ T3106] asm_exc_page_fault+0x26/0x30 [ 107.902548][ T3106] RIP: 0010:__get_user_8+0x11/0x20 [ 107.907727][ T3106] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 107.927382][ T3106] RSP: 0018:ffffc90000f2be38 EFLAGS: 00050202 [ 107.933522][ T3106] RAX: 0000555556f78da8 RBX: ffffc90000f2be40 RCX: ffffffff81448b63 [ 107.941540][ T3106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810109ba90 [ 107.949514][ T3106] RBP: ffffc90000f2bf00 R08: 000188810109ba97 R09: 0000000000000000 [ 107.957587][ T3106] R10: 0001ffffffffffff R11: 0000000000008d29 R12: ffff88810109b0c0 [ 107.965683][ T3106] R13: ffff88810109ba90 R14: ffffc90000f2bf58 R15: ffffc90000f2bfd8 [ 107.973763][ T3106] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 107.979692][ T3106] __rseq_handle_notify_resume+0xc7/0xbf0 [ 107.985415][ T3106] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 107.991417][ T3106] ? __se_sys_clock_nanosleep+0x202/0x230 [ 107.997142][ T3106] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 108.003143][ T3106] syscall_exit_to_user_mode+0x8e/0x130 [ 108.008777][ T3106] do_syscall_64+0x65/0x120 [ 108.013278][ T3106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 108.019346][ T3106] RIP: 0033:0x7ff768b6b0f3 [ 108.023758][ T3106] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 108.043367][ T3106] RSP: 002b:00007fffd2473ab8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 108.051786][ T3106] RAX: 0000000000000000 RBX: 00000000000000b1 RCX: 00007ff768b6b0f3 [ 108.059809][ T3106] RDX: 00007fffd2473ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.067848][ T3106] RBP: 00007fffd2473b5c R08: 0000000000000010 R09: 00007fffd25c20b0 [ 108.075854][ T3106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 108.083825][ T3106] R13: 000000000001a38b R14: 000000000001a036 R15: 0000000000000007 [ 108.091882][ T3106] [ 108.095110][ T3106] memory: usage 8392kB, limit 307200kB, failcnt 5227 [ 108.101802][ T3106] memory+swap: usage 8536kB, limit 9007199254740988kB, failcnt 0 [ 108.109583][ T3106] kmem: usage 8380kB, limit 9007199254740988kB, failcnt 0 [ 108.116711][ T3106] Memory cgroup stats for /syz4: [ 108.133852][ T3106] cache 12288 [ 108.142184][ T3106] rss 0 [ 108.144938][ T3106] shmem 0 [ 108.147896][ T3106] mapped_file 0 [ 108.151440][ T3106] dirty 0 [ 108.154449][ T3106] writeback 0 [ 108.157912][ T3106] workingset_refault_anon 798 [ 108.162671][ T3106] workingset_refault_file 44 [ 108.167283][ T3106] swap 147456 [ 108.170604][ T3106] swapcached 0 [ 108.174046][ T3106] pgpgin 2386 [ 108.177400][ T3106] pgpgout 2383 [ 108.180765][ T3106] pgfault 6193 [ 108.184126][ T3106] pgmajfault 308 [ 108.187816][ T3106] inactive_anon 0 [ 108.191444][ T3106] active_anon 0 [ 108.194933][ T3106] inactive_file 12288 [ 108.198931][ T3106] active_file 0 [ 108.202400][ T3106] unevictable 0 [ 108.205872][ T3106] hierarchical_memory_limit 314572800 [ 108.211226][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 108.217404][ T3106] total_cache 12288 [ 108.221318][ T3106] total_rss 0 [ 108.224667][ T3106] total_shmem 0 [ 108.228153][ T3106] total_mapped_file 0 [ 108.232130][ T3106] total_dirty 0 [ 108.235635][ T3106] total_writeback 0 [ 108.239435][ T3106] total_workingset_refault_anon 798 [ 108.244714][ T3106] total_workingset_refault_file 44 [ 108.249839][ T3106] total_swap 147456 03:04:09 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:09 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 108.253655][ T3106] total_swapcached 0 [ 108.257560][ T3106] total_pgpgin 2386 [ 108.261361][ T3106] total_pgpgout 2383 [ 108.265452][ T3106] total_pgfault 6193 [ 108.269331][ T3106] total_pgmajfault 308 [ 108.273396][ T3106] total_inactive_anon 0 [ 108.277566][ T3106] total_active_anon 0 [ 108.281594][ T3106] total_inactive_file 12288 [ 108.286104][ T3106] total_active_file 0 [ 108.290172][ T3106] total_unevictable 0 03:04:09 executing program 3: socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 108.294152][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4502,uid=0 [ 108.309379][ T3106] Memory cgroup out of memory: Killed process 4503 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:10 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 108.554878][ T4510] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 108.566295][ T4510] CPU: 1 PID: 4510 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 108.576377][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 108.586428][ T4510] Call Trace: [ 108.589708][ T4510] [ 108.592712][ T4510] dump_stack_lvl+0xda/0x130 [ 108.597316][ T4510] dump_stack+0x15/0x20 [ 108.601600][ T4510] dump_header+0x82/0x2d0 [ 108.605978][ T4510] oom_kill_process+0x33a/0x4c0 [ 108.610913][ T4510] out_of_memory+0x9ca/0xbf0 [ 108.615514][ T4510] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 108.621685][ T4510] mem_cgroup_out_of_memory+0x139/0x190 [ 108.627297][ T4510] try_charge_memcg+0x759/0xd20 [ 108.632251][ T4510] ? __swap_duplicate+0x29b/0x2b0 [ 108.637284][ T4510] ? radix_tree_lookup+0xf9/0x150 [ 108.642324][ T4510] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 108.648401][ T4510] __read_swap_cache_async+0x2b9/0x510 [ 108.654032][ T4510] swap_cluster_readahead+0x276/0x3f0 [ 108.659449][ T4510] shmem_swapin_folio+0x245/0x740 [ 108.664576][ T4510] shmem_get_folio_gfp+0x242/0xb40 [ 108.669757][ T4510] shmem_fault+0x100/0x250 [ 108.674185][ T4510] __do_fault+0xb2/0x1f0 [ 108.678460][ T4510] handle_mm_fault+0xb9a/0x27b0 [ 108.683413][ T4510] ? mas_walk+0x1ae/0x320 [ 108.687743][ T4510] exc_page_fault+0x3ff/0x6d0 [ 108.692704][ T4510] asm_exc_page_fault+0x26/0x30 [ 108.697596][ T4510] RIP: 0033:0x7fc472c57266 [ 108.702074][ T4510] Code: 1f 44 00 00 48 8b 0d 91 e4 ca 00 4c 63 05 7a e4 ca 00 48 8b 05 7b e4 ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 61 e4 ca 00 c3 52 48 8d 35 c3 0e 0a 00 48 89 c2 48 [ 108.721702][ T4510] RSP: 002b:00007ffeafb95008 EFLAGS: 00010287 [ 108.727775][ T4510] RAX: 0000001b2c922000 RBX: 0000000000000090 RCX: 0000001b2c920000 [ 108.736086][ T4510] RDX: 0000001b2c922004 RSI: ffffffff81067b5d RDI: 000000008156f9c5 [ 108.744095][ T4510] RBP: 00007fc472630398 R08: 0000001b2cf20000 R09: 000000000000009a 03:04:10 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) [ 108.752125][ T4510] R10: 000000008156fbf3 R11: 0000000000004ba4 R12: 0000001b2c921bcc [ 108.760101][ T4510] R13: 00007fc472630488 R14: 00007fc472dd0000 R15: 00007fc472ddc018 [ 108.768076][ T4510] ? sched_clock+0xd/0x60 [ 108.772420][ T4510] [ 108.775531][ T4510] memory: usage 307196kB, limit 307200kB, failcnt 6775 [ 108.782407][ T4510] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 108.790458][ T4510] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 108.797793][ T4510] Memory cgroup stats for /syz2: [ 108.797983][ T4510] cache 8192 [ 108.806178][ T4510] rss 0 [ 108.808967][ T4510] shmem 0 [ 108.811955][ T4510] mapped_file 0 [ 108.815446][ T4510] dirty 0 [ 108.818530][ T4510] writeback 0 [ 108.821900][ T4510] workingset_refault_anon 850 [ 108.826739][ T4510] workingset_refault_file 58 [ 108.831358][ T4510] swap 147456 [ 108.834681][ T4510] swapcached 12288 [ 108.838432][ T4510] pgpgin 2746 [ 108.841710][ T4510] pgpgout 2741 [ 108.845072][ T4510] pgfault 6643 [ 108.848502][ T4510] pgmajfault 325 [ 108.852138][ T4510] inactive_anon 4096 [ 108.856065][ T4510] active_anon 0 [ 108.859511][ T4510] inactive_file 8192 [ 108.863444][ T4510] active_file 0 [ 108.866959][ T4510] unevictable 0 [ 108.870412][ T4510] hierarchical_memory_limit 314572800 [ 108.875812][ T4510] hierarchical_memsw_limit 9223372036854771712 [ 108.882011][ T4510] total_cache 8192 [ 108.885872][ T4510] total_rss 0 [ 108.889150][ T4510] total_shmem 0 [ 108.892596][ T4510] total_mapped_file 0 [ 108.896597][ T4510] total_dirty 0 [ 108.900041][ T4510] total_writeback 0 [ 108.903855][ T4510] total_workingset_refault_anon 850 [ 108.909061][ T4510] total_workingset_refault_file 58 [ 108.914165][ T4510] total_swap 147456 [ 108.917992][ T4510] total_swapcached 12288 [ 108.922254][ T4510] total_pgpgin 2746 [ 108.926091][ T4510] total_pgpgout 2741 [ 108.930037][ T4510] total_pgfault 6643 [ 108.933925][ T4510] total_pgmajfault 325 [ 108.938022][ T4510] total_inactive_anon 4096 [ 108.942456][ T4510] total_active_anon 0 [ 108.946430][ T4510] total_inactive_file 8192 [ 108.950831][ T4510] total_active_file 0 [ 108.954802][ T4510] total_unevictable 0 [ 108.958834][ T4510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4510,uid=0 [ 108.974091][ T4510] Memory cgroup out of memory: Killed process 4510 (syz-executor.2) total-vm:48488kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:10 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 109.264816][ T4513] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 109.276220][ T4513] CPU: 1 PID: 4513 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 109.286194][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 109.296256][ T4513] Call Trace: [ 109.299561][ T4513] [ 109.302517][ T4513] dump_stack_lvl+0xda/0x130 [ 109.307141][ T4513] dump_stack+0x15/0x20 [ 109.311288][ T4513] dump_header+0x82/0x2d0 [ 109.315645][ T4513] oom_kill_process+0x33a/0x4c0 [ 109.320544][ T4513] out_of_memory+0x9ca/0xbf0 [ 109.325159][ T4513] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 109.331250][ T4513] mem_cgroup_out_of_memory+0x139/0x190 [ 109.336888][ T4513] try_charge_memcg+0x759/0xd20 [ 109.342007][ T4513] ? __swap_duplicate+0x29b/0x2b0 [ 109.347042][ T4513] ? radix_tree_lookup+0xf9/0x150 [ 109.352068][ T4513] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 109.358323][ T4513] __read_swap_cache_async+0x2b9/0x510 [ 109.363896][ T4513] swap_cluster_readahead+0x276/0x3f0 [ 109.369290][ T4513] swapin_readahead+0xe2/0x7a0 [ 109.374086][ T4513] ? __filemap_get_folio+0x41a/0x5a0 [ 109.379434][ T4513] ? swap_cache_get_folio+0x6e/0x200 [ 109.384827][ T4513] do_swap_page+0x44c/0x1570 [ 109.389438][ T4513] ? exc_page_fault+0x3a6/0x6d0 [ 109.394348][ T4513] ? __rcu_read_lock+0x35/0x50 [ 109.399165][ T4513] ? pte_offset_map_nolock+0x124/0x1d0 [ 109.404633][ T4513] handle_mm_fault+0x7f6/0x27b0 [ 109.409497][ T4513] ? mas_walk+0x204/0x320 [ 109.413839][ T4513] exc_page_fault+0x3ff/0x6d0 [ 109.418533][ T4513] asm_exc_page_fault+0x26/0x30 [ 109.423460][ T4513] RIP: 0033:0x7fd7c75ac9cc [ 109.427882][ T4513] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d e5 f6 16 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 109.447580][ T4513] RSP: 002b:00007ffc502d0ee0 EFLAGS: 00010286 [ 109.453650][ T4513] RAX: ffffffff8156fad8 RBX: 00007fd7c7720018 RCX: 000000000002e463 [ 109.461641][ T4513] RDX: ffffffff813b9fca RSI: 00007fd7c6f74008 RDI: 000000000001a4f1 [ 109.469735][ T4513] RBP: 00000000813b9000 R08: 0000001b2cb20000 R09: 000000000000189f [ 109.477762][ T4513] R10: 000000008156f8a3 R11: 0000000000004c38 R12: 000000000002e463 [ 109.485740][ T4513] R13: 0000000000000001 R14: 00007fd7c7714000 R15: ffffffff813b9fca [ 109.493714][ T4513] ? bpf_ringbuf_alloc+0xea/0x2f0 [ 109.498891][ T4513] ? page_counter_charge+0x1a8/0x1c0 [ 109.504210][ T4513] ? bpf_ringbuf_alloc+0xea/0x2f0 [ 109.509302][ T4513] [ 109.512448][ T4513] memory: usage 147560kB, limit 307200kB, failcnt 6622 [ 109.519453][ T4513] memory+swap: usage 126896kB, limit 9007199254740988kB, failcnt 0 [ 109.527345][ T4513] kmem: usage 104392kB, limit 9007199254740988kB, failcnt 0 [ 109.534621][ T4513] Memory cgroup stats for /syz5: [ 109.536931][ T4513] cache 8192 [ 109.545135][ T4513] rss 4096 [ 109.548163][ T4513] shmem 0 [ 109.551096][ T4513] mapped_file 0 [ 109.554542][ T4513] dirty 0 [ 109.557531][ T4513] writeback 0 [ 109.560837][ T4513] workingset_refault_anon 823 03:04:11 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 109.565531][ T4513] workingset_refault_file 39 [ 109.570214][ T4513] swap 139264 [ 109.573501][ T4513] swapcached 12288 [ 109.577316][ T4513] pgpgin 2168 [ 109.580683][ T4513] pgpgout 2163 [ 109.584133][ T4513] pgfault 5671 [ 109.587632][ T4513] pgmajfault 318 [ 109.591163][ T4513] inactive_anon 0 [ 109.594793][ T4513] active_anon 0 [ 109.598333][ T4513] inactive_file 0 [ 109.602045][ T4513] active_file 8192 [ 109.605774][ T4513] unevictable 0 [ 109.609223][ T4513] hierarchical_memory_limit 314572800 [ 109.614626][ T4513] hierarchical_memsw_limit 9223372036854771712 [ 109.620790][ T4513] total_cache 8192 [ 109.624529][ T4513] total_rss 4096 [ 109.628171][ T4513] total_shmem 0 [ 109.631622][ T4513] total_mapped_file 0 [ 109.635619][ T4513] total_dirty 0 [ 109.639070][ T4513] total_writeback 0 [ 109.642861][ T4513] total_workingset_refault_anon 823 [ 109.648146][ T4513] total_workingset_refault_file 39 [ 109.653268][ T4513] total_swap 139264 [ 109.657134][ T4513] total_swapcached 12288 [ 109.661374][ T4513] total_pgpgin 2168 [ 109.665302][ T4513] total_pgpgout 2163 [ 109.669207][ T4513] total_pgfault 5671 [ 109.673091][ T4513] total_pgmajfault 318 [ 109.677175][ T4513] total_inactive_anon 0 [ 109.681401][ T4513] total_active_anon 0 [ 109.685438][ T4513] total_inactive_file 0 [ 109.689581][ T4513] total_active_file 8192 [ 109.693819][ T4513] total_unevictable 0 [ 109.697890][ T4513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4513,uid=0 [ 109.713204][ T4513] Memory cgroup out of memory: Killed process 4513 (syz-executor.5) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:11 executing program 3: socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:11 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 110.261772][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 110.272987][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 110.283593][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 110.295283][ T3118] Call Trace: [ 110.298700][ T3118] [ 110.301804][ T3118] dump_stack_lvl+0xda/0x130 [ 110.306485][ T3118] dump_stack+0x15/0x20 [ 110.310649][ T3118] dump_header+0x82/0x2d0 [ 110.315059][ T3118] oom_kill_process+0x33a/0x4c0 [ 110.320130][ T3118] out_of_memory+0x9ca/0xbf0 [ 110.324770][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 110.330897][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 110.336526][ T3118] try_charge_memcg+0x759/0xd20 [ 110.341490][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 110.346581][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 110.351885][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 110.358206][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 110.363691][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 110.369225][ T3118] swapin_readahead+0xe2/0x7a0 [ 110.374201][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 110.379627][ T3118] ? ip_rcv_core+0x6b0/0x6b0 [ 110.384230][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 110.389554][ T3118] do_swap_page+0x44c/0x1570 [ 110.394198][ T3118] ? __rcu_read_lock+0x35/0x50 [ 110.399009][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 110.404543][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 110.409398][ T3118] exc_page_fault+0x2f7/0x6d0 [ 110.414181][ T3118] asm_exc_page_fault+0x26/0x30 [ 110.419079][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 110.424238][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 110.444034][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 110.450248][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 110.458244][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 110.466314][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 110.474297][ T3118] R10: 0001ffffffffffff R11: 000000000000af6a R12: ffff888103d6c100 [ 110.482262][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 110.490246][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 110.496156][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 110.501984][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 110.507988][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 110.513735][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 110.519707][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 110.525440][ T3118] do_syscall_64+0x65/0x120 [ 110.529977][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 110.535924][ T3118] RIP: 0033:0x7fc472cd80f3 [ 110.540440][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 110.560205][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 110.568666][ T3118] RAX: 0000000000000000 RBX: 00000000000000c9 RCX: 00007fc472cd80f3 [ 110.576646][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.584754][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 110.592793][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 110.600863][ T3118] R13: 000000000001ae25 R14: 000000000001aa65 R15: 0000000000000019 [ 110.608924][ T3118] 03:04:12 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) [ 110.612255][ T3118] memory: usage 8384kB, limit 307200kB, failcnt 6936 [ 110.619017][ T3118] memory+swap: usage 8536kB, limit 9007199254740988kB, failcnt 0 [ 110.626787][ T3118] kmem: usage 8368kB, limit 9007199254740988kB, failcnt 0 [ 110.633901][ T3118] Memory cgroup stats for /syz2: [ 110.695620][ T3118] cache 12288 [ 110.703931][ T3118] rss 0 [ 110.706775][ T3118] shmem 0 [ 110.709757][ T3118] mapped_file 0 [ 110.713215][ T3118] dirty 0 [ 110.716214][ T3118] writeback 0 [ 110.719499][ T3118] workingset_refault_anon 873 [ 110.724187][ T3118] workingset_refault_file 59 [ 110.728835][ T3118] swap 155648 [ 110.732129][ T3118] swapcached 4096 [ 110.735894][ T3118] pgpgin 2796 [ 110.739190][ T3118] pgpgout 2792 [ 110.742556][ T3118] pgfault 6776 [ 110.745959][ T3118] pgmajfault 334 [ 110.749507][ T3118] inactive_anon 4096 [ 110.753399][ T3118] active_anon 0 [ 110.756885][ T3118] inactive_file 0 [ 110.760649][ T3118] active_file 12288 [ 110.764490][ T3118] unevictable 0 [ 110.768149][ T3118] hierarchical_memory_limit 314572800 [ 110.773540][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 110.779738][ T3118] total_cache 12288 [ 110.783537][ T3118] total_rss 0 [ 110.786821][ T3118] total_shmem 0 [ 110.790274][ T3118] total_mapped_file 0 [ 110.794254][ T3118] total_dirty 0 [ 110.797742][ T3118] total_writeback 0 [ 110.801703][ T3118] total_workingset_refault_anon 873 [ 110.806981][ T3118] total_workingset_refault_file 59 [ 110.812211][ T3118] total_swap 155648 [ 110.816041][ T3118] total_swapcached 4096 [ 110.820179][ T3118] total_pgpgin 2796 [ 110.824055][ T3118] total_pgpgout 2792 [ 110.828031][ T3118] total_pgfault 6776 [ 110.831911][ T3118] total_pgmajfault 334 [ 110.836145][ T3118] total_inactive_anon 4096 [ 110.840550][ T3118] total_active_anon 0 [ 110.844516][ T3118] total_inactive_file 0 [ 110.848698][ T3118] total_active_file 12288 [ 110.853098][ T3118] total_unevictable 0 [ 110.857178][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4526,uid=0 [ 110.873765][ T3118] Memory cgroup out of memory: Killed process 4527 (syz-executor.2) total-vm:48488kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:12 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:12 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:12 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:12 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:13 executing program 3: socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 111.826636][ T3130] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 111.837726][ T3130] CPU: 0 PID: 3130 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 111.847712][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 111.857788][ T3130] Call Trace: [ 111.861151][ T3130] [ 111.864087][ T3130] dump_stack_lvl+0xda/0x130 [ 111.868767][ T3130] dump_stack+0x15/0x20 [ 111.872930][ T3130] dump_header+0x82/0x2d0 [ 111.877325][ T3130] oom_kill_process+0x33a/0x4c0 [ 111.882304][ T3130] out_of_memory+0x9ca/0xbf0 [ 111.886914][ T3130] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 111.893032][ T3130] mem_cgroup_out_of_memory+0x139/0x190 [ 111.898610][ T3130] try_charge_memcg+0x759/0xd20 [ 111.903471][ T3130] ? __swap_duplicate+0x29b/0x2b0 [ 111.908542][ T3130] ? radix_tree_lookup+0xf9/0x150 [ 111.913918][ T3130] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 111.919999][ T3130] __read_swap_cache_async+0x2b9/0x510 [ 111.925479][ T3130] swap_cluster_readahead+0x276/0x3f0 [ 111.930905][ T3130] swapin_readahead+0xe2/0x7a0 [ 111.935689][ T3130] ? __filemap_get_folio+0x41a/0x5a0 [ 111.941044][ T3130] ? delete_from_swap_cache+0xa9/0xd0 [ 111.946509][ T3130] ? swap_cache_get_folio+0x6e/0x200 [ 111.951907][ T3130] do_swap_page+0x44c/0x1570 [ 111.956511][ T3130] ? __rcu_read_lock+0x35/0x50 [ 111.961427][ T3130] ? pte_offset_map_nolock+0x124/0x1d0 [ 111.966913][ T3130] handle_mm_fault+0x7f6/0x27b0 [ 111.971808][ T3130] ? mas_walk+0x204/0x320 [ 111.976145][ T3130] exc_page_fault+0x3ff/0x6d0 [ 111.980872][ T3130] asm_exc_page_fault+0x26/0x30 [ 111.985739][ T3130] RIP: 0033:0x7f56ac2419ef [ 111.990194][ T3130] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 81 57 09 00 48 8d 15 85 69 09 00 bf 01 [ 112.009888][ T3130] RSP: 002b:00007ffc3882a070 EFLAGS: 00010206 [ 112.016018][ T3130] RAX: 00000000000187f1 RBX: 0000000000008040 RCX: 000055555693e7e0 [ 112.024078][ T3130] RDX: 0000000000008041 RSI: 0000555556946810 RDI: 0000000000000004 [ 112.032063][ T3130] RBP: 00007f56ac367660 R08: 0000000000000010 R09: 00007ffc3884e0b0 [ 112.040101][ T3130] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 112.048144][ T3130] R13: 0000000000000076 R14: 00007f56ac3676c0 R15: 0000000000000000 [ 112.056221][ T3130] [ 112.059310][ T3130] memory: usage 307200kB, limit 307200kB, failcnt 5456 [ 112.066208][ T3130] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 112.074167][ T3130] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 112.081551][ T3130] Memory cgroup stats for /syz4: [ 112.081800][ T3130] cache 12288 [ 112.090023][ T3130] rss 8192 [ 112.093058][ T3130] shmem 0 [ 112.096020][ T3130] mapped_file 0 [ 112.099479][ T3130] dirty 0 [ 112.102406][ T3130] writeback 8192 [ 112.105965][ T3130] workingset_refault_anon 821 [ 112.110717][ T3130] workingset_refault_file 46 [ 112.115304][ T3130] swap 139264 [ 112.118635][ T3130] swapcached 8192 [ 112.122347][ T3130] pgpgin 2459 [ 112.125647][ T3130] pgpgout 2454 [ 112.129015][ T3130] pgfault 6424 [ 112.132464][ T3130] pgmajfault 321 [ 112.136020][ T3130] inactive_anon 0 [ 112.139711][ T3130] active_anon 0 [ 112.143169][ T3130] inactive_file 12288 [ 112.147151][ T3130] active_file 0 [ 112.150696][ T3130] unevictable 0 [ 112.154145][ T3130] hierarchical_memory_limit 314572800 [ 112.159559][ T3130] hierarchical_memsw_limit 9223372036854771712 [ 112.165739][ T3130] total_cache 12288 [ 112.169537][ T3130] total_rss 8192 [ 112.173069][ T3130] total_shmem 0 [ 112.176537][ T3130] total_mapped_file 0 [ 112.180510][ T3130] total_dirty 0 [ 112.183957][ T3130] total_writeback 8192 [ 112.188029][ T3130] total_workingset_refault_anon 821 [ 112.193212][ T3130] total_workingset_refault_file 46 [ 112.198391][ T3130] total_swap 139264 [ 112.202199][ T3130] total_swapcached 8192 [ 112.206363][ T3130] total_pgpgin 2459 [ 112.210205][ T3130] total_pgpgout 2454 [ 112.214101][ T3130] total_pgfault 6424 [ 112.218009][ T3130] total_pgmajfault 321 [ 112.222065][ T3130] total_inactive_anon 0 [ 112.226218][ T3130] total_active_anon 0 [ 112.230186][ T3130] total_inactive_file 12288 [ 112.234724][ T3130] total_active_file 0 [ 112.238714][ T3130] total_unevictable 0 [ 112.242690][ T3130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4538,uid=0 [ 112.257913][ T3130] Memory cgroup out of memory: Killed process 4539 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:13 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:13 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:14 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) [ 112.648006][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 112.659102][ T3089] CPU: 1 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 112.669095][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 112.679164][ T3089] Call Trace: [ 112.682460][ T3089] [ 112.685404][ T3089] dump_stack_lvl+0xda/0x130 [ 112.690002][ T3089] dump_stack+0x15/0x20 [ 112.694165][ T3089] dump_header+0x82/0x2d0 [ 112.698524][ T3089] oom_kill_process+0x33a/0x4c0 [ 112.703484][ T3089] out_of_memory+0x9ca/0xbf0 [ 112.708129][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 112.714220][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 112.719793][ T3089] try_charge_memcg+0x759/0xd20 [ 112.724718][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 112.729745][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 112.734877][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 112.741024][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 112.746533][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 112.751920][ T3089] swapin_readahead+0xe2/0x7a0 [ 112.756787][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 112.762071][ T3089] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 112.767692][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 112.773027][ T3089] do_swap_page+0x44c/0x1570 [ 112.777640][ T3089] ? __rcu_read_lock+0x35/0x50 [ 112.782406][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 112.788372][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 112.793695][ T3089] exc_page_fault+0x2f7/0x6d0 [ 112.798429][ T3089] asm_exc_page_fault+0x26/0x30 [ 112.803368][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 112.808573][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 112.828222][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 112.834404][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 112.842382][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 112.850360][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 112.858341][ T3089] R10: 0001ffffffffffff R11: 00000000000098c8 R12: ffff888103d68000 [ 112.866666][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 112.874863][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 112.880777][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 112.886618][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 112.892620][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 112.898354][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 112.904288][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 112.909861][ T3089] do_syscall_64+0x65/0x120 [ 112.914365][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 112.920277][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 112.924699][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 112.944453][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 112.952881][ T3089] RAX: 0000000000000000 RBX: 000000000000011f RCX: 00007fca7be9e0f3 [ 112.960930][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.968915][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 112.976898][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 112.984946][ T3089] R13: 000000000001b534 R14: 000000000001b1e0 R15: 000000000000000e [ 112.992974][ T3089] [ 112.996150][ T3089] memory: usage 307200kB, limit 307200kB, failcnt 5314 [ 113.002998][ T3089] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 113.011064][ T3089] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 113.018378][ T3089] Memory cgroup stats for /syz1: [ 113.018536][ T3089] cache 4096 [ 113.026791][ T3089] rss 0 [ 113.029587][ T3089] shmem 0 [ 113.032568][ T3089] mapped_file 0 [ 113.036032][ T3089] dirty 0 [ 113.038962][ T3089] writeback 0 [ 113.042237][ T3089] workingset_refault_anon 670 [ 113.046928][ T3089] workingset_refault_file 63 [ 113.051506][ T3089] swap 147456 [ 113.054790][ T3089] swapcached 0 [ 113.058279][ T3089] pgpgin 3430 [ 113.061639][ T3089] pgpgout 3429 [ 113.065012][ T3089] pgfault 8759 [ 113.068389][ T3089] pgmajfault 296 [ 113.071925][ T3089] inactive_anon 0 [ 113.075653][ T3089] active_anon 0 [ 113.079103][ T3089] inactive_file 4096 [ 113.082991][ T3089] active_file 0 [ 113.086529][ T3089] unevictable 0 [ 113.089995][ T3089] hierarchical_memory_limit 314572800 [ 113.095423][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 113.101649][ T3089] total_cache 4096 [ 113.105360][ T3089] total_rss 0 [ 113.108681][ T3089] total_shmem 0 [ 113.112130][ T3089] total_mapped_file 0 [ 113.116154][ T3089] total_dirty 0 [ 113.119606][ T3089] total_writeback 0 [ 113.123407][ T3089] total_workingset_refault_anon 670 [ 113.128695][ T3089] total_workingset_refault_file 63 [ 113.133869][ T3089] total_swap 147456 [ 113.137696][ T3089] total_swapcached 0 [ 113.141581][ T3089] total_pgpgin 3430 [ 113.145375][ T3089] total_pgpgout 3429 [ 113.149307][ T3089] total_pgfault 8759 [ 113.153411][ T3089] total_pgmajfault 296 [ 113.157480][ T3089] total_inactive_anon 0 [ 113.161713][ T3089] total_active_anon 0 [ 113.165711][ T3089] total_inactive_file 4096 [ 113.170167][ T3089] total_active_file 0 [ 113.174137][ T3089] total_unevictable 0 [ 113.178223][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4542,uid=0 03:04:14 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 113.193453][ T3089] Memory cgroup out of memory: Killed process 4543 (syz-executor.1) total-vm:46572kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:14 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:15 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) 03:04:15 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 114.060791][ T4565] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 114.072151][ T4565] CPU: 1 PID: 4565 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 114.082188][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 114.092249][ T4565] Call Trace: [ 114.095623][ T4565] [ 114.098555][ T4565] dump_stack_lvl+0xda/0x130 [ 114.103154][ T4565] dump_stack+0x15/0x20 [ 114.107367][ T4565] dump_header+0x82/0x2d0 [ 114.111698][ T4565] oom_kill_process+0x33a/0x4c0 [ 114.116600][ T4565] out_of_memory+0x9ca/0xbf0 [ 114.121237][ T4565] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 114.127388][ T4565] mem_cgroup_out_of_memory+0x139/0x190 [ 114.132963][ T4565] try_charge_memcg+0x759/0xd20 [ 114.137822][ T4565] ? __swap_duplicate+0x29b/0x2b0 [ 114.142935][ T4565] ? radix_tree_lookup+0xf9/0x150 [ 114.148058][ T4565] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 114.154136][ T4565] __read_swap_cache_async+0x2b9/0x510 [ 114.159702][ T4565] swap_cluster_readahead+0x276/0x3f0 [ 114.165097][ T4565] swapin_readahead+0xe2/0x7a0 [ 114.169884][ T4565] ? __filemap_get_folio+0x41a/0x5a0 [ 114.175179][ T4565] ? swap_cache_get_folio+0x6e/0x200 [ 114.180506][ T4565] do_swap_page+0x44c/0x1570 [ 114.185110][ T4565] ? __rcu_read_lock+0x35/0x50 [ 114.189880][ T4565] ? pte_offset_map_nolock+0x124/0x1d0 [ 114.195367][ T4565] handle_mm_fault+0x7f6/0x27b0 [ 114.200226][ T4565] ? mas_walk+0x204/0x320 [ 114.204564][ T4565] exc_page_fault+0x3ff/0x6d0 [ 114.209367][ T4565] asm_exc_page_fault+0x26/0x30 [ 114.214265][ T4565] RIP: 0033:0x7fd7c75aad14 [ 114.218808][ T4565] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 114.238437][ T4565] RSP: 002b:00007ffc502d0f80 EFLAGS: 00010206 [ 114.244510][ T4565] RAX: 0000000000000000 RBX: 00007fd7c771ff80 RCX: 0000000000000000 [ 114.252494][ T4565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555c17788 [ 114.260550][ T4565] RBP: 00007fd7c7721980 R08: 0000000000000000 R09: 00007ffc503440b0 [ 114.268579][ T4565] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001bde6 [ 114.276620][ T4565] R13: ffffffffffffffff R14: 00007fd7c7174000 R15: 000000000001baa5 [ 114.284603][ T4565] [ 114.287734][ T4565] memory: usage 307200kB, limit 307200kB, failcnt 6908 [ 114.294591][ T4565] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 114.302516][ T4565] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 114.309820][ T4565] Memory cgroup stats for /syz5: [ 114.309991][ T4565] cache 12288 [ 114.318225][ T4565] rss 8192 [ 114.321249][ T4565] shmem 0 [ 114.324179][ T4565] mapped_file 0 [ 114.327658][ T4565] dirty 0 [ 114.330686][ T4565] writeback 0 [ 114.334074][ T4565] workingset_refault_anon 871 [ 114.338760][ T4565] workingset_refault_file 42 [ 114.343375][ T4565] swap 143360 [ 114.346882][ T4565] swapcached 8192 [ 114.350538][ T4565] pgpgin 2294 [ 114.353815][ T4565] pgpgout 2289 [ 114.357271][ T4565] pgfault 5955 [ 114.360633][ T4565] pgmajfault 341 [ 114.364165][ T4565] inactive_anon 0 [ 114.367808][ T4565] active_anon 0 [ 114.371330][ T4565] inactive_file 12288 [ 114.375382][ T4565] active_file 0 [ 114.378850][ T4565] unevictable 0 [ 114.382329][ T4565] hierarchical_memory_limit 314572800 [ 114.387734][ T4565] hierarchical_memsw_limit 9223372036854771712 [ 114.393880][ T4565] total_cache 12288 [ 114.397764][ T4565] total_rss 8192 [ 114.401295][ T4565] total_shmem 0 [ 114.404812][ T4565] total_mapped_file 0 [ 114.408851][ T4565] total_dirty 0 [ 114.412324][ T4565] total_writeback 0 [ 114.416128][ T4565] total_workingset_refault_anon 871 [ 114.421314][ T4565] total_workingset_refault_file 42 [ 114.426526][ T4565] total_swap 143360 [ 114.430426][ T4565] total_swapcached 8192 [ 114.434664][ T4565] total_pgpgin 2294 [ 114.438500][ T4565] total_pgpgout 2289 [ 114.442382][ T4565] total_pgfault 5955 [ 114.446281][ T4565] total_pgmajfault 341 [ 114.450347][ T4565] total_inactive_anon 0 [ 114.454503][ T4565] total_active_anon 0 [ 114.458492][ T4565] total_inactive_file 12288 [ 114.462994][ T4565] total_active_file 0 [ 114.466996][ T4565] total_unevictable 0 [ 114.470983][ T4565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4565,uid=0 [ 114.486332][ T4565] Memory cgroup out of memory: Killed process 4565 (syz-executor.5) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:16 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:16 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:16 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:16 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:16 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) 03:04:16 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 03:04:16 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 03:04:17 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 03:04:17 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:17 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:17 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:17 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:17 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:17 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:17 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) 03:04:17 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:17 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:18 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:18 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:18 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 117.292656][ T4614] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 117.304026][ T4614] CPU: 1 PID: 4614 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 117.314055][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 117.324125][ T4614] Call Trace: [ 117.327466][ T4614] [ 117.330409][ T4614] dump_stack_lvl+0xda/0x130 [ 117.335038][ T4614] dump_stack+0x15/0x20 [ 117.339278][ T4614] dump_header+0x82/0x2d0 [ 117.343787][ T4614] oom_kill_process+0x33a/0x4c0 [ 117.348669][ T4614] out_of_memory+0x9ca/0xbf0 [ 117.353383][ T4614] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 117.359481][ T4614] mem_cgroup_out_of_memory+0x139/0x190 [ 117.365099][ T4614] try_charge_memcg+0x759/0xd20 [ 117.369973][ T4614] ? __swap_duplicate+0x29b/0x2b0 [ 117.375080][ T4614] ? radix_tree_lookup+0xf9/0x150 [ 117.380119][ T4614] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 117.386192][ T4614] __read_swap_cache_async+0x2b9/0x510 [ 117.391743][ T4614] swap_cluster_readahead+0x276/0x3f0 [ 117.397272][ T4614] swapin_readahead+0xe2/0x7a0 [ 117.402158][ T4614] ? __filemap_get_folio+0x41a/0x5a0 [ 117.407455][ T4614] ? swap_cache_get_folio+0x6e/0x200 [ 117.412843][ T4614] do_swap_page+0x44c/0x1570 [ 117.417708][ T4614] ? __rcu_read_lock+0x35/0x50 [ 117.422531][ T4614] ? pte_offset_map_nolock+0x124/0x1d0 [ 117.428006][ T4614] handle_mm_fault+0x7f6/0x27b0 [ 117.432957][ T4614] ? mas_walk+0x204/0x320 [ 117.437350][ T4614] exc_page_fault+0x3ff/0x6d0 [ 117.442072][ T4614] asm_exc_page_fault+0x26/0x30 [ 117.447005][ T4614] RIP: 0033:0x7f9fdba229cc [ 117.451500][ T4614] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d e5 f6 16 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 117.471128][ T4614] RSP: 002b:00007ffd53fcf460 EFLAGS: 00010286 [ 117.477224][ T4614] RAX: 0000000000000000 RBX: 00007f9fdbb96018 RCX: 0000000000000000 [ 117.485214][ T4614] RDX: ffffffff81333600 RSI: 00007f9fdb3ea008 RDI: 00007f9fdbb96018 [ 117.493184][ T4614] RBP: 0000000081333000 R08: 0000001b2ca20000 R09: 0000000000000000 [ 117.501161][ T4614] R10: 0000000000000001 R11: 000000000000524c R12: 0000000000000000 [ 117.509147][ T4614] R13: 0000000000000001 R14: 00007f9fdbb8a000 R15: ffffffff81333600 [ 117.517152][ T4614] ? __x64_sys_bpf+0x10/0x50 [ 117.521874][ T4614] ? __x64_sys_bpf+0x10/0x50 [ 117.526564][ T4614] [ 117.529682][ T4614] memory: usage 307200kB, limit 307200kB, failcnt 5898 [ 117.536599][ T4614] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 117.544536][ T4614] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 117.551844][ T4614] Memory cgroup stats for /syz0: [ 117.552006][ T4614] cache 12288 [ 117.560245][ T4614] rss 8192 [ 117.563325][ T4614] shmem 0 [ 117.566364][ T4614] mapped_file 0 [ 117.569812][ T4614] dirty 0 [ 117.572738][ T4614] writeback 24576 [ 117.576440][ T4614] workingset_refault_anon 971 [ 117.581118][ T4614] workingset_refault_file 42 [ 117.585732][ T4614] swap 122880 [ 117.589023][ T4614] swapcached 45056 [ 117.592742][ T4614] pgpgin 3643 [ 117.596074][ T4614] pgpgout 3629 [ 117.599583][ T4614] pgfault 9101 [ 117.602953][ T4614] pgmajfault 376 [ 117.606544][ T4614] inactive_anon 20480 [ 117.610562][ T4614] active_anon 0 [ 117.614086][ T4614] inactive_file 12288 [ 117.618089][ T4614] active_file 0 [ 117.621677][ T4614] unevictable 0 [ 117.625180][ T4614] hierarchical_memory_limit 314572800 [ 117.630580][ T4614] hierarchical_memsw_limit 9223372036854771712 [ 117.636788][ T4614] total_cache 12288 [ 117.640595][ T4614] total_rss 8192 [ 117.644203][ T4614] total_shmem 0 [ 117.647698][ T4614] total_mapped_file 0 [ 117.651720][ T4614] total_dirty 0 [ 117.655232][ T4614] total_writeback 24576 [ 117.659406][ T4614] total_workingset_refault_anon 971 [ 117.664677][ T4614] total_workingset_refault_file 42 [ 117.669837][ T4614] total_swap 122880 [ 117.673636][ T4614] total_swapcached 45056 [ 117.677898][ T4614] total_pgpgin 3643 [ 117.681784][ T4614] total_pgpgout 3629 [ 117.685941][ T4614] total_pgfault 9101 [ 117.689829][ T4614] total_pgmajfault 376 [ 117.694001][ T4614] total_inactive_anon 20480 [ 117.698525][ T4614] total_active_anon 0 [ 117.702592][ T4614] total_inactive_file 12288 [ 117.707174][ T4614] total_active_file 0 [ 117.711179][ T4614] total_unevictable 0 [ 117.715159][ T4614] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4614,uid=0 [ 117.730422][ T4614] Memory cgroup out of memory: Killed process 4614 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 118.040898][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 118.051998][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 118.062024][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 118.072117][ T3086] Call Trace: [ 118.075444][ T3086] [ 118.078368][ T3086] dump_stack_lvl+0xda/0x130 [ 118.082955][ T3086] dump_stack+0x15/0x20 [ 118.087116][ T3086] dump_header+0x82/0x2d0 [ 118.091513][ T3086] oom_kill_process+0x33a/0x4c0 [ 118.096468][ T3086] out_of_memory+0x9ca/0xbf0 [ 118.101087][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 118.107169][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 118.112803][ T3086] try_charge_memcg+0x759/0xd20 [ 118.117710][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 118.122790][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 118.127850][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 118.134020][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 118.139509][ T3086] swap_cluster_readahead+0x380/0x3f0 [ 118.144892][ T3086] ? __rcu_read_unlock+0x4d/0x70 [ 118.149844][ T3086] swapin_readahead+0xe2/0x7a0 [ 118.154623][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 118.159905][ T3086] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 118.165535][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 118.170838][ T3086] do_swap_page+0x44c/0x1570 [ 118.175512][ T3086] ? __rcu_read_lock+0x35/0x50 [ 118.180274][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 118.185756][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 118.190611][ T3086] exc_page_fault+0x2f7/0x6d0 [ 118.195329][ T3086] asm_exc_page_fault+0x26/0x30 [ 118.200211][ T3086] RIP: 0010:__get_user_8+0x11/0x20 [ 118.205403][ T3086] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 118.225127][ T3086] RSP: 0018:ffffc90000eabe38 EFLAGS: 00050202 [ 118.231214][ T3086] RAX: 0000555555c17da8 RBX: ffffc90000eabe40 RCX: ffffffff81448b63 [ 118.239195][ T3086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d69a10 [ 118.247176][ T3086] RBP: ffffc90000eabf00 R08: 0001888103d69a17 R09: 0000000000000000 [ 118.255156][ T3086] R10: 0001ffffffffffff R11: 000000000000959d R12: ffff888103d69040 [ 118.263132][ T3086] R13: ffff888103d69a10 R14: ffffc90000eabf58 R15: ffffc90000eabfd8 [ 118.271160][ T3086] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 118.277074][ T3086] __rseq_handle_notify_resume+0xc7/0xbf0 [ 118.282862][ T3086] ? blkcg_maybe_throttle_current+0xa0/0x710 03:04:19 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={0xffffffffffffffff, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 118.288860][ T3086] ? __se_sys_clock_nanosleep+0x202/0x230 [ 118.294639][ T3086] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 118.300548][ T3086] syscall_exit_to_user_mode+0x8e/0x130 [ 118.306148][ T3086] do_syscall_64+0x65/0x120 [ 118.310728][ T3086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 118.316696][ T3086] RIP: 0033:0x7fd7c761c0f3 [ 118.321112][ T3086] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 118.340764][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 118.349250][ T3086] RAX: 0000000000000000 RBX: 00000000000000a9 RCX: 00007fd7c761c0f3 [ 118.357227][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.365197][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 118.373192][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 118.381175][ T3086] R13: 000000000001cbe4 R14: 000000000001c6f3 R15: 000000000000000b [ 118.389186][ T3086] [ 118.392318][ T3086] memory: usage 158480kB, limit 307200kB, failcnt 7151 [ 118.399325][ T3086] memory+swap: usage 142248kB, limit 9007199254740988kB, failcnt 0 [ 118.407270][ T3086] kmem: usage 123648kB, limit 9007199254740988kB, failcnt 0 [ 118.414553][ T3086] Memory cgroup stats for /syz5: [ 118.470346][ T3086] cache 12288 [ 118.478745][ T3086] rss 0 [ 118.481502][ T3086] shmem 0 [ 118.484471][ T3086] mapped_file 0 [ 118.487980][ T3086] dirty 0 [ 118.490912][ T3086] writeback 0 [ 118.494187][ T3086] workingset_refault_anon 903 [ 118.498874][ T3086] workingset_refault_file 44 [ 118.503535][ T3086] swap 151552 [ 118.506827][ T3086] swapcached 0 [ 118.510185][ T3086] pgpgin 2378 [ 118.513461][ T3086] pgpgout 2375 [ 118.516853][ T3086] pgfault 6157 [ 118.520214][ T3086] pgmajfault 357 [ 118.523754][ T3086] inactive_anon 0 [ 118.527416][ T3086] active_anon 0 [ 118.530863][ T3086] inactive_file 0 [ 118.534533][ T3086] active_file 12288 [ 118.538492][ T3086] unevictable 0 [ 118.541945][ T3086] hierarchical_memory_limit 314572800 [ 118.547346][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 118.553516][ T3086] total_cache 12288 [ 118.557335][ T3086] total_rss 0 [ 118.560617][ T3086] total_shmem 0 [ 118.564093][ T3086] total_mapped_file 0 [ 118.568146][ T3086] total_dirty 0 [ 118.571590][ T3086] total_writeback 0 [ 118.575387][ T3086] total_workingset_refault_anon 903 [ 118.580659][ T3086] total_workingset_refault_file 44 [ 118.585805][ T3086] total_swap 151552 [ 118.589607][ T3086] total_swapcached 0 [ 118.593546][ T3086] total_pgpgin 2378 [ 118.597367][ T3086] total_pgpgout 2375 [ 118.601259][ T3086] total_pgfault 6157 [ 118.605150][ T3086] total_pgmajfault 357 [ 118.609350][ T3086] total_inactive_anon 0 [ 118.613635][ T3086] total_active_anon 0 03:04:20 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:20 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:04:20 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:20 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 118.617676][ T3086] total_inactive_file 0 [ 118.622061][ T3086] total_active_file 12288 [ 118.626415][ T3086] total_unevictable 0 [ 118.630486][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4617,uid=0 [ 118.645751][ T3086] Memory cgroup out of memory: OOM victim 4617 (syz-executor.5) is already exiting. Skip killing the task 03:04:20 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 119.284099][ T4628] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 119.295513][ T4628] CPU: 0 PID: 4628 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 119.306090][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 119.316189][ T4628] Call Trace: [ 119.319550][ T4628] [ 119.322502][ T4628] dump_stack_lvl+0xda/0x130 [ 119.327120][ T4628] dump_stack+0x15/0x20 [ 119.331345][ T4628] dump_header+0x82/0x2d0 [ 119.335712][ T4628] oom_kill_process+0x33a/0x4c0 [ 119.340576][ T4628] out_of_memory+0x9ca/0xbf0 [ 119.345188][ T4628] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 119.351279][ T4628] mem_cgroup_out_of_memory+0x139/0x190 [ 119.356849][ T4628] try_charge_memcg+0x759/0xd20 [ 119.361708][ T4628] ? __swap_duplicate+0x29b/0x2b0 [ 119.366882][ T4628] ? radix_tree_lookup+0xf9/0x150 [ 119.371914][ T4628] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 119.378034][ T4628] __read_swap_cache_async+0x2b9/0x510 [ 119.383615][ T4628] swap_cluster_readahead+0x276/0x3f0 [ 119.389086][ T4628] swapin_readahead+0xe2/0x7a0 [ 119.393888][ T4628] ? __filemap_get_folio+0x41a/0x5a0 [ 119.399197][ T4628] ? swap_cache_get_folio+0x6e/0x200 [ 119.404578][ T4628] do_swap_page+0x44c/0x1570 [ 119.409258][ T4628] ? __rcu_read_lock+0x35/0x50 [ 119.414094][ T4628] ? pte_offset_map_nolock+0x124/0x1d0 [ 119.419571][ T4628] handle_mm_fault+0x7f6/0x27b0 [ 119.424481][ T4628] ? mas_walk+0x204/0x320 [ 119.428893][ T4628] exc_page_fault+0x3ff/0x6d0 [ 119.433605][ T4628] asm_exc_page_fault+0x26/0x30 [ 119.438492][ T4628] RIP: 0033:0x7fd7c761c0e3 [ 119.442916][ T4628] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 119.462734][ T4628] RSP: 002b:00007ffc502d0f38 EFLAGS: 00010293 [ 119.468812][ T4628] RAX: 00000000fffffffa RBX: 00007fd7c771ff80 RCX: 0000000000000000 [ 119.476795][ T4628] RDX: 00007ffc502d0f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.484783][ T4628] RBP: 00007fd7c7721980 R08: 0000000000000010 R09: 00007ffc503440b0 [ 119.492780][ T4628] R10: 0000000000000000 R11: 00000000000053ac R12: 000000000001d2c1 [ 119.500758][ T4628] R13: ffffffffffffffff R14: 00007fd7c7174000 R15: 000000000001cf80 [ 119.508745][ T4628] [ 119.511829][ T4628] memory: usage 307200kB, limit 307200kB, failcnt 7237 [ 119.518699][ T4628] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 119.526685][ T4628] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 119.533976][ T4628] Memory cgroup stats for /syz5: [ 119.534103][ T4628] cache 4096 [ 119.542250][ T4628] rss 32768 [ 119.545433][ T4628] shmem 0 [ 119.548358][ T4628] mapped_file 0 [ 119.551819][ T4628] dirty 0 [ 119.554750][ T4628] writeback 8192 [ 119.558319][ T4628] workingset_refault_anon 915 [ 119.562985][ T4628] workingset_refault_file 44 [ 119.567625][ T4628] swap 94208 [ 119.570824][ T4628] swapcached 36864 [ 119.574546][ T4628] pgpgin 2415 [ 119.577854][ T4628] pgpgout 2400 [ 119.581329][ T4628] pgfault 6243 [ 119.584700][ T4628] pgmajfault 365 [ 119.588277][ T4628] inactive_anon 0 [ 119.591986][ T4628] active_anon 0 [ 119.595468][ T4628] inactive_file 4096 [ 119.599394][ T4628] active_file 0 [ 119.602875][ T4628] unevictable 0 [ 119.606365][ T4628] hierarchical_memory_limit 314572800 [ 119.611737][ T4628] hierarchical_memsw_limit 9223372036854771712 [ 119.617903][ T4628] total_cache 4096 [ 119.621738][ T4628] total_rss 32768 [ 119.625373][ T4628] total_shmem 0 [ 119.628852][ T4628] total_mapped_file 0 [ 119.632827][ T4628] total_dirty 0 [ 119.636335][ T4628] total_writeback 8192 [ 119.640403][ T4628] total_workingset_refault_anon 915 [ 119.645677][ T4628] total_workingset_refault_file 44 [ 119.650799][ T4628] total_swap 94208 [ 119.654535][ T4628] total_swapcached 36864 [ 119.658851][ T4628] total_pgpgin 2415 [ 119.662654][ T4628] total_pgpgout 2400 [ 119.666603][ T4628] total_pgfault 6243 [ 119.670487][ T4628] total_pgmajfault 365 [ 119.674539][ T4628] total_inactive_anon 0 [ 119.678718][ T4628] total_active_anon 0 [ 119.682717][ T4628] total_inactive_file 4096 [ 119.687186][ T4628] total_active_file 0 [ 119.691232][ T4628] total_unevictable 0 [ 119.695239][ T4628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4628,uid=0 [ 119.710480][ T4628] Memory cgroup out of memory: Killed process 4628 (syz-executor.5) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 120.000398][ T3088] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 120.011606][ T3088] CPU: 0 PID: 3088 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 120.021672][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 120.031720][ T3088] Call Trace: [ 120.035071][ T3088] [ 120.038072][ T3088] dump_stack_lvl+0xda/0x130 [ 120.042746][ T3088] dump_stack+0x15/0x20 [ 120.046937][ T3088] dump_header+0x82/0x2d0 [ 120.051269][ T3088] oom_kill_process+0x33a/0x4c0 [ 120.056125][ T3088] out_of_memory+0x9ca/0xbf0 [ 120.060724][ T3088] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 120.066821][ T3088] mem_cgroup_out_of_memory+0x139/0x190 [ 120.072450][ T3088] try_charge_memcg+0x759/0xd20 [ 120.077309][ T3088] ? __swap_duplicate+0x29b/0x2b0 [ 120.082327][ T3088] ? radix_tree_lookup+0xf9/0x150 [ 120.087386][ T3088] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 120.093460][ T3088] __read_swap_cache_async+0x2b9/0x510 [ 120.098994][ T3088] swap_cluster_readahead+0x276/0x3f0 [ 120.104420][ T3088] swapin_readahead+0xe2/0x7a0 [ 120.109260][ T3088] ? __filemap_get_folio+0x41a/0x5a0 [ 120.114624][ T3088] ? delete_from_swap_cache+0xa9/0xd0 [ 120.120009][ T3088] ? swap_cache_get_folio+0x6e/0x200 [ 120.125317][ T3088] do_swap_page+0x44c/0x1570 [ 120.129903][ T3088] ? __rcu_read_lock+0x35/0x50 [ 120.134737][ T3088] ? pte_offset_map_nolock+0x124/0x1d0 [ 120.140200][ T3088] handle_mm_fault+0x7f6/0x27b0 [ 120.145130][ T3088] exc_page_fault+0x2f7/0x6d0 [ 120.149822][ T3088] asm_exc_page_fault+0x26/0x30 [ 120.154764][ T3088] RIP: 0010:__get_user_8+0x11/0x20 [ 120.159883][ T3088] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 120.179498][ T3088] RSP: 0018:ffffc90000ec3e38 EFLAGS: 00050202 [ 120.185638][ T3088] RAX: 0000555556880da8 RBX: ffffc90000ec3e40 RCX: ffffffff81448b63 [ 120.193602][ T3088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6aa50 [ 120.201569][ T3088] RBP: ffffc90000ec3f00 R08: 0001888103d6aa57 R09: 0000000000000000 [ 120.209536][ T3088] R10: 0001ffffffffffff R11: 000000000000ab28 R12: ffff888103d6a080 [ 120.217506][ T3088] R13: ffff888103d6aa50 R14: ffffc90000ec3f58 R15: ffffc90000ec3fd8 [ 120.225522][ T3088] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 120.231436][ T3088] __rseq_handle_notify_resume+0xc7/0xbf0 [ 120.237153][ T3088] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 120.243172][ T3088] ? __se_sys_clock_nanosleep+0x202/0x230 [ 120.248961][ T3088] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 120.254870][ T3088] syscall_exit_to_user_mode+0x8e/0x130 [ 120.260423][ T3088] do_syscall_64+0x65/0x120 [ 120.264928][ T3088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 120.270832][ T3088] RIP: 0033:0x7f9fdba920f3 [ 120.275247][ T3088] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 120.295011][ T3088] RSP: 002b:00007ffd53fcf6e8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 120.303571][ T3088] RAX: 0000000000000000 RBX: 000000000000010b RCX: 00007f9fdba920f3 [ 120.311631][ T3088] RDX: 00007ffd53fcf700 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.319740][ T3088] RBP: 00007ffd53fcf78c R08: 0000000000000010 R09: 00007ffd53fe40b0 [ 120.327716][ T3088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 120.335688][ T3088] R13: 000000000001d311 R14: 000000000001cfbd R15: 0000000000000017 [ 120.343673][ T3088] [ 120.346799][ T3088] memory: usage 8376kB, limit 307200kB, failcnt 6205 [ 120.353467][ T3088] memory+swap: usage 8556kB, limit 9007199254740988kB, failcnt 0 [ 120.361294][ T3088] kmem: usage 8360kB, limit 9007199254740988kB, failcnt 0 [ 120.368501][ T3088] Memory cgroup stats for /syz0: [ 120.369834][ T3088] cache 12288 [ 120.378055][ T3088] rss 0 [ 120.380840][ T3088] shmem 0 [ 120.383766][ T3088] mapped_file 0 [ 120.387229][ T3088] dirty 0 [ 120.390152][ T3088] writeback 0 [ 120.393426][ T3088] workingset_refault_anon 991 [ 120.398178][ T3088] workingset_refault_file 43 [ 120.402750][ T3088] swap 184320 [ 120.406096][ T3088] swapcached 4096 [ 120.409713][ T3088] pgpgin 3690 [ 120.412988][ T3088] pgpgout 3686 [ 120.416370][ T3088] pgfault 9181 [ 120.419810][ T3088] pgmajfault 388 [ 120.423345][ T3088] inactive_anon 4096 [ 120.427248][ T3088] active_anon 0 [ 120.430761][ T3088] inactive_file 12288 [ 120.434772][ T3088] active_file 0 [ 120.438263][ T3088] unevictable 0 [ 120.441717][ T3088] hierarchical_memory_limit 314572800 [ 120.447098][ T3088] hierarchical_memsw_limit 9223372036854771712 [ 120.453237][ T3088] total_cache 12288 [ 120.457061][ T3088] total_rss 0 [ 120.460393][ T3088] total_shmem 0 [ 120.463915][ T3088] total_mapped_file 0 [ 120.468004][ T3088] total_dirty 0 [ 120.471487][ T3088] total_writeback 0 [ 120.475303][ T3088] total_workingset_refault_anon 991 [ 120.480574][ T3088] total_workingset_refault_file 43 [ 120.485708][ T3088] total_swap 184320 [ 120.489517][ T3088] total_swapcached 4096 [ 120.493670][ T3088] total_pgpgin 3690 [ 120.497489][ T3088] total_pgpgout 3686 03:04:21 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={0xffffffffffffffff, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:21 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 120.501378][ T3088] total_pgfault 9181 [ 120.505269][ T3088] total_pgmajfault 388 [ 120.509350][ T3088] total_inactive_anon 4096 [ 120.513887][ T3088] total_active_anon 0 [ 120.517894][ T3088] total_inactive_file 12288 [ 120.522382][ T3088] total_active_file 0 [ 120.526415][ T3088] total_unevictable 0 [ 120.530396][ T3088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4636,uid=0 [ 120.545726][ T3088] Memory cgroup out of memory: Killed process 4637 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:22 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)}, 0x10) 03:04:22 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000}, 0x48) 03:04:22 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:22 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 121.454472][ T4646] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 121.465848][ T4646] CPU: 0 PID: 4646 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 121.475904][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 121.485970][ T4646] Call Trace: [ 121.489286][ T4646] [ 121.492278][ T4646] dump_stack_lvl+0xda/0x130 [ 121.497082][ T4646] dump_stack+0x15/0x20 [ 121.501245][ T4646] dump_header+0x82/0x2d0 [ 121.505667][ T4646] oom_kill_process+0x33a/0x4c0 [ 121.510587][ T4646] out_of_memory+0x9ca/0xbf0 [ 121.515200][ T4646] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 121.521303][ T4646] mem_cgroup_out_of_memory+0x139/0x190 [ 121.526955][ T4646] try_charge_memcg+0x759/0xd20 [ 121.531843][ T4646] ? __swap_duplicate+0x29b/0x2b0 [ 121.536954][ T4646] ? radix_tree_lookup+0xf9/0x150 [ 121.542017][ T4646] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 121.548131][ T4646] __read_swap_cache_async+0x2b9/0x510 [ 121.553621][ T4646] swap_cluster_readahead+0x276/0x3f0 [ 121.559035][ T4646] swapin_readahead+0xe2/0x7a0 [ 121.563892][ T4646] ? __filemap_get_folio+0x41a/0x5a0 [ 121.569221][ T4646] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 121.574767][ T4646] ? swap_cache_get_folio+0x6e/0x200 [ 121.580081][ T4646] do_swap_page+0x44c/0x1570 [ 121.584759][ T4646] ? __rcu_read_lock+0x35/0x50 [ 121.589538][ T4646] ? pte_offset_map_nolock+0x124/0x1d0 [ 121.595021][ T4646] handle_mm_fault+0x7f6/0x27b0 [ 121.599942][ T4646] exc_page_fault+0x2f7/0x6d0 [ 121.604631][ T4646] asm_exc_page_fault+0x26/0x30 [ 121.609560][ T4646] RIP: 0010:__get_user_8+0x11/0x20 [ 121.614681][ T4646] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 121.634594][ T4646] RSP: 0018:ffffc900016fbe38 EFLAGS: 00050202 [ 121.640708][ T4646] RAX: 000055555693eda8 RBX: ffffc900016fbe40 RCX: ffffffff81448b63 [ 121.648685][ T4646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888124063a90 [ 121.656661][ T4646] RBP: ffffc900016fbf00 R08: 0001888124063a97 R09: 0000000000000000 [ 121.664630][ T4646] R10: 0001ffffffffffff R11: 000000000000514a R12: ffff8881240630c0 [ 121.672675][ T4646] R13: ffff888124063a90 R14: ffffc900016fbf58 R15: ffffc900016fbfd8 [ 121.680727][ T4646] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 121.686857][ T4646] __rseq_handle_notify_resume+0xc7/0xbf0 [ 121.692576][ T4646] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 121.698598][ T4646] ? __se_sys_clock_nanosleep+0x202/0x230 [ 121.704469][ T4646] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 121.710382][ T4646] syscall_exit_to_user_mode+0x8e/0x130 [ 121.715955][ T4646] do_syscall_64+0x65/0x120 [ 121.720498][ T4646] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 121.726465][ T4646] RIP: 0033:0x7fca7be9e135 [ 121.730876][ T4646] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 121.750574][ T4646] RSP: 002b:00007ffd8aceaaf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 121.758996][ T4646] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 00007fca7be9e135 [ 121.766973][ T4646] RDX: 00007ffd8aceab30 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.774967][ T4646] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 121.783024][ T4646] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001da2f [ 121.790996][ T4646] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 000000000001d6ee [ 121.798981][ T4646] [ 121.802094][ T4646] memory: usage 307200kB, limit 307200kB, failcnt 5901 [ 121.809047][ T4646] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0 [ 121.816969][ T4646] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 121.824388][ T4646] Memory cgroup stats for /syz1: [ 121.824555][ T4646] cache 12288 [ 121.832824][ T4646] rss 0 [ 121.835660][ T4646] shmem 0 [ 121.838672][ T4646] mapped_file 0 [ 121.842116][ T4646] dirty 0 [ 121.845044][ T4646] writeback 0 [ 121.848348][ T4646] workingset_refault_anon 772 [ 121.853045][ T4646] workingset_refault_file 68 [ 121.857656][ T4646] swap 126976 [ 121.860992][ T4646] swapcached 40960 [ 121.864709][ T4646] pgpgin 3678 [ 121.868017][ T4646] pgpgout 3665 [ 121.871456][ T4646] pgfault 9394 [ 121.874824][ T4646] pgmajfault 356 [ 121.878393][ T4646] inactive_anon 40960 [ 121.882429][ T4646] active_anon 0 [ 121.885903][ T4646] inactive_file 0 [ 121.889525][ T4646] active_file 12288 [ 121.893325][ T4646] unevictable 0 [ 121.896794][ T4646] hierarchical_memory_limit 314572800 [ 121.902159][ T4646] hierarchical_memsw_limit 9223372036854771712 [ 121.908317][ T4646] total_cache 12288 [ 121.912156][ T4646] total_rss 0 [ 121.915447][ T4646] total_shmem 0 [ 121.918969][ T4646] total_mapped_file 0 [ 121.922936][ T4646] total_dirty 0 [ 121.926560][ T4646] total_writeback 0 [ 121.930386][ T4646] total_workingset_refault_anon 772 [ 121.935595][ T4646] total_workingset_refault_file 68 [ 121.940710][ T4646] total_swap 126976 [ 121.944552][ T4646] total_swapcached 40960 [ 121.948805][ T4646] total_pgpgin 3678 [ 121.952599][ T4646] total_pgpgout 3665 [ 121.956549][ T4646] total_pgfault 9394 [ 121.960431][ T4646] total_pgmajfault 356 [ 121.964599][ T4646] total_inactive_anon 40960 [ 121.969150][ T4646] total_active_anon 0 [ 121.973116][ T4646] total_inactive_file 0 [ 121.977295][ T4646] total_active_file 12288 [ 121.981655][ T4646] total_unevictable 0 [ 121.985681][ T4646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4646,uid=0 [ 122.001006][ T4646] Memory cgroup out of memory: Killed process 4646 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:23 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={0xffffffffffffffff, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:23 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:23 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:23 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:23 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)}, 0x10) 03:04:23 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:24 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 123.384966][ T4674] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 123.396345][ T4674] CPU: 1 PID: 4674 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 123.406432][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 123.416497][ T4674] Call Trace: [ 123.419850][ T4674] [ 123.422789][ T4674] dump_stack_lvl+0xda/0x130 [ 123.427414][ T4674] dump_stack+0x15/0x20 03:04:24 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 123.431583][ T4674] dump_header+0x82/0x2d0 [ 123.435960][ T4674] oom_kill_process+0x33a/0x4c0 [ 123.440821][ T4674] out_of_memory+0x9ca/0xbf0 [ 123.446942][ T4674] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 123.453076][ T4674] mem_cgroup_out_of_memory+0x139/0x190 [ 123.458659][ T4674] try_charge_memcg+0x759/0xd20 [ 123.463548][ T4674] ? __swap_duplicate+0x29b/0x2b0 [ 123.468584][ T4674] ? radix_tree_lookup+0xf9/0x150 [ 123.473623][ T4674] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 123.479767][ T4674] __read_swap_cache_async+0x2b9/0x510 [ 123.485250][ T4674] swap_cluster_readahead+0x276/0x3f0 [ 123.490636][ T4674] swapin_readahead+0xe2/0x7a0 [ 123.495546][ T4674] ? __filemap_get_folio+0x41a/0x5a0 [ 123.500850][ T4674] ? update_load_avg+0x1f7/0x7c0 [ 123.505868][ T4674] ? swap_cache_get_folio+0x6e/0x200 [ 123.511168][ T4674] do_swap_page+0x44c/0x1570 [ 123.515837][ T4674] ? __rcu_read_lock+0x35/0x50 [ 123.520615][ T4674] ? pte_offset_map_nolock+0x124/0x1d0 [ 123.526160][ T4674] handle_mm_fault+0x7f6/0x27b0 [ 123.531096][ T4674] exc_page_fault+0x2f7/0x6d0 [ 123.535854][ T4674] asm_exc_page_fault+0x26/0x30 [ 123.540744][ T4674] RIP: 0010:__get_user_8+0x11/0x20 [ 123.545875][ T4674] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 123.565671][ T4674] RSP: 0018:ffffc90000edbe58 EFLAGS: 00050202 [ 123.571740][ T4674] RAX: 0000555555c17da8 RBX: ffffc90000edbe60 RCX: ffffffff81448b63 [ 123.579723][ T4674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811cfeba90 [ 123.587791][ T4674] RBP: ffffc90000edbf20 R08: 000188811cfeba97 R09: 0000000000000000 [ 123.595836][ T4674] R10: 0001ffffffffffff R11: 0001c90000edbee8 R12: ffff88811cfeb0c0 [ 123.603974][ T4674] R13: ffff88811cfeba90 R14: ffffc90000edbf58 R15: ffffc90000edbfd8 [ 123.611952][ T4674] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 123.617870][ T4674] __rseq_handle_notify_resume+0xc7/0xbf0 [ 123.623639][ T4674] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 123.629682][ T4674] ? task_mm_cid_work+0x8a/0x1b0 [ 123.634624][ T4674] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 123.640545][ T4674] irqentry_exit_to_user_mode+0xcf/0x130 [ 123.646335][ T4674] irqentry_exit+0x12/0x40 [ 123.650811][ T4674] asm_exc_page_fault+0x26/0x30 [ 123.655699][ T4674] RIP: 0033:0x7fd7c761c138 [ 123.660270][ T4674] Code: 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 123.679881][ T4674] RSP: 002b:00007ffc502d0f10 EFLAGS: 00010293 [ 123.685952][ T4674] RAX: 0000000000000000 RBX: 00007fd7c771ff80 RCX: 00007fd7c761c135 [ 123.693973][ T4674] RDX: 00007ffc502d0f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.702010][ T4674] RBP: 00007fd7c7721980 R08: 0000000000000000 R09: 00007ffc503440b0 [ 123.710194][ T4674] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e19c [ 123.718162][ T4674] R13: ffffffffffffffff R14: 00007fd7c7174000 R15: 000000000001de5b [ 123.726134][ T4674] [ 123.729321][ T4674] memory: usage 307200kB, limit 307200kB, failcnt 7520 [ 123.736423][ T4674] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 123.746191][ T4674] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 123.753585][ T4674] Memory cgroup stats for /syz5: [ 123.753771][ T4674] cache 8192 [ 123.762146][ T4674] rss 8192 [ 123.765278][ T4674] shmem 0 [ 123.768313][ T4674] mapped_file 0 [ 123.771840][ T4674] dirty 4096 [ 123.775084][ T4674] writeback 8192 [ 123.778643][ T4674] workingset_refault_anon 955 [ 123.783433][ T4674] workingset_refault_file 46 [ 123.788070][ T4674] swap 131072 [ 123.791348][ T4674] swapcached 20480 [ 123.795056][ T4674] pgpgin 2507 [ 123.798354][ T4674] pgpgout 2500 [ 123.801800][ T4674] pgfault 6513 [ 123.805163][ T4674] pgmajfault 376 [ 123.808720][ T4674] inactive_anon 0 [ 123.812341][ T4674] active_anon 0 [ 123.815805][ T4674] inactive_file 8192 [ 123.819689][ T4674] active_file 0 [ 123.823228][ T4674] unevictable 0 [ 123.826727][ T4674] hierarchical_memory_limit 314572800 [ 123.832158][ T4674] hierarchical_memsw_limit 9223372036854771712 [ 123.838375][ T4674] total_cache 8192 [ 123.842087][ T4674] total_rss 8192 [ 123.845721][ T4674] total_shmem 0 [ 123.849219][ T4674] total_mapped_file 0 [ 123.853188][ T4674] total_dirty 4096 [ 123.856921][ T4674] total_writeback 8192 [ 123.861038][ T4674] total_workingset_refault_anon 955 [ 123.866311][ T4674] total_workingset_refault_file 46 [ 123.871452][ T4674] total_swap 131072 [ 123.875331][ T4674] total_swapcached 20480 [ 123.879596][ T4674] total_pgpgin 2507 [ 123.883387][ T4674] total_pgpgout 2500 [ 123.887291][ T4674] total_pgfault 6513 [ 123.891254][ T4674] total_pgmajfault 376 [ 123.895455][ T4674] total_inactive_anon 0 [ 123.899596][ T4674] total_active_anon 0 [ 123.903575][ T4674] total_inactive_file 8192 [ 123.908008][ T4674] total_active_file 0 [ 123.911977][ T4674] total_unevictable 0 [ 123.916040][ T4674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4674,uid=0 [ 123.931269][ T4674] Memory cgroup out of memory: Killed process 4674 (syz-executor.5) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:25 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 124.029993][ T4680] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 124.041571][ T4680] CPU: 0 PID: 4680 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 124.051550][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 124.061605][ T4680] Call Trace: [ 124.064883][ T4680] [ 124.067958][ T4680] dump_stack_lvl+0xda/0x130 [ 124.072559][ T4680] dump_stack+0x15/0x20 03:04:25 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 124.076717][ T4680] dump_header+0x82/0x2d0 [ 124.081251][ T4680] oom_kill_process+0x33a/0x4c0 [ 124.086129][ T4680] out_of_memory+0x9ca/0xbf0 [ 124.090854][ T4680] mem_cgroup_out_of_memory+0x139/0x190 [ 124.096498][ T4680] try_charge_memcg+0x759/0xd20 [ 124.101425][ T4680] ? __swap_duplicate+0x29b/0x2b0 [ 124.106481][ T4680] ? radix_tree_lookup+0xf9/0x150 [ 124.111678][ T4680] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 124.117782][ T4680] __read_swap_cache_async+0x2b9/0x510 [ 124.123289][ T4680] swap_cluster_readahead+0x276/0x3f0 [ 124.128780][ T4680] swapin_readahead+0xe2/0x7a0 [ 124.133741][ T4680] ? __filemap_get_folio+0x41a/0x5a0 [ 124.139035][ T4680] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 124.144598][ T4680] ? swap_cache_get_folio+0x6e/0x200 [ 124.149911][ T4680] do_swap_page+0x44c/0x1570 [ 124.154691][ T4680] ? __rcu_read_lock+0x35/0x50 [ 124.159464][ T4680] ? pte_offset_map_nolock+0x124/0x1d0 [ 124.164927][ T4680] handle_mm_fault+0x7f6/0x27b0 [ 124.169814][ T4680] ? mas_walk+0x204/0x320 [ 124.174145][ T4680] exc_page_fault+0x3ff/0x6d0 [ 124.178852][ T4680] asm_exc_page_fault+0x26/0x30 [ 124.183711][ T4680] RIP: 0033:0x7ff768af9d14 [ 124.188194][ T4680] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 124.207913][ T4680] RSP: 002b:00007fffd24738d0 EFLAGS: 00010202 [ 124.214155][ T4680] RAX: 0000000000000000 RBX: 00007ff768c6ef80 RCX: 0000000000000000 [ 124.222130][ T4680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556f78788 [ 124.230102][ T4680] RBP: 00007ff768c70980 R08: 0000000000000000 R09: 00007fffd25c20b0 [ 124.238169][ T4680] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4fe [ 124.246155][ T4680] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 000000000001e1bd [ 124.254180][ T4680] [ 124.257428][ T4680] memory: usage 307200kB, limit 307200kB, failcnt 6591 [ 124.264368][ T4680] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 124.272558][ T4680] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 03:04:25 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)}, 0x10) [ 124.279882][ T4680] Memory cgroup stats for /syz4: [ 124.280028][ T4680] cache 12288 [ 124.288280][ T4680] rss 4096 [ 124.291322][ T4680] shmem 0 [ 124.294281][ T4680] mapped_file 0 [ 124.297761][ T4680] dirty 0 [ 124.300745][ T4680] writeback 4096 [ 124.304353][ T4680] workingset_refault_anon 1002 [ 124.309147][ T4680] workingset_refault_file 54 [ 124.313816][ T4680] swap 131072 [ 124.317130][ T4680] swapcached 8192 [ 124.320760][ T4680] pgpgin 2838 [ 124.324071][ T4680] pgpgout 2833 [ 124.327469][ T4680] pgfault 7288 [ 124.330963][ T4680] pgmajfault 386 [ 124.334516][ T4680] inactive_anon 8192 [ 124.338436][ T4680] active_anon 0 [ 124.341919][ T4680] inactive_file 4096 [ 124.345835][ T4680] active_file 8192 [ 124.349633][ T4680] unevictable 0 [ 124.353101][ T4680] hierarchical_memory_limit 314572800 [ 124.358496][ T4680] hierarchical_memsw_limit 9223372036854771712 [ 124.364693][ T4680] total_cache 12288 [ 124.368527][ T4680] total_rss 4096 [ 124.372078][ T4680] total_shmem 0 [ 124.375637][ T4680] total_mapped_file 0 [ 124.379611][ T4680] total_dirty 0 [ 124.383138][ T4680] total_writeback 4096 [ 124.387227][ T4680] total_workingset_refault_anon 1002 [ 124.392506][ T4680] total_workingset_refault_file 54 [ 124.397687][ T4680] total_swap 131072 [ 124.401514][ T4680] total_swapcached 8192 [ 124.405680][ T4680] total_pgpgin 2838 [ 124.409584][ T4680] total_pgpgout 2833 [ 124.413488][ T4680] total_pgfault 7288 [ 124.417416][ T4680] total_pgmajfault 386 [ 124.421485][ T4680] total_inactive_anon 8192 [ 124.425983][ T4680] total_active_anon 0 [ 124.429971][ T4680] total_inactive_file 4096 [ 124.434430][ T4680] total_active_file 8192 [ 124.438706][ T4680] total_unevictable 0 [ 124.442696][ T4680] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4680,uid=0 [ 124.457985][ T4680] Memory cgroup out of memory: Killed process 4680 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:26 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:26 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 124.870589][ T4685] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 124.881950][ T4685] CPU: 1 PID: 4685 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 124.892088][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 124.902145][ T4685] Call Trace: [ 124.905435][ T4685] [ 124.908439][ T4685] dump_stack_lvl+0xda/0x130 [ 124.913039][ T4685] dump_stack+0x15/0x20 [ 124.917256][ T4685] dump_header+0x82/0x2d0 [ 124.921641][ T4685] oom_kill_process+0x33a/0x4c0 [ 124.926535][ T4685] out_of_memory+0x9ca/0xbf0 [ 124.931222][ T4685] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 124.937335][ T4685] mem_cgroup_out_of_memory+0x139/0x190 [ 124.942993][ T4685] try_charge_memcg+0x759/0xd20 [ 124.947866][ T4685] ? __swap_duplicate+0x29b/0x2b0 [ 124.952894][ T4685] ? radix_tree_lookup+0xf9/0x150 [ 124.957952][ T4685] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 124.964048][ T4685] __read_swap_cache_async+0x2b9/0x510 [ 124.969578][ T4685] swap_cluster_readahead+0x276/0x3f0 [ 124.974959][ T4685] swapin_readahead+0xe2/0x7a0 [ 124.979784][ T4685] ? __filemap_get_folio+0x41a/0x5a0 [ 124.985169][ T4685] ? swap_cache_get_folio+0x6e/0x200 [ 124.990538][ T4685] do_swap_page+0x44c/0x1570 [ 124.995177][ T4685] ? __rcu_read_lock+0x35/0x50 [ 124.999955][ T4685] ? pte_offset_map_nolock+0x124/0x1d0 [ 125.005617][ T4685] handle_mm_fault+0x7f6/0x27b0 [ 125.010476][ T4685] ? mas_walk+0x204/0x320 [ 125.014818][ T4685] exc_page_fault+0x3ff/0x6d0 [ 125.019507][ T4685] asm_exc_page_fault+0x26/0x30 [ 125.024444][ T4685] RIP: 0033:0x7fca7be2cd14 [ 125.028864][ T4685] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 125.048626][ T4685] RSP: 002b:00007ffd8aceab60 EFLAGS: 00010202 [ 125.054698][ T4685] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 0000000000000000 [ 125.062666][ T4685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555693e788 [ 125.070760][ T4685] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 125.078744][ T4685] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e7ed [ 125.086714][ T4685] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 000000000001e4ac [ 125.094680][ T4685] [ 125.097781][ T4685] memory: usage 307200kB, limit 307200kB, failcnt 6102 [ 125.104644][ T4685] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 125.112600][ T4685] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 125.119975][ T4685] Memory cgroup stats for /syz1: [ 125.120161][ T4685] cache 4096 [ 125.128490][ T4685] rss 8192 [ 125.131515][ T4685] shmem 0 [ 125.134459][ T4685] mapped_file 0 [ 125.137959][ T4685] dirty 0 [ 125.140985][ T4685] writeback 16384 [ 125.144612][ T4685] workingset_refault_anon 808 [ 125.149309][ T4685] workingset_refault_file 69 [ 125.153899][ T4685] swap 126976 [ 125.157207][ T4685] swapcached 16384 [ 125.160948][ T4685] pgpgin 3761 [ 125.164223][ T4685] pgpgout 3756 [ 125.167605][ T4685] pgfault 9594 [ 125.170976][ T4685] pgmajfault 366 [ 125.174587][ T4685] inactive_anon 16384 [ 125.178599][ T4685] active_anon 0 [ 125.182055][ T4685] inactive_file 0 [ 125.185749][ T4685] active_file 4096 [ 125.189469][ T4685] unevictable 0 [ 125.192927][ T4685] hierarchical_memory_limit 314572800 [ 125.198361][ T4685] hierarchical_memsw_limit 9223372036854771712 [ 125.204531][ T4685] total_cache 4096 [ 125.208302][ T4685] total_rss 8192 [ 125.211869][ T4685] total_shmem 0 [ 125.215371][ T4685] total_mapped_file 0 [ 125.219383][ T4685] total_dirty 0 [ 125.222847][ T4685] total_writeback 16384 [ 125.227049][ T4685] total_workingset_refault_anon 808 [ 125.232374][ T4685] total_workingset_refault_file 69 [ 125.237510][ T4685] total_swap 126976 [ 125.241313][ T4685] total_swapcached 16384 [ 125.245615][ T4685] total_pgpgin 3761 [ 125.249537][ T4685] total_pgpgout 3756 [ 125.253435][ T4685] total_pgfault 9594 [ 125.257355][ T4685] total_pgmajfault 366 [ 125.261413][ T4685] total_inactive_anon 16384 [ 125.265991][ T4685] total_active_anon 0 [ 125.270035][ T4685] total_inactive_file 0 [ 125.274197][ T4685] total_active_file 4096 [ 125.278480][ T4685] total_unevictable 0 [ 125.282455][ T4685] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4685,uid=0 [ 125.297768][ T4685] Memory cgroup out of memory: Killed process 4685 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:27 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:27 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:27 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:27 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:27 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:27 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 126.443781][ T4701] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 126.455169][ T4701] CPU: 0 PID: 4701 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 126.465266][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 126.475342][ T4701] Call Trace: [ 126.478662][ T4701] [ 126.481600][ T4701] dump_stack_lvl+0xda/0x130 [ 126.486270][ T4701] dump_stack+0x15/0x20 [ 126.490442][ T4701] dump_header+0x82/0x2d0 [ 126.494789][ T4701] oom_kill_process+0x33a/0x4c0 [ 126.499771][ T4701] out_of_memory+0x9ca/0xbf0 [ 126.504381][ T4701] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 126.510519][ T4701] mem_cgroup_out_of_memory+0x139/0x190 [ 126.516066][ T4701] try_charge_memcg+0x759/0xd20 [ 126.520916][ T4701] ? __swap_duplicate+0x29b/0x2b0 [ 126.525931][ T4701] ? radix_tree_lookup+0xf9/0x150 [ 126.531037][ T4701] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 126.537099][ T4701] __read_swap_cache_async+0x2b9/0x510 [ 126.542558][ T4701] swap_cluster_readahead+0x276/0x3f0 [ 126.547978][ T4701] swapin_readahead+0xe2/0x7a0 [ 126.552759][ T4701] ? __filemap_get_folio+0x41a/0x5a0 [ 126.558047][ T4701] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 126.563593][ T4701] ? swap_cache_get_folio+0x6e/0x200 [ 126.568932][ T4701] do_swap_page+0x44c/0x1570 [ 126.573518][ T4701] ? __rcu_read_lock+0x35/0x50 [ 126.578275][ T4701] ? pte_offset_map_nolock+0x124/0x1d0 [ 126.583743][ T4701] handle_mm_fault+0x7f6/0x27b0 [ 126.588588][ T4701] ? mas_walk+0x204/0x320 [ 126.592982][ T4701] exc_page_fault+0x3ff/0x6d0 [ 126.597657][ T4701] asm_exc_page_fault+0x26/0x30 [ 126.602533][ T4701] RIP: 0033:0x7fc472c66d14 [ 126.606978][ T4701] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 126.626586][ T4701] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 126.632760][ T4701] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 [ 126.640745][ T4701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 126.648802][ T4701] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 126.656814][ T4701] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001edf1 [ 126.664776][ T4701] R13: ffffffffffffffff R14: 00007fc472830000 R15: 000000000001eab0 [ 126.672810][ T4701] [ 126.675882][ T4701] memory: usage 307164kB, limit 307200kB, failcnt 7791 [ 126.682748][ T4701] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 126.690777][ T4701] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 126.698172][ T4701] Memory cgroup stats for /syz2: [ 126.698356][ T4701] cache 12288 [ 126.706607][ T4701] rss 8192 [ 126.709637][ T4701] shmem 0 [ 126.712576][ T4701] mapped_file 0 [ 126.716069][ T4701] dirty 0 [ 126.719007][ T4701] writeback 0 [ 126.722287][ T4701] workingset_refault_anon 1046 [ 126.727072][ T4701] workingset_refault_file 67 [ 126.731665][ T4701] swap 110592 [ 126.734945][ T4701] swapcached 49152 [ 126.738681][ T4701] pgpgin 3239 [ 126.742026][ T4701] pgpgout 3224 [ 126.745445][ T4701] pgfault 7699 [ 126.748871][ T4701] pgmajfault 415 [ 126.752525][ T4701] inactive_anon 0 [ 126.756182][ T4701] active_anon 0 [ 126.759668][ T4701] inactive_file 0 [ 126.763360][ T4701] active_file 12288 [ 126.767187][ T4701] unevictable 0 [ 126.770720][ T4701] hierarchical_memory_limit 314572800 [ 126.776150][ T4701] hierarchical_memsw_limit 9223372036854771712 [ 126.782388][ T4701] total_cache 12288 [ 126.786214][ T4701] total_rss 8192 [ 126.789824][ T4701] total_shmem 0 [ 126.793286][ T4701] total_mapped_file 0 [ 126.797303][ T4701] total_dirty 0 [ 126.800759][ T4701] total_writeback 0 [ 126.804560][ T4701] total_workingset_refault_anon 1046 [ 126.809972][ T4701] total_workingset_refault_file 67 [ 126.815147][ T4701] total_swap 110592 [ 126.818967][ T4701] total_swapcached 49152 [ 126.823233][ T4701] total_pgpgin 3239 [ 126.827107][ T4701] total_pgpgout 3224 [ 126.831039][ T4701] total_pgfault 7699 [ 126.834966][ T4701] total_pgmajfault 415 [ 126.839117][ T4701] total_inactive_anon 0 [ 126.843292][ T4701] total_active_anon 0 [ 126.847342][ T4701] total_inactive_file 0 [ 126.851496][ T4701] total_active_file 12288 [ 126.855842][ T4701] total_unevictable 0 [ 126.859822][ T4701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4701,uid=0 [ 126.875162][ T4701] Memory cgroup out of memory: Killed process 4701 (syz-executor.2) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 127.029899][ T3130] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 127.040972][ T3130] CPU: 1 PID: 3130 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 127.051023][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 127.061087][ T3130] Call Trace: [ 127.064427][ T3130] [ 127.067360][ T3130] dump_stack_lvl+0xda/0x130 [ 127.071945][ T3130] dump_stack+0x15/0x20 [ 127.076119][ T3130] dump_header+0x82/0x2d0 [ 127.080452][ T3130] oom_kill_process+0x33a/0x4c0 [ 127.085310][ T3130] out_of_memory+0x9ca/0xbf0 [ 127.089962][ T3130] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 127.096283][ T3130] mem_cgroup_out_of_memory+0x139/0x190 [ 127.101966][ T3130] try_charge_memcg+0x759/0xd20 [ 127.106839][ T3130] ? __swap_duplicate+0x29b/0x2b0 [ 127.111934][ T3130] ? radix_tree_lookup+0xf9/0x150 [ 127.116972][ T3130] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 127.123199][ T3130] __read_swap_cache_async+0x2b9/0x510 [ 127.128738][ T3130] swap_cluster_readahead+0x276/0x3f0 [ 127.134210][ T3130] swapin_readahead+0xe2/0x7a0 [ 127.139362][ T3130] ? __filemap_get_folio+0x41a/0x5a0 [ 127.144656][ T3130] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 127.150202][ T3130] ? swap_cache_get_folio+0x6e/0x200 [ 127.155620][ T3130] do_swap_page+0x44c/0x1570 [ 127.160264][ T3130] ? __rcu_read_lock+0x35/0x50 [ 127.165032][ T3130] ? pte_offset_map_nolock+0x124/0x1d0 [ 127.170502][ T3130] handle_mm_fault+0x7f6/0x27b0 [ 127.175373][ T3130] exc_page_fault+0x2f7/0x6d0 [ 127.180356][ T3130] asm_exc_page_fault+0x26/0x30 [ 127.185228][ T3130] RIP: 0010:__get_user_8+0x11/0x20 [ 127.190354][ T3130] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 127.210082][ T3130] RSP: 0018:ffffc90000f7be38 EFLAGS: 00050202 [ 127.216157][ T3130] RAX: 000055555693dda8 RBX: ffffc90000f7be40 RCX: ffffffff81448b63 [ 127.224170][ T3130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888101205b10 [ 127.232196][ T3130] RBP: ffffc90000f7bf00 R08: 0001888101205b17 R09: 0000000000000000 [ 127.240161][ T3130] R10: 0001ffffffffffff R11: 000000000000b35d R12: ffff888101205140 [ 127.248215][ T3130] R13: ffff888101205b10 R14: ffffc90000f7bf58 R15: ffffc90000f7bfd8 [ 127.256259][ T3130] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 127.262196][ T3130] __rseq_handle_notify_resume+0xc7/0xbf0 [ 127.268097][ T3130] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 127.274082][ T3130] ? __se_sys_clock_nanosleep+0x202/0x230 [ 127.279923][ T3130] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 127.285817][ T3130] syscall_exit_to_user_mode+0x8e/0x130 [ 127.291518][ T3130] do_syscall_64+0x65/0x120 [ 127.296014][ T3130] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 127.301923][ T3130] RIP: 0033:0x7f56ac2910f3 [ 127.306363][ T3130] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 127.326063][ T3130] RSP: 002b:00007ffc3882b278 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 127.334530][ T3130] RAX: 0000000000000000 RBX: 00000000000000cd RCX: 00007f56ac2910f3 [ 127.342581][ T3130] RDX: 00007ffc3882b290 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.350551][ T3130] RBP: 00007ffc3882b31c R08: 0000000000000010 R09: 00007ffc3884e0b0 [ 127.358527][ T3130] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 127.366562][ T3130] R13: 000000000001edd0 R14: 000000000001ecee R15: 000000000000000d [ 127.374813][ T3130] 03:04:28 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 127.378116][ T3130] memory: usage 8436kB, limit 307200kB, failcnt 6037 [ 127.384859][ T3130] memory+swap: usage 8568kB, limit 9007199254740988kB, failcnt 0 [ 127.392750][ T3130] kmem: usage 8404kB, limit 9007199254740988kB, failcnt 0 [ 127.399883][ T3130] Memory cgroup stats for /syz3: [ 127.551588][ T3130] cache 16384 [ 127.559967][ T3130] rss 0 [ 127.562728][ T3130] shmem 0 [ 127.565701][ T3130] mapped_file 0 [ 127.569151][ T3130] dirty 0 [ 127.572077][ T3130] writeback 0 [ 127.575354][ T3130] workingset_refault_anon 1010 [ 127.580188][ T3130] workingset_refault_file 69 [ 127.584785][ T3130] swap 131072 [ 127.588177][ T3130] swapcached 20480 [ 127.591895][ T3130] pgpgin 3124 [ 127.595180][ T3130] pgpgout 3115 [ 127.598568][ T3130] pgfault 7914 [ 127.601936][ T3130] pgmajfault 412 [ 127.605520][ T3130] inactive_anon 20480 [ 127.609670][ T3130] active_anon 0 [ 127.613182][ T3130] inactive_file 16384 [ 127.617362][ T3130] active_file 0 [ 127.620890][ T3130] unevictable 0 [ 127.624368][ T3130] hierarchical_memory_limit 314572800 [ 127.629743][ T3130] hierarchical_memsw_limit 9223372036854771712 [ 127.635923][ T3130] total_cache 16384 [ 127.639724][ T3130] total_rss 0 [ 127.643073][ T3130] total_shmem 0 [ 127.646551][ T3130] total_mapped_file 0 [ 127.650528][ T3130] total_dirty 0 [ 127.654077][ T3130] total_writeback 0 [ 127.657946][ T3130] total_workingset_refault_anon 1010 [ 127.663220][ T3130] total_workingset_refault_file 69 [ 127.668343][ T3130] total_swap 131072 [ 127.672149][ T3130] total_swapcached 20480 [ 127.676476][ T3130] total_pgpgin 3124 [ 127.680275][ T3130] total_pgpgout 3115 [ 127.684157][ T3130] total_pgfault 7914 [ 127.688105][ T3130] total_pgmajfault 412 [ 127.692161][ T3130] total_inactive_anon 20480 [ 127.696815][ T3130] total_active_anon 0 [ 127.700777][ T3130] total_inactive_file 16384 [ 127.705268][ T3130] total_active_file 0 [ 127.709261][ T3130] total_unevictable 0 [ 127.713351][ T3130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4709,uid=0 [ 127.728655][ T3130] Memory cgroup out of memory: Killed process 4709 (syz-executor.3) total-vm:48488kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:29 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:29 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:29 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) 03:04:29 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:29 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:30 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:30 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:30 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:31 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:31 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) 03:04:31 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:31 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 130.296106][ T4746] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.307517][ T4746] CPU: 1 PID: 4746 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 130.317497][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 130.327621][ T4746] Call Trace: [ 130.330901][ T4746] [ 130.333834][ T4746] dump_stack_lvl+0xda/0x130 [ 130.338520][ T4746] dump_stack+0x15/0x20 [ 130.342754][ T4746] dump_header+0x82/0x2d0 [ 130.347099][ T4746] oom_kill_process+0x33a/0x4c0 [ 130.351980][ T4746] out_of_memory+0x9ca/0xbf0 [ 130.356659][ T4746] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 130.362934][ T4746] mem_cgroup_out_of_memory+0x139/0x190 [ 130.368532][ T4746] try_charge_memcg+0x759/0xd20 [ 130.373405][ T4746] ? __swap_duplicate+0x29b/0x2b0 [ 130.378584][ T4746] ? radix_tree_lookup+0xf9/0x150 [ 130.383608][ T4746] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 130.389762][ T4746] __read_swap_cache_async+0x2b9/0x510 [ 130.395237][ T4746] swap_cluster_readahead+0x276/0x3f0 [ 130.400709][ T4746] swapin_readahead+0xe2/0x7a0 [ 130.405593][ T4746] ? __filemap_get_folio+0x41a/0x5a0 [ 130.410912][ T4746] ? swap_cache_get_folio+0x6e/0x200 [ 130.416210][ T4746] do_swap_page+0x44c/0x1570 [ 130.420913][ T4746] ? __rcu_read_lock+0x35/0x50 [ 130.425728][ T4746] ? pte_offset_map_nolock+0x124/0x1d0 [ 130.431243][ T4746] handle_mm_fault+0x7f6/0x27b0 [ 130.436260][ T4746] ? mas_walk+0x204/0x320 [ 130.440632][ T4746] exc_page_fault+0x3ff/0x6d0 [ 130.445413][ T4746] asm_exc_page_fault+0x26/0x30 [ 130.450323][ T4746] RIP: 0033:0x7f9fdba20d14 [ 130.454905][ T4746] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 130.474551][ T4746] RSP: 002b:00007ffd53fcf500 EFLAGS: 00010202 [ 130.480637][ T4746] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 0000000000000000 [ 130.488623][ T4746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556880788 [ 130.496632][ T4746] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 130.504746][ T4746] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001fd43 [ 130.512770][ T4746] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 000000000001fa02 [ 130.520792][ T4746] [ 130.524101][ T4746] memory: usage 307196kB, limit 307200kB, failcnt 6918 [ 130.531110][ T4746] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 130.539056][ T4746] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 130.546400][ T4746] Memory cgroup stats for /syz0: [ 130.546604][ T4746] cache 12288 [ 130.554863][ T4746] rss 8192 [ 130.557955][ T4746] shmem 0 [ 130.560881][ T4746] mapped_file 0 [ 130.564330][ T4746] dirty 0 [ 130.567352][ T4746] writeback 16384 [ 130.571068][ T4746] workingset_refault_anon 1077 [ 130.576036][ T4746] workingset_refault_file 48 [ 130.580704][ T4746] swap 151552 [ 130.583976][ T4746] swapcached 16384 [ 130.587778][ T4746] pgpgin 3939 [ 130.591081][ T4746] pgpgout 3932 [ 130.594594][ T4746] pgfault 9939 [ 130.598066][ T4746] pgmajfault 434 [ 130.601688][ T4746] inactive_anon 0 [ 130.605307][ T4746] active_anon 0 [ 130.608768][ T4746] inactive_file 12288 [ 130.612739][ T4746] active_file 0 [ 130.616206][ T4746] unevictable 0 [ 130.619650][ T4746] hierarchical_memory_limit 314572800 [ 130.625023][ T4746] hierarchical_memsw_limit 9223372036854771712 [ 130.631195][ T4746] total_cache 12288 [ 130.635090][ T4746] total_rss 8192 [ 130.638736][ T4746] total_shmem 0 [ 130.642196][ T4746] total_mapped_file 0 [ 130.646217][ T4746] total_dirty 0 [ 130.649684][ T4746] total_writeback 16384 [ 130.653819][ T4746] total_workingset_refault_anon 1077 [ 130.659175][ T4746] total_workingset_refault_file 48 [ 130.664273][ T4746] total_swap 151552 [ 130.668277][ T4746] total_swapcached 16384 [ 130.672501][ T4746] total_pgpgin 3939 [ 130.676369][ T4746] total_pgpgout 3932 [ 130.680276][ T4746] total_pgfault 9939 [ 130.684219][ T4746] total_pgmajfault 434 [ 130.688378][ T4746] total_inactive_anon 0 [ 130.692516][ T4746] total_active_anon 0 [ 130.696501][ T4746] total_inactive_file 12288 [ 130.701021][ T4746] total_active_file 0 [ 130.704994][ T4746] total_unevictable 0 [ 130.709025][ T4746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4746,uid=0 [ 130.724365][ T4746] Memory cgroup out of memory: Killed process 4746 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 130.951216][ T4755] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.962642][ T4755] CPU: 1 PID: 4755 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 130.972626][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 130.982683][ T4755] Call Trace: [ 130.986004][ T4755] [ 130.988937][ T4755] dump_stack_lvl+0xda/0x130 [ 130.993566][ T4755] dump_stack+0x15/0x20 [ 130.997754][ T4755] dump_header+0x82/0x2d0 [ 131.002174][ T4755] oom_kill_process+0x33a/0x4c0 [ 131.007027][ T4755] out_of_memory+0x9ca/0xbf0 [ 131.011688][ T4755] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 131.017938][ T4755] mem_cgroup_out_of_memory+0x139/0x190 [ 131.023502][ T4755] try_charge_memcg+0x759/0xd20 [ 131.028390][ T4755] ? __swap_duplicate+0x29b/0x2b0 [ 131.033410][ T4755] ? radix_tree_lookup+0xf9/0x150 [ 131.038506][ T4755] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 131.044582][ T4755] __read_swap_cache_async+0x2b9/0x510 [ 131.050154][ T4755] swap_cluster_readahead+0x276/0x3f0 [ 131.055573][ T4755] swapin_readahead+0xe2/0x7a0 [ 131.060504][ T4755] ? __filemap_get_folio+0x41a/0x5a0 [ 131.065837][ T4755] ? swap_cache_get_folio+0x6e/0x200 [ 131.071136][ T4755] do_swap_page+0x44c/0x1570 [ 131.075865][ T4755] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 131.081407][ T4755] ? __rcu_read_lock+0x35/0x50 [ 131.086263][ T4755] ? pte_offset_map_nolock+0x124/0x1d0 [ 131.091802][ T4755] handle_mm_fault+0x7f6/0x27b0 [ 131.096833][ T4755] ? mas_walk+0x204/0x320 [ 131.101172][ T4755] exc_page_fault+0x3ff/0x6d0 [ 131.105846][ T4755] asm_exc_page_fault+0x26/0x30 [ 131.110728][ T4755] RIP: 0033:0x7fc472c66d14 [ 131.115253][ T4755] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 131.134857][ T4755] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 131.141007][ T4755] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 03:04:32 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 131.148982][ T4755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 131.157070][ T4755] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 131.165409][ T4755] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001ffef [ 131.173368][ T4755] R13: ffffffffffffffff R14: 00007fc472830000 R15: 000000000001fcae [ 131.181411][ T4755] [ 131.184586][ T4755] memory: usage 307200kB, limit 307200kB, failcnt 8222 [ 131.191549][ T4755] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 03:04:32 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:32 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) [ 131.199470][ T4755] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 131.206763][ T4755] Memory cgroup stats for /syz2: [ 131.206997][ T4755] cache 12288 [ 131.215270][ T4755] rss 8192 [ 131.218313][ T4755] shmem 0 [ 131.221273][ T4755] mapped_file 0 [ 131.224724][ T4755] dirty 0 [ 131.227698][ T4755] writeback 16384 [ 131.231328][ T4755] workingset_refault_anon 1106 [ 131.236124][ T4755] workingset_refault_file 70 [ 131.240857][ T4755] swap 176128 [ 131.244212][ T4755] swapcached 36864 [ 131.248107][ T4755] pgpgin 3381 [ 131.251513][ T4755] pgpgout 3369 [ 131.254993][ T4755] pgfault 8054 [ 131.258406][ T4755] pgmajfault 437 [ 131.261940][ T4755] inactive_anon 0 [ 131.265638][ T4755] active_anon 0 [ 131.269178][ T4755] inactive_file 0 [ 131.272959][ T4755] active_file 12288 [ 131.276829][ T4755] unevictable 0 [ 131.280338][ T4755] hierarchical_memory_limit 314572800 [ 131.285736][ T4755] hierarchical_memsw_limit 9223372036854771712 [ 131.291884][ T4755] total_cache 12288 [ 131.295752][ T4755] total_rss 8192 [ 131.299496][ T4755] total_shmem 0 [ 131.302993][ T4755] total_mapped_file 0 [ 131.307062][ T4755] total_dirty 0 [ 131.310513][ T4755] total_writeback 16384 [ 131.314653][ T4755] total_workingset_refault_anon 1106 [ 131.319987][ T4755] total_workingset_refault_file 70 [ 131.325087][ T4755] total_swap 176128 [ 131.329229][ T4755] total_swapcached 36864 [ 131.333483][ T4755] total_pgpgin 3381 [ 131.337394][ T4755] total_pgpgout 3369 [ 131.341290][ T4755] total_pgfault 8054 [ 131.345180][ T4755] total_pgmajfault 437 [ 131.349263][ T4755] total_inactive_anon 0 [ 131.353467][ T4755] total_active_anon 0 [ 131.357482][ T4755] total_inactive_file 0 [ 131.361631][ T4755] total_active_file 12288 [ 131.365964][ T4755] total_unevictable 0 [ 131.369931][ T4755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4755,uid=0 [ 131.385161][ T4755] Memory cgroup out of memory: Killed process 4755 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:33 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:33 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:33 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:34 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:34 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:34 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) [ 132.872551][ T4775] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 132.883955][ T4775] CPU: 1 PID: 4775 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 132.894029][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 132.904085][ T4775] Call Trace: [ 132.907376][ T4775] [ 132.910313][ T4775] dump_stack_lvl+0xda/0x130 [ 132.914981][ T4775] dump_stack+0x15/0x20 [ 132.919146][ T4775] dump_header+0x82/0x2d0 [ 132.923495][ T4775] oom_kill_process+0x33a/0x4c0 [ 132.928433][ T4775] out_of_memory+0x9ca/0xbf0 [ 132.933044][ T4775] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 132.939219][ T4775] mem_cgroup_out_of_memory+0x139/0x190 [ 132.944877][ T4775] try_charge_memcg+0x759/0xd20 [ 132.949742][ T4775] ? __swap_duplicate+0x29b/0x2b0 [ 132.954845][ T4775] ? radix_tree_lookup+0xf9/0x150 [ 132.959923][ T4775] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 132.966168][ T4775] __read_swap_cache_async+0x2b9/0x510 [ 132.971647][ T4775] swap_cluster_readahead+0x276/0x3f0 [ 132.977059][ T4775] swapin_readahead+0xe2/0x7a0 [ 132.981900][ T4775] ? __filemap_get_folio+0x41a/0x5a0 [ 132.987252][ T4775] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 132.992811][ T4775] ? swap_cache_get_folio+0x6e/0x200 [ 132.998113][ T4775] do_swap_page+0x44c/0x1570 [ 133.002782][ T4775] ? __rcu_read_lock+0x35/0x50 [ 133.007617][ T4775] ? pte_offset_map_nolock+0x124/0x1d0 [ 133.013093][ T4775] handle_mm_fault+0x7f6/0x27b0 [ 133.018038][ T4775] exc_page_fault+0x2f7/0x6d0 [ 133.022717][ T4775] asm_exc_page_fault+0x26/0x30 [ 133.027850][ T4775] RIP: 0010:__get_user_8+0x11/0x20 [ 133.033020][ T4775] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 133.052631][ T4775] RSP: 0018:ffffc90001577e38 EFLAGS: 00050202 [ 133.058707][ T4775] RAX: 0000555556f78da8 RBX: ffffc90001577e40 RCX: ffffffff81448b63 [ 133.066689][ T4775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811ccdeb50 [ 133.074680][ T4775] RBP: ffffc90001577f00 R08: 000188811ccdeb57 R09: 0000000000000000 [ 133.082694][ T4775] R10: 0001ffffffffffff R11: 0000000000004296 R12: ffff88811ccde180 [ 133.090677][ T4775] R13: ffff88811ccdeb50 R14: ffffc90001577f58 R15: ffffc90001577fd8 [ 133.098665][ T4775] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 133.104574][ T4775] __rseq_handle_notify_resume+0xc7/0xbf0 [ 133.110333][ T4775] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 133.116685][ T4775] ? __se_sys_clock_nanosleep+0x202/0x230 [ 133.122418][ T4775] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 133.128454][ T4775] syscall_exit_to_user_mode+0x8e/0x130 [ 133.134015][ T4775] do_syscall_64+0x65/0x120 [ 133.138521][ T4775] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 133.144554][ T4775] RIP: 0033:0x7ff768b6b135 [ 133.148967][ T4775] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 133.168637][ T4775] RSP: 002b:00007fffd2473860 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 133.177116][ T4775] RAX: 0000000000000000 RBX: 00007ff768c6ef80 RCX: 00007ff768b6b135 [ 133.185174][ T4775] RDX: 00007fffd24738a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.193224][ T4775] RBP: 00007ff768c70980 R08: 0000000000000000 R09: 00007fffd25c20b0 [ 133.201212][ T4775] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002071e [ 133.209192][ T4775] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 00000000000203dd [ 133.217226][ T4775] [ 133.220522][ T4775] memory: usage 307200kB, limit 307200kB, failcnt 7150 [ 133.227379][ T4775] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0 [ 133.235326][ T4775] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 133.242627][ T4775] Memory cgroup stats for /syz4: [ 133.356196][ T4775] cache 12288 [ 133.364594][ T4775] rss 8192 [ 133.367640][ T4775] shmem 0 [ 133.370644][ T4775] mapped_file 0 [ 133.374198][ T4775] dirty 0 [ 133.377165][ T4775] writeback 4096 [ 133.380708][ T4775] workingset_refault_anon 1093 [ 133.385481][ T4775] workingset_refault_file 60 [ 133.390110][ T4775] swap 126976 [ 133.393455][ T4775] swapcached 12288 [ 133.397210][ T4775] pgpgin 3078 [ 133.400572][ T4775] pgpgout 3072 [ 133.403989][ T4775] pgfault 7856 [ 133.407416][ T4775] pgmajfault 431 [ 133.411033][ T4775] inactive_anon 4096 [ 133.415005][ T4775] active_anon 0 [ 133.418468][ T4775] inactive_file 12288 [ 133.422442][ T4775] active_file 0 [ 133.425922][ T4775] unevictable 0 [ 133.429417][ T4775] hierarchical_memory_limit 314572800 [ 133.434893][ T4775] hierarchical_memsw_limit 9223372036854771712 [ 133.441089][ T4775] total_cache 12288 [ 133.444889][ T4775] total_rss 8192 [ 133.448519][ T4775] total_shmem 0 [ 133.452000][ T4775] total_mapped_file 0 [ 133.455993][ T4775] total_dirty 0 [ 133.459549][ T4775] total_writeback 4096 [ 133.463607][ T4775] total_workingset_refault_anon 1093 [ 133.469010][ T4775] total_workingset_refault_file 60 [ 133.474247][ T4775] total_swap 126976 [ 133.478166][ T4775] total_swapcached 12288 [ 133.482409][ T4775] total_pgpgin 3078 [ 133.487362][ T4775] total_pgpgout 3072 [ 133.491327][ T4775] total_pgfault 7856 [ 133.495205][ T4775] total_pgmajfault 431 [ 133.499276][ T4775] total_inactive_anon 4096 03:04:35 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 133.503732][ T4775] total_active_anon 0 [ 133.507730][ T4775] total_inactive_file 12288 [ 133.512226][ T4775] total_active_file 0 [ 133.516281][ T4775] total_unevictable 0 [ 133.520267][ T4775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4775,uid=0 [ 133.535724][ T4775] Memory cgroup out of memory: Killed process 4775 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:35 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 133.760964][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 133.772227][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 133.782256][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 133.792317][ T3086] Call Trace: [ 133.795626][ T3086] [ 133.798579][ T3086] dump_stack_lvl+0xda/0x130 [ 133.803177][ T3086] dump_stack+0x15/0x20 [ 133.807347][ T3086] dump_header+0x82/0x2d0 [ 133.811730][ T3086] oom_kill_process+0x33a/0x4c0 [ 133.816758][ T3086] out_of_memory+0x9ca/0xbf0 [ 133.821413][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 133.827495][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 133.833132][ T3086] try_charge_memcg+0x759/0xd20 [ 133.837995][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 133.843033][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 133.848202][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 133.854351][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 133.859823][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 133.865206][ T3086] swapin_readahead+0xe2/0x7a0 [ 133.870123][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 133.875462][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 133.880849][ T3086] do_swap_page+0x44c/0x1570 [ 133.885521][ T3086] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 133.891136][ T3086] ? __rcu_read_lock+0x35/0x50 [ 133.895979][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 133.901440][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 133.906299][ T3086] ? mas_walk+0x204/0x320 [ 133.910632][ T3086] exc_page_fault+0x3ff/0x6d0 [ 133.915306][ T3086] asm_exc_page_fault+0x26/0x30 [ 133.920231][ T3086] RIP: 0033:0x7fd7c761c0f5 [ 133.924636][ T3086] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 133.944286][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00010246 [ 133.950536][ T3086] RAX: 0000000000000000 RBX: 00000000000000c4 RCX: 00007fd7c761c0f3 [ 133.958667][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.966696][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 133.974667][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 133.982713][ T3086] R13: 00000000000209da R14: 0000000000020685 R15: 000000000000000b [ 133.990802][ T3086] [ 133.993998][ T3086] memory: usage 307196kB, limit 307200kB, failcnt 8075 [ 134.000874][ T3086] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 134.008803][ T3086] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 134.016123][ T3086] Memory cgroup stats for /syz5: [ 134.016258][ T3086] cache 16384 [ 134.024466][ T3086] rss 0 [ 134.027335][ T3086] shmem 0 [ 134.030274][ T3086] mapped_file 0 [ 134.033785][ T3086] dirty 0 [ 134.036740][ T3086] writeback 4096 [ 134.040295][ T3086] workingset_refault_anon 1035 [ 134.045047][ T3086] workingset_refault_file 51 [ 134.049683][ T3086] swap 147456 [ 134.052974][ T3086] swapcached 4096 [ 134.056629][ T3086] pgpgin 2742 [ 134.059924][ T3086] pgpgout 2737 [ 134.063285][ T3086] pgfault 7144 [ 134.066745][ T3086] pgmajfault 414 [ 134.070287][ T3086] inactive_anon 0 [ 134.073967][ T3086] active_anon 0 [ 134.077452][ T3086] inactive_file 4096 [ 134.081343][ T3086] active_file 12288 [ 134.085143][ T3086] unevictable 0 [ 134.088616][ T3086] hierarchical_memory_limit 314572800 [ 134.094256][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 134.100482][ T3086] total_cache 16384 [ 134.104341][ T3086] total_rss 0 [ 134.107651][ T3086] total_shmem 0 [ 134.111110][ T3086] total_mapped_file 0 [ 134.115078][ T3086] total_dirty 0 [ 134.118566][ T3086] total_writeback 4096 [ 134.122690][ T3086] total_workingset_refault_anon 1035 [ 134.128031][ T3086] total_workingset_refault_file 51 [ 134.133128][ T3086] total_swap 147456 [ 134.137018][ T3086] total_swapcached 4096 [ 134.141160][ T3086] total_pgpgin 2742 [ 134.145034][ T3086] total_pgpgout 2737 [ 134.148935][ T3086] total_pgfault 7144 [ 134.152989][ T3086] total_pgmajfault 414 [ 134.157075][ T3086] total_inactive_anon 0 [ 134.161220][ T3086] total_active_anon 0 [ 134.165321][ T3086] total_inactive_file 4096 [ 134.169743][ T3086] total_active_file 12288 [ 134.174063][ T3086] total_unevictable 0 [ 134.178050][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4779,uid=0 [ 134.193285][ T3086] Memory cgroup out of memory: Killed process 4780 (syz-executor.5) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:35 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:35 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x4}, 0x48) [ 134.375890][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 134.386991][ T3089] CPU: 0 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 134.396989][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 134.407063][ T3089] Call Trace: [ 134.410382][ T3089] [ 134.413459][ T3089] dump_stack_lvl+0xda/0x130 [ 134.418048][ T3089] dump_stack+0x15/0x20 [ 134.422274][ T3089] dump_header+0x82/0x2d0 [ 134.426619][ T3089] oom_kill_process+0x33a/0x4c0 [ 134.431510][ T3089] out_of_memory+0x9ca/0xbf0 [ 134.436180][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 134.442372][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 134.447932][ T3089] try_charge_memcg+0x759/0xd20 [ 134.452791][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 134.457858][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 134.462984][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 134.469103][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 134.474571][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 134.480000][ T3089] swapin_readahead+0xe2/0x7a0 [ 134.484906][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 134.490205][ T3089] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 134.495815][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 134.501159][ T3089] do_swap_page+0x44c/0x1570 [ 134.505755][ T3089] ? __rcu_read_lock+0x35/0x50 [ 134.510520][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 134.516004][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 134.520911][ T3089] exc_page_fault+0x2f7/0x6d0 [ 134.525611][ T3089] asm_exc_page_fault+0x26/0x30 [ 134.530557][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 134.535723][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 134.555497][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 134.561583][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 134.569559][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 134.577568][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 134.585548][ T3089] R10: 0001ffffffffffff R11: 000000000000620e R12: ffff888103d68000 [ 134.593614][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 134.601605][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 134.607762][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 134.613491][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 134.619581][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 134.625307][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 134.631263][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 134.636931][ T3089] do_syscall_64+0x65/0x120 [ 134.641441][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 134.647357][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 134.651802][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 134.671437][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 134.679875][ T3089] RAX: 0000000000000000 RBX: 0000000000000147 RCX: 00007fca7be9e0f3 [ 134.688114][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.696113][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 134.704110][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 134.712158][ T3089] R13: 0000000000020a2c R14: 00000000000206c6 R15: 000000000000000e [ 134.720138][ T3089] [ 134.723246][ T3089] memory: usage 8368kB, limit 307200kB, failcnt 7102 [ 134.730000][ T3089] memory+swap: usage 8508kB, limit 9007199254740988kB, failcnt 0 [ 134.737731][ T3089] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 134.744844][ T3089] Memory cgroup stats for /syz1: [ 134.744970][ T3089] cache 12288 [ 134.753204][ T3089] rss 0 [ 134.755994][ T3089] shmem 0 [ 134.758928][ T3089] mapped_file 0 [ 134.762379][ T3089] dirty 4096 [ 134.765603][ T3089] writeback 0 [ 134.768898][ T3089] workingset_refault_anon 889 03:04:36 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) [ 134.773724][ T3089] workingset_refault_file 73 [ 134.778391][ T3089] swap 143360 [ 134.781665][ T3089] swapcached 0 [ 134.785032][ T3089] pgpgin 3962 [ 134.788338][ T3089] pgpgout 3959 [ 134.791706][ T3089] pgfault 10053 [ 134.795237][ T3089] pgmajfault 404 [ 134.798866][ T3089] inactive_anon 0 [ 134.802578][ T3089] active_anon 0 [ 134.806073][ T3089] inactive_file 0 [ 134.809824][ T3089] active_file 12288 [ 134.813646][ T3089] unevictable 0 [ 134.817204][ T3089] hierarchical_memory_limit 314572800 [ 134.822625][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 134.828813][ T3089] total_cache 12288 [ 134.832617][ T3089] total_rss 0 [ 134.835913][ T3089] total_shmem 0 [ 134.839357][ T3089] total_mapped_file 0 [ 134.843335][ T3089] total_dirty 4096 [ 134.847083][ T3089] total_writeback 0 [ 134.850937][ T3089] total_workingset_refault_anon 889 [ 134.856181][ T3089] total_workingset_refault_file 73 [ 134.861285][ T3089] total_swap 143360 [ 134.865175][ T3089] total_swapcached 0 [ 134.869130][ T3089] total_pgpgin 3962 [ 134.872937][ T3089] total_pgpgout 3959 [ 134.877001][ T3089] total_pgfault 10053 [ 134.881134][ T3089] total_pgmajfault 404 [ 134.885198][ T3089] total_inactive_anon 0 [ 134.889373][ T3089] total_active_anon 0 [ 134.893371][ T3089] total_inactive_file 0 [ 134.897623][ T3089] total_active_file 12288 [ 134.901949][ T3089] total_unevictable 0 [ 134.905932][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4781,uid=0 [ 134.921136][ T3089] Memory cgroup out of memory: Killed process 4782 (syz-executor.1) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:36 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:36 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 135.230809][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 135.241900][ T3089] CPU: 1 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 135.252088][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 135.262161][ T3089] Call Trace: [ 135.265513][ T3089] [ 135.268452][ T3089] dump_stack_lvl+0xda/0x130 [ 135.273092][ T3089] dump_stack+0x15/0x20 [ 135.277301][ T3089] dump_header+0x82/0x2d0 [ 135.281646][ T3089] oom_kill_process+0x33a/0x4c0 [ 135.286555][ T3089] out_of_memory+0x9ca/0xbf0 [ 135.291466][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 135.297591][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 135.303154][ T3089] try_charge_memcg+0x759/0xd20 [ 135.308017][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 135.313059][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 135.318121][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 135.324306][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 135.329796][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 135.335186][ T3089] swapin_readahead+0xe2/0x7a0 [ 135.340180][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 135.345552][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 135.350968][ T3089] do_swap_page+0x44c/0x1570 [ 135.355641][ T3089] ? __rcu_read_lock+0x35/0x50 [ 135.360475][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 135.365936][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 135.370797][ T3089] ? mas_walk+0x204/0x320 [ 135.375137][ T3089] exc_page_fault+0x3ff/0x6d0 [ 135.379828][ T3089] asm_exc_page_fault+0x26/0x30 [ 135.384754][ T3089] RIP: 0033:0x7fca7be1fb60 [ 135.389172][ T3089] Code: 53 48 81 ec b8 06 00 00 89 74 24 0c be 01 00 00 00 89 54 24 08 ba 06 00 00 00 e8 4b 4f 05 00 89 c5 83 f8 ff 0f 84 68 01 00 00 <41> 8b 44 24 28 85 c0 0f 84 2e 01 00 00 48 8d 5c 24 20 45 31 f6 b9 [ 135.408861][ T3089] RSP: 002b:00007ffd8acea6a0 EFLAGS: 00010283 [ 135.415025][ T3089] RAX: 0000000000000000 RBX: 00007ffd8acea720 RCX: 0000000000000000 [ 135.423011][ T3089] RDX: 00007fca7bf72e68 RSI: 000000330ed77c08 RDI: 0000000000000058 [ 135.431023][ T3089] RBP: 0000000000000003 R08: 00007ffd8acea6bc R09: 00007ffd8aceaad7 [ 135.438995][ T3089] R10: 00007ffd8acea720 R11: 0000000000000212 R12: 00007fca7bf73140 [ 135.447015][ T3089] R13: 00007ffd8acea6bc R14: 0000000000000000 R15: 00007fca7bf73ec0 [ 135.455150][ T3089] [ 135.458313][ T3089] memory: usage 307200kB, limit 307200kB, failcnt 8854 [ 135.465246][ T3089] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0 [ 135.473226][ T3089] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 135.480639][ T3089] Memory cgroup stats for /syz2: [ 135.480826][ T3089] cache 8192 [ 135.489089][ T3089] rss 8192 [ 135.492242][ T3089] shmem 0 [ 135.495218][ T3089] mapped_file 0 [ 135.498704][ T3089] dirty 0 [ 135.501634][ T3089] writeback 0 [ 135.504940][ T3089] workingset_refault_anon 1147 [ 135.509795][ T3089] workingset_refault_file 72 [ 135.514464][ T3089] swap 155648 [ 135.517798][ T3089] swapcached 8192 [ 135.521419][ T3089] pgpgin 3477 [ 135.524699][ T3089] pgpgout 3473 [ 135.528095][ T3089] pgfault 8280 [ 135.531553][ T3089] pgmajfault 452 [ 135.535126][ T3089] inactive_anon 0 [ 135.538788][ T3089] active_anon 0 [ 135.542320][ T3089] inactive_file 0 [ 135.545952][ T3089] active_file 8192 [ 135.549660][ T3089] unevictable 0 [ 135.553117][ T3089] hierarchical_memory_limit 314572800 [ 135.558496][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 135.564660][ T3089] total_cache 8192 [ 135.569764][ T3089] total_rss 8192 [ 135.574186][ T3089] total_shmem 0 [ 135.577688][ T3089] total_mapped_file 0 [ 135.581662][ T3089] total_dirty 0 [ 135.585181][ T3089] total_writeback 0 [ 135.589071][ T3089] total_workingset_refault_anon 1147 [ 135.594499][ T3089] total_workingset_refault_file 72 [ 135.599664][ T3089] total_swap 155648 [ 135.603513][ T3089] total_swapcached 8192 [ 135.607686][ T3089] total_pgpgin 3477 [ 135.611561][ T3089] total_pgpgout 3473 [ 135.615545][ T3089] total_pgfault 8280 [ 135.619424][ T3089] total_pgmajfault 452 [ 135.623532][ T3089] total_inactive_anon 0 [ 135.627786][ T3089] total_active_anon 0 03:04:37 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 135.632049][ T3089] total_inactive_file 0 [ 135.636234][ T3089] total_active_file 8192 [ 135.640540][ T3089] total_unevictable 0 [ 135.644539][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4791,uid=0 [ 135.659807][ T3089] Memory cgroup out of memory: Killed process 4792 (syz-executor.2) total-vm:46572kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:37 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:37 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0), 0x80) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) socket$rxrpc(0x21, 0x2, 0x0) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140), 0x0) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140), 0x0) 03:04:37 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:38 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 136.953341][ T4816] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 136.964725][ T4816] CPU: 0 PID: 4816 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 136.974919][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 136.985012][ T4816] Call Trace: [ 136.988357][ T4816] [ 136.991292][ T4816] dump_stack_lvl+0xda/0x130 [ 136.995892][ T4816] dump_stack+0x15/0x20 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) [ 137.000045][ T4816] dump_header+0x82/0x2d0 [ 137.004517][ T4816] oom_kill_process+0x33a/0x4c0 [ 137.009410][ T4816] out_of_memory+0x9ca/0xbf0 [ 137.014321][ T4816] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 137.020553][ T4816] mem_cgroup_out_of_memory+0x139/0x190 [ 137.026187][ T4816] try_charge_memcg+0x759/0xd20 [ 137.031084][ T4816] ? __swap_duplicate+0x29b/0x2b0 [ 137.036186][ T4816] ? radix_tree_lookup+0xf9/0x150 [ 137.041344][ T4816] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 137.047500][ T4816] __read_swap_cache_async+0x2b9/0x510 [ 137.053011][ T4816] swap_cluster_readahead+0x276/0x3f0 [ 137.058400][ T4816] swapin_readahead+0xe2/0x7a0 [ 137.063275][ T4816] ? __filemap_get_folio+0x41a/0x5a0 [ 137.068659][ T4816] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 137.074201][ T4816] ? swap_cache_get_folio+0x6e/0x200 [ 137.079704][ T4816] do_swap_page+0x44c/0x1570 [ 137.084291][ T4816] ? __rcu_read_lock+0x35/0x50 [ 137.089080][ T4816] ? pte_offset_map_nolock+0x124/0x1d0 [ 137.094549][ T4816] handle_mm_fault+0x7f6/0x27b0 [ 137.099493][ T4816] exc_page_fault+0x2f7/0x6d0 [ 137.104305][ T4816] asm_exc_page_fault+0x26/0x30 [ 137.109239][ T4816] RIP: 0010:__get_user_8+0x11/0x20 [ 137.114353][ T4816] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 137.133967][ T4816] RSP: 0018:ffffc9000158fe38 EFLAGS: 00050202 [ 137.140058][ T4816] RAX: 0000555556f78da8 RBX: ffffc9000158fe40 RCX: ffffffff81448b63 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1]}) pipe2(&(0x7f0000000140), 0x0) 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea]}) pipe2(&(0x7f0000000140), 0x0) [ 137.148211][ T4816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811d013a90 [ 137.156183][ T4816] RBP: ffffc9000158ff00 R08: 000188811d013a97 R09: 0000000000000000 [ 137.164201][ T4816] R10: 0001ffffffffffff R11: 0000000000006e9d R12: ffff88811d0130c0 [ 137.172274][ T4816] R13: ffff88811d013a90 R14: ffffc9000158ff58 R15: ffffc9000158ffd8 [ 137.180256][ T4816] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 137.186279][ T4816] __rseq_handle_notify_resume+0xc7/0xbf0 [ 137.192016][ T4816] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 137.198041][ T4816] ? __se_sys_clock_nanosleep+0x202/0x230 03:04:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001]}) pipe2(&(0x7f0000000140), 0x0) [ 137.203808][ T4816] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 137.209714][ T4816] syscall_exit_to_user_mode+0x8e/0x130 [ 137.215310][ T4816] do_syscall_64+0x65/0x120 [ 137.219914][ T4816] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.225871][ T4816] RIP: 0033:0x7ff768b6b135 [ 137.230392][ T4816] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 137.250184][ T4816] RSP: 002b:00007fffd2473860 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 137.258785][ T4816] RAX: 0000000000000000 RBX: 00007ff768c6ef80 RCX: 00007ff768b6b135 [ 137.267286][ T4816] RDX: 00007fffd24738a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.275313][ T4816] RBP: 00007ff768c70980 R08: 0000000000000000 R09: 00007fffd25c20b0 [ 137.283345][ T4816] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000021716 [ 137.291322][ T4816] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 00000000000213d5 [ 137.299303][ T4816] [ 137.302497][ T4816] memory: usage 307196kB, limit 307200kB, failcnt 7501 [ 137.309623][ T4816] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0 [ 137.317542][ T4816] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 137.325004][ T4816] Memory cgroup stats for /syz4: [ 137.325183][ T4816] cache 8192 [ 137.333591][ T4816] rss 0 [ 137.336948][ T4816] shmem 0 [ 137.340017][ T4816] mapped_file 0 [ 137.343464][ T4816] dirty 0 [ 137.346528][ T4816] writeback 0 [ 137.349805][ T4816] workingset_refault_anon 1125 [ 137.354578][ T4816] workingset_refault_file 62 [ 137.359259][ T4816] swap 131072 [ 137.362820][ T4816] swapcached 8192 [ 137.366951][ T4816] pgpgin 3158 [ 137.370371][ T4816] pgpgout 3154 [ 137.373739][ T4816] pgfault 8057 [ 137.377163][ T4816] pgmajfault 444 [ 137.380787][ T4816] inactive_anon 0 [ 137.384415][ T4816] active_anon 0 [ 137.387984][ T4816] inactive_file 4096 [ 137.393723][ T4816] active_file 4096 [ 137.397506][ T4816] unevictable 0 [ 137.400965][ T4816] hierarchical_memory_limit 314572800 [ 137.406359][ T4816] hierarchical_memsw_limit 9223372036854771712 [ 137.412513][ T4816] total_cache 8192 [ 137.416261][ T4816] total_rss 0 [ 137.419607][ T4816] total_shmem 0 [ 137.423080][ T4816] total_mapped_file 0 [ 137.427147][ T4816] total_dirty 0 [ 137.430597][ T4816] total_writeback 0 [ 137.434484][ T4816] total_workingset_refault_anon 1125 [ 137.439863][ T4816] total_workingset_refault_file 62 [ 137.444978][ T4816] total_swap 131072 [ 137.448817][ T4816] total_swapcached 8192 [ 137.452967][ T4816] total_pgpgin 3158 [ 137.456790][ T4816] total_pgpgout 3154 [ 137.460726][ T4816] total_pgfault 8057 [ 137.464616][ T4816] total_pgmajfault 444 [ 137.468710][ T4816] total_inactive_anon 0 [ 137.472938][ T4816] total_active_anon 0 [ 137.476924][ T4816] total_inactive_file 4096 [ 137.481366][ T4816] total_active_file 4096 [ 137.485708][ T4816] total_unevictable 0 [ 137.489682][ T4816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4816,uid=0 03:04:39 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2]}) pipe2(&(0x7f0000000140), 0x0) 03:04:39 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2]}) pipe2(&(0x7f0000000140), 0x0) [ 137.504976][ T4816] Memory cgroup out of memory: Killed process 4816 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea]}) pipe2(&(0x7f0000000140), 0x0) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5]}) pipe2(&(0x7f0000000140), 0x0) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3]}) pipe2(&(0x7f0000000140), 0x0) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1]}) pipe2(&(0x7f0000000140), 0x0) [ 137.923217][ T4852] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 137.934573][ T4852] CPU: 1 PID: 4852 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 137.944565][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 137.954692][ T4852] Call Trace: [ 137.957970][ T4852] [ 137.960949][ T4852] dump_stack_lvl+0xda/0x130 [ 137.965542][ T4852] dump_stack+0x15/0x20 [ 137.969708][ T4852] dump_header+0x82/0x2d0 [ 137.974066][ T4852] oom_kill_process+0x33a/0x4c0 [ 137.978947][ T4852] out_of_memory+0x9ca/0xbf0 [ 137.983633][ T4852] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 137.989735][ T4852] mem_cgroup_out_of_memory+0x139/0x190 [ 137.995380][ T4852] try_charge_memcg+0x759/0xd20 [ 138.000305][ T4852] ? mem_cgroup_swapin_charge_folio+0xf1/0x190 [ 138.006475][ T4852] ? radix_tree_lookup+0xf9/0x150 [ 138.011507][ T4852] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 138.017623][ T4852] __read_swap_cache_async+0x2b9/0x510 [ 138.023248][ T4852] swap_cluster_readahead+0x276/0x3f0 [ 138.028638][ T4852] swapin_readahead+0xe2/0x7a0 [ 138.033454][ T4852] ? __filemap_get_folio+0x41a/0x5a0 [ 138.038730][ T4852] ? swap_cache_get_folio+0x6e/0x200 [ 138.044031][ T4852] do_swap_page+0x44c/0x1570 [ 138.048760][ T4852] ? __rcu_read_lock+0x35/0x50 [ 138.053620][ T4852] ? pte_offset_map_nolock+0x124/0x1d0 [ 138.059100][ T4852] handle_mm_fault+0x7f6/0x27b0 [ 138.063970][ T4852] ? mas_walk+0x204/0x320 [ 138.068307][ T4852] exc_page_fault+0x3ff/0x6d0 [ 138.072990][ T4852] asm_exc_page_fault+0x26/0x30 [ 138.077847][ T4852] RIP: 0033:0x7f9fdba920e3 [ 138.082399][ T4852] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 138.102017][ T4852] RSP: 002b:00007ffd53fcf4b8 EFLAGS: 00010293 [ 138.108116][ T4852] RAX: 00000000fffffffa RBX: 00007f9fdbb95f80 RCX: 0000000000000000 [ 138.116096][ T4852] RDX: 00007ffd53fcf4d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.124079][ T4852] RBP: 00007f9fdbb97980 R08: 0000000000000010 R09: 00007ffd53fe40b0 [ 138.132223][ T4852] R10: 0000000000000000 R11: 00000000000060b4 R12: 0000000000021bc1 [ 138.140201][ T4852] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 0000000000021880 [ 138.148302][ T4852] [ 138.151472][ T4852] memory: usage 307200kB, limit 307200kB, failcnt 7709 [ 138.158422][ T4852] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 138.166410][ T4852] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 138.173812][ T4852] Memory cgroup stats for /syz0: [ 138.174000][ T4852] cache 12288 [ 138.182236][ T4852] rss 8192 [ 138.185256][ T4852] shmem 0 [ 138.188212][ T4852] mapped_file 0 [ 138.191661][ T4852] dirty 0 [ 138.194585][ T4852] writeback 8192 [ 138.198127][ T4852] workingset_refault_anon 1135 [ 138.202869][ T4852] workingset_refault_file 52 [ 138.207476][ T4852] swap 163840 [ 138.210805][ T4852] swapcached 8192 [ 138.214424][ T4852] pgpgin 4108 [ 138.217703][ T4852] pgpgout 4103 [ 138.221091][ T4852] pgfault 10507 [ 138.224532][ T4852] pgmajfault 461 [ 138.228083][ T4852] inactive_anon 0 [ 138.231796][ T4852] active_anon 0 [ 138.235240][ T4852] inactive_file 12288 [ 138.239222][ T4852] active_file 0 [ 138.242730][ T4852] unevictable 0 [ 138.246229][ T4852] hierarchical_memory_limit 314572800 [ 138.251694][ T4852] hierarchical_memsw_limit 9223372036854771712 [ 138.257918][ T4852] total_cache 12288 [ 138.261792][ T4852] total_rss 8192 [ 138.265329][ T4852] total_shmem 0 [ 138.268876][ T4852] total_mapped_file 0 [ 138.272888][ T4852] total_dirty 0 [ 138.276361][ T4852] total_writeback 8192 [ 138.280416][ T4852] total_workingset_refault_anon 1135 [ 138.285786][ T4852] total_workingset_refault_file 52 [ 138.290891][ T4852] total_swap 163840 [ 138.294706][ T4852] total_swapcached 8192 [ 138.298915][ T4852] total_pgpgin 4108 [ 138.302719][ T4852] total_pgpgout 4103 [ 138.306619][ T4852] total_pgfault 10507 [ 138.310662][ T4852] total_pgmajfault 461 [ 138.314768][ T4852] total_inactive_anon 0 [ 138.318926][ T4852] total_active_anon 0 [ 138.322995][ T4852] total_inactive_file 12288 [ 138.327513][ T4852] total_active_file 0 [ 138.331551][ T4852] total_unevictable 0 [ 138.335543][ T4852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4852,uid=0 [ 138.350960][ T4852] Memory cgroup out of memory: Killed process 4852 (syz-executor.0) total-vm:46572kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:39 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7]}) pipe2(&(0x7f0000000140), 0x0) 03:04:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9]}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92, 0x3]}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8, 0x92]}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101, 0x8]}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {}, {}, 0x0, [0x101]}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb"}) pipe2(&(0x7f0000000140), 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb"}) pipe2(0x0, 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb"}) pipe2(0x0, 0x0) 03:04:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb"}) pipe2(0x0, 0x0) 03:04:40 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:40 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) [ 139.020311][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 139.031416][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 139.041490][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 139.051546][ T3118] Call Trace: [ 139.054820][ T3118] [ 139.057755][ T3118] dump_stack_lvl+0xda/0x130 [ 139.062374][ T3118] dump_stack+0x15/0x20 [ 139.066701][ T3118] dump_header+0x82/0x2d0 [ 139.071029][ T3118] oom_kill_process+0x33a/0x4c0 [ 139.075895][ T3118] out_of_memory+0x9ca/0xbf0 [ 139.080564][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 139.086737][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 139.092452][ T3118] try_charge_memcg+0x759/0xd20 [ 139.097392][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 139.102466][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 139.107542][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 139.113612][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 139.119143][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 139.124527][ T3118] swapin_readahead+0xe2/0x7a0 [ 139.129313][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 139.134745][ T3118] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 139.140305][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 139.145867][ T3118] do_swap_page+0x44c/0x1570 [ 139.150460][ T3118] ? __rcu_read_lock+0x35/0x50 [ 139.155489][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 139.160960][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 139.165852][ T3118] exc_page_fault+0x2f7/0x6d0 [ 139.170544][ T3118] asm_exc_page_fault+0x26/0x30 [ 139.175626][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 139.180743][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 139.200450][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 139.206640][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 139.214625][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 139.222603][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 139.230640][ T3118] R10: 0001ffffffffffff R11: 0000000000001d94 R12: ffff888103d6c100 [ 139.238622][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 139.246674][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 139.252572][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 139.258292][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 139.264358][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 139.270142][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 139.276068][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 139.281625][ T3118] do_syscall_64+0x65/0x120 [ 139.286167][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 139.292085][ T3118] RIP: 0033:0x7fc472cd80f3 [ 139.296509][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 139.316197][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 139.324639][ T3118] RAX: 0000000000000000 RBX: 00000000000000fd RCX: 00007fc472cd80f3 [ 139.332624][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.340657][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 139.348657][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 139.356643][ T3118] R13: 0000000000021c8c R14: 0000000000021941 R15: 0000000000000013 [ 139.364669][ T3118] 03:04:40 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 139.367808][ T3118] memory: usage 8364kB, limit 307200kB, failcnt 9051 [ 139.374478][ T3118] memory+swap: usage 8520kB, limit 9007199254740988kB, failcnt 0 [ 139.382297][ T3118] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 139.389458][ T3118] Memory cgroup stats for /syz2: [ 139.489590][ T3118] cache 8192 [ 139.497840][ T3118] rss 0 [ 139.500602][ T3118] shmem 0 [ 139.503530][ T3118] mapped_file 0 [ 139.506996][ T3118] dirty 4096 [ 139.510193][ T3118] writeback 0 [ 139.513544][ T3118] workingset_refault_anon 1177 [ 139.518326][ T3118] workingset_refault_file 74 [ 139.522973][ T3118] swap 159744 [ 139.526314][ T3118] swapcached 0 [ 139.529795][ T3118] pgpgin 3561 [ 139.533079][ T3118] pgpgout 3559 [ 139.536455][ T3118] pgfault 8529 [ 139.539815][ T3118] pgmajfault 461 [ 139.543454][ T3118] inactive_anon 0 [ 139.547110][ T3118] active_anon 0 [ 139.550629][ T3118] inactive_file 8192 [ 139.554519][ T3118] active_file 0 [ 139.558085][ T3118] unevictable 0 [ 139.561549][ T3118] hierarchical_memory_limit 314572800 [ 139.567016][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 139.573169][ T3118] total_cache 8192 [ 139.576904][ T3118] total_rss 0 [ 139.580280][ T3118] total_shmem 0 [ 139.583737][ T3118] total_mapped_file 0 [ 139.587856][ T3118] total_dirty 4096 [ 139.591576][ T3118] total_writeback 0 [ 139.595412][ T3118] total_workingset_refault_anon 1177 [ 139.600687][ T3118] total_workingset_refault_file 74 [ 139.605890][ T3118] total_swap 159744 [ 139.609692][ T3118] total_swapcached 0 [ 139.613578][ T3118] total_pgpgin 3561 [ 139.617411][ T3118] total_pgpgout 3559 [ 139.621307][ T3118] total_pgfault 8529 [ 139.625285][ T3118] total_pgmajfault 461 [ 139.629381][ T3118] total_inactive_anon 0 [ 139.633531][ T3118] total_active_anon 0 [ 139.637557][ T3118] total_inactive_file 8192 [ 139.642037][ T3118] total_active_file 0 [ 139.646038][ T3118] total_unevictable 0 [ 139.650005][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4870,uid=0 [ 139.665311][ T3118] Memory cgroup out of memory: Killed process 4871 (syz-executor.2) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:41 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:41 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:41 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:41 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:42 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:42 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:42 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:42 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:43 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:43 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:43 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0x0, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 142.024808][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 142.035947][ T3089] CPU: 0 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 142.046113][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 142.056253][ T3089] Call Trace: [ 142.059560][ T3089] [ 142.062549][ T3089] dump_stack_lvl+0xda/0x130 [ 142.067143][ T3089] dump_stack+0x15/0x20 [ 142.071352][ T3089] dump_header+0x82/0x2d0 [ 142.075726][ T3089] oom_kill_process+0x33a/0x4c0 [ 142.080654][ T3089] out_of_memory+0x9ca/0xbf0 [ 142.085324][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 142.091505][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 142.097065][ T3089] try_charge_memcg+0x759/0xd20 [ 142.101931][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 142.107042][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 142.112200][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 142.118422][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 142.123975][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 142.129453][ T3089] swapin_readahead+0xe2/0x7a0 [ 142.134241][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 142.139667][ T3089] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 142.145303][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 142.150685][ T3089] do_swap_page+0x44c/0x1570 [ 142.155397][ T3089] ? __rcu_read_lock+0x35/0x50 [ 142.160242][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 142.165715][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 142.170584][ T3089] exc_page_fault+0x2f7/0x6d0 [ 142.175304][ T3089] asm_exc_page_fault+0x26/0x30 [ 142.180369][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 142.185478][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 142.205126][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 142.211252][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 142.219308][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 142.227376][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 142.235357][ T3089] R10: 0001ffffffffffff R11: 0000000000004208 R12: ffff888103d68000 [ 142.243398][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 142.251406][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 142.257307][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 142.263031][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 142.269066][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 142.274934][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 142.280867][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 142.286424][ T3089] do_syscall_64+0x65/0x120 [ 142.291013][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.296925][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 142.301414][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 142.321082][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 142.329606][ T3089] RAX: 0000000000000000 RBX: 0000000000000156 RCX: 00007fca7be9e0f3 [ 142.337596][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.345681][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 142.353739][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 142.361741][ T3089] R13: 00000000000227af R14: 0000000000022748 R15: 000000000000000d [ 142.369721][ T3089] [ 142.372854][ T3089] memory: usage 8400kB, limit 307200kB, failcnt 7769 [ 142.379627][ T3089] memory+swap: usage 8540kB, limit 9007199254740988kB, failcnt 0 [ 142.387345][ T3089] kmem: usage 8392kB, limit 9007199254740988kB, failcnt 0 03:04:44 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 142.394520][ T3089] Memory cgroup stats for /syz1: [ 142.541214][ T3089] cache 8192 [ 142.549515][ T3089] rss 0 [ 142.552284][ T3089] shmem 0 [ 142.555226][ T3089] mapped_file 0 [ 142.558789][ T3089] dirty 0 [ 142.561717][ T3089] writeback 0 [ 142.564991][ T3089] workingset_refault_anon 988 [ 142.569754][ T3089] workingset_refault_file 77 [ 142.574391][ T3089] swap 143360 [ 142.577785][ T3089] swapcached 0 [ 142.581146][ T3089] pgpgin 4180 [ 142.584429][ T3089] pgpgout 4178 [ 142.587812][ T3089] pgfault 10556 [ 142.591341][ T3089] pgmajfault 440 [ 142.594873][ T3089] inactive_anon 0 [ 142.598533][ T3089] active_anon 0 [ 142.602020][ T3089] inactive_file 8192 [ 142.605918][ T3089] active_file 0 [ 142.609376][ T3089] unevictable 0 [ 142.612881][ T3089] hierarchical_memory_limit 314572800 [ 142.618388][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 142.624545][ T3089] total_cache 8192 [ 142.628301][ T3089] total_rss 0 [ 142.631628][ T3089] total_shmem 0 [ 142.635081][ T3089] total_mapped_file 0 [ 142.639118][ T3089] total_dirty 0 [ 142.642645][ T3089] total_writeback 0 [ 142.647330][ T3089] total_workingset_refault_anon 988 [ 142.652520][ T3089] total_workingset_refault_file 77 [ 142.657646][ T3089] total_swap 143360 [ 142.661457][ T3089] total_swapcached 0 [ 142.665344][ T3089] total_pgpgin 4180 [ 142.669167][ T3089] total_pgpgout 4178 [ 142.673059][ T3089] total_pgfault 10556 [ 142.677142][ T3089] total_pgmajfault 440 [ 142.681207][ T3089] total_inactive_anon 0 [ 142.685488][ T3089] total_active_anon 0 03:04:44 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 142.689542][ T3089] total_inactive_file 8192 [ 142.693949][ T3089] total_active_file 0 [ 142.697952][ T3089] total_unevictable 0 [ 142.701938][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4940,uid=0 [ 142.717192][ T3089] Memory cgroup out of memory: Killed process 4940 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 142.859924][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 142.871130][ T3106] CPU: 0 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 142.881117][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 142.891179][ T3106] Call Trace: [ 142.894489][ T3106] [ 142.897419][ T3106] dump_stack_lvl+0xda/0x130 [ 142.902026][ T3106] dump_stack+0x15/0x20 [ 142.906173][ T3106] dump_header+0x82/0x2d0 [ 142.910633][ T3106] oom_kill_process+0x33a/0x4c0 [ 142.915494][ T3106] out_of_memory+0x9ca/0xbf0 [ 142.920101][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 142.925668][ T3106] try_charge_memcg+0x759/0xd20 [ 142.930630][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 142.935663][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 142.940787][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 142.946865][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 142.952329][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 142.957786][ T3106] swapin_readahead+0xe2/0x7a0 [ 142.962568][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 142.967909][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 142.973280][ T3106] do_swap_page+0x44c/0x1570 [ 142.977882][ T3106] ? __rcu_read_lock+0x35/0x50 [ 142.982664][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 142.988185][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 142.993055][ T3106] ? mas_walk+0x204/0x320 [ 142.997605][ T3106] exc_page_fault+0x3ff/0x6d0 [ 143.002330][ T3106] asm_exc_page_fault+0x26/0x30 [ 143.007276][ T3106] RIP: 0033:0x7ff768b6b0f5 [ 143.011701][ T3106] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 143.031325][ T3106] RSP: 002b:00007fffd2473ab8 EFLAGS: 00010246 [ 143.037468][ T3106] RAX: 0000000000000000 RBX: 00000000000000f0 RCX: 00007ff768b6b0f3 [ 143.045499][ T3106] RDX: 00007fffd2473ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.053486][ T3106] RBP: 00007fffd2473b5c R08: 0000000000000010 R09: 00007fffd25c20b0 [ 143.061476][ T3106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 143.069465][ T3106] R13: 0000000000022dd4 R14: 0000000000022991 R15: 0000000000000004 [ 143.077497][ T3106] [ 143.080571][ T3106] memory: usage 307200kB, limit 307200kB, failcnt 8686 [ 143.087544][ T3106] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 143.095461][ T3106] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 143.102829][ T3106] Memory cgroup stats for /syz4: [ 143.102944][ T3106] cache 8192 [ 143.111090][ T3106] rss 0 [ 143.113861][ T3106] shmem 0 [ 143.116837][ T3106] mapped_file 0 [ 143.120290][ T3106] dirty 0 [ 143.123235][ T3106] writeback 4096 [ 143.126811][ T3106] workingset_refault_anon 1185 [ 143.131600][ T3106] workingset_refault_file 64 [ 143.136263][ T3106] swap 139264 [ 143.139544][ T3106] swapcached 8192 [ 143.143252][ T3106] pgpgin 3292 [ 143.146589][ T3106] pgpgout 3288 [ 143.149962][ T3106] pgfault 8413 [ 143.153325][ T3106] pgmajfault 464 [ 143.157065][ T3106] inactive_anon 0 [ 143.160708][ T3106] active_anon 0 [ 143.164181][ T3106] inactive_file 0 [ 143.167827][ T3106] active_file 8192 [ 143.171616][ T3106] unevictable 0 [ 143.175062][ T3106] hierarchical_memory_limit 314572800 [ 143.180518][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 143.186763][ T3106] total_cache 8192 [ 143.190481][ T3106] total_rss 0 [ 143.193754][ T3106] total_shmem 0 [ 143.197240][ T3106] total_mapped_file 0 [ 143.201220][ T3106] total_dirty 0 [ 143.204680][ T3106] total_writeback 4096 [ 143.208811][ T3106] total_workingset_refault_anon 1185 [ 143.214224][ T3106] total_workingset_refault_file 64 [ 143.219359][ T3106] total_swap 139264 [ 143.223155][ T3106] total_swapcached 8192 [ 143.227383][ T3106] total_pgpgin 3292 [ 143.231186][ T3106] total_pgpgout 3288 [ 143.235118][ T3106] total_pgfault 8413 [ 143.239033][ T3106] total_pgmajfault 464 [ 143.243108][ T3106] total_inactive_anon 0 [ 143.247361][ T3106] total_active_anon 0 [ 143.251356][ T3106] total_inactive_file 0 [ 143.255531][ T3106] total_active_file 8192 [ 143.259906][ T3106] total_unevictable 0 [ 143.263899][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4954,uid=0 [ 143.279100][ T3106] Memory cgroup out of memory: Killed process 4955 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:44 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:44 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:45 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:45 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0x0, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:45 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:45 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:46 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:46 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:46 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0x0, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:46 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:46 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:04:46 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 146.171559][ T4989] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 146.182892][ T4989] CPU: 0 PID: 4989 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 146.192870][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 146.202929][ T4989] Call Trace: [ 146.206209][ T4989] [ 146.209207][ T4989] dump_stack_lvl+0xda/0x130 [ 146.213877][ T4989] dump_stack+0x15/0x20 [ 146.218047][ T4989] dump_header+0x82/0x2d0 [ 146.222392][ T4989] oom_kill_process+0x33a/0x4c0 [ 146.227266][ T4989] out_of_memory+0x9ca/0xbf0 [ 146.231889][ T4989] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 146.238037][ T4989] mem_cgroup_out_of_memory+0x139/0x190 [ 146.243671][ T4989] try_charge_memcg+0x759/0xd20 [ 146.248537][ T4989] ? __swap_duplicate+0x29b/0x2b0 [ 146.253680][ T4989] ? radix_tree_lookup+0xf9/0x150 [ 146.258762][ T4989] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 146.264836][ T4989] __read_swap_cache_async+0x2b9/0x510 [ 146.270430][ T4989] swap_cluster_readahead+0x276/0x3f0 [ 146.275806][ T4989] swapin_readahead+0xe2/0x7a0 [ 146.280643][ T4989] ? __filemap_get_folio+0x41a/0x5a0 [ 146.286027][ T4989] ? swap_cache_get_folio+0x6e/0x200 [ 146.291328][ T4989] do_swap_page+0x44c/0x1570 [ 146.295996][ T4989] ? check_preempt_wakeup_fair+0x1db/0x200 [ 146.301836][ T4989] ? __rcu_read_lock+0x35/0x50 [ 146.306677][ T4989] ? pte_offset_map_nolock+0x124/0x1d0 [ 146.312219][ T4989] handle_mm_fault+0x7f6/0x27b0 [ 146.317092][ T4989] ? mas_walk+0x204/0x320 03:04:47 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:47 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:47 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:47 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 146.321432][ T4989] exc_page_fault+0x3ff/0x6d0 [ 146.326115][ T4989] asm_exc_page_fault+0x26/0x30 [ 146.331043][ T4989] RIP: 0033:0x7fca7be2e9a5 [ 146.335556][ T4989] Code: 35 80 76 16 00 48 89 fb 48 89 74 24 10 48 89 54 24 18 eb 20 90 4c 89 ff e8 d8 08 ff ff 41 08 c5 0f 85 ff 01 00 00 41 83 c4 01 <44> 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c [ 146.355258][ T4989] RSP: 002b:00007ffd8aceaac0 EFLAGS: 00010206 [ 146.361335][ T4989] RAX: 00000000812674bd RBX: 00007fca7bfa2018 RCX: 0000000000038c80 [ 146.369316][ T4989] RDX: 00000000812674bd RSI: 0000000080000000 RDI: 000000000000fcc5 [ 146.377434][ T4989] RBP: 00000000812674bd R08: 0000001b2cc20000 R09: 00000000000014bd [ 146.385409][ T4989] R10: 00000000812674c1 R11: 000000000000669c R12: 0000000000038c81 [ 146.393452][ T4989] R13: 0000000000000001 R14: 00007fca7bf96000 R15: ffffffff81267f7c [ 146.401487][ T4989] ? cgroup_rstat_updated+0x1c/0x1c0 [ 146.406788][ T4989] [ 146.410011][ T4989] memory: usage 306160kB, limit 307200kB, failcnt 8064 [ 146.417115][ T4989] memory+swap: usage 285224kB, limit 9007199254740988kB, failcnt 0 [ 146.425004][ T4989] kmem: usage 264640kB, limit 9007199254740988kB, failcnt 0 [ 146.432308][ T4989] Memory cgroup stats for /syz1: [ 146.433578][ T4989] cache 8192 [ 146.441721][ T4989] rss 8192 [ 146.444732][ T4989] shmem 0 [ 146.447694][ T4989] mapped_file 0 [ 146.451153][ T4989] dirty 0 [ 146.454085][ T4989] writeback 0 [ 146.457402][ T4989] workingset_refault_anon 1040 [ 146.462160][ T4989] workingset_refault_file 79 [ 146.466861][ T4989] swap 126976 [ 146.470198][ T4989] swapcached 16384 [ 146.473919][ T4989] pgpgin 4303 [ 146.477215][ T4989] pgpgout 4297 [ 146.480576][ T4989] pgfault 10915 [ 146.484134][ T4989] pgmajfault 462 [ 146.487711][ T4989] inactive_anon 16384 [ 146.491682][ T4989] active_anon 0 [ 146.495130][ T4989] inactive_file 8192 [ 146.499108][ T4989] active_file 0 [ 146.502576][ T4989] unevictable 0 [ 146.506045][ T4989] hierarchical_memory_limit 314572800 [ 146.511403][ T4989] hierarchical_memsw_limit 9223372036854771712 [ 146.517649][ T4989] total_cache 8192 [ 146.521354][ T4989] total_rss 8192 [ 146.524893][ T4989] total_shmem 0 [ 146.528383][ T4989] total_mapped_file 0 [ 146.532349][ T4989] total_dirty 0 [ 146.535842][ T4989] total_writeback 0 [ 146.539646][ T4989] total_workingset_refault_anon 1040 [ 146.544921][ T4989] total_workingset_refault_file 79 [ 146.550153][ T4989] total_swap 126976 [ 146.553969][ T4989] total_swapcached 16384 [ 146.558372][ T4989] total_pgpgin 4303 [ 146.562215][ T4989] total_pgpgout 4297 [ 146.566197][ T4989] total_pgfault 10915 [ 146.570252][ T4989] total_pgmajfault 462 [ 146.574324][ T4989] total_inactive_anon 16384 [ 146.578858][ T4989] total_active_anon 0 [ 146.582843][ T4989] total_inactive_file 8192 [ 146.587370][ T4989] total_active_file 0 [ 146.591417][ T4989] total_unevictable 0 [ 146.595424][ T4989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4989,uid=0 [ 146.610727][ T4989] Memory cgroup out of memory: Killed process 4989 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:48 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:48 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) [ 147.573000][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 147.584147][ T3118] CPU: 0 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 147.594168][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 147.604322][ T3118] Call Trace: [ 147.607695][ T3118] [ 147.610683][ T3118] dump_stack_lvl+0xda/0x130 [ 147.615276][ T3118] dump_stack+0x15/0x20 [ 147.619430][ T3118] dump_header+0x82/0x2d0 [ 147.623775][ T3118] oom_kill_process+0x33a/0x4c0 [ 147.628738][ T3118] out_of_memory+0x9ca/0xbf0 [ 147.633420][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 147.639604][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 147.645164][ T3118] try_charge_memcg+0x759/0xd20 [ 147.650031][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 147.655051][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 147.660127][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 147.666278][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 147.671801][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 147.677338][ T3118] swapin_readahead+0xe2/0x7a0 [ 147.682115][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 147.687600][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 147.692885][ T3118] do_swap_page+0x44c/0x1570 [ 147.697569][ T3118] ? __rcu_read_lock+0x35/0x50 [ 147.702335][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 147.707798][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 147.712671][ T3118] exc_page_fault+0x2f7/0x6d0 [ 147.717363][ T3118] asm_exc_page_fault+0x26/0x30 [ 147.722222][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 147.727347][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 147.746965][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 147.753106][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 147.761103][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 147.769113][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 147.777148][ T3118] R10: 0001ffffffffffff R11: 0000000000002fb8 R12: ffff888103d6c100 [ 147.785132][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 147.793159][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 147.799238][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 147.804965][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 147.810954][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 147.816672][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 147.822629][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 147.828198][ T3118] do_syscall_64+0x65/0x120 [ 147.832707][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 147.838670][ T3118] RIP: 0033:0x7fc472cd80f3 [ 147.843083][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 147.862735][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 147.871188][ T3118] RAX: 0000000000000000 RBX: 000000000000010c RCX: 00007fc472cd80f3 [ 147.879190][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.887182][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 147.895153][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 147.903127][ T3118] R13: 0000000000023f25 R14: 0000000000023bd0 R15: 0000000000000010 [ 147.911203][ T3118] [ 147.914348][ T3118] memory: usage 8372kB, limit 307200kB, failcnt 9642 [ 147.921046][ T3118] memory+swap: usage 8524kB, limit 9007199254740988kB, failcnt 0 [ 147.928867][ T3118] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 147.936540][ T3118] Memory cgroup stats for /syz2: [ 147.951210][ T3118] cache 16384 [ 147.959538][ T3118] rss 0 [ 147.962292][ T3118] shmem 0 [ 147.965417][ T3118] mapped_file 0 [ 147.968871][ T3118] dirty 0 [ 147.972013][ T3118] writeback 0 [ 147.975281][ T3118] workingset_refault_anon 1255 [ 147.980059][ T3118] workingset_refault_file 79 [ 147.986069][ T3118] swap 139264 [ 147.989422][ T3118] swapcached 16384 [ 147.993143][ T3118] pgpgin 3771 [ 147.996462][ T3118] pgpgout 3763 [ 147.999825][ T3118] pgfault 9033 [ 148.003190][ T3118] pgmajfault 499 [ 148.006745][ T3118] inactive_anon 16384 [ 148.010831][ T3118] active_anon 0 [ 148.014321][ T3118] inactive_file 4096 [ 148.018286][ T3118] active_file 12288 [ 148.022081][ T3118] unevictable 0 [ 148.025573][ T3118] hierarchical_memory_limit 314572800 [ 148.031039][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 148.037209][ T3118] total_cache 16384 [ 148.041007][ T3118] total_rss 0 [ 148.044282][ T3118] total_shmem 0 [ 148.047810][ T3118] total_mapped_file 0 [ 148.051784][ T3118] total_dirty 0 [ 148.055232][ T3118] total_writeback 0 [ 148.059067][ T3118] total_workingset_refault_anon 1255 [ 148.064339][ T3118] total_workingset_refault_file 79 [ 148.069470][ T3118] total_swap 139264 03:04:49 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)}, 0x10) 03:04:49 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 148.073268][ T3118] total_swapcached 16384 [ 148.077617][ T3118] total_pgpgin 3771 [ 148.081427][ T3118] total_pgpgout 3763 [ 148.085318][ T3118] total_pgfault 9033 [ 148.089225][ T3118] total_pgmajfault 499 [ 148.093290][ T3118] total_inactive_anon 16384 [ 148.097804][ T3118] total_active_anon 0 [ 148.101783][ T3118] total_inactive_file 4096 [ 148.106231][ T3118] total_active_file 12288 [ 148.110619][ T3118] total_unevictable 0 [ 148.114628][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5004,uid=0 [ 148.129934][ T3118] Memory cgroup out of memory: OOM victim 5004 (syz-executor.2) is already exiting. Skip killing the task 03:04:49 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:49 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:49 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:49 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) 03:04:50 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:50 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:50 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:50 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 149.571334][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 149.582439][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 149.592462][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 149.602522][ T3118] Call Trace: [ 149.605802][ T3118] [ 149.608742][ T3118] dump_stack_lvl+0xda/0x130 [ 149.613404][ T3118] dump_stack+0x15/0x20 [ 149.617615][ T3118] dump_header+0x82/0x2d0 [ 149.621954][ T3118] oom_kill_process+0x33a/0x4c0 [ 149.626818][ T3118] out_of_memory+0x9ca/0xbf0 [ 149.631465][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 149.637568][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 149.643196][ T3118] try_charge_memcg+0x759/0xd20 [ 149.648070][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 149.653120][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 149.658188][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 149.664258][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 149.669811][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 149.675278][ T3118] swapin_readahead+0xe2/0x7a0 [ 149.680056][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 149.685358][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 149.690703][ T3118] do_swap_page+0x44c/0x1570 [ 149.695426][ T3118] ? exc_page_fault+0x3a6/0x6d0 [ 149.700304][ T3118] ? __rcu_read_lock+0x35/0x50 [ 149.705088][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 149.710554][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 149.715546][ T3118] ? mas_walk+0x204/0x320 [ 149.719889][ T3118] exc_page_fault+0x3ff/0x6d0 [ 149.724633][ T3118] asm_exc_page_fault+0x26/0x30 [ 149.729505][ T3118] RIP: 0033:0x7fc472cd80f5 [ 149.733924][ T3118] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 149.753599][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00010246 [ 149.759680][ T3118] RAX: 0000000000000000 RBX: 000000000000010f RCX: 00007fc472cd80f3 [ 149.767873][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.775919][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 149.783995][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 149.792091][ T3118] R13: 0000000000024703 R14: 000000000002438c R15: 000000000000000f [ 149.800208][ T3118] [ 149.803366][ T3118] memory: usage 307200kB, limit 307200kB, failcnt 9765 [ 149.810279][ T3118] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 149.818204][ T3118] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 149.825547][ T3118] Memory cgroup stats for /syz2: [ 149.825736][ T3118] cache 8192 [ 149.833853][ T3118] rss 0 [ 149.836632][ T3118] shmem 0 [ 149.839576][ T3118] mapped_file 0 [ 149.843026][ T3118] dirty 0 [ 149.845987][ T3118] writeback 4096 [ 149.849529][ T3118] workingset_refault_anon 1274 [ 149.854347][ T3118] workingset_refault_file 80 [ 149.858971][ T3118] swap 151552 [ 149.862302][ T3118] swapcached 4096 [ 149.865974][ T3118] pgpgin 3816 [ 149.869368][ T3118] pgpgout 3813 [ 149.872769][ T3118] pgfault 9118 [ 149.876170][ T3118] pgmajfault 510 [ 149.879701][ T3118] inactive_anon 0 [ 149.883321][ T3118] active_anon 0 [ 149.886830][ T3118] inactive_file 8192 [ 149.890756][ T3118] active_file 0 [ 149.894199][ T3118] unevictable 0 [ 149.897660][ T3118] hierarchical_memory_limit 314572800 [ 149.903011][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 149.909170][ T3118] total_cache 8192 [ 149.912880][ T3118] total_rss 0 [ 149.916170][ T3118] total_shmem 0 [ 149.919613][ T3118] total_mapped_file 0 [ 149.923620][ T3118] total_dirty 0 [ 149.927071][ T3118] total_writeback 4096 [ 149.931127][ T3118] total_workingset_refault_anon 1274 [ 149.936436][ T3118] total_workingset_refault_file 80 [ 149.941684][ T3118] total_swap 151552 [ 149.945521][ T3118] total_swapcached 4096 [ 149.949663][ T3118] total_pgpgin 3816 [ 149.953449][ T3118] total_pgpgout 3813 [ 149.957345][ T3118] total_pgfault 9118 [ 149.961305][ T3118] total_pgmajfault 510 [ 149.965354][ T3118] total_inactive_anon 0 [ 149.969510][ T3118] total_active_anon 0 [ 149.973476][ T3118] total_inactive_file 8192 [ 149.978013][ T3118] total_active_file 0 [ 149.981989][ T3118] total_unevictable 0 [ 149.985975][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5030,uid=0 [ 150.001221][ T3118] Memory cgroup out of memory: Killed process 5032 (syz-executor.2) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:51 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) 03:04:51 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:52 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:52 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:52 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:52 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:04:52 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:52 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) 03:04:53 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 152.199905][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 152.211082][ T3089] CPU: 0 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 152.221106][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 152.231343][ T3089] Call Trace: [ 152.234627][ T3089] [ 152.237558][ T3089] dump_stack_lvl+0xda/0x130 [ 152.242414][ T3089] dump_stack+0x15/0x20 [ 152.246573][ T3089] dump_header+0x82/0x2d0 [ 152.250911][ T3089] oom_kill_process+0x33a/0x4c0 [ 152.255757][ T3089] out_of_memory+0x9ca/0xbf0 [ 152.260355][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 152.266519][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 152.272077][ T3089] try_charge_memcg+0x759/0xd20 [ 152.276986][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 152.282012][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 152.287043][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 152.293126][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 152.298617][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 152.304199][ T3089] swapin_readahead+0xe2/0x7a0 [ 152.309130][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 152.314632][ T3089] ? delete_from_swap_cache+0xa9/0xd0 [ 152.320055][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 152.325352][ T3089] do_swap_page+0x44c/0x1570 [ 152.330107][ T3089] ? __rcu_read_lock+0x35/0x50 [ 152.334877][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 152.340362][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 152.345296][ T3089] ? mas_walk+0x204/0x320 [ 152.349659][ T3089] exc_page_fault+0x3ff/0x6d0 [ 152.354348][ T3089] asm_exc_page_fault+0x26/0x30 [ 152.359246][ T3089] RIP: 0033:0x7fca7be1fb60 [ 152.363663][ T3089] Code: 53 48 81 ec b8 06 00 00 89 74 24 0c be 01 00 00 00 89 54 24 08 ba 06 00 00 00 e8 4b 4f 05 00 89 c5 83 f8 ff 0f 84 68 01 00 00 <41> 8b 44 24 28 85 c0 0f 84 2e 01 00 00 48 8d 5c 24 20 45 31 f6 b9 [ 152.383315][ T3089] RSP: 002b:00007ffd8acea6a0 EFLAGS: 00010283 [ 152.389830][ T3089] RAX: 0000000000000000 RBX: 00007ffd8acea720 RCX: 00007fca7be74a7a [ 152.397926][ T3089] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.405910][ T3089] RBP: 0000000000000003 R08: 0000000000000408 R09: 00007ffd8aceaad7 [ 152.413882][ T3089] R10: 00007fca7bf72ae0 R11: 0000000000000202 R12: 00007fca7bf73140 [ 152.421859][ T3089] R13: 00007ffd8acea6bc R14: 0000000000000000 R15: 00007fca7bf73ec0 [ 152.429835][ T3089] [ 152.432966][ T3089] memory: usage 307200kB, limit 307200kB, failcnt 7600 [ 152.439872][ T3089] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0 [ 152.447837][ T3089] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 152.455111][ T3089] Memory cgroup stats for /syz3: [ 152.455281][ T3089] cache 12288 [ 152.463548][ T3089] rss 0 [ 152.466316][ T3089] shmem 0 [ 152.469237][ T3089] mapped_file 0 [ 152.472684][ T3089] dirty 0 [ 152.475744][ T3089] writeback 0 [ 152.479065][ T3089] workingset_refault_anon 1264 [ 152.483812][ T3089] workingset_refault_file 117 [ 152.488534][ T3089] swap 110592 [ 152.491894][ T3089] swapcached 40960 [ 152.495649][ T3089] pgpgin 4619 [ 152.498916][ T3089] pgpgout 4606 [ 152.502321][ T3089] pgfault 11558 [ 152.505792][ T3089] pgmajfault 512 [ 152.509336][ T3089] inactive_anon 40960 [ 152.513296][ T3089] active_anon 0 [ 152.516800][ T3089] inactive_file 12288 [ 152.520793][ T3089] active_file 0 [ 152.524308][ T3089] unevictable 0 [ 152.527772][ T3089] hierarchical_memory_limit 314572800 [ 152.533236][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 152.539402][ T3089] total_cache 12288 [ 152.543260][ T3089] total_rss 0 [ 152.546554][ T3089] total_shmem 0 [ 152.549994][ T3089] total_mapped_file 0 [ 152.553958][ T3089] total_dirty 0 [ 152.557456][ T3089] total_writeback 0 [ 152.561506][ T3089] total_workingset_refault_anon 1264 [ 152.566818][ T3089] total_workingset_refault_file 117 [ 152.572001][ T3089] total_swap 110592 [ 152.575831][ T3089] total_swapcached 40960 [ 152.580055][ T3089] total_pgpgin 4619 [ 152.583848][ T3089] total_pgpgout 4606 [ 152.587806][ T3089] total_pgfault 11558 [ 152.591778][ T3089] total_pgmajfault 512 [ 152.595910][ T3089] total_inactive_anon 40960 [ 152.600406][ T3089] total_active_anon 0 [ 152.604426][ T3089] total_inactive_file 12288 [ 152.608951][ T3089] total_active_file 0 [ 152.612922][ T3089] total_unevictable 0 [ 152.616910][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5063,uid=0 [ 152.632196][ T3089] Memory cgroup out of memory: Killed process 5064 (syz-executor.3) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:04:54 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:54 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:54 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:04:54 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:04:54 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 153.574469][ T5075] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 153.585828][ T5075] CPU: 0 PID: 5075 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 153.595827][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 153.605893][ T5075] Call Trace: [ 153.609165][ T5075] [ 153.612103][ T5075] dump_stack_lvl+0xda/0x130 [ 153.616731][ T5075] dump_stack+0x15/0x20 [ 153.620901][ T5075] dump_header+0x82/0x2d0 [ 153.625253][ T5075] oom_kill_process+0x33a/0x4c0 [ 153.630168][ T5075] out_of_memory+0x9ca/0xbf0 [ 153.634773][ T5075] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 153.640894][ T5075] mem_cgroup_out_of_memory+0x139/0x190 [ 153.646462][ T5075] try_charge_memcg+0x759/0xd20 [ 153.651404][ T5075] ? __swap_duplicate+0x29b/0x2b0 [ 153.656443][ T5075] ? radix_tree_lookup+0xf9/0x150 [ 153.661604][ T5075] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 153.667723][ T5075] __read_swap_cache_async+0x2b9/0x510 [ 153.673198][ T5075] swap_cluster_readahead+0x276/0x3f0 [ 153.678593][ T5075] swapin_readahead+0xe2/0x7a0 [ 153.683485][ T5075] ? __filemap_get_folio+0x41a/0x5a0 [ 153.688783][ T5075] ? swap_cache_get_folio+0x6e/0x200 [ 153.694144][ T5075] do_swap_page+0x44c/0x1570 [ 153.698843][ T5075] ? exc_page_fault+0x3a6/0x6d0 [ 153.703817][ T5075] ? __rcu_read_lock+0x35/0x50 [ 153.708616][ T5075] ? pte_offset_map_nolock+0x124/0x1d0 [ 153.714082][ T5075] handle_mm_fault+0x7f6/0x27b0 [ 153.718948][ T5075] ? mas_walk+0x204/0x320 [ 153.723285][ T5075] exc_page_fault+0x3ff/0x6d0 [ 153.727963][ T5075] asm_exc_page_fault+0x26/0x30 [ 153.732905][ T5075] RIP: 0033:0x7f9fdba229a5 [ 153.737391][ T5075] Code: 35 80 76 16 00 48 89 fb 48 89 74 24 10 48 89 54 24 18 eb 20 90 4c 89 ff e8 d8 08 ff ff 41 08 c5 0f 85 ff 01 00 00 41 83 c4 01 <44> 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c [ 153.757015][ T5075] RSP: 002b:00007ffd53fcf460 EFLAGS: 00010202 [ 153.763099][ T5075] RAX: 0000000081ac040b RBX: 00007f9fdbb96018 RCX: 000000000000000a [ 153.771230][ T5075] RDX: 0000000081ac040b RSI: 0000000080000000 RDI: 0000000000012c9b [ 153.779208][ T5075] RBP: 0000000081ac040b R08: 0000001b2ca20000 R09: 000000000000040b [ 153.787233][ T5075] R10: 0000000081ac040f R11: 0000000000006c00 R12: 000000000000000b [ 153.795244][ T5075] R13: 0000000000000001 R14: 00007f9fdbb8a000 R15: ffffffff81ac016c [ 153.803339][ T5075] ? _copy_from_user+0x5c/0xd0 [ 153.808220][ T5075] [ 153.811396][ T5075] memory: usage 307200kB, limit 307200kB, failcnt 9137 [ 153.818257][ T5075] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 153.826263][ T5075] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 153.833609][ T5075] Memory cgroup stats for /syz0: [ 153.833750][ T5075] cache 16384 [ 153.842020][ T5075] rss 8192 [ 153.845043][ T5075] shmem 0 [ 153.848044][ T5075] mapped_file 0 [ 153.851502][ T5075] dirty 0 [ 153.854428][ T5075] writeback 4096 [ 153.857985][ T5075] workingset_refault_anon 1315 [ 153.862732][ T5075] workingset_refault_file 62 [ 153.867326][ T5075] swap 106496 [ 153.870605][ T5075] swapcached 61440 [ 153.874313][ T5075] pgpgin 4560 [ 153.877624][ T5075] pgpgout 4541 [ 153.880996][ T5075] pgfault 11627 [ 153.884456][ T5075] pgmajfault 533 [ 153.888048][ T5075] inactive_anon 0 [ 153.891708][ T5075] active_anon 0 [ 153.895163][ T5075] inactive_file 12288 [ 153.899174][ T5075] active_file 4096 [ 153.902895][ T5075] unevictable 0 [ 153.906415][ T5075] hierarchical_memory_limit 314572800 [ 153.911856][ T5075] hierarchical_memsw_limit 9223372036854771712 [ 153.918032][ T5075] total_cache 16384 [ 153.921839][ T5075] total_rss 8192 03:04:55 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 153.925445][ T5075] total_shmem 0 [ 153.928987][ T5075] total_mapped_file 0 [ 153.932973][ T5075] total_dirty 0 [ 153.936437][ T5075] total_writeback 4096 [ 153.940494][ T5075] total_workingset_refault_anon 1315 [ 153.945945][ T5075] total_workingset_refault_file 62 [ 153.951046][ T5075] total_swap 106496 [ 153.954868][ T5075] total_swapcached 61440 [ 153.959143][ T5075] total_pgpgin 4560 [ 153.962944][ T5075] total_pgpgout 4541 [ 153.966844][ T5075] total_pgfault 11627 [ 153.970858][ T5075] total_pgmajfault 533 [ 153.974916][ T5075] total_inactive_anon 0 [ 153.979067][ T5075] total_active_anon 0 [ 153.983033][ T5075] total_inactive_file 12288 [ 153.987566][ T5075] total_active_file 4096 [ 153.991834][ T5075] total_unevictable 0 [ 153.995820][ T5075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5075,uid=0 [ 154.011000][ T5075] Memory cgroup out of memory: Killed process 5075 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:55 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:55 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) [ 154.564436][ T5091] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 154.575867][ T5091] CPU: 0 PID: 5091 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 154.585955][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 154.596156][ T5091] Call Trace: [ 154.599474][ T5091] [ 154.602403][ T5091] dump_stack_lvl+0xda/0x130 [ 154.606992][ T5091] dump_stack+0x15/0x20 [ 154.611140][ T5091] dump_header+0x82/0x2d0 [ 154.615525][ T5091] oom_kill_process+0x33a/0x4c0 [ 154.620386][ T5091] out_of_memory+0x9ca/0xbf0 [ 154.624999][ T5091] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 154.631280][ T5091] mem_cgroup_out_of_memory+0x139/0x190 [ 154.636879][ T5091] try_charge_memcg+0x759/0xd20 [ 154.641737][ T5091] ? __swap_duplicate+0x29b/0x2b0 [ 154.646792][ T5091] ? radix_tree_lookup+0xf9/0x150 [ 154.651841][ T5091] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 154.657949][ T5091] __read_swap_cache_async+0x2b9/0x510 [ 154.663461][ T5091] swap_cluster_readahead+0x276/0x3f0 [ 154.668842][ T5091] swapin_readahead+0xe2/0x7a0 [ 154.673650][ T5091] ? __filemap_get_folio+0x41a/0x5a0 [ 154.679025][ T5091] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 154.684576][ T5091] ? swap_cache_get_folio+0x6e/0x200 [ 154.689941][ T5091] do_swap_page+0x44c/0x1570 [ 154.694562][ T5091] ? __rcu_read_lock+0x35/0x50 [ 154.699329][ T5091] ? pte_offset_map_nolock+0x124/0x1d0 [ 154.704874][ T5091] handle_mm_fault+0x7f6/0x27b0 [ 154.709730][ T5091] ? mas_walk+0x204/0x320 [ 154.714123][ T5091] exc_page_fault+0x3ff/0x6d0 [ 154.718798][ T5091] asm_exc_page_fault+0x26/0x30 [ 154.723646][ T5091] RIP: 0033:0x7fca7be2cd14 [ 154.728123][ T5091] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 154.747812][ T5091] RSP: 002b:00007ffd8aceab60 EFLAGS: 00010202 [ 154.754010][ T5091] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 0000000000000000 [ 154.761967][ T5091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555693e788 [ 154.770177][ T5091] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 154.778135][ T5091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000025ce7 [ 154.786264][ T5091] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 00000000000259a6 [ 154.794227][ T5091] [ 154.797270][ T5091] memory: usage 307188kB, limit 307200kB, failcnt 8574 [ 154.804200][ T5091] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 03:04:56 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:04:56 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:04:56 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 154.812345][ T5091] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 154.819643][ T5091] Memory cgroup stats for /syz1: [ 154.819853][ T5091] cache 12288 [ 154.828082][ T5091] rss 16384 [ 154.831260][ T5091] shmem 0 [ 154.834196][ T5091] mapped_file 0 [ 154.837686][ T5091] dirty 0 [ 154.840680][ T5091] writeback 0 [ 154.844058][ T5091] workingset_refault_anon 1131 [ 154.848840][ T5091] workingset_refault_file 84 [ 154.853427][ T5091] swap 114688 [ 154.856728][ T5091] swapcached 28672 [ 154.860480][ T5091] pgpgin 4538 [ 154.863757][ T5091] pgpgout 4528 [ 154.867174][ T5091] pgfault 11424 [ 154.871063][ T5091] pgmajfault 504 [ 154.874614][ T5091] inactive_anon 28672 [ 154.878681][ T5091] active_anon 0 [ 154.882139][ T5091] inactive_file 0 [ 154.885920][ T5091] active_file 12288 [ 154.890000][ T5091] unevictable 0 [ 154.893444][ T5091] hierarchical_memory_limit 314572800 [ 154.898830][ T5091] hierarchical_memsw_limit 9223372036854771712 [ 154.904966][ T5091] total_cache 12288 [ 154.908814][ T5091] total_rss 16384 [ 154.912516][ T5091] total_shmem 0 [ 154.915978][ T5091] total_mapped_file 0 [ 154.919940][ T5091] total_dirty 0 [ 154.923399][ T5091] total_writeback 0 [ 154.927211][ T5091] total_workingset_refault_anon 1131 [ 154.932549][ T5091] total_workingset_refault_file 84 [ 154.937677][ T5091] total_swap 114688 [ 154.941476][ T5091] total_swapcached 28672 [ 154.945715][ T5091] total_pgpgin 4538 [ 154.949537][ T5091] total_pgpgout 4528 [ 154.953417][ T5091] total_pgfault 11424 [ 154.957435][ T5091] total_pgmajfault 504 [ 154.961548][ T5091] total_inactive_anon 28672 [ 154.966066][ T5091] total_active_anon 0 [ 154.970035][ T5091] total_inactive_file 0 [ 154.974181][ T5091] total_active_file 12288 [ 154.978521][ T5091] total_unevictable 0 [ 154.982573][ T5091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5091,uid=0 [ 154.997765][ T5091] Memory cgroup out of memory: Killed process 5091 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:56 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:57 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:57 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) 03:04:57 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) [ 156.217385][ T5109] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 156.228756][ T5109] CPU: 0 PID: 5109 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 156.238781][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 156.248913][ T5109] Call Trace: [ 156.252206][ T5109] [ 156.255133][ T5109] dump_stack_lvl+0xda/0x130 [ 156.259760][ T5109] dump_stack+0x15/0x20 [ 156.264068][ T5109] dump_header+0x82/0x2d0 [ 156.268401][ T5109] oom_kill_process+0x33a/0x4c0 [ 156.273356][ T5109] out_of_memory+0x9ca/0xbf0 [ 156.278035][ T5109] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 156.284184][ T5109] mem_cgroup_out_of_memory+0x139/0x190 [ 156.289794][ T5109] try_charge_memcg+0x759/0xd20 [ 156.294708][ T5109] ? __swap_duplicate+0x29b/0x2b0 [ 156.299734][ T5109] ? radix_tree_lookup+0xf9/0x150 [ 156.304770][ T5109] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 156.310990][ T5109] __read_swap_cache_async+0x2b9/0x510 [ 156.316603][ T5109] swap_cluster_readahead+0x276/0x3f0 [ 156.321978][ T5109] swapin_readahead+0xe2/0x7a0 [ 156.326749][ T5109] ? __filemap_get_folio+0x41a/0x5a0 [ 156.332129][ T5109] ? swap_cache_get_folio+0x6e/0x200 [ 156.337488][ T5109] do_swap_page+0x44c/0x1570 [ 156.342134][ T5109] ? should_fail+0xb/0x10 [ 156.346512][ T5109] ? get_futex_key+0x4b4/0x700 [ 156.351289][ T5109] ? __rcu_read_lock+0x35/0x50 [ 156.356069][ T5109] ? pte_offset_map_nolock+0x124/0x1d0 [ 156.361546][ T5109] handle_mm_fault+0x7f6/0x27b0 [ 156.366504][ T5109] exc_page_fault+0x2f7/0x6d0 [ 156.371226][ T5109] asm_exc_page_fault+0x26/0x30 [ 156.376098][ T5109] RIP: 0010:__get_user_8+0x11/0x20 [ 156.381227][ T5109] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 156.400845][ T5109] RSP: 0018:ffffc900015f7e38 EFLAGS: 00050202 [ 156.406924][ T5109] RAX: 000055555693eda8 RBX: ffffc900015f7e40 RCX: ffffffff81448b63 [ 156.414945][ T5109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811cd6ba90 [ 156.422917][ T5109] RBP: ffffc900015f7f00 R08: 000188811cd6ba97 R09: 0000000000000000 [ 156.430919][ T5109] R10: 0001ffffffffffff R11: 0000000000007c67 R12: ffff88811cd6b0c0 [ 156.439018][ T5109] R13: ffff88811cd6ba90 R14: ffffc900015f7f58 R15: ffffc900015f7fd8 [ 156.447033][ T5109] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 156.453018][ T5109] __rseq_handle_notify_resume+0xc7/0xbf0 [ 156.458735][ T5109] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 156.464802][ T5109] ? __se_sys_clock_nanosleep+0x202/0x230 [ 156.470527][ T5109] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 156.476470][ T5109] syscall_exit_to_user_mode+0x8e/0x130 [ 156.482038][ T5109] do_syscall_64+0x65/0x120 [ 156.486626][ T5109] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 156.492613][ T5109] RIP: 0033:0x7fca7be9e135 [ 156.497049][ T5109] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 156.516667][ T5109] RSP: 002b:00007ffd8aceaaf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 156.525077][ T5109] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 00007fca7be9e135 [ 156.533052][ T5109] RDX: 00007ffd8aceab30 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.541120][ T5109] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 156.549097][ T5109] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000261d9 [ 156.557070][ T5109] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 0000000000025e98 [ 156.565043][ T5109] [ 156.568239][ T5109] memory: usage 8428kB, limit 307200kB, failcnt 8756 [ 156.574917][ T5109] memory+swap: usage 8560kB, limit 9007199254740988kB, failcnt 0 [ 156.582709][ T5109] kmem: usage 8412kB, limit 9007199254740988kB, failcnt 0 03:04:58 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 156.590012][ T5109] Memory cgroup stats for /syz1: [ 156.801814][ T5109] cache 8192 [ 156.810016][ T5109] rss 0 [ 156.812776][ T5109] shmem 0 [ 156.815866][ T5109] mapped_file 0 [ 156.819326][ T5109] dirty 0 [ 156.822250][ T5109] writeback 0 [ 156.825547][ T5109] workingset_refault_anon 1160 [ 156.830359][ T5109] workingset_refault_file 84 [ 156.834949][ T5109] swap 135168 [ 156.838303][ T5109] swapcached 8192 [ 156.841924][ T5109] pgpgin 4591 [ 156.845205][ T5109] pgpgout 4587 [ 156.848613][ T5109] pgfault 11570 [ 156.852068][ T5109] pgmajfault 514 [ 156.855697][ T5109] inactive_anon 8192 [ 156.859592][ T5109] active_anon 0 [ 156.863047][ T5109] inactive_file 8192 [ 156.866978][ T5109] active_file 0 [ 156.870432][ T5109] unevictable 0 [ 156.873890][ T5109] hierarchical_memory_limit 314572800 [ 156.879348][ T5109] hierarchical_memsw_limit 9223372036854771712 [ 156.885507][ T5109] total_cache 8192 [ 156.889361][ T5109] total_rss 0 [ 156.892640][ T5109] total_shmem 0 [ 156.896101][ T5109] total_mapped_file 0 [ 156.900241][ T5109] total_dirty 0 [ 156.903711][ T5109] total_writeback 0 [ 156.907522][ T5109] total_workingset_refault_anon 1160 [ 156.912792][ T5109] total_workingset_refault_file 84 [ 156.917962][ T5109] total_swap 135168 [ 156.921757][ T5109] total_swapcached 8192 [ 156.925928][ T5109] total_pgpgin 4591 [ 156.929727][ T5109] total_pgpgout 4587 [ 156.933607][ T5109] total_pgfault 11570 [ 156.937591][ T5109] total_pgmajfault 514 [ 156.941641][ T5109] total_inactive_anon 8192 [ 156.946066][ T5109] total_active_anon 0 03:04:58 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 156.950036][ T5109] total_inactive_file 8192 [ 156.954429][ T5109] total_active_file 0 [ 156.958560][ T5109] total_unevictable 0 [ 156.962530][ T5109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5109,uid=0 [ 156.977788][ T5109] Memory cgroup out of memory: Killed process 5109 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:04:58 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:04:58 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:04:58 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:04:59 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) [ 157.709836][ T5121] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 157.721197][ T5121] CPU: 1 PID: 5121 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 157.731314][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 157.741431][ T5121] Call Trace: [ 157.744715][ T5121] [ 157.747655][ T5121] dump_stack_lvl+0xda/0x130 [ 157.752239][ T5121] dump_stack+0x15/0x20 [ 157.756410][ T5121] dump_header+0x82/0x2d0 [ 157.760765][ T5121] oom_kill_process+0x33a/0x4c0 [ 157.765628][ T5121] out_of_memory+0x9ca/0xbf0 [ 157.770225][ T5121] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 157.776403][ T5121] mem_cgroup_out_of_memory+0x139/0x190 [ 157.782047][ T5121] try_charge_memcg+0x759/0xd20 [ 157.787012][ T5121] ? __swap_duplicate+0x29b/0x2b0 [ 157.792233][ T5121] ? radix_tree_lookup+0xf9/0x150 [ 157.797288][ T5121] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 157.803435][ T5121] __read_swap_cache_async+0x2b9/0x510 [ 157.808969][ T5121] swap_cluster_readahead+0x276/0x3f0 [ 157.814350][ T5121] swapin_readahead+0xe2/0x7a0 [ 157.819168][ T5121] ? __filemap_get_folio+0x41a/0x5a0 [ 157.824463][ T5121] ? save_fpregs_to_fpstate+0xfe/0x150 [ 157.830058][ T5121] ? swap_cache_get_folio+0x6e/0x200 [ 157.835360][ T5121] do_swap_page+0x44c/0x1570 [ 157.839999][ T5121] ? __schedule+0x5d8/0x920 [ 157.844515][ T5121] ? xas_load+0x3ae/0x3c0 [ 157.848885][ T5121] ? __rcu_read_lock+0x35/0x50 [ 157.853666][ T5121] ? pte_offset_map_nolock+0x124/0x1d0 [ 157.859182][ T5121] handle_mm_fault+0x7f6/0x27b0 [ 157.864053][ T5121] exc_page_fault+0x2f7/0x6d0 [ 157.869475][ T5121] asm_exc_page_fault+0x26/0x30 [ 157.874344][ T5121] RIP: 0010:__get_user_8+0x11/0x20 [ 157.879480][ T5121] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 157.899091][ T5121] RSP: 0018:ffffc90000f73e58 EFLAGS: 00050202 [ 157.905343][ T5121] RAX: 0000555556f78da8 RBX: ffffc90000f73e60 RCX: ffffffff81448b63 [ 157.913358][ T5121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811ccd89d0 [ 157.921353][ T5121] RBP: ffffc90000f73f20 R08: 000188811ccd89d7 R09: 0000000000000000 [ 157.929385][ T5121] R10: 0001ffffffffffff R11: 0001c90000f73ee8 R12: ffff88811ccd8000 [ 157.937365][ T5121] R13: ffff88811ccd89d0 R14: ffffc90000f73f58 R15: ffffc90000f73fd8 [ 157.945372][ T5121] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 157.951343][ T5121] __rseq_handle_notify_resume+0xc7/0xbf0 [ 157.957129][ T5121] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 157.963172][ T5121] ? task_mm_cid_work+0x8a/0x1b0 [ 157.968116][ T5121] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 157.974020][ T5121] irqentry_exit_to_user_mode+0xcf/0x130 [ 157.979697][ T5121] irqentry_exit+0x12/0x40 [ 157.984200][ T5121] asm_exc_page_fault+0x26/0x30 [ 157.989070][ T5121] RIP: 0033:0x7ff768b3ebe0 [ 157.993491][ T5121] Code: d6 7f 02 00 8b 04 24 e9 72 ff ff ff 66 0f 1f 44 00 00 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d4 e8 10 32 00 00 <80> 3d 11 33 10 00 00 74 17 b8 03 00 00 00 0f 05 48 3d 00 f0 ff ff [ 158.013155][ T5121] RSP: 002b:00007fffd24738c8 EFLAGS: 00010202 [ 158.019306][ T5121] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 000000000003fffe [ 158.027322][ T5121] RDX: 0000001b2d220000 RSI: 0000001b2d22009c RDI: 0000000000000003 [ 158.035368][ T5121] RBP: 00007ff768c70980 R08: 0000001b2d620000 R09: 00000000000000bf [ 158.043362][ T5121] R10: 000000008156641b R11: 0000000000006eb0 R12: 00000000000267da [ 158.051348][ T5121] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 0000000000026499 [ 158.059404][ T5121] [ 158.062533][ T5121] memory: usage 307200kB, limit 307200kB, failcnt 9748 [ 158.069516][ T5121] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 158.077520][ T5121] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 158.084821][ T5121] Memory cgroup stats for /syz4: [ 158.084999][ T5121] cache 4096 [ 158.093299][ T5121] rss 0 [ 158.096115][ T5121] shmem 0 [ 158.099041][ T5121] mapped_file 0 [ 158.102784][ T5121] dirty 0 [ 158.105740][ T5121] writeback 8192 [ 158.109351][ T5121] workingset_refault_anon 1319 [ 158.114122][ T5121] workingset_refault_file 70 [ 158.118730][ T5121] swap 135168 [ 158.122083][ T5121] swapcached 12288 [ 158.125821][ T5121] pgpgin 3650 [ 158.129099][ T5121] pgpgout 3646 [ 158.132556][ T5121] pgfault 9369 [ 158.135930][ T5121] pgmajfault 517 [ 158.139465][ T5121] inactive_anon 12288 [ 158.143433][ T5121] active_anon 0 [ 158.146899][ T5121] inactive_file 0 [ 158.150605][ T5121] active_file 4096 [ 158.154333][ T5121] unevictable 0 [ 158.157804][ T5121] hierarchical_memory_limit 314572800 [ 158.163164][ T5121] hierarchical_memsw_limit 9223372036854771712 [ 158.169335][ T5121] total_cache 4096 [ 158.173132][ T5121] total_rss 0 [ 158.176500][ T5121] total_shmem 0 [ 158.179944][ T5121] total_mapped_file 0 [ 158.183961][ T5121] total_dirty 0 [ 158.187424][ T5121] total_writeback 8192 [ 158.191479][ T5121] total_workingset_refault_anon 1319 [ 158.196769][ T5121] total_workingset_refault_file 70 [ 158.201870][ T5121] total_swap 135168 [ 158.205747][ T5121] total_swapcached 12288 [ 158.209973][ T5121] total_pgpgin 3650 [ 158.213767][ T5121] total_pgpgout 3646 [ 158.217664][ T5121] total_pgfault 9369 [ 158.221538][ T5121] total_pgmajfault 517 [ 158.225632][ T5121] total_inactive_anon 12288 [ 158.230123][ T5121] total_active_anon 0 [ 158.234179][ T5121] total_inactive_file 0 [ 158.238373][ T5121] total_active_file 4096 [ 158.242617][ T5121] total_unevictable 0 [ 158.246625][ T5121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5121,uid=0 03:04:59 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 158.261895][ T5121] Memory cgroup out of memory: Killed process 5121 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:05:00 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r4, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r8, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r9, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:00 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:00 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:00 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:00 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) 03:05:00 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:01 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:01 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:01 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) [ 160.423420][ T5157] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 160.435220][ T5157] CPU: 0 PID: 5157 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 160.445257][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 160.455313][ T5157] Call Trace: [ 160.458599][ T5157] [ 160.461524][ T5157] dump_stack_lvl+0xda/0x130 [ 160.466128][ T5157] dump_stack+0x15/0x20 [ 160.470306][ T5157] dump_header+0x82/0x2d0 [ 160.474657][ T5157] oom_kill_process+0x33a/0x4c0 [ 160.479512][ T5157] out_of_memory+0x9ca/0xbf0 [ 160.484109][ T5157] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 160.490232][ T5157] mem_cgroup_out_of_memory+0x139/0x190 [ 160.495902][ T5157] try_charge_memcg+0x759/0xd20 [ 160.500768][ T5157] ? __swap_duplicate+0x29b/0x2b0 [ 160.505800][ T5157] ? radix_tree_lookup+0xf9/0x150 [ 160.511047][ T5157] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 160.517279][ T5157] __read_swap_cache_async+0x2b9/0x510 [ 160.522786][ T5157] swap_cluster_readahead+0x276/0x3f0 [ 160.528214][ T5157] swapin_readahead+0xe2/0x7a0 [ 160.533095][ T5157] ? __filemap_get_folio+0x41a/0x5a0 [ 160.538424][ T5157] ? swap_cache_get_folio+0x6e/0x200 [ 160.543725][ T5157] do_swap_page+0x44c/0x1570 [ 160.548339][ T5157] ? __rcu_read_lock+0x35/0x50 [ 160.553147][ T5157] ? pte_offset_map_nolock+0x124/0x1d0 [ 160.558616][ T5157] handle_mm_fault+0x7f6/0x27b0 [ 160.563554][ T5157] ? mas_walk+0x204/0x320 [ 160.567939][ T5157] exc_page_fault+0x3ff/0x6d0 [ 160.572640][ T5157] asm_exc_page_fault+0x26/0x30 [ 160.577504][ T5157] RIP: 0033:0x7fd7c75ac9cc [ 160.581977][ T5157] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d e5 f6 16 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 160.601612][ T5157] RSP: 002b:00007ffc502d0ee0 EFLAGS: 00010286 [ 160.607726][ T5157] RAX: 0000000000000000 RBX: 00007fd7c7720018 RCX: 0000000000000000 [ 160.615706][ T5157] RDX: ffffffff81333600 RSI: 00007fd7c6f74008 RDI: 00007fd7c7720018 [ 160.623742][ T5157] RBP: 0000000081333000 R08: 0000001b2cb20000 R09: 0000000000000000 [ 160.631725][ T5157] R10: 0000000000000001 R11: 00000000000070cc R12: 0000000000000000 [ 160.639706][ T5157] R13: 0000000000000001 R14: 00007fd7c7714000 R15: ffffffff81333600 [ 160.647773][ T5157] ? __x64_sys_bpf+0x10/0x50 [ 160.652442][ T5157] ? __x64_sys_bpf+0x10/0x50 [ 160.657052][ T5157] [ 160.660191][ T5157] memory: usage 307200kB, limit 307200kB, failcnt 9859 [ 160.667121][ T5157] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 160.675021][ T5157] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 160.682503][ T5157] Memory cgroup stats for /syz5: [ 160.682691][ T5157] cache 12288 [ 160.691020][ T5157] rss 8192 [ 160.694080][ T5157] shmem 0 [ 160.697049][ T5157] mapped_file 0 [ 160.700572][ T5157] dirty 0 [ 160.703563][ T5157] writeback 8192 [ 160.707143][ T5157] workingset_refault_anon 1370 [ 160.711942][ T5157] workingset_refault_file 67 [ 160.716542][ T5157] swap 143360 [ 160.719885][ T5157] swapcached 8192 [ 160.723553][ T5157] pgpgin 3547 [ 160.726897][ T5157] pgpgout 3542 [ 160.730265][ T5157] pgfault 9204 [ 160.733627][ T5157] pgmajfault 547 [ 160.737236][ T5157] inactive_anon 0 [ 160.740857][ T5157] active_anon 0 [ 160.744305][ T5157] inactive_file 8192 [ 160.748236][ T5157] active_file 4096 [ 160.751961][ T5157] unevictable 0 [ 160.755466][ T5157] hierarchical_memory_limit 314572800 [ 160.760822][ T5157] hierarchical_memsw_limit 9223372036854771712 [ 160.766997][ T5157] total_cache 12288 [ 160.770789][ T5157] total_rss 8192 03:05:02 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:02 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 160.774321][ T5157] total_shmem 0 [ 160.777819][ T5157] total_mapped_file 0 [ 160.781846][ T5157] total_dirty 0 [ 160.785312][ T5157] total_writeback 8192 [ 160.789446][ T5157] total_workingset_refault_anon 1370 [ 160.794730][ T5157] total_workingset_refault_file 67 [ 160.799848][ T5157] total_swap 143360 [ 160.803643][ T5157] total_swapcached 8192 [ 160.807816][ T5157] total_pgpgin 3547 [ 160.811607][ T5157] total_pgpgout 3542 [ 160.815514][ T5157] total_pgfault 9204 [ 160.819400][ T5157] total_pgmajfault 547 [ 160.823462][ T5157] total_inactive_anon 0 [ 160.827718][ T5157] total_active_anon 0 [ 160.831702][ T5157] total_inactive_file 8192 [ 160.836153][ T5157] total_active_file 4096 [ 160.840389][ T5157] total_unevictable 0 [ 160.844482][ T5157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5157,uid=0 03:05:02 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) [ 160.859719][ T5157] Memory cgroup out of memory: Killed process 5157 (syz-executor.5) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 161.198324][ T5166] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 161.209717][ T5166] CPU: 0 PID: 5166 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 161.219705][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 161.230006][ T5166] Call Trace: [ 161.233285][ T5166] [ 161.236252][ T5166] dump_stack_lvl+0xda/0x130 [ 161.240957][ T5166] dump_stack+0x15/0x20 [ 161.245133][ T5166] dump_header+0x82/0x2d0 [ 161.249619][ T5166] oom_kill_process+0x33a/0x4c0 [ 161.254478][ T5166] out_of_memory+0x9ca/0xbf0 [ 161.259163][ T5166] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 161.265408][ T5166] mem_cgroup_out_of_memory+0x139/0x190 [ 161.270976][ T5166] try_charge_memcg+0x759/0xd20 [ 161.275875][ T5166] ? __swap_duplicate+0x29b/0x2b0 [ 161.280907][ T5166] ? radix_tree_lookup+0xf9/0x150 [ 161.285934][ T5166] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 161.292048][ T5166] __read_swap_cache_async+0x2b9/0x510 [ 161.297544][ T5166] swap_cluster_readahead+0x276/0x3f0 [ 161.302965][ T5166] swapin_readahead+0xe2/0x7a0 [ 161.307784][ T5166] ? __filemap_get_folio+0x41a/0x5a0 [ 161.313068][ T5166] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 161.318649][ T5166] ? swap_cache_get_folio+0x6e/0x200 [ 161.324019][ T5166] do_swap_page+0x44c/0x1570 [ 161.328714][ T5166] ? __rcu_read_lock+0x35/0x50 [ 161.333499][ T5166] ? pte_offset_map_nolock+0x124/0x1d0 [ 161.338983][ T5166] handle_mm_fault+0x7f6/0x27b0 [ 161.343901][ T5166] ? mas_walk+0x204/0x320 [ 161.348275][ T5166] exc_page_fault+0x3ff/0x6d0 [ 161.353057][ T5166] asm_exc_page_fault+0x26/0x30 [ 161.357918][ T5166] RIP: 0033:0x7fc472c66d14 [ 161.362428][ T5166] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 161.382140][ T5166] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 161.388241][ T5166] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 [ 161.396206][ T5166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 161.404258][ T5166] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 161.412243][ T5166] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000275f1 [ 161.420259][ T5166] R13: ffffffffffffffff R14: 00007fc472830000 R15: 00000000000272b0 [ 161.428277][ T5166] [ 161.431409][ T5166] memory: usage 307200kB, limit 307200kB, failcnt 10633 [ 161.438381][ T5166] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 161.446277][ T5166] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 161.453657][ T5166] Memory cgroup stats for /syz2: [ 161.453845][ T5166] cache 12288 [ 161.462059][ T5166] rss 8192 [ 161.465073][ T5166] shmem 0 [ 161.468008][ T5166] mapped_file 0 [ 161.471499][ T5166] dirty 0 [ 161.474427][ T5166] writeback 16384 [ 161.478059][ T5166] workingset_refault_anon 1424 [ 161.482898][ T5166] workingset_refault_file 88 [ 161.487500][ T5166] swap 196608 [ 161.490772][ T5166] swapcached 16384 [ 161.494650][ T5166] pgpgin 4177 [ 161.497946][ T5166] pgpgout 4170 [ 161.501310][ T5166] pgfault 10065 [ 161.504755][ T5166] pgmajfault 561 [ 161.508297][ T5166] inactive_anon 0 [ 161.511925][ T5166] active_anon 0 [ 161.515367][ T5166] inactive_file 0 [ 161.519016][ T5166] active_file 12288 [ 161.522880][ T5166] unevictable 0 [ 161.526374][ T5166] hierarchical_memory_limit 314572800 [ 161.531797][ T5166] hierarchical_memsw_limit 9223372036854771712 [ 161.537968][ T5166] total_cache 12288 [ 161.541772][ T5166] total_rss 8192 [ 161.545356][ T5166] total_shmem 0 [ 161.548821][ T5166] total_mapped_file 0 [ 161.552814][ T5166] total_dirty 0 [ 161.556296][ T5166] total_writeback 16384 [ 161.560443][ T5166] total_workingset_refault_anon 1424 [ 161.565743][ T5166] total_workingset_refault_file 88 [ 161.570856][ T5166] total_swap 196608 [ 161.574656][ T5166] total_swapcached 16384 [ 161.578984][ T5166] total_pgpgin 4177 [ 161.582824][ T5166] total_pgpgout 4170 [ 161.586744][ T5166] total_pgfault 10065 [ 161.590725][ T5166] total_pgmajfault 561 [ 161.594807][ T5166] total_inactive_anon 0 [ 161.599034][ T5166] total_active_anon 0 [ 161.603015][ T5166] total_inactive_file 0 [ 161.607198][ T5166] total_active_file 12288 [ 161.611525][ T5166] total_unevictable 0 [ 161.615511][ T5166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5166,uid=0 [ 161.630933][ T5166] Memory cgroup out of memory: Killed process 5166 (syz-executor.2) total-vm:50932kB, anon-rss:380kB, file-rss:13056kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 03:05:03 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:03 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:03 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 162.321397][ T3089] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 162.332502][ T3089] CPU: 0 PID: 3089 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 162.342648][ T3089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 162.352729][ T3089] Call Trace: [ 162.356061][ T3089] [ 162.359055][ T3089] dump_stack_lvl+0xda/0x130 [ 162.363664][ T3089] dump_stack+0x15/0x20 [ 162.367821][ T3089] dump_header+0x82/0x2d0 [ 162.372188][ T3089] oom_kill_process+0x33a/0x4c0 [ 162.377064][ T3089] out_of_memory+0x9ca/0xbf0 [ 162.381662][ T3089] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 162.387786][ T3089] mem_cgroup_out_of_memory+0x139/0x190 [ 162.393335][ T3089] try_charge_memcg+0x759/0xd20 [ 162.398265][ T3089] ? __swap_duplicate+0x29b/0x2b0 [ 162.403288][ T3089] ? radix_tree_lookup+0xf9/0x150 [ 162.408329][ T3089] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 162.414445][ T3089] __read_swap_cache_async+0x2b9/0x510 [ 162.420043][ T3089] swap_cluster_readahead+0x276/0x3f0 [ 162.425415][ T3089] swapin_readahead+0xe2/0x7a0 [ 162.430191][ T3089] ? __filemap_get_folio+0x41a/0x5a0 [ 162.435471][ T3089] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 162.441142][ T3089] ? swap_cache_get_folio+0x6e/0x200 [ 162.446500][ T3089] do_swap_page+0x44c/0x1570 [ 162.451170][ T3089] ? __rcu_read_lock+0x35/0x50 [ 162.455948][ T3089] ? pte_offset_map_nolock+0x124/0x1d0 [ 162.461462][ T3089] handle_mm_fault+0x7f6/0x27b0 [ 162.466385][ T3089] exc_page_fault+0x2f7/0x6d0 [ 162.471222][ T3089] asm_exc_page_fault+0x26/0x30 [ 162.476091][ T3089] RIP: 0010:__get_user_8+0x11/0x20 [ 162.481248][ T3089] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 162.500966][ T3089] RSP: 0018:ffffc90000ecbe38 EFLAGS: 00050202 [ 162.507039][ T3089] RAX: 000055555693eda8 RBX: ffffc90000ecbe40 RCX: ffffffff81448b63 [ 162.515017][ T3089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d689d0 [ 162.523045][ T3089] RBP: ffffc90000ecbf00 R08: 0001888103d689d7 R09: 0000000000000000 [ 162.531009][ T3089] R10: 0001ffffffffffff R11: 000000000000931f R12: ffff888103d68000 [ 162.538994][ T3089] R13: ffff888103d689d0 R14: ffffc90000ecbf58 R15: ffffc90000ecbfd8 [ 162.546993][ T3089] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 162.553211][ T3089] __rseq_handle_notify_resume+0xc7/0xbf0 [ 162.558950][ T3089] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 162.566851][ T3089] ? __se_sys_clock_nanosleep+0x202/0x230 [ 162.572580][ T3089] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 162.578550][ T3089] syscall_exit_to_user_mode+0x8e/0x130 [ 162.584100][ T3089] do_syscall_64+0x65/0x120 [ 162.588631][ T3089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 162.594644][ T3089] RIP: 0033:0x7fca7be9e0f3 [ 162.599496][ T3089] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 162.619191][ T3089] RSP: 002b:00007ffd8acead48 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 162.627693][ T3089] RAX: 0000000000000000 RBX: 000000000000017d RCX: 00007fca7be9e0f3 [ 162.635661][ T3089] RDX: 00007ffd8acead60 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.643905][ T3089] RBP: 00007ffd8aceadec R08: 0000000000000010 R09: 00007ffd8ad6b0b0 [ 162.651920][ T3089] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 162.659910][ T3089] R13: 000000000002777f R14: 000000000002739b R15: 000000000000000f [ 162.667893][ T3089] 03:05:04 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) [ 162.671012][ T3089] memory: usage 8368kB, limit 307200kB, failcnt 9083 [ 162.677718][ T3089] memory+swap: usage 8508kB, limit 9007199254740988kB, failcnt 0 [ 162.685542][ T3089] kmem: usage 8360kB, limit 9007199254740988kB, failcnt 0 [ 162.692688][ T3089] Memory cgroup stats for /syz1: [ 162.705973][ T3089] cache 8192 [ 162.714212][ T3089] rss 0 [ 162.716995][ T3089] shmem 0 [ 162.719954][ T3089] mapped_file 0 03:05:04 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) [ 162.723424][ T3089] dirty 0 [ 162.726418][ T3089] writeback 0 [ 162.729703][ T3089] workingset_refault_anon 1209 [ 162.734464][ T3089] workingset_refault_file 87 [ 162.739068][ T3089] swap 143360 [ 162.742356][ T3089] swapcached 0 [ 162.745770][ T3089] pgpgin 4712 [ 162.749052][ T3089] pgpgout 4710 [ 162.752425][ T3089] pgfault 11920 [ 162.755996][ T3089] pgmajfault 538 [ 162.759540][ T3089] inactive_anon 0 [ 162.763247][ T3089] active_anon 0 [ 162.766843][ T3089] inactive_file 8192 [ 162.770748][ T3089] active_file 0 [ 162.774197][ T3089] unevictable 0 [ 162.777721][ T3089] hierarchical_memory_limit 314572800 [ 162.783258][ T3089] hierarchical_memsw_limit 9223372036854771712 [ 162.789449][ T3089] total_cache 8192 [ 162.793161][ T3089] total_rss 0 [ 162.796487][ T3089] total_shmem 0 [ 162.800005][ T3089] total_mapped_file 0 [ 162.803994][ T3089] total_dirty 0 [ 162.807604][ T3089] total_writeback 0 [ 162.811467][ T3089] total_workingset_refault_anon 1209 [ 162.816795][ T3089] total_workingset_refault_file 87 [ 162.821975][ T3089] total_swap 143360 [ 162.825890][ T3089] total_swapcached 0 [ 162.829778][ T3089] total_pgpgin 4712 [ 162.833641][ T3089] total_pgpgout 4710 [ 162.837558][ T3089] total_pgfault 11920 [ 162.841533][ T3089] total_pgmajfault 538 [ 162.845617][ T3089] total_inactive_anon 0 [ 162.849773][ T3089] total_active_anon 0 [ 162.853741][ T3089] total_inactive_file 8192 [ 162.858168][ T3089] total_active_file 0 [ 162.862198][ T3089] total_unevictable 0 [ 162.866195][ T3089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5171,uid=0 [ 162.881503][ T3089] Memory cgroup out of memory: Killed process 5173 (syz-executor.1) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:04 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:04 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:04 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r3 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r6, r3, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r5, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:05 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 163.790065][ T5198] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 163.801458][ T5198] CPU: 0 PID: 5198 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 163.811477][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 163.821579][ T5198] Call Trace: [ 163.824863][ T5198] [ 163.827796][ T5198] dump_stack_lvl+0xda/0x130 [ 163.832439][ T5198] dump_stack+0x15/0x20 [ 163.836593][ T5198] dump_header+0x82/0x2d0 [ 163.841029][ T5198] oom_kill_process+0x33a/0x4c0 [ 163.845896][ T5198] out_of_memory+0x9ca/0xbf0 [ 163.850535][ T5198] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 163.856634][ T5198] mem_cgroup_out_of_memory+0x139/0x190 [ 163.862254][ T5198] try_charge_memcg+0x759/0xd20 [ 163.867146][ T5198] ? __swap_duplicate+0x29b/0x2b0 [ 163.872334][ T5198] ? radix_tree_lookup+0xf9/0x150 [ 163.877364][ T5198] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 163.883612][ T5198] __read_swap_cache_async+0x2b9/0x510 [ 163.889121][ T5198] swap_cluster_readahead+0x276/0x3f0 [ 163.894569][ T5198] swapin_readahead+0xe2/0x7a0 [ 163.899474][ T5198] ? __filemap_get_folio+0x41a/0x5a0 [ 163.904771][ T5198] ? swap_cache_get_folio+0x6e/0x200 [ 163.910134][ T5198] do_swap_page+0x44c/0x1570 [ 163.914876][ T5198] ? should_fail+0xb/0x10 [ 163.919200][ T5198] ? get_futex_key+0x4b4/0x700 [ 163.923965][ T5198] ? __rcu_read_lock+0x35/0x50 [ 163.928731][ T5198] ? pte_offset_map_nolock+0x124/0x1d0 [ 163.934187][ T5198] handle_mm_fault+0x7f6/0x27b0 [ 163.939069][ T5198] exc_page_fault+0x2f7/0x6d0 [ 163.943812][ T5198] asm_exc_page_fault+0x26/0x30 [ 163.948749][ T5198] RIP: 0010:__get_user_8+0x11/0x20 [ 163.953867][ T5198] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 163.973491][ T5198] RSP: 0018:ffffc90001627e38 EFLAGS: 00050202 [ 163.979577][ T5198] RAX: 000055555693eda8 RBX: ffffc90001627e40 RCX: ffffffff81448b63 [ 163.987550][ T5198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811c07db10 [ 163.995624][ T5198] RBP: ffffc90001627f00 R08: 000188811c07db17 R09: 0000000000000000 [ 164.003601][ T5198] R10: 0001ffffffffffff R11: 00000000000098f1 R12: ffff88811c07d140 [ 164.011580][ T5198] R13: ffff88811c07db10 R14: ffffc90001627f58 R15: ffffc90001627fd8 [ 164.019564][ T5198] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 164.025482][ T5198] __rseq_handle_notify_resume+0xc7/0xbf0 [ 164.031213][ T5198] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 164.037203][ T5198] ? __se_sys_clock_nanosleep+0x202/0x230 [ 164.042935][ T5198] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 164.048985][ T5198] syscall_exit_to_user_mode+0x8e/0x130 [ 164.054542][ T5198] do_syscall_64+0x65/0x120 [ 164.059106][ T5198] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 164.065021][ T5198] RIP: 0033:0x7fca7be9e135 [ 164.069479][ T5198] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 164.089103][ T5198] RSP: 002b:00007ffd8aceaaf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 164.097605][ T5198] RAX: 0000000000000000 RBX: 00007fca7bfa1f80 RCX: 00007fca7be9e135 [ 164.105580][ T5198] RDX: 00007ffd8aceab30 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.113549][ T5198] RBP: 00007fca7bfa3980 R08: 0000000000000000 R09: 00007ffd8ad6b0b0 [ 164.121526][ T5198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000028006 [ 164.129503][ T5198] R13: ffffffffffffffff R14: 00007fca7b9f6000 R15: 0000000000027cc5 [ 164.137494][ T5198] [ 164.140725][ T5198] memory: usage 8424kB, limit 307200kB, failcnt 9208 [ 164.147547][ T5198] memory+swap: usage 8564kB, limit 9007199254740988kB, failcnt 0 [ 164.155264][ T5198] kmem: usage 8408kB, limit 9007199254740988kB, failcnt 0 [ 164.162394][ T5198] Memory cgroup stats for /syz1: [ 164.169117][ T5198] cache 12288 [ 164.177398][ T5198] rss 0 [ 164.180148][ T5198] shmem 0 [ 164.183116][ T5198] mapped_file 0 [ 164.186577][ T5198] dirty 0 [ 164.189538][ T5198] writeback 0 [ 164.192810][ T5198] workingset_refault_anon 1224 [ 164.197640][ T5198] workingset_refault_file 88 [ 164.202221][ T5198] swap 143360 [ 164.205512][ T5198] swapcached 0 [ 164.208869][ T5198] pgpgin 4751 [ 164.212136][ T5198] pgpgout 4748 [ 164.215516][ T5198] pgfault 11992 [ 164.218963][ T5198] pgmajfault 546 [ 164.222491][ T5198] inactive_anon 0 [ 164.226143][ T5198] active_anon 0 [ 164.229653][ T5198] inactive_file 0 [ 164.233355][ T5198] active_file 12288 [ 164.237270][ T5198] unevictable 0 [ 164.240829][ T5198] hierarchical_memory_limit 314572800 [ 164.246214][ T5198] hierarchical_memsw_limit 9223372036854771712 [ 164.252360][ T5198] total_cache 12288 [ 164.256195][ T5198] total_rss 0 [ 164.259468][ T5198] total_shmem 0 [ 164.262917][ T5198] total_mapped_file 0 [ 164.266913][ T5198] total_dirty 0 [ 164.270471][ T5198] total_writeback 0 [ 164.274268][ T5198] total_workingset_refault_anon 1224 [ 164.279654][ T5198] total_workingset_refault_file 88 [ 164.284753][ T5198] total_swap 143360 [ 164.288561][ T5198] total_swapcached 0 [ 164.292450][ T5198] total_pgpgin 4751 [ 164.296319][ T5198] total_pgpgout 4748 [ 164.300210][ T5198] total_pgfault 11992 [ 164.304189][ T5198] total_pgmajfault 546 [ 164.308254][ T5198] total_inactive_anon 0 [ 164.312408][ T5198] total_active_anon 0 [ 164.316389][ T5198] total_inactive_file 0 [ 164.320609][ T5198] total_active_file 12288 [ 164.324929][ T5198] total_unevictable 0 [ 164.328926][ T5198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5198,uid=0 [ 164.344254][ T5198] Memory cgroup out of memory: Killed process 5198 (syz-executor.1) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:05 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:05 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 164.470217][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 164.481403][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 164.491436][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 164.501495][ T3118] Call Trace: [ 164.504776][ T3118] [ 164.507844][ T3118] dump_stack_lvl+0xda/0x130 [ 164.512561][ T3118] dump_stack+0x15/0x20 [ 164.516756][ T3118] dump_header+0x82/0x2d0 [ 164.521175][ T3118] oom_kill_process+0x33a/0x4c0 [ 164.526054][ T3118] out_of_memory+0x9ca/0xbf0 [ 164.530663][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 164.536796][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 164.542360][ T3118] try_charge_memcg+0x759/0xd20 [ 164.547229][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 164.552335][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 164.557386][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 164.563549][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 164.569028][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 164.574435][ T3118] swapin_readahead+0xe2/0x7a0 [ 164.579239][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 164.584541][ T3118] ? sysvec_apic_timer_interrupt+0x42/0x80 [ 164.590417][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 164.595725][ T3118] do_swap_page+0x44c/0x1570 [ 164.600338][ T3118] ? __rcu_read_lock+0x35/0x50 [ 164.605109][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 164.610591][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 164.615456][ T3118] exc_page_fault+0x2f7/0x6d0 [ 164.620180][ T3118] asm_exc_page_fault+0x26/0x30 [ 164.625137][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 164.630261][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 164.650011][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 164.656079][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 164.664200][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 164.672246][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 164.680240][ T3118] R10: 0001ffffffffffff R11: 0000000000005943 R12: ffff888103d6c100 [ 164.688278][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 164.696254][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 164.702153][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 164.707916][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 164.714028][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 164.719752][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 164.725731][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 164.731300][ T3118] do_syscall_64+0x65/0x120 [ 164.735817][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 164.741776][ T3118] RIP: 0033:0x7fc472cd80f3 [ 164.746310][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 164.766021][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 164.774476][ T3118] RAX: 0000000000000000 RBX: 000000000000012d RCX: 00007fc472cd80f3 [ 164.782497][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.790469][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 164.798446][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 164.806415][ T3118] R13: 0000000000027f89 R14: 0000000000027ba1 R15: 000000000000000b [ 164.814444][ T3118] 03:05:06 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 164.817740][ T3118] memory: usage 8368kB, limit 307200kB, failcnt 11257 [ 164.824515][ T3118] memory+swap: usage 8516kB, limit 9007199254740988kB, failcnt 0 [ 164.832351][ T3118] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 164.839610][ T3118] Memory cgroup stats for /syz2: [ 164.928755][ T3118] cache 8192 [ 164.936978][ T3118] rss 0 [ 164.939731][ T3118] shmem 0 [ 164.942672][ T3118] mapped_file 0 [ 164.946138][ T3118] dirty 0 [ 164.949073][ T3118] writeback 0 [ 164.952344][ T3118] workingset_refault_anon 1468 [ 164.957182][ T3118] workingset_refault_file 89 [ 164.961763][ T3118] swap 118784 [ 164.965038][ T3118] swapcached 4096 [ 164.968698][ T3118] pgpgin 4247 [ 164.971968][ T3118] pgpgout 4244 [ 164.975327][ T3118] pgfault 10156 [ 164.978795][ T3118] pgmajfault 576 [ 164.982334][ T3118] inactive_anon 4096 [ 164.986251][ T3118] active_anon 0 [ 164.989701][ T3118] inactive_file 8192 [ 164.993581][ T3118] active_file 0 [ 164.997084][ T3118] unevictable 0 [ 165.000532][ T3118] hierarchical_memory_limit 314572800 [ 165.005933][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 165.012082][ T3118] total_cache 8192 [ 165.015808][ T3118] total_rss 0 [ 165.019087][ T3118] total_shmem 0 [ 165.022538][ T3118] total_mapped_file 0 [ 165.026533][ T3118] total_dirty 0 [ 165.030002][ T3118] total_writeback 0 [ 165.033800][ T3118] total_workingset_refault_anon 1468 [ 165.039114][ T3118] total_workingset_refault_file 89 [ 165.044225][ T3118] total_swap 118784 [ 165.048063][ T3118] total_swapcached 4096 [ 165.052219][ T3118] total_pgpgin 4247 [ 165.056059][ T3118] total_pgpgout 4244 [ 165.059952][ T3118] total_pgfault 10156 [ 165.063966][ T3118] total_pgmajfault 576 [ 165.068038][ T3118] total_inactive_anon 4096 [ 165.072456][ T3118] total_active_anon 0 03:05:06 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:06 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) [ 165.076472][ T3118] total_inactive_file 8192 [ 165.080920][ T3118] total_active_file 0 [ 165.084898][ T3118] total_unevictable 0 [ 165.088895][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5192,uid=0 [ 165.104137][ T3118] Memory cgroup out of memory: OOM victim 5192 (syz-executor.2) is already exiting. Skip killing the task 03:05:07 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:07 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:07 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r5, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:07 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:07 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:07 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:07 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:07 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:07 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:08 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:08 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:08 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:08 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r3, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:08 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:09 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:09 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:09 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) [ 168.141091][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.152238][ T3106] CPU: 0 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 168.162253][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 168.172332][ T3106] Call Trace: [ 168.175610][ T3106] [ 168.178538][ T3106] dump_stack_lvl+0xda/0x130 [ 168.183307][ T3106] dump_stack+0x15/0x20 [ 168.187463][ T3106] dump_header+0x82/0x2d0 [ 168.191799][ T3106] oom_kill_process+0x33a/0x4c0 [ 168.196782][ T3106] out_of_memory+0x9ca/0xbf0 [ 168.201379][ T3106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 168.207495][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 168.213122][ T3106] try_charge_memcg+0x759/0xd20 [ 168.218053][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 168.223095][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 168.228126][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 168.234305][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 168.239777][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 168.245221][ T3106] swapin_readahead+0xe2/0x7a0 [ 168.250014][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 168.255320][ T3106] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 168.260904][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 168.266207][ T3106] do_swap_page+0x44c/0x1570 [ 168.270905][ T3106] ? __rcu_read_lock+0x35/0x50 [ 168.275674][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 168.281201][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 168.286178][ T3106] exc_page_fault+0x2f7/0x6d0 [ 168.290906][ T3106] asm_exc_page_fault+0x26/0x30 [ 168.295842][ T3106] RIP: 0010:__get_user_8+0x11/0x20 [ 168.301011][ T3106] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 168.320688][ T3106] RSP: 0018:ffffc90000f2be38 EFLAGS: 00050202 [ 168.326759][ T3106] RAX: 0000555556f78da8 RBX: ffffc90000f2be40 RCX: ffffffff81448b63 [ 168.334823][ T3106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810109ba90 [ 168.342811][ T3106] RBP: ffffc90000f2bf00 R08: 000188810109ba97 R09: 0000000000000000 [ 168.350799][ T3106] R10: 0001ffffffffffff R11: 0000000000004c68 R12: ffff88810109b0c0 [ 168.358852][ T3106] R13: ffff88810109ba90 R14: ffffc90000f2bf58 R15: ffffc90000f2bfd8 [ 168.366926][ T3106] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 168.372858][ T3106] __rseq_handle_notify_resume+0xc7/0xbf0 [ 168.378667][ T3106] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 168.384668][ T3106] ? __se_sys_clock_nanosleep+0x202/0x230 [ 168.390483][ T3106] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 168.396392][ T3106] syscall_exit_to_user_mode+0x8e/0x130 [ 168.402029][ T3106] do_syscall_64+0x65/0x120 [ 168.406543][ T3106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 168.412441][ T3106] RIP: 0033:0x7ff768b6b0f3 [ 168.416862][ T3106] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 168.436483][ T3106] RSP: 002b:00007fffd2473ab8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 168.444906][ T3106] RAX: 0000000000000000 RBX: 000000000000011d RCX: 00007ff768b6b0f3 [ 168.452958][ T3106] RDX: 00007fffd2473ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.460948][ T3106] RBP: 00007fffd2473b5c R08: 0000000000000010 R09: 00007fffd25c20b0 [ 168.469019][ T3106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 168.477022][ T3106] R13: 0000000000029012 R14: 0000000000028c3e R15: 0000000000000004 [ 168.485106][ T3106] [ 168.488277][ T3106] memory: usage 8368kB, limit 307200kB, failcnt 10739 [ 168.495133][ T3106] memory+swap: usage 8508kB, limit 9007199254740988kB, failcnt 0 [ 168.502980][ T3106] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 168.510114][ T3106] Memory cgroup stats for /syz4: [ 168.695177][ T3106] cache 8192 [ 168.703435][ T3106] rss 0 [ 168.706344][ T3106] shmem 0 [ 168.709283][ T3106] mapped_file 0 [ 168.712763][ T3106] dirty 0 [ 168.715711][ T3106] writeback 0 [ 168.719029][ T3106] workingset_refault_anon 1409 [ 168.723778][ T3106] workingset_refault_file 73 [ 168.728444][ T3106] swap 147456 [ 168.731718][ T3106] swapcached 0 [ 168.735083][ T3106] pgpgin 3889 [ 168.738379][ T3106] pgpgout 3887 [ 168.741746][ T3106] pgfault 9953 [ 168.745169][ T3106] pgmajfault 554 [ 168.748724][ T3106] inactive_anon 0 [ 168.752359][ T3106] active_anon 0 [ 168.755908][ T3106] inactive_file 8192 [ 168.759800][ T3106] active_file 0 [ 168.763246][ T3106] unevictable 0 [ 168.766723][ T3106] hierarchical_memory_limit 314572800 [ 168.772095][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 168.778266][ T3106] total_cache 8192 [ 168.782065][ T3106] total_rss 0 [ 168.785361][ T3106] total_shmem 0 [ 168.788852][ T3106] total_mapped_file 0 03:05:10 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 168.792828][ T3106] total_dirty 0 [ 168.796346][ T3106] total_writeback 0 [ 168.800145][ T3106] total_workingset_refault_anon 1409 [ 168.805468][ T3106] total_workingset_refault_file 73 [ 168.810573][ T3106] total_swap 147456 [ 168.814379][ T3106] total_swapcached 0 [ 168.818342][ T3106] total_pgpgin 3889 [ 168.822211][ T3106] total_pgpgout 3887 [ 168.826108][ T3106] total_pgfault 9953 [ 168.830119][ T3106] total_pgmajfault 554 [ 168.834183][ T3106] total_inactive_anon 0 [ 168.838398][ T3106] total_active_anon 0 03:05:10 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 168.842380][ T3106] total_inactive_file 8192 [ 168.846867][ T3106] total_active_file 0 [ 168.850836][ T3106] total_unevictable 0 [ 168.854817][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5255,uid=0 [ 168.870128][ T3106] Memory cgroup out of memory: Killed process 5256 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:05:10 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 169.097462][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.108577][ T3118] CPU: 0 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 169.118611][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 169.128666][ T3118] Call Trace: [ 169.131946][ T3118] [ 169.134873][ T3118] dump_stack_lvl+0xda/0x130 [ 169.139465][ T3118] dump_stack+0x15/0x20 [ 169.143613][ T3118] dump_header+0x82/0x2d0 [ 169.148025][ T3118] oom_kill_process+0x33a/0x4c0 [ 169.152920][ T3118] out_of_memory+0x9ca/0xbf0 [ 169.157593][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 169.163663][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 169.169230][ T3118] try_charge_memcg+0x759/0xd20 [ 169.174160][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 169.179261][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 169.184315][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 169.190383][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 169.195854][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 169.201305][ T3118] swapin_readahead+0xe2/0x7a0 [ 169.206085][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 169.211404][ T3118] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 169.216968][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 169.222322][ T3118] do_swap_page+0x44c/0x1570 [ 169.226955][ T3118] ? __rcu_read_lock+0x35/0x50 [ 169.231740][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 169.237240][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 169.242106][ T3118] exc_page_fault+0x2f7/0x6d0 [ 169.246794][ T3118] asm_exc_page_fault+0x26/0x30 [ 169.251652][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 169.256783][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 169.276497][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 169.282572][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 169.290559][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 169.298626][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 169.306666][ T3118] R10: 0001ffffffffffff R11: 000000000000b94a R12: ffff888103d6c100 [ 169.314650][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 169.322666][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 169.328615][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 169.334350][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 169.340460][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 169.346291][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 169.352209][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 169.357770][ T3118] do_syscall_64+0x65/0x120 [ 169.362275][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 169.368257][ T3118] RIP: 0033:0x7fc472cd80f3 [ 169.372671][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 169.392297][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 169.400812][ T3118] RAX: 0000000000000000 RBX: 0000000000000136 RCX: 00007fc472cd80f3 [ 169.409032][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.417014][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 169.424995][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 169.432999][ T3118] R13: 0000000000029145 R14: 0000000000028dbe R15: 0000000000000009 [ 169.440978][ T3118] [ 169.444096][ T3118] memory: usage 8372kB, limit 307200kB, failcnt 11570 [ 169.451003][ T3118] memory+swap: usage 8524kB, limit 9007199254740988kB, failcnt 0 [ 169.458754][ T3118] kmem: usage 8360kB, limit 9007199254740988kB, failcnt 0 03:05:11 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) [ 169.465962][ T3118] Memory cgroup stats for /syz2: [ 169.591902][ T3118] cache 8192 [ 169.600133][ T3118] rss 0 [ 169.602897][ T3118] shmem 0 [ 169.605885][ T3118] mapped_file 0 [ 169.609444][ T3118] dirty 0 [ 169.612446][ T3118] writeback 0 [ 169.615800][ T3118] workingset_refault_anon 1537 [ 169.620559][ T3118] workingset_refault_file 92 [ 169.625209][ T3118] swap 147456 [ 169.628510][ T3118] swapcached 12288 [ 169.632270][ T3118] pgpgin 4396 [ 169.635585][ T3118] pgpgout 4391 [ 169.638952][ T3118] pgfault 10457 [ 169.642407][ T3118] pgmajfault 599 [ 169.645971][ T3118] inactive_anon 12288 [ 169.650030][ T3118] active_anon 0 [ 169.653485][ T3118] inactive_file 0 [ 169.657182][ T3118] active_file 8192 [ 169.660899][ T3118] unevictable 0 [ 169.664434][ T3118] hierarchical_memory_limit 314572800 [ 169.669840][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 169.676040][ T3118] total_cache 8192 [ 169.679764][ T3118] total_rss 0 [ 169.683099][ T3118] total_shmem 0 [ 169.686599][ T3118] total_mapped_file 0 [ 169.690570][ T3118] total_dirty 0 [ 169.694031][ T3118] total_writeback 0 [ 169.697868][ T3118] total_workingset_refault_anon 1537 [ 169.703208][ T3118] total_workingset_refault_file 92 [ 169.708379][ T3118] total_swap 147456 [ 169.712190][ T3118] total_swapcached 12288 [ 169.716446][ T3118] total_pgpgin 4396 [ 169.720245][ T3118] total_pgpgout 4391 [ 169.724139][ T3118] total_pgfault 10457 [ 169.728194][ T3118] total_pgmajfault 599 [ 169.732263][ T3118] total_inactive_anon 12288 [ 169.736800][ T3118] total_active_anon 0 03:05:11 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r3, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) [ 169.740773][ T3118] total_inactive_file 0 [ 169.745012][ T3118] total_active_file 8192 [ 169.749272][ T3118] total_unevictable 0 [ 169.753256][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5258,uid=0 [ 169.768541][ T3118] Memory cgroup out of memory: OOM victim 5258 (syz-executor.2) is already exiting. Skip killing the task [ 169.803401][ T3088] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.814610][ T3088] CPU: 1 PID: 3088 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 169.824602][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 169.834669][ T3088] Call Trace: [ 169.838032][ T3088] [ 169.840966][ T3088] dump_stack_lvl+0xda/0x130 [ 169.845561][ T3088] dump_stack+0x15/0x20 [ 169.849719][ T3088] dump_header+0x82/0x2d0 [ 169.854084][ T3088] oom_kill_process+0x33a/0x4c0 [ 169.859016][ T3088] out_of_memory+0x9ca/0xbf0 [ 169.863666][ T3088] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 169.869773][ T3088] mem_cgroup_out_of_memory+0x139/0x190 [ 169.875371][ T3088] try_charge_memcg+0x759/0xd20 [ 169.880250][ T3088] ? __swap_duplicate+0x29b/0x2b0 [ 169.885273][ T3088] ? radix_tree_lookup+0xf9/0x150 [ 169.890321][ T3088] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 169.896420][ T3088] __read_swap_cache_async+0x2b9/0x510 [ 169.901963][ T3088] swap_cluster_readahead+0x276/0x3f0 [ 169.907347][ T3088] swapin_readahead+0xe2/0x7a0 [ 169.912184][ T3088] ? __filemap_get_folio+0x41a/0x5a0 [ 169.917544][ T3088] ? swap_cache_get_folio+0x6e/0x200 [ 169.922874][ T3088] do_swap_page+0x44c/0x1570 [ 169.927462][ T3088] ? __rcu_read_lock+0x35/0x50 [ 169.932246][ T3088] ? pte_offset_map_nolock+0x124/0x1d0 [ 169.937790][ T3088] handle_mm_fault+0x7f6/0x27b0 [ 169.942772][ T3088] exc_page_fault+0x2f7/0x6d0 [ 169.947467][ T3088] asm_exc_page_fault+0x26/0x30 [ 169.952397][ T3088] RIP: 0010:__get_user_8+0x11/0x20 [ 169.957661][ T3088] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 169.977286][ T3088] RSP: 0018:ffffc90000ec3e38 EFLAGS: 00050202 [ 169.983549][ T3088] RAX: 0000555556880da8 RBX: ffffc90000ec3e40 RCX: ffffffff81448b63 [ 169.991551][ T3088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6aa50 [ 169.999533][ T3088] RBP: ffffc90000ec3f00 R08: 0001888103d6aa57 R09: 0000000000000000 [ 170.007655][ T3088] R10: 0001ffffffffffff R11: 0000000000001ac4 R12: ffff888103d6a080 [ 170.015705][ T3088] R13: ffff888103d6aa50 R14: ffffc90000ec3f58 R15: ffffc90000ec3fd8 [ 170.023695][ T3088] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 170.029667][ T3088] __rseq_handle_notify_resume+0xc7/0xbf0 [ 170.035459][ T3088] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 170.041511][ T3088] ? __se_sys_clock_nanosleep+0x202/0x230 [ 170.047254][ T3088] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 170.053171][ T3088] syscall_exit_to_user_mode+0x8e/0x130 [ 170.058862][ T3088] do_syscall_64+0x65/0x120 [ 170.063381][ T3088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 170.069335][ T3088] RIP: 0033:0x7f9fdba920f3 [ 170.073770][ T3088] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 170.093397][ T3088] RSP: 002b:00007ffd53fcf6e8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 170.101983][ T3088] RAX: 0000000000000000 RBX: 0000000000000166 RCX: 00007f9fdba920f3 [ 170.109955][ T3088] RDX: 00007ffd53fcf700 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.117966][ T3088] RBP: 00007ffd53fcf78c R08: 0000000000000010 R09: 00007ffd53fe40b0 [ 170.126093][ T3088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 170.134104][ T3088] R13: 000000000002942e R14: 0000000000029072 R15: 0000000000000015 [ 170.142073][ T3088] [ 170.145215][ T3088] memory: usage 8368kB, limit 307200kB, failcnt 10255 [ 170.152084][ T3088] memory+swap: usage 6540kB, limit 9007199254740988kB, failcnt 0 [ 170.159862][ T3088] kmem: usage 5984kB, limit 9007199254740988kB, failcnt 0 [ 170.167112][ T3088] Memory cgroup stats for /syz0: [ 170.327202][ T3088] cache 12288 [ 170.335530][ T3088] rss 0 [ 170.338297][ T3088] shmem 0 [ 170.341229][ T3088] mapped_file 0 [ 170.344677][ T3088] dirty 0 [ 170.347649][ T3088] writeback 0 [ 170.350934][ T3088] workingset_refault_anon 1461 [ 170.355736][ T3088] workingset_refault_file 71 [ 170.360333][ T3088] swap 135168 [ 170.363614][ T3088] swapcached 0 [ 170.367002][ T3088] pgpgin 4952 [ 170.370288][ T3088] pgpgout 4949 [ 170.373656][ T3088] pgfault 12661 [ 170.377208][ T3088] pgmajfault 592 [ 170.380753][ T3088] inactive_anon 0 [ 170.384392][ T3088] active_anon 0 [ 170.387886][ T3088] inactive_file 8192 [ 170.391775][ T3088] active_file 4096 [ 170.395559][ T3088] unevictable 0 [ 170.399007][ T3088] hierarchical_memory_limit 314572800 [ 170.404377][ T3088] hierarchical_memsw_limit 9223372036854771712 [ 170.410613][ T3088] total_cache 12288 [ 170.414466][ T3088] total_rss 0 [ 170.417762][ T3088] total_shmem 0 [ 170.421244][ T3088] total_mapped_file 0 03:05:11 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 170.425292][ T3088] total_dirty 0 [ 170.428855][ T3088] total_writeback 0 [ 170.432667][ T3088] total_workingset_refault_anon 1461 [ 170.437973][ T3088] total_workingset_refault_file 71 [ 170.443085][ T3088] total_swap 135168 [ 170.446922][ T3088] total_swapcached 0 [ 170.450820][ T3088] total_pgpgin 4952 [ 170.454629][ T3088] total_pgpgout 4949 [ 170.458605][ T3088] total_pgfault 12661 [ 170.462582][ T3088] total_pgmajfault 592 [ 170.466657][ T3088] total_inactive_anon 0 [ 170.470871][ T3088] total_active_anon 0 [ 170.474853][ T3088] total_inactive_file 8192 [ 170.479280][ T3088] total_active_file 4096 [ 170.483603][ T3088] total_unevictable 0 [ 170.487628][ T3088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5268,uid=0 [ 170.502966][ T3088] Memory cgroup out of memory: OOM victim 5268 (syz-executor.0) is already exiting. Skip killing the task [ 170.555363][ T5280] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 170.566744][ T5280] CPU: 1 PID: 5280 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 170.576857][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 170.586927][ T5280] Call Trace: [ 170.590216][ T5280] [ 170.593144][ T5280] dump_stack_lvl+0xda/0x130 [ 170.597756][ T5280] dump_stack+0x15/0x20 [ 170.601991][ T5280] dump_header+0x82/0x2d0 [ 170.606401][ T5280] oom_kill_process+0x33a/0x4c0 [ 170.611267][ T5280] out_of_memory+0x9ca/0xbf0 [ 170.615896][ T5280] mem_cgroup_out_of_memory+0x139/0x190 [ 170.621474][ T5280] try_charge_memcg+0x759/0xd20 [ 170.626365][ T5280] ? __swap_duplicate+0x29b/0x2b0 [ 170.631429][ T5280] ? radix_tree_lookup+0xf9/0x150 [ 170.636517][ T5280] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 170.642691][ T5280] __read_swap_cache_async+0x2b9/0x510 [ 170.648294][ T5280] swap_cluster_readahead+0x276/0x3f0 [ 170.653675][ T5280] swapin_readahead+0xe2/0x7a0 [ 170.658531][ T5280] ? __filemap_get_folio+0x41a/0x5a0 [ 170.663886][ T5280] ? swap_cache_get_folio+0x6e/0x200 [ 170.669244][ T5280] do_swap_page+0x44c/0x1570 [ 170.673860][ T5280] ? __rcu_read_lock+0x35/0x50 [ 170.678654][ T5280] ? pte_offset_map_nolock+0x124/0x1d0 [ 170.684119][ T5280] handle_mm_fault+0x7f6/0x27b0 [ 170.689009][ T5280] ? mas_walk+0x204/0x320 [ 170.693354][ T5280] exc_page_fault+0x3ff/0x6d0 [ 170.698038][ T5280] asm_exc_page_fault+0x26/0x30 [ 170.703035][ T5280] RIP: 0033:0x7fca7be1d240 [ 170.707484][ T5280] Code: 48 89 2d bb e4 ca 00 eb 86 48 89 c1 48 89 ea 48 8d 35 e4 0e 0a 00 31 c0 48 8d 3d eb 0e 0a 00 e8 b6 fd ff ff 66 0f 1f 44 00 00 <48> 8b 0d 91 e4 ca 00 4c 63 05 7a e4 ca 00 48 8b 05 7b e4 ca 00 49 [ 170.727126][ T5280] RSP: 002b:00007ffd8aceaab8 EFLAGS: 00010206 [ 170.733208][ T5280] RAX: 0000000081334a52 RBX: 00007fca7bfa2018 RCX: 0000000000000002 [ 170.741227][ T5280] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000081334a52 [ 170.749274][ T5280] RBP: 0000000081334a52 R08: 0000001b2cc20000 R09: 0000000000000a52 [ 170.757302][ T5280] R10: 0000000081334a56 R11: 000000000000775c R12: 0000000000000003 [ 170.765278][ T5280] R13: 0000000000000001 R14: 00007fca7bf96000 R15: ffffffff813348e6 [ 170.773264][ T5280] ? __sys_bpf+0xc6/0x780 [ 170.777604][ T5280] [ 170.780778][ T5280] memory: usage 307200kB, limit 307200kB, failcnt 9655 [ 170.787781][ T5280] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 170.795798][ T5280] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 03:05:12 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 170.803080][ T5280] Memory cgroup stats for /syz1: [ 170.803417][ T5280] cache 12288 [ 170.811793][ T5280] rss 0 [ 170.814561][ T5280] shmem 0 [ 170.817544][ T5280] mapped_file 0 [ 170.821004][ T5280] dirty 0 [ 170.824068][ T5280] writeback 8192 [ 170.827722][ T5280] workingset_refault_anon 1287 [ 170.832507][ T5280] workingset_refault_file 92 [ 170.837133][ T5280] swap 131072 [ 170.840523][ T5280] swapcached 12288 [ 170.844284][ T5280] pgpgin 4910 [ 170.847688][ T5280] pgpgout 4904 [ 170.851159][ T5280] pgfault 12445 [ 170.854609][ T5280] pgmajfault 579 [ 170.858155][ T5280] inactive_anon 0 [ 170.861818][ T5280] active_anon 0 [ 170.865334][ T5280] inactive_file 0 [ 170.868980][ T5280] active_file 12288 [ 170.872780][ T5280] unevictable 0 [ 170.876244][ T5280] hierarchical_memory_limit 314572800 [ 170.881665][ T5280] hierarchical_memsw_limit 9223372036854771712 [ 170.887836][ T5280] total_cache 12288 [ 170.891632][ T5280] total_rss 0 [ 170.894927][ T5280] total_shmem 0 [ 170.898394][ T5280] total_mapped_file 0 [ 170.902359][ T5280] total_dirty 0 [ 170.905817][ T5280] total_writeback 8192 [ 170.909924][ T5280] total_workingset_refault_anon 1287 [ 170.915195][ T5280] total_workingset_refault_file 92 [ 170.920401][ T5280] total_swap 131072 [ 170.924194][ T5280] total_swapcached 12288 [ 170.928457][ T5280] total_pgpgin 4910 [ 170.932282][ T5280] total_pgpgout 4904 [ 170.936357][ T5280] total_pgfault 12445 [ 170.940332][ T5280] total_pgmajfault 579 [ 170.944387][ T5280] total_inactive_anon 0 [ 170.948574][ T5280] total_active_anon 0 [ 170.952605][ T5280] total_inactive_file 0 03:05:12 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:12 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 170.956875][ T5280] total_active_file 12288 [ 170.961328][ T5280] total_unevictable 0 [ 170.965328][ T5280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5280,uid=0 [ 170.980570][ T5280] Memory cgroup out of memory: Killed process 5280 (syz-executor.1) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:12 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) 03:05:13 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:13 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r3, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:13 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:13 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:14 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:14 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 172.903575][ T5305] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 172.915088][ T5305] CPU: 1 PID: 5305 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 172.925152][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 172.935298][ T5305] Call Trace: [ 172.938591][ T5305] [ 172.941555][ T5305] dump_stack_lvl+0xda/0x130 [ 172.946147][ T5305] dump_stack+0x15/0x20 [ 172.950311][ T5305] dump_header+0x82/0x2d0 [ 172.954719][ T5305] oom_kill_process+0x33a/0x4c0 [ 172.959614][ T5305] out_of_memory+0x9ca/0xbf0 [ 172.964218][ T5305] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 172.970301][ T5305] mem_cgroup_out_of_memory+0x139/0x190 [ 172.975873][ T5305] try_charge_memcg+0x759/0xd20 [ 172.980741][ T5305] ? __swap_duplicate+0x29b/0x2b0 [ 172.985765][ T5305] ? radix_tree_lookup+0xf9/0x150 [ 172.990807][ T5305] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 172.996918][ T5305] __read_swap_cache_async+0x2b9/0x510 [ 173.002501][ T5305] swap_cluster_readahead+0x276/0x3f0 [ 173.007891][ T5305] swapin_readahead+0xe2/0x7a0 [ 173.012695][ T5305] ? __filemap_get_folio+0x41a/0x5a0 [ 173.018068][ T5305] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 173.023619][ T5305] ? swap_cache_get_folio+0x6e/0x200 [ 173.028996][ T5305] do_swap_page+0x44c/0x1570 [ 173.033598][ T5305] ? __rcu_read_lock+0x35/0x50 [ 173.038444][ T5305] ? pte_offset_map_nolock+0x124/0x1d0 [ 173.043920][ T5305] handle_mm_fault+0x7f6/0x27b0 [ 173.048781][ T5305] ? mas_walk+0x204/0x320 [ 173.053152][ T5305] exc_page_fault+0x3ff/0x6d0 [ 173.057827][ T5305] asm_exc_page_fault+0x26/0x30 [ 173.062713][ T5305] RIP: 0033:0x7fc472c66d14 [ 173.067208][ T5305] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 173.086823][ T5305] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 173.092932][ T5305] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 [ 173.100912][ T5305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 173.108948][ T5305] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 173.116925][ T5305] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002a3bb [ 173.124893][ T5305] R13: ffffffffffffffff R14: 00007fc472830000 R15: 000000000002a07a [ 173.132899][ T5305] [ 173.136291][ T5305] memory: usage 307200kB, limit 307200kB, failcnt 11727 [ 173.143366][ T5305] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 173.151373][ T5305] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 173.158799][ T5305] Memory cgroup stats for /syz2: [ 173.158977][ T5305] cache 4096 [ 173.167172][ T5305] rss 8192 [ 173.170185][ T5305] shmem 0 [ 173.173177][ T5305] mapped_file 0 [ 173.176748][ T5305] dirty 0 [ 173.179733][ T5305] writeback 16384 [ 173.183396][ T5305] workingset_refault_anon 1564 [ 173.188202][ T5305] workingset_refault_file 93 [ 173.192810][ T5305] swap 139264 [ 173.196117][ T5305] swapcached 16384 [ 173.199896][ T5305] pgpgin 4474 [ 173.203168][ T5305] pgpgout 4469 [ 173.206566][ T5305] pgfault 10665 [ 173.210036][ T5305] pgmajfault 611 [ 173.213593][ T5305] inactive_anon 0 [ 173.217238][ T5305] active_anon 0 [ 173.220677][ T5305] inactive_file 4096 [ 173.224552][ T5305] active_file 0 [ 173.228087][ T5305] unevictable 0 [ 173.231532][ T5305] hierarchical_memory_limit 314572800 [ 173.236909][ T5305] hierarchical_memsw_limit 9223372036854771712 [ 173.243050][ T5305] total_cache 4096 [ 173.246776][ T5305] total_rss 8192 [ 173.250310][ T5305] total_shmem 0 [ 173.253758][ T5305] total_mapped_file 0 [ 173.257738][ T5305] total_dirty 0 [ 173.261236][ T5305] total_writeback 16384 [ 173.265574][ T5305] total_workingset_refault_anon 1564 [ 173.270855][ T5305] total_workingset_refault_file 93 [ 173.275974][ T5305] total_swap 139264 [ 173.279802][ T5305] total_swapcached 16384 [ 173.284119][ T5305] total_pgpgin 4474 [ 173.287945][ T5305] total_pgpgout 4469 [ 173.291817][ T5305] total_pgfault 10665 [ 173.295883][ T5305] total_pgmajfault 611 [ 173.300021][ T5305] total_inactive_anon 0 [ 173.304242][ T5305] total_active_anon 0 [ 173.308229][ T5305] total_inactive_file 4096 [ 173.312654][ T5305] total_active_file 0 [ 173.316723][ T5305] total_unevictable 0 [ 173.320885][ T5305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5305,uid=0 [ 173.336197][ T5305] Memory cgroup out of memory: Killed process 5305 (syz-executor.2) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:14 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:15 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 173.755762][ T3088] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 173.766862][ T3088] CPU: 0 PID: 3088 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 173.776841][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 173.786897][ T3088] Call Trace: [ 173.790269][ T3088] [ 173.793218][ T3088] dump_stack_lvl+0xda/0x130 [ 173.797899][ T3088] dump_stack+0x15/0x20 [ 173.802107][ T3088] dump_header+0x82/0x2d0 [ 173.806438][ T3088] oom_kill_process+0x33a/0x4c0 [ 173.811289][ T3088] out_of_memory+0x9ca/0xbf0 [ 173.815939][ T3088] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 173.822011][ T3088] mem_cgroup_out_of_memory+0x139/0x190 [ 173.827563][ T3088] try_charge_memcg+0x759/0xd20 [ 173.832432][ T3088] ? __swap_duplicate+0x29b/0x2b0 [ 173.837490][ T3088] ? radix_tree_lookup+0xf9/0x150 [ 173.842567][ T3088] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 173.848769][ T3088] __read_swap_cache_async+0x2b9/0x510 [ 173.854241][ T3088] swap_cluster_readahead+0x276/0x3f0 [ 173.859651][ T3088] swapin_readahead+0xe2/0x7a0 [ 173.864414][ T3088] ? __filemap_get_folio+0x41a/0x5a0 [ 173.869697][ T3088] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 173.875250][ T3088] ? swap_cache_get_folio+0x6e/0x200 [ 173.880574][ T3088] do_swap_page+0x44c/0x1570 [ 173.885249][ T3088] ? __rcu_read_lock+0x35/0x50 [ 173.890063][ T3088] ? pte_offset_map_nolock+0x124/0x1d0 [ 173.895637][ T3088] handle_mm_fault+0x7f6/0x27b0 [ 173.900583][ T3088] exc_page_fault+0x2f7/0x6d0 [ 173.905271][ T3088] asm_exc_page_fault+0x26/0x30 [ 173.910197][ T3088] RIP: 0010:__get_user_8+0x11/0x20 [ 173.915407][ T3088] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 173.935027][ T3088] RSP: 0018:ffffc90000ec3e38 EFLAGS: 00050202 [ 173.941193][ T3088] RAX: 0000555556880da8 RBX: ffffc90000ec3e40 RCX: ffffffff81448b63 [ 173.949232][ T3088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6aa50 [ 173.957297][ T3088] RBP: ffffc90000ec3f00 R08: 0001888103d6aa57 R09: 0000000000000000 [ 173.965270][ T3088] R10: 0001ffffffffffff R11: 000000000000a5a2 R12: ffff888103d6a080 [ 173.973316][ T3088] R13: ffff888103d6aa50 R14: ffffc90000ec3f58 R15: ffffc90000ec3fd8 [ 173.981376][ T3088] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 173.987279][ T3088] __rseq_handle_notify_resume+0xc7/0xbf0 [ 173.993006][ T3088] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 173.999016][ T3088] ? __se_sys_clock_nanosleep+0x202/0x230 [ 174.004746][ T3088] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 174.010898][ T3088] syscall_exit_to_user_mode+0x8e/0x130 [ 174.016526][ T3088] do_syscall_64+0x65/0x120 [ 174.021047][ T3088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 174.026995][ T3088] RIP: 0033:0x7f9fdba920f3 [ 174.031472][ T3088] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 174.051134][ T3088] RSP: 002b:00007ffd53fcf6e8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 174.059635][ T3088] RAX: 0000000000000000 RBX: 000000000000016c RCX: 00007f9fdba920f3 [ 174.067652][ T3088] RDX: 00007ffd53fcf700 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.075690][ T3088] RBP: 00007ffd53fcf78c R08: 0000000000000010 R09: 00007ffd53fe40b0 [ 174.083792][ T3088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 174.091784][ T3088] R13: 000000000002a50e R14: 000000000002a14f R15: 0000000000000015 [ 174.099845][ T3088] 03:05:15 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) [ 174.103115][ T3088] memory: usage 8368kB, limit 307200kB, failcnt 10492 [ 174.109898][ T3088] memory+swap: usage 8600kB, limit 9007199254740988kB, failcnt 0 [ 174.117637][ T3088] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 174.124834][ T3088] Memory cgroup stats for /syz0: [ 174.135772][ T3088] cache 12288 [ 174.144135][ T3088] rss 0 [ 174.146922][ T3088] shmem 0 [ 174.149855][ T3088] mapped_file 0 [ 174.153384][ T3088] dirty 0 03:05:15 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 174.156349][ T3088] writeback 0 [ 174.159630][ T3088] workingset_refault_anon 1488 [ 174.164393][ T3088] workingset_refault_file 73 [ 174.169089][ T3088] swap 221184 [ 174.172362][ T3088] swapcached 16384 [ 174.176262][ T3088] pgpgin 5033 [ 174.179545][ T3088] pgpgout 5026 [ 174.183005][ T3088] pgfault 12874 [ 174.186487][ T3088] pgmajfault 606 [ 174.190022][ T3088] inactive_anon 16384 [ 174.194015][ T3088] active_anon 0 [ 174.197533][ T3088] inactive_file 0 [ 174.201280][ T3088] active_file 12288 [ 174.205084][ T3088] unevictable 0 [ 174.208669][ T3088] hierarchical_memory_limit 314572800 [ 174.214068][ T3088] hierarchical_memsw_limit 9223372036854771712 [ 174.220321][ T3088] total_cache 12288 [ 174.224126][ T3088] total_rss 0 [ 174.227433][ T3088] total_shmem 0 [ 174.230879][ T3088] total_mapped_file 0 [ 174.234861][ T3088] total_dirty 0 [ 174.238513][ T3088] total_writeback 0 [ 174.242327][ T3088] total_workingset_refault_anon 1488 [ 174.247673][ T3088] total_workingset_refault_file 73 [ 174.252780][ T3088] total_swap 221184 [ 174.256600][ T3088] total_swapcached 16384 [ 174.260829][ T3088] total_pgpgin 5033 [ 174.264631][ T3088] total_pgpgout 5026 [ 174.268598][ T3088] total_pgfault 12874 [ 174.272576][ T3088] total_pgmajfault 606 [ 174.276730][ T3088] total_inactive_anon 16384 [ 174.281230][ T3088] total_active_anon 0 [ 174.285345][ T3088] total_inactive_file 0 [ 174.289619][ T3088] total_active_file 12288 [ 174.294205][ T3088] total_unevictable 0 [ 174.298243][ T3088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5311,uid=0 [ 174.313432][ T3088] Memory cgroup out of memory: OOM victim 5311 (syz-executor.0) is already exiting. Skip killing the task 03:05:16 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:16 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:16 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 175.079180][ T5330] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 175.090614][ T5330] CPU: 0 PID: 5330 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 175.100606][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 175.110755][ T5330] Call Trace: [ 175.114026][ T5330] [ 175.116949][ T5330] dump_stack_lvl+0xda/0x130 [ 175.121568][ T5330] dump_stack+0x15/0x20 [ 175.125803][ T5330] dump_header+0x82/0x2d0 [ 175.130160][ T5330] oom_kill_process+0x33a/0x4c0 [ 175.135057][ T5330] out_of_memory+0x9ca/0xbf0 [ 175.139657][ T5330] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 175.145754][ T5330] mem_cgroup_out_of_memory+0x139/0x190 [ 175.151366][ T5330] try_charge_memcg+0x759/0xd20 [ 175.156254][ T5330] ? __swap_duplicate+0x29b/0x2b0 [ 175.161306][ T5330] ? radix_tree_lookup+0xf9/0x150 [ 175.166336][ T5330] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 175.172422][ T5330] __read_swap_cache_async+0x2b9/0x510 03:05:16 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 175.177985][ T5330] swap_cluster_readahead+0x380/0x3f0 [ 175.183413][ T5330] ? __rcu_read_unlock+0x4d/0x70 [ 175.188489][ T5330] swapin_readahead+0xe2/0x7a0 [ 175.193261][ T5330] ? __filemap_get_folio+0x41a/0x5a0 [ 175.198556][ T5330] ? swap_cache_get_folio+0x6e/0x200 [ 175.203868][ T5330] do_swap_page+0x44c/0x1570 [ 175.208603][ T5330] ? _raw_spin_unlock+0x26/0x40 [ 175.213496][ T5330] ? __rcu_read_lock+0x35/0x50 [ 175.218248][ T5330] ? pte_offset_map_nolock+0x124/0x1d0 [ 175.223728][ T5330] handle_mm_fault+0x7f6/0x27b0 [ 175.228607][ T5330] exc_page_fault+0x2f7/0x6d0 [ 175.233341][ T5330] asm_exc_page_fault+0x26/0x30 [ 175.238263][ T5330] RIP: 0010:__get_user_8+0x11/0x20 [ 175.243369][ T5330] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 175.263062][ T5330] RSP: 0018:ffffc90001657e38 EFLAGS: 00050202 [ 175.269156][ T5330] RAX: 0000555556f78da8 RBX: ffffc90001657e40 RCX: ffffffff81448b63 [ 175.277117][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888124064ad0 [ 175.285078][ T5330] RBP: ffffc90001657f00 R08: 0001888124064ad7 R09: 0000000000000000 [ 175.293039][ T5330] R10: 0001ffffffffffff R11: 0000000000009790 R12: ffff888124064100 [ 175.301053][ T5330] R13: ffff888124064ad0 R14: ffffc90001657f58 R15: ffffc90001657fd8 [ 175.309069][ T5330] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 175.315033][ T5330] __rseq_handle_notify_resume+0xc7/0xbf0 [ 175.320804][ T5330] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 175.326780][ T5330] ? __se_sys_clock_nanosleep+0x202/0x230 [ 175.332554][ T5330] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 175.338444][ T5330] syscall_exit_to_user_mode+0x8e/0x130 [ 175.343997][ T5330] do_syscall_64+0x65/0x120 [ 175.348501][ T5330] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 175.354430][ T5330] RIP: 0033:0x7ff768b6b135 [ 175.358902][ T5330] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 175.378569][ T5330] RSP: 002b:00007fffd2473860 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 175.386975][ T5330] RAX: 0000000000000000 RBX: 00007ff768c6ef80 RCX: 00007ff768b6b135 [ 175.394934][ T5330] RDX: 00007fffd24738a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.403004][ T5330] RBP: 00007ff768c70980 R08: 0000000000000000 R09: 00007fffd25c20b0 [ 175.411041][ T5330] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ac29 [ 175.419000][ T5330] R13: ffffffffffffffff R14: 00007ff7686c3000 R15: 000000000002a8e8 [ 175.427073][ T5330] [ 175.430299][ T5330] memory: usage 8404kB, limit 307200kB, failcnt 11177 [ 175.437384][ T5330] memory+swap: usage 468kB, limit 9007199254740988kB, failcnt 0 [ 175.445022][ T5330] kmem: usage 200kB, limit 9007199254740988kB, failcnt 0 [ 175.452244][ T5330] Memory cgroup stats for /syz4: [ 175.495745][ T5330] cache 12288 [ 175.504000][ T5330] rss 20480 [ 175.507141][ T5330] shmem 0 [ 175.510081][ T5330] mapped_file 0 [ 175.513528][ T5330] dirty 0 [ 175.516511][ T5330] writeback 0 [ 175.519837][ T5330] workingset_refault_anon 1475 [ 175.524674][ T5330] workingset_refault_file 77 [ 175.529399][ T5330] swap 94208 [ 175.532595][ T5330] swapcached 40960 [ 175.536403][ T5330] pgpgin 4053 [ 175.539698][ T5330] pgpgout 4039 [ 175.543080][ T5330] pgfault 10339 [ 175.546552][ T5330] pgmajfault 583 [ 175.550225][ T5330] inactive_anon 36864 [ 175.554244][ T5330] active_anon 0 [ 175.558761][ T5330] inactive_file 0 [ 175.562392][ T5330] active_file 12288 [ 175.566236][ T5330] unevictable 0 [ 175.569712][ T5330] hierarchical_memory_limit 314572800 [ 175.575103][ T5330] hierarchical_memsw_limit 9223372036854771712 [ 175.581279][ T5330] total_cache 12288 [ 175.585085][ T5330] total_rss 20480 [ 175.588785][ T5330] total_shmem 0 [ 175.592246][ T5330] total_mapped_file 0 [ 175.596261][ T5330] total_dirty 0 [ 175.599843][ T5330] total_writeback 0 [ 175.603781][ T5330] total_workingset_refault_anon 1475 [ 175.609200][ T5330] total_workingset_refault_file 77 [ 175.614388][ T5330] total_swap 94208 [ 175.618132][ T5330] total_swapcached 40960 [ 175.622381][ T5330] total_pgpgin 4053 [ 175.626203][ T5330] total_pgpgout 4039 [ 175.630102][ T5330] total_pgfault 10339 [ 175.634121][ T5330] total_pgmajfault 583 [ 175.638245][ T5330] total_inactive_anon 36864 [ 175.642743][ T5330] total_active_anon 0 03:05:17 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 175.646796][ T5330] total_inactive_file 0 [ 175.651008][ T5330] total_active_file 12288 [ 175.655329][ T5330] total_unevictable 0 [ 175.659362][ T5330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5330,uid=0 [ 175.674617][ T5330] Memory cgroup out of memory: Killed process 5330 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:05:17 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:17 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r7, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) 03:05:17 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 176.771882][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 176.782982][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 176.792969][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 176.803038][ T3086] Call Trace: [ 176.806345][ T3086] [ 176.809282][ T3086] dump_stack_lvl+0xda/0x130 [ 176.813946][ T3086] dump_stack+0x15/0x20 [ 176.818101][ T3086] dump_header+0x82/0x2d0 [ 176.822463][ T3086] oom_kill_process+0x33a/0x4c0 [ 176.827335][ T3086] out_of_memory+0x9ca/0xbf0 [ 176.831943][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 176.838024][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 176.843625][ T3086] try_charge_memcg+0x759/0xd20 [ 176.848483][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 176.853639][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 176.858695][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 176.864859][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 176.870334][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 176.875781][ T3086] swapin_readahead+0xe2/0x7a0 [ 176.880546][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 176.885837][ T3086] ? get_page_from_freelist+0x1414/0x1460 [ 176.891571][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 176.896903][ T3086] do_swap_page+0x44c/0x1570 [ 176.901548][ T3086] ? __rcu_read_lock+0x35/0x50 [ 176.906323][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 176.911883][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 176.916752][ T3086] exc_page_fault+0x2f7/0x6d0 [ 176.921452][ T3086] asm_exc_page_fault+0x26/0x30 [ 176.926410][ T3086] RIP: 0010:__get_user_8+0x11/0x20 [ 176.931638][ T3086] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 176.951338][ T3086] RSP: 0000:ffffc90000eabe38 EFLAGS: 00050202 [ 176.957447][ T3086] RAX: 0000555555c17da8 RBX: ffffc90000eabe40 RCX: ffffffff81448b63 [ 176.965424][ T3086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d69a10 [ 176.973497][ T3086] RBP: ffffc90000eabf00 R08: 0001888103d69a17 R09: 0000000000000000 [ 176.981463][ T3086] R10: 0001ffffffffffff R11: 0000000000005144 R12: ffff888103d69040 [ 176.989434][ T3086] R13: ffff888103d69a10 R14: ffffc90000eabf58 R15: ffffc90000eabfd8 [ 176.997517][ T3086] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 177.003420][ T3086] __rseq_handle_notify_resume+0xc7/0xbf0 [ 177.009184][ T3086] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 177.015161][ T3086] ? __se_sys_clock_nanosleep+0x202/0x230 [ 177.020973][ T3086] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 177.026915][ T3086] syscall_exit_to_user_mode+0x8e/0x130 [ 177.032593][ T3086] do_syscall_64+0x65/0x120 [ 177.037095][ T3086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 177.043002][ T3086] RIP: 0033:0x7fd7c761c0f3 [ 177.047414][ T3086] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 177.067042][ T3086] RSP: 002b:00007ffc502d1168 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 177.075475][ T3086] RAX: 0000000000000000 RBX: 000000000000011b RCX: 00007fd7c761c0f3 [ 177.083447][ T3086] RDX: 00007ffc502d1180 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.091447][ T3086] RBP: 00007ffc502d120c R08: 0000000000000010 R09: 00007ffc503440b0 [ 177.099420][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 177.107425][ T3086] R13: 000000000002b0cc R14: 000000000002ad42 R15: 000000000000000c [ 177.115404][ T3086] [ 177.118521][ T3086] memory: usage 64kB, limit 307200kB, failcnt 11250 [ 177.125104][ T3086] memory+swap: usage 240kB, limit 9007199254740988kB, failcnt 0 [ 177.132744][ T3086] kmem: usage 52kB, limit 9007199254740988kB, failcnt 0 [ 177.139694][ T3086] Memory cgroup stats for /syz5: [ 177.226654][ T3086] cache 8192 [ 177.234915][ T3086] rss 0 [ 177.237786][ T3086] shmem 0 [ 177.240739][ T3086] mapped_file 0 [ 177.244198][ T3086] dirty 0 [ 177.247228][ T3086] writeback 0 [ 177.250521][ T3086] workingset_refault_anon 1534 [ 177.255354][ T3086] workingset_refault_file 76 [ 177.259951][ T3086] swap 180224 [ 177.263241][ T3086] swapcached 4096 [ 177.266915][ T3086] pgpgin 3972 [ 177.270199][ T3086] pgpgout 3969 [ 177.273569][ T3086] pgfault 10278 [ 177.277039][ T3086] pgmajfault 609 [ 177.280656][ T3086] inactive_anon 4096 [ 177.284553][ T3086] active_anon 0 [ 177.288127][ T3086] inactive_file 8192 [ 177.292015][ T3086] active_file 0 [ 177.295499][ T3086] unevictable 0 [ 177.299045][ T3086] hierarchical_memory_limit 314572800 [ 177.304428][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 177.310614][ T3086] total_cache 8192 [ 177.314334][ T3086] total_rss 0 [ 177.317668][ T3086] total_shmem 0 [ 177.321121][ T3086] total_mapped_file 0 [ 177.325169][ T3086] total_dirty 0 [ 177.328703][ T3086] total_writeback 0 [ 177.332512][ T3086] total_workingset_refault_anon 1534 [ 177.337849][ T3086] total_workingset_refault_file 76 [ 177.342961][ T3086] total_swap 180224 [ 177.346792][ T3086] total_swapcached 4096 [ 177.350982][ T3086] total_pgpgin 3972 [ 177.354789][ T3086] total_pgpgout 3969 [ 177.358696][ T3086] total_pgfault 10278 [ 177.362670][ T3086] total_pgmajfault 609 [ 177.366761][ T3086] total_inactive_anon 4096 [ 177.371175][ T3086] total_active_anon 0 03:05:18 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:18 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:18 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x0, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 177.375139][ T3086] total_inactive_file 8192 [ 177.379560][ T3086] total_active_file 0 [ 177.383542][ T3086] total_unevictable 0 [ 177.387605][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5343,uid=0 [ 177.403014][ T3086] Memory cgroup out of memory: OOM victim 5343 (syz-executor.5) is already exiting. Skip killing the task 03:05:19 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:19 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:19 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r1, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r5, r2, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r6, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r4, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 178.613835][ T3106] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 178.624941][ T3106] CPU: 0 PID: 3106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 178.634936][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 178.644995][ T3106] Call Trace: [ 178.648276][ T3106] [ 178.651201][ T3106] dump_stack_lvl+0xda/0x130 [ 178.655813][ T3106] dump_stack+0x15/0x20 [ 178.659979][ T3106] dump_header+0x82/0x2d0 [ 178.664452][ T3106] oom_kill_process+0x33a/0x4c0 [ 178.669316][ T3106] out_of_memory+0x9ca/0xbf0 [ 178.673935][ T3106] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 178.680038][ T3106] mem_cgroup_out_of_memory+0x139/0x190 [ 178.685649][ T3106] try_charge_memcg+0x759/0xd20 [ 178.690606][ T3106] ? __swap_duplicate+0x29b/0x2b0 [ 178.695629][ T3106] ? radix_tree_lookup+0xf9/0x150 [ 178.700675][ T3106] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 178.706821][ T3106] __read_swap_cache_async+0x2b9/0x510 [ 178.712292][ T3106] swap_cluster_readahead+0x276/0x3f0 [ 178.717719][ T3106] swapin_readahead+0xe2/0x7a0 [ 178.722491][ T3106] ? __filemap_get_folio+0x41a/0x5a0 [ 178.727790][ T3106] ? get_page_from_freelist+0x1414/0x1460 [ 178.733503][ T3106] ? swap_cache_get_folio+0x6e/0x200 [ 178.738836][ T3106] do_swap_page+0x44c/0x1570 [ 178.743427][ T3106] ? __rcu_read_lock+0x35/0x50 [ 178.748245][ T3106] ? pte_offset_map_nolock+0x124/0x1d0 [ 178.753701][ T3106] handle_mm_fault+0x7f6/0x27b0 [ 178.758558][ T3106] exc_page_fault+0x2f7/0x6d0 [ 178.763239][ T3106] asm_exc_page_fault+0x26/0x30 [ 178.768157][ T3106] RIP: 0010:__get_user_8+0x11/0x20 [ 178.773288][ T3106] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 178.792999][ T3106] RSP: 0018:ffffc90000f2be38 EFLAGS: 00050202 [ 178.799076][ T3106] RAX: 0000555556f78da8 RBX: ffffc90000f2be40 RCX: ffffffff81448b63 [ 178.807124][ T3106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810109ba90 [ 178.815142][ T3106] RBP: ffffc90000f2bf00 R08: 000188810109ba97 R09: 0000000000000000 [ 178.823148][ T3106] R10: 0001ffffffffffff R11: 000000000000578e R12: ffff88810109b0c0 [ 178.831123][ T3106] R13: ffff88810109ba90 R14: ffffc90000f2bf58 R15: ffffc90000f2bfd8 [ 178.839101][ T3106] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 178.845002][ T3106] __rseq_handle_notify_resume+0xc7/0xbf0 [ 178.850772][ T3106] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 178.856847][ T3106] ? __se_sys_clock_nanosleep+0x202/0x230 [ 178.862574][ T3106] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 178.868551][ T3106] syscall_exit_to_user_mode+0x8e/0x130 [ 178.874172][ T3106] do_syscall_64+0x65/0x120 [ 178.878674][ T3106] ? irqentry_exit+0x12/0x40 [ 178.883259][ T3106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 178.889152][ T3106] RIP: 0033:0x7ff768b6b0f3 [ 178.893566][ T3106] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 178.913337][ T3106] RSP: 002b:00007fffd2473ab8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 178.921761][ T3106] RAX: 0000000000000000 RBX: 000000000000012f RCX: 00007ff768b6b0f3 [ 178.929746][ T3106] RDX: 00007fffd2473ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.937800][ T3106] RBP: 00007fffd2473b5c R08: 0000000000000010 R09: 00007fffd25c20b0 [ 178.945769][ T3106] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 178.953741][ T3106] R13: 000000000002b914 R14: 000000000002b5c2 R15: 0000000000000004 [ 178.961719][ T3106] [ 178.964838][ T3106] memory: usage 100240kB, limit 307200kB, failcnt 11412 [ 178.971831][ T3106] memory+swap: usage 84324kB, limit 9007199254740988kB, failcnt 0 [ 178.979649][ T3106] kmem: usage 67004kB, limit 9007199254740988kB, failcnt 0 [ 178.986921][ T3106] Memory cgroup stats for /syz4: [ 178.988109][ T3106] cache 12288 [ 178.996381][ T3106] rss 0 [ 178.999145][ T3106] shmem 0 [ 179.002073][ T3106] mapped_file 0 [ 179.005577][ T3106] dirty 0 [ 179.008507][ T3106] writeback 0 [ 179.011782][ T3106] workingset_refault_anon 1504 [ 179.016639][ T3106] workingset_refault_file 79 [ 179.021220][ T3106] swap 208896 [ 179.024494][ T3106] swapcached 0 [ 179.027876][ T3106] pgpgin 4132 [ 179.031150][ T3106] pgpgout 4129 [ 179.034599][ T3106] pgfault 10550 [ 179.038220][ T3106] pgmajfault 595 [ 179.041818][ T3106] inactive_anon 0 [ 179.045454][ T3106] active_anon 0 [ 179.048917][ T3106] inactive_file 0 [ 179.052538][ T3106] active_file 12288 [ 179.056353][ T3106] unevictable 0 [ 179.059805][ T3106] hierarchical_memory_limit 314572800 [ 179.065262][ T3106] hierarchical_memsw_limit 9223372036854771712 [ 179.071478][ T3106] total_cache 12288 [ 179.075270][ T3106] total_rss 0 [ 179.078581][ T3106] total_shmem 0 [ 179.082032][ T3106] total_mapped_file 0 [ 179.086116][ T3106] total_dirty 0 [ 179.089568][ T3106] total_writeback 0 [ 179.093362][ T3106] total_workingset_refault_anon 1504 [ 179.098665][ T3106] total_workingset_refault_file 79 [ 179.103837][ T3106] total_swap 208896 [ 179.107652][ T3106] total_swapcached 0 [ 179.111555][ T3106] total_pgpgin 4132 [ 179.115353][ T3106] total_pgpgout 4129 [ 179.119304][ T3106] total_pgfault 10550 [ 179.123347][ T3106] total_pgmajfault 595 [ 179.127446][ T3106] total_inactive_anon 0 [ 179.131593][ T3106] total_active_anon 0 [ 179.135703][ T3106] total_inactive_file 0 [ 179.139936][ T3106] total_active_file 12288 [ 179.144259][ T3106] total_unevictable 0 [ 179.148257][ T3106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5368,uid=0 03:05:20 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x0, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:20 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:20 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:20 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x7, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 179.163521][ T3106] Memory cgroup out of memory: Killed process 5369 (syz-executor.4) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:05:20 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:20 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:21 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:21 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x0, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 180.279145][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 180.290540][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 180.300569][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 180.310625][ T3118] Call Trace: [ 180.313931][ T3118] [ 180.316945][ T3118] dump_stack_lvl+0xda/0x130 [ 180.321550][ T3118] dump_stack+0x15/0x20 [ 180.325713][ T3118] dump_header+0x82/0x2d0 [ 180.330173][ T3118] oom_kill_process+0x33a/0x4c0 [ 180.335088][ T3118] out_of_memory+0x9ca/0xbf0 [ 180.339763][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 180.345837][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 180.351487][ T3118] try_charge_memcg+0x759/0xd20 [ 180.356358][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 180.361374][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 180.366488][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 180.372598][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 180.378155][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 180.383555][ T3118] swapin_readahead+0xe2/0x7a0 [ 180.388539][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 180.393865][ T3118] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 180.399485][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 180.404789][ T3118] do_swap_page+0x44c/0x1570 [ 180.409398][ T3118] ? __rcu_read_lock+0x35/0x50 [ 180.414190][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 180.419668][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 180.424531][ T3118] exc_page_fault+0x2f7/0x6d0 [ 180.429251][ T3118] asm_exc_page_fault+0x26/0x30 [ 180.434186][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 180.439319][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 180.459003][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 180.465245][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 180.473300][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 180.481271][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 180.489243][ T3118] R10: 0001ffffffffffff R11: 000000000000afb7 R12: ffff888103d6c100 [ 180.497310][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 180.505347][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 180.511276][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 180.517045][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 180.523035][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 180.528785][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 180.534690][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 180.540247][ T3118] do_syscall_64+0x65/0x120 [ 180.544797][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 180.550691][ T3118] RIP: 0033:0x7fc472cd80f3 [ 180.555214][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 180.575554][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 180.584187][ T3118] RAX: 0000000000000000 RBX: 0000000000000149 RCX: 00007fc472cd80f3 [ 180.592625][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.600615][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 180.608623][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 180.616653][ T3118] R13: 000000000002bfd0 R14: 000000000002bc79 R15: 0000000000000008 [ 180.624803][ T3118] [ 180.627951][ T3118] memory: usage 307200kB, limit 307200kB, failcnt 12345 [ 180.634884][ T3118] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 180.642838][ T3118] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 180.650212][ T3118] Memory cgroup stats for /syz2: [ 180.650421][ T3118] cache 12288 [ 180.658805][ T3118] rss 0 [ 180.661660][ T3118] shmem 0 [ 180.664597][ T3118] mapped_file 0 [ 180.668100][ T3118] dirty 0 [ 180.671025][ T3118] writeback 0 [ 180.674299][ T3118] workingset_refault_anon 1651 [ 180.679113][ T3118] workingset_refault_file 96 [ 180.683701][ T3118] swap 233472 [ 180.686999][ T3118] swapcached 0 [ 180.690401][ T3118] pgpgin 4664 [ 180.693805][ T3118] pgpgout 4661 [ 180.697245][ T3118] pgfault 11121 [ 180.700705][ T3118] pgmajfault 650 [ 180.704283][ T3118] inactive_anon 0 [ 180.708092][ T3118] active_anon 0 [ 180.711603][ T3118] inactive_file 0 [ 180.715292][ T3118] active_file 12288 [ 180.719115][ T3118] unevictable 0 [ 180.722600][ T3118] hierarchical_memory_limit 314572800 [ 180.728040][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 180.734278][ T3118] total_cache 12288 [ 180.738192][ T3118] total_rss 0 [ 180.741471][ T3118] total_shmem 0 [ 180.744917][ T3118] total_mapped_file 0 [ 180.748907][ T3118] total_dirty 0 [ 180.752366][ T3118] total_writeback 0 [ 180.756251][ T3118] total_workingset_refault_anon 1651 [ 180.761528][ T3118] total_workingset_refault_file 96 [ 180.766663][ T3118] total_swap 233472 [ 180.770461][ T3118] total_swapcached 0 [ 180.774347][ T3118] total_pgpgin 4664 [ 180.778166][ T3118] total_pgpgout 4661 [ 180.782051][ T3118] total_pgfault 11121 [ 180.786150][ T3118] total_pgmajfault 650 [ 180.790202][ T3118] total_inactive_anon 0 [ 180.794374][ T3118] total_active_anon 0 [ 180.798381][ T3118] total_inactive_file 0 [ 180.802526][ T3118] total_active_file 12288 [ 180.806857][ T3118] total_unevictable 0 [ 180.810826][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5385,uid=0 [ 180.826124][ T3118] Memory cgroup out of memory: Killed process 5386 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:22 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:22 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:22 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 181.486046][ T5399] ================================================================== [ 181.494149][ T5399] BUG: KCSAN: data-race in drain_all_stock / try_charge_memcg [ 181.501628][ T5399] [ 181.503952][ T5399] write to 0xffff888237c2a990 of 4 bytes by task 5405 on cpu 0: [ 181.511579][ T5399] try_charge_memcg+0xb46/0xd20 [ 181.516966][ T5399] obj_cgroup_charge_pages+0xbd/0x1c0 [ 181.522342][ T5399] __memcg_kmem_charge_page+0x9c/0x170 [ 181.527810][ T5399] __alloc_pages+0x1bb/0x340 03:05:22 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 181.532409][ T5399] bpf_ringbuf_alloc+0xba/0x2f0 [ 181.537450][ T5399] ringbuf_map_alloc+0x167/0x1d0 [ 181.542399][ T5399] map_create+0x713/0xa40 [ 181.546733][ T5399] __sys_bpf+0x62a/0x780 [ 181.550981][ T5399] __x64_sys_bpf+0x43/0x50 [ 181.555404][ T5399] do_syscall_64+0x59/0x120 [ 181.559913][ T5399] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 181.565830][ T5399] [ 181.568153][ T5399] read to 0xffff888237c2a990 of 4 bytes by task 5399 on cpu 1: [ 181.575699][ T5399] drain_all_stock+0xd3/0x2e0 [ 181.580387][ T5399] try_charge_memcg+0x6c2/0xd20 [ 181.585264][ T5399] obj_cgroup_charge_pages+0xbd/0x1c0 [ 181.590654][ T5399] __memcg_kmem_charge_page+0x9c/0x170 [ 181.596132][ T5399] __alloc_pages+0x1bb/0x340 [ 181.600737][ T5399] bpf_ringbuf_alloc+0xba/0x2f0 [ 181.605594][ T5399] ringbuf_map_alloc+0x167/0x1d0 [ 181.610533][ T5399] map_create+0x713/0xa40 [ 181.614875][ T5399] __sys_bpf+0x62a/0x780 [ 181.619139][ T5399] __x64_sys_bpf+0x43/0x50 [ 181.623569][ T5399] do_syscall_64+0x59/0x120 [ 181.628086][ T5399] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 181.633991][ T5399] 03:05:23 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 181.636338][ T5399] value changed: 0x0000003f -> 0x00000026 [ 181.642063][ T5399] [ 181.644377][ T5399] Reported by Kernel Concurrency Sanitizer on: [ 181.650526][ T5399] CPU: 1 PID: 5399 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 181.660511][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 181.670662][ T5399] ================================================================== [ 181.808809][ T5404] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 181.820176][ T5404] CPU: 0 PID: 5404 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 181.830292][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 181.840364][ T5404] Call Trace: [ 181.843709][ T5404] [ 181.846643][ T5404] dump_stack_lvl+0xda/0x130 [ 181.851262][ T5404] dump_stack+0x15/0x20 [ 181.855468][ T5404] dump_header+0x82/0x2d0 [ 181.859814][ T5404] oom_kill_process+0x33a/0x4c0 [ 181.864730][ T5404] out_of_memory+0x9ca/0xbf0 [ 181.869341][ T5404] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 181.875502][ T5404] mem_cgroup_out_of_memory+0x139/0x190 [ 181.881082][ T5404] try_charge_memcg+0x759/0xd20 [ 181.885933][ T5404] ? __swap_duplicate+0x29b/0x2b0 [ 181.890951][ T5404] ? radix_tree_lookup+0xf9/0x150 [ 181.896131][ T5404] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 181.902265][ T5404] __read_swap_cache_async+0x2b9/0x510 [ 181.907774][ T5404] swap_cluster_readahead+0x276/0x3f0 [ 181.913249][ T5404] swapin_readahead+0xe2/0x7a0 [ 181.918107][ T5404] ? __filemap_get_folio+0x41a/0x5a0 [ 181.923486][ T5404] ? swap_cache_get_folio+0x6e/0x200 [ 181.928817][ T5404] do_swap_page+0x44c/0x1570 [ 181.933424][ T5404] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 181.938890][ T5404] ? __rcu_read_lock+0x35/0x50 [ 181.943661][ T5404] ? pte_offset_map_nolock+0x124/0x1d0 [ 181.949138][ T5404] handle_mm_fault+0x7f6/0x27b0 [ 181.954011][ T5404] ? mas_walk+0x204/0x320 [ 181.958345][ T5404] exc_page_fault+0x3ff/0x6d0 [ 181.963030][ T5404] asm_exc_page_fault+0x26/0x30 [ 181.967907][ T5404] RIP: 0033:0x7fc472c66d14 [ 181.972413][ T5404] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 181.992205][ T5404] RSP: 002b:00007ffeafb950b0 EFLAGS: 00010202 [ 181.998392][ T5404] RAX: 0000000000000000 RBX: 00007fc472ddbf80 RCX: 0000000000000000 [ 182.006373][ T5404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556560788 [ 182.014341][ T5404] RBP: 00007fc472ddd980 R08: 0000000000000000 R09: 00007ffeafbe80b0 [ 182.022354][ T5404] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002c67f [ 182.030370][ T5404] R13: ffffffffffffffff R14: 00007fc472830000 R15: 000000000002c33e [ 182.038347][ T5404] [ 182.041458][ T5404] memory: usage 307200kB, limit 307200kB, failcnt 12469 [ 182.049386][ T5404] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 182.057377][ T5404] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 182.064652][ T5404] Memory cgroup stats for /syz2: [ 182.195463][ T5404] cache 8192 [ 182.203608][ T5404] rss 8192 [ 182.206707][ T5404] shmem 0 [ 182.209678][ T5404] mapped_file 0 [ 182.213183][ T5404] dirty 0 [ 182.216118][ T5404] writeback 8192 [ 182.219654][ T5404] workingset_refault_anon 1669 [ 182.224421][ T5404] workingset_refault_file 96 [ 182.229054][ T5404] swap 106496 [ 182.232330][ T5404] swapcached 49152 [ 182.236118][ T5404] pgpgin 4707 [ 182.239397][ T5404] pgpgout 4693 [ 182.242750][ T5404] pgfault 11223 [ 182.246325][ T5404] pgmajfault 661 [ 182.249857][ T5404] inactive_anon 0 [ 182.253507][ T5404] active_anon 0 [ 182.256992][ T5404] inactive_file 8192 [ 182.260979][ T5404] active_file 0 [ 182.264473][ T5404] unevictable 0 [ 182.267969][ T5404] hierarchical_memory_limit 314572800 [ 182.273423][ T5404] hierarchical_memsw_limit 9223372036854771712 [ 182.279794][ T5404] total_cache 8192 [ 182.283593][ T5404] total_rss 8192 [ 182.287247][ T5404] total_shmem 0 [ 182.290797][ T5404] total_mapped_file 0 [ 182.294813][ T5404] total_dirty 0 [ 182.298346][ T5404] total_writeback 8192 [ 182.302457][ T5404] total_workingset_refault_anon 1669 [ 182.307780][ T5404] total_workingset_refault_file 96 [ 182.312894][ T5404] total_swap 106496 [ 182.316772][ T5404] total_swapcached 49152 [ 182.321037][ T5404] total_pgpgin 4707 [ 182.324850][ T5404] total_pgpgout 4693 [ 182.328761][ T5404] total_pgfault 11223 [ 182.332760][ T5404] total_pgmajfault 661 [ 182.336927][ T5404] total_inactive_anon 0 03:05:23 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0x0, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) [ 182.345890][ T5404] total_active_anon 0 [ 182.349873][ T5404] total_inactive_file 8192 [ 182.354279][ T5404] total_active_file 0 [ 182.358330][ T5404] total_unevictable 0 [ 182.362307][ T5404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5404,uid=0 [ 182.377631][ T5404] Memory cgroup out of memory: Killed process 5404 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:23 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x0, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:24 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:24 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:24 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 183.090041][ T5418] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 183.101417][ T5418] CPU: 1 PID: 5418 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 183.111403][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 183.121455][ T5418] Call Trace: [ 183.124727][ T5418] [ 183.127828][ T5418] dump_stack_lvl+0xda/0x130 [ 183.132438][ T5418] dump_stack+0x15/0x20 [ 183.136633][ T5418] dump_header+0x82/0x2d0 [ 183.140966][ T5418] oom_kill_process+0x33a/0x4c0 [ 183.145824][ T5418] out_of_memory+0x9ca/0xbf0 [ 183.150428][ T5418] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 183.156561][ T5418] mem_cgroup_out_of_memory+0x139/0x190 [ 183.162121][ T5418] try_charge_memcg+0x759/0xd20 [ 183.167005][ T5418] ? __swap_duplicate+0x29b/0x2b0 [ 183.172124][ T5418] ? radix_tree_lookup+0xf9/0x150 [ 183.177165][ T5418] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 183.183257][ T5418] __read_swap_cache_async+0x2b9/0x510 [ 183.188737][ T5418] swap_cluster_readahead+0x276/0x3f0 [ 183.194126][ T5418] swapin_readahead+0xe2/0x7a0 [ 183.198970][ T5418] ? __filemap_get_folio+0x41a/0x5a0 [ 183.204327][ T5418] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 183.209939][ T5418] ? swap_cache_get_folio+0x6e/0x200 [ 183.215244][ T5418] do_swap_page+0x44c/0x1570 [ 183.219835][ T5418] ? __rcu_read_lock+0x35/0x50 [ 183.224654][ T5418] ? pte_offset_map_nolock+0x124/0x1d0 [ 183.230116][ T5418] handle_mm_fault+0x7f6/0x27b0 [ 183.235041][ T5418] ? mas_walk+0x204/0x320 [ 183.239381][ T5418] exc_page_fault+0x3ff/0x6d0 [ 183.244091][ T5418] asm_exc_page_fault+0x26/0x30 [ 183.248947][ T5418] RIP: 0033:0x7f9fdba20d14 [ 183.253407][ T5418] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 183.273105][ T5418] RSP: 002b:00007ffd53fcf500 EFLAGS: 00010202 [ 183.279248][ T5418] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 0000000000000000 [ 183.287228][ T5418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556880788 [ 183.295238][ T5418] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 183.303240][ T5418] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002cbda [ 183.311213][ T5418] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 000000000002c899 [ 183.319366][ T5418] [ 183.322478][ T5418] memory: usage 307200kB, limit 307200kB, failcnt 11220 [ 183.329425][ T5418] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 183.337339][ T5418] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 183.344627][ T5418] Memory cgroup stats for /syz0: [ 183.344762][ T5418] cache 16384 [ 183.353048][ T5418] rss 0 [ 183.355915][ T5418] shmem 0 [ 183.358907][ T5418] mapped_file 0 [ 183.362356][ T5418] dirty 0 [ 183.365295][ T5418] writeback 4096 [ 183.368916][ T5418] workingset_refault_anon 1586 [ 183.373692][ T5418] workingset_refault_file 79 [ 183.378314][ T5418] swap 163840 [ 183.381657][ T5418] swapcached 4096 [ 183.385433][ T5418] pgpgin 5293 03:05:24 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 183.388706][ T5418] pgpgout 5288 [ 183.392073][ T5418] pgfault 13508 [ 183.395604][ T5418] pgmajfault 659 [ 183.399141][ T5418] inactive_anon 0 [ 183.402760][ T5418] active_anon 0 [ 183.406327][ T5418] inactive_file 4096 [ 183.410256][ T5418] active_file 12288 [ 183.414161][ T5418] unevictable 0 [ 183.417655][ T5418] hierarchical_memory_limit 314572800 [ 183.423013][ T5418] hierarchical_memsw_limit 9223372036854771712 [ 183.429208][ T5418] total_cache 16384 [ 183.433071][ T5418] total_rss 0 [ 183.436383][ T5418] total_shmem 0 [ 183.439833][ T5418] total_mapped_file 0 [ 183.443808][ T5418] total_dirty 0 [ 183.447360][ T5418] total_writeback 4096 [ 183.451548][ T5418] total_workingset_refault_anon 1586 [ 183.456845][ T5418] total_workingset_refault_file 79 [ 183.461959][ T5418] total_swap 163840 [ 183.465783][ T5418] total_swapcached 4096 [ 183.469929][ T5418] total_pgpgin 5293 [ 183.473727][ T5418] total_pgpgout 5288 [ 183.477697][ T5418] total_pgfault 13508 [ 183.481673][ T5418] total_pgmajfault 659 [ 183.485753][ T5418] total_inactive_anon 0 [ 183.489902][ T5418] total_active_anon 0 [ 183.493930][ T5418] total_inactive_file 4096 [ 183.498377][ T5418] total_active_file 12288 [ 183.502759][ T5418] total_unevictable 0 [ 183.506801][ T5418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5418,uid=0 [ 183.522229][ T5418] Memory cgroup out of memory: Killed process 5418 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 184.010984][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 184.022145][ T3118] CPU: 0 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 184.032144][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 184.042199][ T3118] Call Trace: [ 184.045471][ T3118] [ 184.048392][ T3118] dump_stack_lvl+0xda/0x130 [ 184.053082][ T3118] dump_stack+0x15/0x20 [ 184.057288][ T3118] dump_header+0x82/0x2d0 [ 184.061642][ T3118] oom_kill_process+0x33a/0x4c0 [ 184.066588][ T3118] out_of_memory+0x9ca/0xbf0 [ 184.071184][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 184.077305][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 184.082945][ T3118] try_charge_memcg+0x759/0xd20 [ 184.087871][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 184.092980][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 184.098080][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 184.104233][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 184.109796][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 184.115221][ T3118] swapin_readahead+0xe2/0x7a0 [ 184.120014][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 184.125354][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 184.130734][ T3118] do_swap_page+0x44c/0x1570 [ 184.135328][ T3118] ? __rcu_read_lock+0x35/0x50 [ 184.140231][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 184.145694][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 184.150545][ T3118] exc_page_fault+0x2f7/0x6d0 [ 184.155403][ T3118] asm_exc_page_fault+0x26/0x30 03:05:25 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 184.160369][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 184.165522][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 184.185191][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 184.191313][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 184.199310][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 184.207286][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 184.215255][ T3118] R10: 0001ffffffffffff R11: 0000000000008b40 R12: ffff888103d6c100 [ 184.223383][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 184.231362][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 184.237319][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 184.243052][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 184.249043][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 184.254768][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 184.260766][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 184.266546][ T3118] do_syscall_64+0x65/0x120 [ 184.271231][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 184.277136][ T3118] RIP: 0033:0x7fc472cd80f3 [ 184.281560][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 184.301328][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 184.309752][ T3118] RAX: 0000000000000000 RBX: 000000000000014f RCX: 00007fc472cd80f3 [ 184.317751][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.325732][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 184.333705][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 184.341685][ T3118] R13: 000000000002cd69 R14: 000000000002ca14 R15: 0000000000000008 [ 184.349746][ T3118] [ 184.352927][ T3118] memory: usage 76kB, limit 307200kB, failcnt 12632 03:05:25 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) [ 184.359678][ T3118] memory+swap: usage 136kB, limit 9007199254740988kB, failcnt 0 [ 184.367391][ T3118] kmem: usage 64kB, limit 9007199254740988kB, failcnt 0 [ 184.374346][ T3118] Memory cgroup stats for /syz2: [ 184.382013][ T3118] cache 12288 [ 184.390367][ T3118] rss 0 [ 184.393124][ T3118] shmem 0 [ 184.396080][ T3118] mapped_file 0 [ 184.399531][ T3118] dirty 0 [ 184.402465][ T3118] writeback 0 [ 184.405794][ T3118] workingset_refault_anon 1694 [ 184.410582][ T3118] workingset_refault_file 97 [ 184.415160][ T3118] swap 57344 [ 184.418379][ T3118] swapcached 4096 [ 184.422007][ T3118] pgpgin 4758 [ 184.425308][ T3118] pgpgout 4754 [ 184.428694][ T3118] pgfault 11317 [ 184.432142][ T3118] pgmajfault 670 [ 184.435691][ T3118] inactive_anon 4096 [ 184.439573][ T3118] active_anon 0 [ 184.443022][ T3118] inactive_file 12288 [ 184.447048][ T3118] active_file 0 [ 184.450497][ T3118] unevictable 0 [ 184.453946][ T3118] hierarchical_memory_limit 314572800 [ 184.459471][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 184.465639][ T3118] total_cache 12288 [ 184.469437][ T3118] total_rss 0 [ 184.472772][ T3118] total_shmem 0 [ 184.476314][ T3118] total_mapped_file 0 [ 184.480343][ T3118] total_dirty 0 [ 184.483788][ T3118] total_writeback 0 [ 184.487625][ T3118] total_workingset_refault_anon 1694 [ 184.492902][ T3118] total_workingset_refault_file 97 [ 184.498030][ T3118] total_swap 57344 [ 184.501736][ T3118] total_swapcached 4096 [ 184.505897][ T3118] total_pgpgin 4758 [ 184.509702][ T3118] total_pgpgout 4754 [ 184.513602][ T3118] total_pgfault 11317 [ 184.517614][ T3118] total_pgmajfault 670 [ 184.521673][ T3118] total_inactive_anon 4096 [ 184.526112][ T3118] total_active_anon 0 [ 184.530219][ T3118] total_inactive_file 12288 [ 184.534710][ T3118] total_active_file 0 [ 184.538843][ T3118] total_unevictable 0 [ 184.542836][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5426,uid=0 03:05:26 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) [ 184.558169][ T3118] Memory cgroup out of memory: OOM victim 5426 (syz-executor.2) is already exiting. Skip killing the task 03:05:26 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0x0, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:26 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:26 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:27 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:27 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) 03:05:27 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r4, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:27 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:27 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0x0, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:27 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 186.936954][ T5463] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 186.948301][ T5463] CPU: 1 PID: 5463 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 186.958286][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 186.968457][ T5463] Call Trace: [ 186.971813][ T5463] [ 186.974741][ T5463] dump_stack_lvl+0xda/0x130 [ 186.979343][ T5463] dump_stack+0x15/0x20 [ 186.983509][ T5463] dump_header+0x82/0x2d0 [ 186.987853][ T5463] oom_kill_process+0x33a/0x4c0 [ 186.992756][ T5463] out_of_memory+0x9ca/0xbf0 [ 186.997455][ T5463] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 187.003546][ T5463] mem_cgroup_out_of_memory+0x139/0x190 [ 187.009224][ T5463] try_charge_memcg+0x759/0xd20 [ 187.014135][ T5463] ? __swap_duplicate+0x29b/0x2b0 [ 187.019220][ T5463] ? radix_tree_lookup+0xf9/0x150 [ 187.024245][ T5463] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 187.030323][ T5463] __read_swap_cache_async+0x2b9/0x510 [ 187.035825][ T5463] swap_cluster_readahead+0x276/0x3f0 [ 187.041237][ T5463] swapin_readahead+0xe2/0x7a0 [ 187.046049][ T5463] ? __filemap_get_folio+0x41a/0x5a0 [ 187.051334][ T5463] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 187.056976][ T5463] ? swap_cache_get_folio+0x6e/0x200 [ 187.062369][ T5463] do_swap_page+0x44c/0x1570 [ 187.067040][ T5463] ? __rcu_read_lock+0x35/0x50 [ 187.071823][ T5463] ? pte_offset_map_nolock+0x124/0x1d0 [ 187.077303][ T5463] handle_mm_fault+0x7f6/0x27b0 [ 187.082158][ T5463] ? mas_walk+0x204/0x320 [ 187.086638][ T5463] exc_page_fault+0x3ff/0x6d0 [ 187.091327][ T5463] asm_exc_page_fault+0x26/0x30 [ 187.096195][ T5463] RIP: 0033:0x7fd7c75aad14 [ 187.100607][ T5463] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 187.120589][ T5463] RSP: 002b:00007ffc502d0f80 EFLAGS: 00010206 [ 187.126732][ T5463] RAX: 0000000000000000 RBX: 00007fd7c771ff80 RCX: 0000000000000000 03:05:28 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r3, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) [ 187.134706][ T5463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555c17788 [ 187.142724][ T5463] RBP: 00007fd7c7721980 R08: 0000000000000000 R09: 00007ffc503440b0 [ 187.150781][ T5463] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002da31 [ 187.158824][ T5463] R13: ffffffffffffffff R14: 00007fd7c7174000 R15: 000000000002d6f0 [ 187.166811][ T5463] [ 187.169993][ T5463] memory: usage 307200kB, limit 307200kB, failcnt 10715 [ 187.177250][ T5463] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 187.185244][ T5463] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 187.192565][ T5463] Memory cgroup stats for /syz1: [ 187.193886][ T5463] cache 8192 [ 187.202222][ T5463] rss 8192 [ 187.205333][ T5463] shmem 0 [ 187.208317][ T5463] mapped_file 0 [ 187.211857][ T5463] dirty 0 [ 187.214849][ T5463] writeback 8192 [ 187.218468][ T5463] workingset_refault_anon 1466 [ 187.223354][ T5463] workingset_refault_file 102 [ 187.228060][ T5463] swap 135168 [ 187.231419][ T5463] swapcached 8192 [ 187.235131][ T5463] pgpgin 5331 [ 187.238444][ T5463] pgpgout 5327 [ 187.241846][ T5463] pgfault 13550 [ 187.245350][ T5463] pgmajfault 668 [ 187.248957][ T5463] inactive_anon 0 [ 187.252585][ T5463] active_anon 0 [ 187.256112][ T5463] inactive_file 8192 [ 187.260003][ T5463] active_file 0 [ 187.263460][ T5463] unevictable 0 [ 187.266928][ T5463] hierarchical_memory_limit 314572800 [ 187.272317][ T5463] hierarchical_memsw_limit 9223372036854771712 [ 187.278558][ T5463] total_cache 8192 [ 187.282272][ T5463] total_rss 8192 [ 187.285866][ T5463] total_shmem 0 [ 187.289312][ T5463] total_mapped_file 0 [ 187.293342][ T5463] total_dirty 0 [ 187.296866][ T5463] total_writeback 8192 [ 187.301003][ T5463] total_workingset_refault_anon 1466 [ 187.306391][ T5463] total_workingset_refault_file 102 [ 187.311577][ T5463] total_swap 135168 [ 187.315421][ T5463] total_swapcached 8192 [ 187.319619][ T5463] total_pgpgin 5331 [ 187.323440][ T5463] total_pgpgout 5327 [ 187.327433][ T5463] total_pgfault 13550 [ 187.331410][ T5463] total_pgmajfault 668 [ 187.335487][ T5463] total_inactive_anon 0 [ 187.339681][ T5463] total_active_anon 0 [ 187.343654][ T5463] total_inactive_file 8192 [ 187.348106][ T5463] total_active_file 0 [ 187.352193][ T5463] total_unevictable 0 [ 187.356236][ T5463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5455,uid=0 [ 187.371630][ T5463] Memory cgroup out of memory: Killed process 5456 (syz-executor.1) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 187.389357][ T5470] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 187.400779][ T5470] CPU: 0 PID: 5470 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 187.411038][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 187.421102][ T5470] Call Trace: [ 187.424475][ T5470] [ 187.427418][ T5470] dump_stack_lvl+0xda/0x130 [ 187.432083][ T5470] dump_stack+0x15/0x20 [ 187.436264][ T5470] dump_header+0x82/0x2d0 [ 187.440613][ T5470] oom_kill_process+0x33a/0x4c0 [ 187.445544][ T5470] out_of_memory+0x9ca/0xbf0 [ 187.450157][ T5470] mem_cgroup_out_of_memory+0x139/0x190 [ 187.455716][ T5470] try_charge_memcg+0x759/0xd20 [ 187.460629][ T5470] ? __swap_duplicate+0x29b/0x2b0 [ 187.465832][ T5470] ? radix_tree_lookup+0xf9/0x150 [ 187.470882][ T5470] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 187.477019][ T5470] __read_swap_cache_async+0x2b9/0x510 [ 187.482562][ T5470] swap_cluster_readahead+0x276/0x3f0 [ 187.488013][ T5470] swapin_readahead+0xe2/0x7a0 [ 187.492886][ T5470] ? __filemap_get_folio+0x41a/0x5a0 [ 187.498196][ T5470] ? swap_cache_get_folio+0x6e/0x200 [ 187.503571][ T5470] do_swap_page+0x44c/0x1570 [ 187.508338][ T5470] ? __rcu_read_lock+0x35/0x50 [ 187.513117][ T5470] ? pte_offset_map_nolock+0x124/0x1d0 [ 187.518593][ T5470] handle_mm_fault+0x7f6/0x27b0 [ 187.523605][ T5470] ? mas_walk+0x204/0x320 [ 187.527950][ T5470] exc_page_fault+0x3ff/0x6d0 [ 187.532660][ T5470] asm_exc_page_fault+0x26/0x30 [ 187.537515][ T5470] RIP: 0033:0x7ff768afb9cc [ 187.542054][ T5470] Code: 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce 89 d5 49 89 d7 81 e5 00 f0 ff ff <80> 3d e5 f6 16 00 00 75 3f be 00 00 00 80 48 8d 3c 32 48 81 ff ff [ 187.561674][ T5470] RSP: 002b:00007fffd2473830 EFLAGS: 00010286 [ 187.567756][ T5470] RAX: 0000000000000000 RBX: 00007ff768c6f018 RCX: 0000000000000000 [ 187.575879][ T5470] RDX: ffffffff81333600 RSI: 00007ff7684c3008 RDI: 00007ff768c6f018 [ 187.583913][ T5470] RBP: 0000000081333000 R08: 0000001b2d620000 R09: 0000000000000000 [ 187.591934][ T5470] R10: 0000000000000001 R11: 0000000000008352 R12: 0000000000000000 [ 187.599946][ T5470] R13: 0000000000000001 R14: 00007ff768c63000 R15: ffffffff81333600 [ 187.607993][ T5470] ? __x64_sys_bpf+0x10/0x50 [ 187.612620][ T5470] ? __x64_sys_bpf+0x10/0x50 [ 187.617274][ T5470] [ 187.620510][ T5470] memory: usage 147300kB, limit 307200kB, failcnt 12026 [ 187.627447][ T5470] memory+swap: usage 125332kB, limit 9007199254740988kB, failcnt 0 [ 187.635416][ T5470] kmem: usage 101140kB, limit 9007199254740988kB, failcnt 0 [ 187.642746][ T5470] Memory cgroup stats for /syz4: [ 187.643847][ T5470] cache 4096 [ 187.651976][ T5470] rss 0 [ 187.654781][ T5470] shmem 0 [ 187.657738][ T5470] mapped_file 0 [ 187.661183][ T5470] dirty 0 [ 187.664190][ T5470] writeback 0 [ 187.667554][ T5470] workingset_refault_anon 1591 [ 187.672348][ T5470] workingset_refault_file 83 [ 187.676997][ T5470] swap 135168 [ 187.680288][ T5470] swapcached 8192 [ 187.683962][ T5470] pgpgin 4365 [ 187.687269][ T5470] pgpgout 4362 [ 187.690645][ T5470] pgfault 11260 [ 187.694147][ T5470] pgmajfault 634 [ 187.697735][ T5470] inactive_anon 8192 [ 187.701663][ T5470] active_anon 0 [ 187.705127][ T5470] inactive_file 4096 [ 187.709031][ T5470] active_file 0 [ 187.712566][ T5470] unevictable 0 [ 187.716048][ T5470] hierarchical_memory_limit 314572800 [ 187.721459][ T5470] hierarchical_memsw_limit 9223372036854771712 [ 187.727651][ T5470] total_cache 4096 [ 187.731359][ T5470] total_rss 0 [ 187.734639][ T5470] total_shmem 0 [ 187.738105][ T5470] total_mapped_file 0 [ 187.742083][ T5470] total_dirty 0 [ 187.745579][ T5470] total_writeback 0 [ 187.749483][ T5470] total_workingset_refault_anon 1591 [ 187.754850][ T5470] total_workingset_refault_file 83 [ 187.759992][ T5470] total_swap 135168 [ 187.763806][ T5470] total_swapcached 8192 [ 187.768271][ T5470] total_pgpgin 4365 [ 187.772164][ T5470] total_pgpgout 4362 [ 187.776150][ T5470] total_pgfault 11260 [ 187.780122][ T5470] total_pgmajfault 634 [ 187.784183][ T5470] total_inactive_anon 8192 03:05:28 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 187.788648][ T5470] total_active_anon 0 [ 187.792626][ T5470] total_inactive_file 4096 [ 187.797054][ T5470] total_active_file 0 [ 187.801029][ T5470] total_unevictable 0 [ 187.804996][ T5470] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5470,uid=0 [ 187.820426][ T5470] Memory cgroup out of memory: Killed process 5470 (syz-executor.4) total-vm:46440kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:05:29 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r3, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:29 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:29 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:29 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x0, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:29 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0x0, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) [ 188.950500][ T5477] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 188.961984][ T5477] CPU: 0 PID: 5477 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 188.972039][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 188.982085][ T5477] Call Trace: [ 188.985356][ T5477] [ 188.988715][ T5477] dump_stack_lvl+0xda/0x130 [ 188.993337][ T5477] dump_stack+0x15/0x20 [ 188.997485][ T5477] dump_header+0x82/0x2d0 [ 189.001812][ T5477] oom_kill_process+0x33a/0x4c0 [ 189.006666][ T5477] out_of_memory+0x9ca/0xbf0 [ 189.011338][ T5477] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 189.017568][ T5477] mem_cgroup_out_of_memory+0x139/0x190 [ 189.023144][ T5477] try_charge_memcg+0x759/0xd20 [ 189.027992][ T5477] ? __swap_duplicate+0x29b/0x2b0 [ 189.033007][ T5477] ? radix_tree_lookup+0xf9/0x150 [ 189.038198][ T5477] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 189.044264][ T5477] __read_swap_cache_async+0x2b9/0x510 [ 189.049805][ T5477] swap_cluster_readahead+0x276/0x3f0 [ 189.055212][ T5477] swapin_readahead+0xe2/0x7a0 [ 189.059985][ T5477] ? __filemap_get_folio+0x41a/0x5a0 [ 189.065347][ T5477] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 189.070919][ T5477] ? swap_cache_get_folio+0x6e/0x200 [ 189.076208][ T5477] do_swap_page+0x44c/0x1570 [ 189.080881][ T5477] ? __rcu_read_lock+0x35/0x50 [ 189.085640][ T5477] ? pte_offset_map_nolock+0x124/0x1d0 [ 189.091161][ T5477] handle_mm_fault+0x7f6/0x27b0 [ 189.096031][ T5477] ? mas_walk+0x204/0x320 [ 189.100398][ T5477] exc_page_fault+0x3ff/0x6d0 [ 189.105091][ T5477] asm_exc_page_fault+0x26/0x30 [ 189.109936][ T5477] RIP: 0033:0x7f9fdba20d14 [ 189.114337][ T5477] Code: 01 00 00 69 3d a1 e9 c9 00 e8 03 00 00 48 8d 1d 82 52 17 00 e8 ad 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 189.133998][ T5477] RSP: 002b:00007ffd53fcf500 EFLAGS: 00010202 [ 189.140106][ T5477] RAX: 0000000000000000 RBX: 00007f9fdbb95f80 RCX: 0000000000000000 [ 189.148175][ T5477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556880788 [ 189.156134][ T5477] RBP: 00007f9fdbb97980 R08: 0000000000000000 R09: 00007ffd53fe40b0 [ 189.164119][ T5477] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002e224 [ 189.172117][ T5477] R13: ffffffffffffffff R14: 00007f9fdb5ea000 R15: 000000000002dee3 [ 189.180088][ T5477] [ 189.183135][ T5477] memory: usage 307152kB, limit 307200kB, failcnt 12092 [ 189.190149][ T5477] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0 [ 189.198114][ T5477] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 189.205428][ T5477] Memory cgroup stats for /syz0: [ 189.205551][ T5477] cache 12288 [ 189.213798][ T5477] rss 16384 [ 189.216932][ T5477] shmem 0 [ 189.219871][ T5477] mapped_file 0 [ 189.223321][ T5477] dirty 0 [ 189.226267][ T5477] writeback 0 [ 189.229547][ T5477] workingset_refault_anon 1640 [ 189.234305][ T5477] workingset_refault_file 81 [ 189.238959][ T5477] swap 102400 [ 189.242240][ T5477] swapcached 65536 [ 189.245964][ T5477] pgpgin 5427 [ 189.249243][ T5477] pgpgout 5408 [ 189.252604][ T5477] pgfault 13788 [ 189.256146][ T5477] pgmajfault 684 [ 189.259725][ T5477] inactive_anon 0 [ 189.263346][ T5477] active_anon 0 [ 189.266822][ T5477] inactive_file 0 [ 189.270452][ T5477] active_file 12288 [ 189.274265][ T5477] unevictable 0 [ 189.277748][ T5477] hierarchical_memory_limit 314572800 [ 189.283111][ T5477] hierarchical_memsw_limit 9223372036854771712 [ 189.289344][ T5477] total_cache 12288 [ 189.293144][ T5477] total_rss 16384 [ 189.296874][ T5477] total_shmem 0 [ 189.300335][ T5477] total_mapped_file 0 [ 189.304383][ T5477] total_dirty 0 [ 189.307874][ T5477] total_writeback 0 [ 189.311670][ T5477] total_workingset_refault_anon 1640 [ 189.316974][ T5477] total_workingset_refault_file 81 [ 189.322078][ T5477] total_swap 102400 [ 189.325938][ T5477] total_swapcached 65536 [ 189.330243][ T5477] total_pgpgin 5427 [ 189.334059][ T5477] total_pgpgout 5408 [ 189.338000][ T5477] total_pgfault 13788 [ 189.341998][ T5477] total_pgmajfault 684 [ 189.346098][ T5477] total_inactive_anon 0 [ 189.350262][ T5477] total_active_anon 0 [ 189.354243][ T5477] total_inactive_file 0 [ 189.358440][ T5477] total_active_file 12288 [ 189.362844][ T5477] total_unevictable 0 [ 189.366863][ T5477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5477,uid=0 [ 189.382077][ T5477] Memory cgroup out of memory: Killed process 5477 (syz-executor.0) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 189.508106][ T3118] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 189.519249][ T3118] CPU: 0 PID: 3118 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 189.529232][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 189.539286][ T3118] Call Trace: [ 189.542577][ T3118] [ 189.545502][ T3118] dump_stack_lvl+0xda/0x130 [ 189.550093][ T3118] dump_stack+0x15/0x20 [ 189.554249][ T3118] dump_header+0x82/0x2d0 [ 189.558628][ T3118] oom_kill_process+0x33a/0x4c0 [ 189.563489][ T3118] out_of_memory+0x9ca/0xbf0 [ 189.568220][ T3118] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 189.574294][ T3118] mem_cgroup_out_of_memory+0x139/0x190 [ 189.579855][ T3118] try_charge_memcg+0x759/0xd20 [ 189.584733][ T3118] ? __swap_duplicate+0x29b/0x2b0 [ 189.589804][ T3118] ? radix_tree_lookup+0xf9/0x150 [ 189.594860][ T3118] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 189.600928][ T3118] __read_swap_cache_async+0x2b9/0x510 [ 189.606438][ T3118] swap_cluster_readahead+0x276/0x3f0 [ 189.611826][ T3118] swapin_readahead+0xe2/0x7a0 [ 189.616630][ T3118] ? __filemap_get_folio+0x41a/0x5a0 [ 189.621939][ T3118] ? __lruvec_stat_mod_folio+0xd7/0x120 [ 189.627508][ T3118] ? swap_cache_get_folio+0x6e/0x200 [ 189.632902][ T3118] do_swap_page+0x44c/0x1570 [ 189.637496][ T3118] ? __rcu_read_lock+0x35/0x50 [ 189.642267][ T3118] ? pte_offset_map_nolock+0x124/0x1d0 [ 189.647847][ T3118] handle_mm_fault+0x7f6/0x27b0 [ 189.652712][ T3118] exc_page_fault+0x2f7/0x6d0 [ 189.657477][ T3118] asm_exc_page_fault+0x26/0x30 [ 189.662437][ T3118] RIP: 0010:__get_user_8+0x11/0x20 [ 189.667562][ T3118] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 189.687206][ T3118] RSP: 0018:ffffc90000f5be38 EFLAGS: 00050202 [ 189.693285][ T3118] RAX: 0000555556560da8 RBX: ffffc90000f5be40 RCX: ffffffff81448b63 [ 189.701245][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103d6cad0 [ 189.709209][ T3118] RBP: ffffc90000f5bf00 R08: 0001888103d6cad7 R09: 0000000000000000 [ 189.717170][ T3118] R10: 0001ffffffffffff R11: 000000000000aa88 R12: ffff888103d6c100 [ 189.725193][ T3118] R13: ffff888103d6cad0 R14: ffffc90000f5bf58 R15: ffffc90000f5bfd8 [ 189.733207][ T3118] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 189.739100][ T3118] __rseq_handle_notify_resume+0xc7/0xbf0 [ 189.744886][ T3118] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 189.750860][ T3118] ? __se_sys_clock_nanosleep+0x202/0x230 [ 189.756578][ T3118] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 189.762525][ T3118] syscall_exit_to_user_mode+0x8e/0x130 [ 189.768106][ T3118] do_syscall_64+0x65/0x120 [ 189.772634][ T3118] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 189.778568][ T3118] RIP: 0033:0x7fc472cd80f3 [ 189.783043][ T3118] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 189.802673][ T3118] RSP: 002b:00007ffeafb95298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 189.811074][ T3118] RAX: 0000000000000000 RBX: 000000000000015c RCX: 00007fc472cd80f3 [ 189.819089][ T3118] RDX: 00007ffeafb952b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.827048][ T3118] RBP: 00007ffeafb9533c R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 189.835038][ T3118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 189.843014][ T3118] R13: 000000000002e2f8 R14: 000000000002ded2 R15: 0000000000000007 [ 189.851018][ T3118] [ 189.854170][ T3118] memory: usage 8372kB, limit 307200kB, failcnt 13061 [ 189.861016][ T3118] memory+swap: usage 8524kB, limit 9007199254740988kB, failcnt 0 [ 189.868782][ T3118] kmem: usage 8356kB, limit 9007199254740988kB, failcnt 0 [ 189.875950][ T3118] Memory cgroup stats for /syz2: [ 189.876157][ T3118] cache 16384 [ 189.884347][ T3118] rss 0 [ 189.887120][ T3118] shmem 0 [ 189.890044][ T3118] mapped_file 0 [ 189.893588][ T3118] dirty 0 [ 189.896524][ T3118] writeback 0 [ 189.899796][ T3118] workingset_refault_anon 1770 [ 189.904553][ T3118] workingset_refault_file 101 [ 189.909269][ T3118] swap 155648 [ 189.912577][ T3118] swapcached 0 [ 189.915957][ T3118] pgpgin 4939 [ 189.919235][ T3118] pgpgout 4935 [ 189.922603][ T3118] pgfault 11775 [ 189.926212][ T3118] pgmajfault 701 [ 189.929750][ T3118] inactive_anon 0 [ 189.933447][ T3118] active_anon 0 [ 189.936944][ T3118] inactive_file 12288 [ 189.940957][ T3118] active_file 4096 [ 189.944774][ T3118] unevictable 0 [ 189.948238][ T3118] hierarchical_memory_limit 314572800 [ 189.953611][ T3118] hierarchical_memsw_limit 9223372036854771712 [ 189.959814][ T3118] total_cache 16384 [ 189.963625][ T3118] total_rss 0 [ 189.967065][ T3118] total_shmem 0 [ 189.970516][ T3118] total_mapped_file 0 [ 189.974491][ T3118] total_dirty 0 [ 189.977968][ T3118] total_writeback 0 [ 189.981777][ T3118] total_workingset_refault_anon 1770 [ 189.987064][ T3118] total_workingset_refault_file 101 [ 189.992277][ T3118] total_swap 155648 [ 189.996103][ T3118] total_swapcached 0 [ 189.999980][ T3118] total_pgpgin 4939 [ 190.003859][ T3118] total_pgpgout 4935 [ 190.007825][ T3118] total_pgfault 11775 [ 190.011802][ T3118] total_pgmajfault 701 [ 190.016035][ T3118] total_inactive_anon 0 [ 190.020248][ T3118] total_active_anon 0 [ 190.024220][ T3118] total_inactive_file 12288 [ 190.028740][ T3118] total_active_file 4096 [ 190.033045][ T3118] total_unevictable 0 [ 190.037063][ T3118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5478,uid=0 [ 190.052267][ T3118] Memory cgroup out of memory: Killed process 5482 (syz-executor.2) total-vm:46440kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:05:31 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r2 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:31 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r0, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp, 0x2}, 0x20) 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) 03:05:31 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x0, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r2, 0x58, &(0x7f0000001740)}, 0x10) 03:05:31 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 190.347472][ T3086] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 190.358653][ T3086] CPU: 0 PID: 3086 Comm: syz-executor.5 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 190.368767][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 190.378878][ T3086] Call Trace: [ 190.382160][ T3086] [ 190.385091][ T3086] dump_stack_lvl+0xda/0x130 [ 190.389682][ T3086] dump_stack+0x15/0x20 [ 190.393838][ T3086] dump_header+0x82/0x2d0 [ 190.398247][ T3086] oom_kill_process+0x33a/0x4c0 [ 190.403141][ T3086] out_of_memory+0x9ca/0xbf0 [ 190.407738][ T3086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 190.413827][ T3086] mem_cgroup_out_of_memory+0x139/0x190 [ 190.419505][ T3086] try_charge_memcg+0x759/0xd20 [ 190.424401][ T3086] ? __swap_duplicate+0x29b/0x2b0 [ 190.429508][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 190.434538][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 190.440625][ T3086] __read_swap_cache_async+0x2b9/0x510 [ 190.446153][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 190.451603][ T3086] swapin_readahead+0xe2/0x7a0 [ 190.456397][ T3086] ? __filemap_get_folio+0x41a/0x5a0 [ 190.461759][ T3086] ? swap_cache_get_folio+0x6e/0x200 [ 190.467083][ T3086] do_swap_page+0x44c/0x1570 [ 190.471770][ T3086] ? __rcu_read_lock+0x35/0x50 [ 190.476547][ T3086] ? pte_offset_map_nolock+0x124/0x1d0 [ 190.482079][ T3086] handle_mm_fault+0x7f6/0x27b0 [ 190.487108][ T3086] ? mas_walk+0x204/0x320 [ 190.491455][ T3086] exc_page_fault+0x3ff/0x6d0 03:05:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 190.496151][ T3086] asm_exc_page_fault+0x26/0x30 [ 190.501057][ T3086] RIP: 0033:0x7fd7c759db60 [ 190.505558][ T3086] Code: 53 48 81 ec b8 06 00 00 89 74 24 0c be 01 00 00 00 89 54 24 08 ba 06 00 00 00 e8 4b 4f 05 00 89 c5 83 f8 ff 0f 84 68 01 00 00 <41> 8b 44 24 28 85 c0 0f 84 2e 01 00 00 48 8d 5c 24 20 45 31 f6 b9 [ 190.525199][ T3086] RSP: 002b:00007ffc502d0ac0 EFLAGS: 00010283 [ 190.531275][ T3086] RAX: 0000000000000000 RBX: 00007ffc502d0b40 RCX: 0000000000000000 [ 190.539334][ T3086] RDX: 00007fd7c76f0e68 RSI: 0000002488be0028 RDI: 0000000000000058 [ 190.547308][ T3086] RBP: 0000000000000003 R08: 00007ffc502d0adc R09: 00007ffc502d0ef7 [ 190.555281][ T3086] R10: 00007ffc502d0b40 R11: 0000000000000212 R12: 00007fd7c76f1140 [ 190.563263][ T3086] R13: 00007ffc502d0adc R14: 0000000000000000 R15: 00007fd7c76f1ec0 [ 190.571282][ T3086] [ 190.574383][ T3086] memory: usage 307200kB, limit 307200kB, failcnt 10953 [ 190.581452][ T3086] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 190.589392][ T3086] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 190.596771][ T3086] Memory cgroup stats for /syz1: [ 190.596912][ T3086] cache 12288 [ 190.605208][ T3086] rss 8192 [ 190.608271][ T3086] shmem 0 [ 190.611204][ T3086] mapped_file 0 [ 190.614706][ T3086] dirty 0 [ 190.617701][ T3086] writeback 8192 [ 190.621317][ T3086] workingset_refault_anon 1493 [ 190.626136][ T3086] workingset_refault_file 103 [ 190.630876][ T3086] swap 135168 [ 190.634147][ T3086] swapcached 8192 [ 190.637887][ T3086] pgpgin 5382 [ 190.641170][ T3086] pgpgout 5377 [ 190.644535][ T3086] pgfault 13664 [ 190.648083][ T3086] pgmajfault 675 [ 190.651723][ T3086] inactive_anon 0 [ 190.655381][ T3086] active_anon 0 [ 190.658871][ T3086] inactive_file 0 [ 190.662611][ T3086] active_file 12288 [ 190.666462][ T3086] unevictable 0 [ 190.669933][ T3086] hierarchical_memory_limit 314572800 [ 190.675308][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 190.681583][ T3086] total_cache 12288 [ 190.685436][ T3086] total_rss 8192 [ 190.688981][ T3086] total_shmem 0 [ 190.692432][ T3086] total_mapped_file 0 [ 190.696444][ T3086] total_dirty 0 [ 190.699918][ T3086] total_writeback 8192 [ 190.703985][ T3086] total_workingset_refault_anon 1493 [ 190.709344][ T3086] total_workingset_refault_file 103 [ 190.714544][ T3086] total_swap 135168 [ 190.718370][ T3086] total_swapcached 8192 [ 190.722542][ T3086] total_pgpgin 5382 [ 190.726392][ T3086] total_pgpgout 5377 [ 190.730309][ T3086] total_pgfault 13664 [ 190.734281][ T3086] total_pgmajfault 675 [ 190.738445][ T3086] total_inactive_anon 0 [ 190.742623][ T3086] total_active_anon 0 03:05:32 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", 0x0, 0x0, {0x0, 0x1}, {0xa2c, 0x3}, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/123) [ 190.746632][ T3086] total_inactive_file 0 [ 190.750805][ T3086] total_active_file 12288 [ 190.755176][ T3086] total_unevictable 0 [ 190.759210][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5490,uid=0 [ 190.774463][ T3086] Memory cgroup out of memory: Killed process 5491 (syz-executor.1) total-vm:46440kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 191.102236][ T5502] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 191.113618][ T5502] CPU: 0 PID: 5502 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-01367-g35f11a3710cd #0 [ 191.123672][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 191.133724][ T5502] Call Trace: [ 191.137010][ T5502] [ 191.139981][ T5502] dump_stack_lvl+0xda/0x130 [ 191.144678][ T5502] dump_stack+0x15/0x20 [ 191.148847][ T5502] dump_header+0x82/0x2d0 [ 191.153190][ T5502] oom_kill_process+0x33a/0x4c0 [ 191.158149][ T5502] out_of_memory+0x9ca/0xbf0 [ 191.162752][ T5502] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 191.168843][ T5502] mem_cgroup_out_of_memory+0x139/0x190 [ 191.174427][ T5502] try_charge_memcg+0x759/0xd20 [ 191.179296][ T5502] ? __swap_duplicate+0x29b/0x2b0 [ 191.184393][ T5502] ? radix_tree_lookup+0xf9/0x150 [ 191.189426][ T5502] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 191.195498][ T5502] __read_swap_cache_async+0x2b9/0x510 [ 191.201039][ T5502] swap_cluster_readahead+0x276/0x3f0 [ 191.206467][ T5502] swapin_readahead+0xe2/0x7a0 [ 191.215163][ T5502] ? __filemap_get_folio+0x41a/0x5a0 [ 191.220496][ T5502] ? swap_cache_get_folio+0x6e/0x200 [ 191.225792][ T5502] do_swap_page+0x44c/0x1570 [ 191.230443][ T5502] ? exc_page_fault+0x3a6/0x6d0 [ 191.235409][ T5502] ? __rcu_read_lock+0x35/0x50 [ 191.240254][ T5502] ? pte_offset_map_nolock+0x124/0x1d0 [ 191.245730][ T5502] handle_mm_fault+0x7f6/0x27b0 [ 191.250605][ T5502] ? mas_walk+0x204/0x320 [ 191.254955][ T5502] exc_page_fault+0x3ff/0x6d0 [ 191.259652][ T5502] asm_exc_page_fault+0x26/0x30 [ 191.264528][ T5502] RIP: 0033:0x7fc472cd80e3 [ 191.268941][ T5502] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 0e 6e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 191.288600][ T5502] RSP: 002b:00007ffeafb95068 EFLAGS: 00010293 [ 191.294757][ T5502] RAX: 00000000fffffffa RBX: 00007fc472ddbf80 RCX: 0000000000000000 03:05:32 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, r0, {0x99, 0x8}, {0x7, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r5 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r1, r2, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000400)={0x7, 0xed, 0xfffff331, 0x1, 0x2, 0xda}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000500)=""/123) sendmsg$xdp(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x1, 0x0, 0x25}, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x8000}, 0x40042) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000640)=""/84) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000740)=""/4096) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r7, 0x2}, 0x20) [ 191.302743][ T5502] RDX: 00007ffeafb95080 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.310723][ T5502] RBP: 00007fc472ddd980 R08: 0000000000000010 R09: 00007ffeafbe80b0 [ 191.318700][ T5502] R10: 0000000000000000 R11: 00000000000085ac R12: 000000000002ea43 [ 191.326685][ T5502] R13: ffffffffffffffff R14: 00007fc472830000 R15: 000000000002e702 [ 191.334672][ T5502] [ 191.337837][ T5502] memory: usage 307200kB, limit 307200kB, failcnt 13197 [ 191.344771][ T5502] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 191.352787][ T5502] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 191.360124][ T5502] Memory cgroup stats for /syz2: [ 191.360336][ T5502] cache 8192 [ 191.368473][ T5502] rss 8192 [ 191.371530][ T5502] shmem 0 [ 191.374476][ T5502] mapped_file 0 [ 191.377943][ T5502] dirty 0 [ 191.380941][ T5502] writeback 4096 [ 191.384520][ T5502] workingset_refault_anon 1794 [ 191.389289][ T5502] workingset_refault_file 102 [ 191.394032][ T5502] swap 139264 [ 191.397341][ T5502] swapcached 16384 [ 191.401074][ T5502] pgpgin 4989 [ 191.404523][ T5502] pgpgout 4983 [ 191.407905][ T5502] pgfault 11868 [ 191.411346][ T5502] pgmajfault 709 [ 191.414885][ T5502] inactive_anon 4096 [ 191.418782][ T5502] active_anon 0 [ 191.422285][ T5502] inactive_file 8192 [ 191.426203][ T5502] active_file 0 [ 191.429650][ T5502] unevictable 0 [ 191.433162][ T5502] hierarchical_memory_limit 314572800 [ 191.438542][ T5502] hierarchical_memsw_limit 9223372036854771712 [ 191.444684][ T5502] total_cache 8192 [ 191.448474][ T5502] total_rss 8192 03:05:32 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"733604ada91f276251051c973cba87cb", 0x0, 0x0, {0x99}, {0x0, 0xffffffff}, 0xce8d, [0x101, 0x8, 0x92, 0x3, 0x45b9, 0x7, 0x1, 0x3, 0x5, 0xdea, 0x2, 0x2, 0x8000000000000001, 0xea, 0x1, 0x6]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000280)={0x14, 0x6a, &(0x7f0000000200)="d88f2b2be9f705b850eafb4fc1f16f96534bebd6567af5c920005bd39dd62b4209a741b54d87762f965a0b8582dc0aa88d329d162a5196acc022d9fefa82a7365fad1680a0630cbd2a3c70b68a747fc7771867da7e811dc7b7318c035cc8ab51975f57681585c1020466"}) r4 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"01c949a032c16fc65c6f149693d1ad09", r0, r1, {0x3, 0x1}, {0xa2c, 0x3}, 0x7fff, [0x0, 0x0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8000, 0x3, 0x9, 0x5, 0x8, 0x7, 0x2, 0x7988, 0x5da50267]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x0, 0x4}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/123) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r3, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000001800)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000030c0)=0xdb0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000003100)) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000003140)={0x9, 0x3, 0x259, 0x7fff, 0x10000, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0x1f, 0x0, 0x76ed, 0x80, 0x2020, 0xffffffffffffffff, 0x20, '\x00', r7, r4, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000032c0)={r8, &(0x7f0000003200)="1c09f321da1ce0728f777f0d3fdfa6fa0350be4f9324964b00f3292cb897878a59f5cb840a96b8de2b58a73696a92fb50ea8d65b9b787e7b4911e22e9aa35136f6eca3de53086cc0dec3f567e835406621fba91ce63049494ae58a125076f145446e3d265b756a2dd559863327aa9721b67bd17263e4d76a", &(0x7f0000003280)=@udp=r6, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003300)=[0x2, 0x3], 0x2) [ 191.452013][ T5502] total_shmem 0 [ 191.455482][ T5502] total_mapped_file 0 [ 191.459455][ T5502] total_dirty 0 [ 191.462898][ T5502] total_writeback 4096 [ 191.466970][ T5502] total_workingset_refault_anon 1794 [ 191.472302][ T5502] total_workingset_refault_file 102 [ 191.477566][ T5502] total_swap 139264 [ 191.481390][ T5502] total_swapcached 16384 [ 191.485649][ T5502] total_pgpgin 4989 [ 191.489448][ T5502] total_pgpgout 4983 [ 191.493458][ T5502] total_pgfault 11868 [ 191.497511][ T5502] total_pgmajfault 709