Extracting prog: 2m15.601842802s
Minimizing prog: 41m54.139915054s
Simplifying prog options: 0s
Extracting C: 1m23.370794525s
Simplifying C: 9m43.253694825s


extracting reproducer from 59 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR-syz_mount_image$ext4-ioctl$VHOST_VDPA_GET_VRING_GROUP-ioctl$sock_inet_SIOCGIFDSTADDR-openat$rdma_cm-ioctl$UI_SET_FFBIT
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r7, 0x0, 0x3, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r8, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000003c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4ec, &(0x7f0000000540)="$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")
ioctl$VHOST_VDPA_GET_VRING_GROUP(r8, 0xc008af7b, &(0x7f0000002180)={0x1, 0xd1b})
ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @empty}})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x6d)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
single: successfully extracted reproducer
found reproducer with 27 syscalls
minimizing guilty program
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR-syz_mount_image$ext4-ioctl$VHOST_VDPA_GET_VRING_GROUP-ioctl$sock_inet_SIOCGIFDSTADDR-openat$rdma_cm
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000003c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4ec, &(0x7f0000000540)="$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")
ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f0000002180)={0x1, 0xd1b})
ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @empty}})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR-syz_mount_image$ext4-ioctl$VHOST_VDPA_GET_VRING_GROUP-ioctl$sock_inet_SIOCGIFDSTADDR
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000003c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4ec, &(0x7f0000000540)="$eJzs3c9rXFsdAPDvvcnUpk1Nii5qwVpsJSnamaSxbRCsCqKrgloX7mpMJiFkkgmZSduEoin+AYIUFVx15UbQvSDduRWloK5FRRFtdfHgvdd5zK82TWeSCW+SaTOfD9zMuWfu5Ps9M8yZe+493BtA3zofEVci4nmlUrkUESON+rSxPD4ZEVv17Z49vT9bXZKoVG79J4mkUVfdfnzb/2y8pOZbX4/4XvJ63NLG5tJMoZBfa6znysurudLG5uXF5ZmF/EJ+ZWpq8tr09emr0xNdaedwRNz46j9+8qNffO3Gbz9396+3/zX+/WpaX2w832xHt9Wbnonj2+oGI2LtIIL1wECjPZlONh46+HwAANhdcz//0xFxKUZioLY3BwAAABwllS8Nx3tJRAUAAAA4stLa3NgkzTbmAQxHmmaz9Tm8H48TaaFYKn92vri+MlefQzsamXR+sZCfaMwVHo1MUl2frJVfrl/ZsT4VEacj4uHIUG09O1ssvFvp9dEPAAAA6A8nd4z//z9SH/8DAAAAR8xox1u2uJIXAAAA8FbofPwPAAAAvK1ajP+/04s8AAAAgAPxjZs3q0ulef/ruTsb60vFO5fn8qWl7PL6bHa2uLaaXSgWF2rX7Fve6/8VisXVz8fK+r1cOV8q50obm7eXi+sr5duLr9wCGwAAADhEpz/1+M9JRGx9Yai2VB3rdVLAoRjcz8Z/P7g8gMM30OsEgJ7Z1+8/cKRkep0A0HN7Xdiz7eSd33c/FwAA4GCMfaL1+f9kz2MDW+khpQgcEMf/oH85/w/9y/l/6F+ZGAgDeehvB3P+/y+PXpYrlf1nBQAAdNNwbUnSbETtOMBwpGk2G3GqdluATDK/WMhPRMRHI+JPI5mPVNcna69M9hwzAAAAAAAAAAAAAAAAAAAAAAAAAAB1lUoSFQAAAOBIi0j/mTTu/zU2cnF45/GBY8k7I7XHiLj781s/vTdTLq9NVuv/+6K+/LNG/ZVeHMEAAAAAdmqO05vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopmdP7882l8OM+++vRMRoq/iDcbz2eDwyEXHif0kMbntdEhEDXYi/9SAizrSKn1TTitFGFq3iD/UwfhoRJ7sQH/rZ42r/8+VW3780ztceW3//rtV6qA+vff+Xvuj/Btr0P6c6jHH2ya9yv24X/0HE2cHW/U8zftIm/oUO43/325ub7Z6rPIoYa/n7k7wSK1deXs2VNjYvLy7PLOQX8itTU5PXpq9PX52eyM0vFvKNvy0iHIsff/I3z9vFr7b/RDxs2//u1v6LHbb//Sf3nn6sXsy0ij9+ofXnf6ZN/LTx2/eZRrn6/FizvFUvb3ful384F/HH37Vr/1yb93+vz3+8w/Zf+uYP/9bhpgDAIShtbC7NFAr5tb4u7PfdGIxtNdXdojeiFQr7LfzgzUjjjSz0tl8CAAC67/Ux8Ku6cY4dAAAAAAAAAAAAAAAAAAAA2N1hXl2vaas3TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NUHAQAA//+kYdql")
ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f0000002180)={0x1, 0xd1b})
ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @empty}})

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR-syz_mount_image$ext4-ioctl$VHOST_VDPA_GET_VRING_GROUP
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000003c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4ec, &(0x7f0000000540)="$eJzs3c9rXFsdAPDvvcnUpk1Nii5qwVpsJSnamaSxbRCsCqKrgloX7mpMJiFkkgmZSduEoin+AYIUFVx15UbQvSDduRWloK5FRRFtdfHgvdd5zK82TWeSCW+SaTOfD9zMuWfu5Ps9M8yZe+493BtA3zofEVci4nmlUrkUESON+rSxPD4ZEVv17Z49vT9bXZKoVG79J4mkUVfdfnzb/2y8pOZbX4/4XvJ63NLG5tJMoZBfa6znysurudLG5uXF5ZmF/EJ+ZWpq8tr09emr0xNdaedwRNz46j9+8qNffO3Gbz9396+3/zX+/WpaX2w832xHt9Wbnonj2+oGI2LtIIL1wECjPZlONh46+HwAANhdcz//0xFxKUZioLY3BwAAABwllS8Nx3tJRAUAAAA4stLa3NgkzTbmAQxHmmaz9Tm8H48TaaFYKn92vri+MlefQzsamXR+sZCfaMwVHo1MUl2frJVfrl/ZsT4VEacj4uHIUG09O1ssvFvp9dEPAAAA6A8nd4z//z9SH/8DAAAAR8xox1u2uJIXAAAA8FbofPwPAAAAvK1ajP+/04s8AAAAgAPxjZs3q0ulef/ruTsb60vFO5fn8qWl7PL6bHa2uLaaXSgWF2rX7Fve6/8VisXVz8fK+r1cOV8q50obm7eXi+sr5duLr9wCGwAAADhEpz/1+M9JRGx9Yai2VB3rdVLAoRjcz8Z/P7g8gMM30OsEgJ7Z1+8/cKRkep0A0HN7Xdiz7eSd33c/FwAA4GCMfaL1+f9kz2MDW+khpQgcEMf/oH85/w/9y/l/6F+ZGAgDeehvB3P+/y+PXpYrlf1nBQAAdNNwbUnSbETtOMBwpGk2G3GqdluATDK/WMhPRMRHI+JPI5mPVNcna69M9hwzAAAAAAAAAAAAAAAAAAAAAAAAAAB1lUoSFQAAAOBIi0j/mTTu/zU2cnF45/GBY8k7I7XHiLj781s/vTdTLq9NVuv/+6K+/LNG/ZVeHMEAAAAAdmqO05vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopmdP7882l8OM+++vRMRoq/iDcbz2eDwyEXHif0kMbntdEhEDXYi/9SAizrSKn1TTitFGFq3iD/UwfhoRJ7sQH/rZ42r/8+VW3780ztceW3//rtV6qA+vff+Xvuj/Btr0P6c6jHH2ya9yv24X/0HE2cHW/U8zftIm/oUO43/325ub7Z6rPIoYa/n7k7wSK1deXs2VNjYvLy7PLOQX8itTU5PXpq9PX52eyM0vFvKNvy0iHIsff/I3z9vFr7b/RDxs2//u1v6LHbb//Sf3nn6sXsy0ij9+ofXnf6ZN/LTx2/eZRrn6/FizvFUvb3ful384F/HH37Vr/1yb93+vz3+8w/Zf+uYP/9bhpgDAIShtbC7NFAr5tb4u7PfdGIxtNdXdojeiFQr7LfzgzUjjjSz0tl8CAAC67/Ux8Ku6cY4dAAAAAAAAAAAAAAAAAAAA2N1hXl2vaas3TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NUHAQAA//+kYdql")
ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f0000002180)={0x1, 0xd1b})

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000003c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4ec, &(0x7f0000000540)="$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")

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap-ioctl$sock_inet_SIOCSIFBRDADDR
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @private}})

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp-mmap
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000631000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0xb806a000)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait-socket$inet_mptcp
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap-epoll_pwait
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f00000001c0)={[0xb]}, 0x8)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro-mmap
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r7, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in corrupted
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-getsockopt$bt_hci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-openat$cgroup_ro-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-socket$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = dup(r0)
bind$inet6(r4, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-dup-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020)
dup(r0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r2, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-ioctl$SIOCAX25CTLCON-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000002140))
ioctl$SIOCAX25CTLCON(r2, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]})
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-ioctl$HIDIOCGRAWNAME-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000002140))
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-syz_init_net_socket$ax25-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000003b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

program did not crash
testing program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
detailed listing:
executing program 0:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x8000004}}, 0x2e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
extracting C reproducer
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
simplifying C reproducer
testing compiled C program (duration=45.212906553s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program did not crash
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program did not crash
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program did not crash
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
testing compiled C program (duration=45.212906553s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_raw-openat$nullb-dup-mmap-madvise-read$FUSE-bind$inet6-connect$pppl2tp-syz_init_net_socket$bt_hci-openat$cgroup_ro
program crashed: BUG: unable to handle kernel paging request in mem_cgroup_track_foreign_dirty_slowpath
reproducing took 55m16.366314527s
repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff80000000023d
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff80000000023d] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4046 Comm: syz-executor588 Not tainted 5.15.185-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : mem_cgroup_track_foreign_dirty_slowpath+0xec/0x968 mm/memcontrol.c:4620
lr : trace_track_foreign_dirty include/trace/events/writeback.h:237 [inline]
lr : mem_cgroup_track_foreign_dirty_slowpath+0xdc/0x968 mm/memcontrol.c:4611
sp : ffff80001f216e40
x29: ffff80001f216e60 x28: 1fffff80006da7b9 x27: 0000000000000000
x26: dfff800000000000 x25: dfff800000000000 x24: 05ffc0000042080f
x23: ffff0000cd20a5e0 x22: 00000000000011e8 x21: ffff80001415d310
x20: 0000000000000000 x19: ffff0000cd20a060 x18: 1fffe0003421d38e
x17: ffff800016cf0000 x16: ffff8000111a97c4 x15: ffff8000167d04c0
x14: ffff0000c1612540 x13: 1ffff0000282c06b x12: 0000000000ff0100
x11: 0000000000000002 x10: 0000000000000003 x9 : ffff8000140c7740
x8 : 000000000000023d x7 : ffff800008895230 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000010 x1 : ffff8000117b9760 x0 : 0000000000000001
Call trace:
 mem_cgroup_track_foreign_dirty_slowpath+0xec/0x968 mm/memcontrol.c:4620
 mem_cgroup_track_foreign_dirty include/linux/memcontrol.h:1593 [inline]
 account_page_dirtied mm/page-writeback.c:2485 [inline]
 __set_page_dirty+0x900/0xc74 mm/page-writeback.c:2522
 __set_page_dirty_buffers+0x280/0x464 fs/buffer.c:643
 set_page_dirty+0x23c/0x4f0 mm/page-writeback.c:2631
 filemap_page_mkwrite+0x480/0x9c8 mm/filemap.c:3380
 do_page_mkwrite+0x13c/0x358 mm/memory.c:2922
 wp_page_shared+0x14c/0x398 mm/memory.c:3259
 do_wp_page+0x7c0/0x994 mm/memory.c:3360
 handle_pte_fault mm/memory.c:4668 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1770/0x2950 mm/memory.c:4883
 __do_page_fault arch/arm64/mm/fault.c:505 [inline]
 do_page_fault+0x694/0xad4 arch/arm64/mm/fault.c:605
 do_mem_abort+0x6c/0x1ac arch/arm64/mm/fault.c:819
 el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:358
 el1h_64_sync_handler+0x80/0xcc arch/arm64/kernel/entry-common.c:418
 el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:522
 __arch_copy_to_user+0x190/0x218 arch/arm64/lib/copy_template.S:158
 filemap_read+0x12e0/0x1720 mm/filemap.c:2698
 generic_file_read_iter+0xe8/0x518 mm/filemap.c:2794
 blkdev_read_iter+0x134/0x174 block/fops.c:563
 call_read_iter include/linux/fs.h:2166 [inline]
 new_sync_read fs/read_write.c:404 [inline]
 vfs_read+0x7c4/0xa10 fs/read_write.c:485
 ksys_read+0x120/0x210 fs/read_write.c:623
 __do_sys_read fs/read_write.c:633 [inline]
 __se_sys_read fs/read_write.c:631 [inline]
 __arm64_sys_read+0x7c/0x90 fs/read_write.c:631
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 36002de0 52823d08 8b080296 d343fec8 (38796908) 
---[ end trace 4f7b78349d23f6be ]---
----------------
Code disassembly (best guess):
   0:	36002de0 	tbz	w0, #0, 0x5bc
   4:	52823d08 	mov	w8, #0x11e8                	// #4584
   8:	8b080296 	add	x22, x20, x8
   c:	d343fec8 	lsr	x8, x22, #3
* 10:	38796908 	ldrb	w8, [x8, x25] <-- trapping instruction

final repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff80000000023d
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff80000000023d] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4046 Comm: syz-executor588 Not tainted 5.15.185-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : mem_cgroup_track_foreign_dirty_slowpath+0xec/0x968 mm/memcontrol.c:4620
lr : trace_track_foreign_dirty include/trace/events/writeback.h:237 [inline]
lr : mem_cgroup_track_foreign_dirty_slowpath+0xdc/0x968 mm/memcontrol.c:4611
sp : ffff80001f216e40
x29: ffff80001f216e60 x28: 1fffff80006da7b9 x27: 0000000000000000
x26: dfff800000000000 x25: dfff800000000000 x24: 05ffc0000042080f
x23: ffff0000cd20a5e0 x22: 00000000000011e8 x21: ffff80001415d310
x20: 0000000000000000 x19: ffff0000cd20a060 x18: 1fffe0003421d38e
x17: ffff800016cf0000 x16: ffff8000111a97c4 x15: ffff8000167d04c0
x14: ffff0000c1612540 x13: 1ffff0000282c06b x12: 0000000000ff0100
x11: 0000000000000002 x10: 0000000000000003 x9 : ffff8000140c7740
x8 : 000000000000023d x7 : ffff800008895230 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000010 x1 : ffff8000117b9760 x0 : 0000000000000001
Call trace:
 mem_cgroup_track_foreign_dirty_slowpath+0xec/0x968 mm/memcontrol.c:4620
 mem_cgroup_track_foreign_dirty include/linux/memcontrol.h:1593 [inline]
 account_page_dirtied mm/page-writeback.c:2485 [inline]
 __set_page_dirty+0x900/0xc74 mm/page-writeback.c:2522
 __set_page_dirty_buffers+0x280/0x464 fs/buffer.c:643
 set_page_dirty+0x23c/0x4f0 mm/page-writeback.c:2631
 filemap_page_mkwrite+0x480/0x9c8 mm/filemap.c:3380
 do_page_mkwrite+0x13c/0x358 mm/memory.c:2922
 wp_page_shared+0x14c/0x398 mm/memory.c:3259
 do_wp_page+0x7c0/0x994 mm/memory.c:3360
 handle_pte_fault mm/memory.c:4668 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1770/0x2950 mm/memory.c:4883
 __do_page_fault arch/arm64/mm/fault.c:505 [inline]
 do_page_fault+0x694/0xad4 arch/arm64/mm/fault.c:605
 do_mem_abort+0x6c/0x1ac arch/arm64/mm/fault.c:819
 el1_abort+0x3c/0x5c arch/arm64/kernel/entry-common.c:358
 el1h_64_sync_handler+0x80/0xcc arch/arm64/kernel/entry-common.c:418
 el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:522
 __arch_copy_to_user+0x190/0x218 arch/arm64/lib/copy_template.S:158
 filemap_read+0x12e0/0x1720 mm/filemap.c:2698
 generic_file_read_iter+0xe8/0x518 mm/filemap.c:2794
 blkdev_read_iter+0x134/0x174 block/fops.c:563
 call_read_iter include/linux/fs.h:2166 [inline]
 new_sync_read fs/read_write.c:404 [inline]
 vfs_read+0x7c4/0xa10 fs/read_write.c:485
 ksys_read+0x120/0x210 fs/read_write.c:623
 __do_sys_read fs/read_write.c:633 [inline]
 __se_sys_read fs/read_write.c:631 [inline]
 __arm64_sys_read+0x7c/0x90 fs/read_write.c:631
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: 36002de0 52823d08 8b080296 d343fec8 (38796908) 
---[ end trace 4f7b78349d23f6be ]---
----------------
Code disassembly (best guess):
   0:	36002de0 	tbz	w0, #0, 0x5bc
   4:	52823d08 	mov	w8, #0x11e8                	// #4584
   8:	8b080296 	add	x22, x20, x8
   c:	d343fec8 	lsr	x8, x22, #3
* 10:	38796908 	ldrb	w8, [x8, x25] <-- trapping instruction