last executing test programs: 2.541772837s ago: executing program 2 (id=12067): mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) 2.288780377s ago: executing program 2 (id=12068): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0xa, 0x11, 0x8000000000000000, 0x8000) 2.081524617s ago: executing program 2 (id=12071): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x400053, 0x9) 1.6916725s ago: executing program 2 (id=12077): r0 = socket(0x10, 0x2, 0x4) bind$auto(r0, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xe) socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.554105803s ago: executing program 0 (id=12079): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) 1.486066855s ago: executing program 2 (id=12080): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) 1.417258767s ago: executing program 3 (id=12082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14, 0x7d, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0xb1, 0x0, 0x0, @u64=0x7}]}]}]}, 0x30}}, 0x4000000) 1.33650666s ago: executing program 0 (id=12083): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.300525115s ago: executing program 1 (id=12084): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x10) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) 1.195649625s ago: executing program 3 (id=12085): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) 1.055741261s ago: executing program 1 (id=12086): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00eeff03000000000000000c000100400000f900000000020020f1"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r1 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 1.052845496s ago: executing program 0 (id=12087): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x14, r1, 0x301, 0x70b52c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 972.442951ms ago: executing program 3 (id=12088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) 854.991402ms ago: executing program 0 (id=12090): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0x7, r0, 0x1, 0xfffffffffffffff6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 809.053032ms ago: executing program 1 (id=12091): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x8000000000000001, 0xb, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8001, 0x80000000000000a, 0x0, 0xd, 0x5, 0xffffffff80000000, 0x812, 0x4a, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 744.63856ms ago: executing program 3 (id=12092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x6}]}, 0x28}}, 0xc080) 614.937521ms ago: executing program 1 (id=12093): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 551.086049ms ago: executing program 0 (id=12094): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(0x2, 0x10, 0x0, 0x7f) 501.26999ms ago: executing program 3 (id=12095): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 383.858679ms ago: executing program 1 (id=12096): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf423c, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c02, 0x0) 10.54466ms ago: executing program 2 (id=12097): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) 10.475266ms ago: executing program 3 (id=12098): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0x3, 0x0, 0xfdef) 439.343µs ago: executing program 0 (id=12105): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0xc2b, 0x7131, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0x26, 0xc, 0x40005, 0x9, 0x0, 0x2, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 0s ago: executing program 1 (id=12099): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xfffffffd, 0xd, 0x2, 0xd, 0x7, 0x200001, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x100, 0x7f, 0x7, 0x0, 0x6}, {0x6, 0x2, 0x52, 0x5, 0x9, 0x40, 0x76c6, 0xff, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) kernel console output (not intermixed with test programs): b+0xc2/0x120 [ 906.205485][T30353] kmem_cache_alloc_noprof+0x83/0x770 [ 906.205515][T30353] ? filename_create+0xca/0x400 [ 906.205548][T30353] ? create_new_namespaces+0x30/0xab0 [ 906.205587][T30353] ? create_new_namespaces+0x30/0xab0 [ 906.205621][T30353] create_new_namespaces+0x30/0xab0 [ 906.205656][T30353] ? bpf_lsm_capable+0x9/0x10 [ 906.205690][T30353] ? security_capable+0x7e/0x260 [ 906.205741][T30353] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 906.205779][T30353] ksys_unshare+0x45b/0xa40 [ 906.205820][T30353] ? __pfx_ksys_unshare+0x10/0x10 [ 906.205866][T30353] ? xfd_validate_state+0x61/0x180 [ 906.205904][T30353] __x64_sys_unshare+0x31/0x40 [ 906.205927][T30353] do_syscall_64+0xcd/0xf80 [ 906.205951][T30353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.205978][T30353] RIP: 0033:0x7fb75ed8f7c9 [ 906.205999][T30353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.206025][T30353] RSP: 002b:00007fb75fc9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 906.206049][T30353] RAX: ffffffffffffffda RBX: 00007fb75efe5fa0 RCX: 00007fb75ed8f7c9 [ 906.206067][T30353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 906.206082][T30353] RBP: 00007fb75ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 906.206098][T30353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.206114][T30353] R13: 00007fb75efe6038 R14: 00007fb75efe5fa0 R15: 00007ffdf0186408 [ 906.206147][T30353] [ 906.925333][T30364] FAULT_INJECTION: forcing a failure. [ 906.925333][T30364] name failslab, interval 1, probability 0, space 0, times 0 [ 906.966854][T30364] CPU: 0 UID: 0 PID: 30364 Comm: syz.1.11620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 906.966900][T30364] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 906.966910][T30364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.966927][T30364] Call Trace: [ 906.966935][T30364] [ 906.966946][T30364] dump_stack_lvl+0x16c/0x1f0 [ 906.966994][T30364] should_fail_ex+0x512/0x640 [ 906.967023][T30364] ? __kmalloc_noprof+0xca/0x910 [ 906.967056][T30364] should_failslab+0xc2/0x120 [ 906.967097][T30364] __kmalloc_noprof+0xeb/0x910 [ 906.967124][T30364] ? __pfx_map_id_range_down+0x10/0x10 [ 906.967161][T30364] ? security_inode_alloc+0x3b/0x2b0 [ 906.967188][T30364] ? sk_prot_alloc+0x1a8/0x2a0 [ 906.967426][T30364] ? sk_prot_alloc+0x1a8/0x2a0 [ 906.967475][T30364] sk_prot_alloc+0x1a8/0x2a0 [ 906.967521][T30364] sk_alloc+0x36/0xe30 [ 906.967612][T30364] packet_create+0x127/0x8e0 [ 906.967651][T30364] __sock_create+0x339/0x8a0 [ 906.967683][T30364] __sys_socket+0x14d/0x260 [ 906.967708][T30364] ? __fget_files+0x20e/0x3c0 [ 906.967746][T30364] ? __pfx___sys_socket+0x10/0x10 [ 906.967773][T30364] ? xfd_validate_state+0x61/0x180 [ 906.967807][T30364] __x64_sys_socket+0x72/0xb0 [ 906.967840][T30364] ? lockdep_hardirqs_on+0x7c/0x110 [ 906.967886][T30364] do_syscall_64+0xcd/0xf80 [ 906.967916][T30364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.967947][T30364] RIP: 0033:0x7f4371b8f7c9 [ 906.967970][T30364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.967997][T30364] RSP: 002b:00007f4372a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 906.968023][T30364] RAX: ffffffffffffffda RBX: 00007f4371de5fa0 RCX: 00007f4371b8f7c9 [ 906.968042][T30364] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 906.968059][T30364] RBP: 00007f4371c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 906.968076][T30364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.968093][T30364] R13: 00007f4371de6038 R14: 00007f4371de5fa0 R15: 00007ffe5b9def58 [ 906.968129][T30364] [ 907.764890][T30346] memory: usage 3072kB, limit 3072kB, failcnt 54212 [ 907.807297][T30346] memory+swap: usage 4076kB, limit 9007199254740988kB, failcnt 0 [ 907.860150][T30346] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 907.896875][T30346] Memory cgroup stats for /syz2: [ 907.897522][T30346] cache 0 [ 907.928928][T30346] rss 503808 [ 907.932370][T30346] rss_huge 0 [ 907.935588][T30346] shmem 0 [ 907.983753][T30346] mapped_file 0 [ 907.993837][T30346] dirty 0 [ 908.000855][T30346] writeback 0 [ 908.017688][T30346] workingset_refault_anon 4071 [ 908.045209][T30346] workingset_refault_file 17708 [ 908.063667][T30346] swap 1028096 [ 908.083930][T30346] swapcached 4096 [ 908.107300][T30346] pgpgin 199614 [ 908.110858][T30346] pgpgout 204134 [ 908.114501][T30346] pgfault 324276 [ 908.149212][T30346] pgmajfault 4472 [ 908.153185][T30346] inactive_anon 0 [ 908.187057][T30346] active_anon 503808 [ 908.191032][T30346] inactive_file 0 [ 908.220926][T30346] active_file 0 [ 908.232279][T30346] unevictable 0 [ 908.252060][T30346] hierarchical_memory_limit 3145728 [ 908.296660][T30346] hierarchical_memsw_limit 9223372036854771712 [ 908.330397][T30346] total_cache 0 [ 908.369106][T30346] total_rss 503808 [ 908.392216][T30346] total_rss_huge 0 [ 908.414162][T30346] total_shmem 0 [ 908.434198][T30346] total_mapped_file 0 [ 908.445670][T30346] total_dirty 0 [ 908.463130][T30346] total_writeback 0 [ 908.481298][T30346] total_workingset_refault_anon 4071 [ 908.523103][T30346] total_workingset_refault_file 17708 [ 908.539177][T30346] total_swap 1028096 [ 908.562902][T30346] total_swapcached 4096 [ 908.576730][T30346] total_pgpgin 199614 [ 908.609404][T30346] total_pgpgout 204134 [ 908.629540][T30346] total_pgfault 324276 [ 908.642884][T30346] total_pgmajfault 4472 [ 908.660007][T30346] total_inactive_anon 0 [ 908.682538][T30346] total_active_anon 503808 [ 908.703017][T30346] total_inactive_file 0 [ 908.727097][T30346] total_active_file 0 [ 908.748229][T30346] total_unevictable 0 [ 908.770157][T30346] anon_cost 11 [ 908.793666][T30346] file_cost 0 [ 908.801947][T30346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11611,pid=30345,uid=0 [ 908.856541][T30346] Memory cgroup out of memory: Killed process 30346 (syz.2.11611) total-vm:108180kB, anon-rss:1432kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 909.447163][T30418] syz.2.11647 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 909.447330][T30418] CPU: 0 UID: 0 PID: 30418 Comm: syz.2.11647 Tainted: G U L syzkaller #0 PREEMPT(full) [ 909.447369][T30418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 909.447379][T30418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 909.447394][T30418] Call Trace: [ 909.447403][T30418] [ 909.447413][T30418] dump_stack_lvl+0x16c/0x1f0 [ 909.447463][T30418] dump_header+0x101/0x960 [ 909.447493][T30418] oom_kill_process+0x176/0x910 [ 909.447522][T30418] out_of_memory+0x350/0x1700 [ 909.447548][T30418] ? __lock_acquire+0x436/0x2890 [ 909.447575][T30418] ? __pfx_out_of_memory+0x10/0x10 [ 909.447773][T30418] mem_cgroup_out_of_memory+0x118/0x130 [ 909.447806][T30418] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 909.447843][T30418] ? do_raw_spin_unlock+0x172/0x230 [ 909.447908][T30418] try_charge_memcg+0x695/0xd30 [ 909.447966][T30418] ? __pfx_try_charge_memcg+0x10/0x10 [ 909.448014][T30418] ? __print_lock_name+0xc1/0xe0 [ 909.448051][T30418] ? rcu_read_unlock+0x17/0x60 [ 909.448088][T30418] charge_memcg+0x8a/0x230 [ 909.448130][T30418] __mem_cgroup_charge+0x2b/0x1e0 [ 909.448162][T30418] do_anonymous_page+0xca9/0x2190 [ 909.448204][T30418] __handle_mm_fault+0x1ecf/0x2bb0 [ 909.448243][T30418] ? __pfx___handle_mm_fault+0x10/0x10 [ 909.448275][T30418] ? __pte_offset_map_lock+0x174/0x310 [ 909.448316][T30418] ? find_held_lock+0x2b/0x80 [ 909.448360][T30418] ? follow_page_pte+0x5cf/0x1390 [ 909.448411][T30418] handle_mm_fault+0x3fe/0xad0 [ 909.448445][T30418] __get_user_pages+0x54e/0x3590 [ 909.448498][T30418] ? __pfx___get_user_pages+0x10/0x10 [ 909.448548][T30418] populate_vma_page_range+0x267/0x3f0 [ 909.448592][T30418] ? __pfx_populate_vma_page_range+0x10/0x10 [ 909.448634][T30418] ? __pfx_find_vma_intersection+0x10/0x10 [ 909.448683][T30418] ? do_mmap+0x69c/0x1210 [ 909.448725][T30418] __mm_populate+0x1d8/0x380 [ 909.448766][T30418] ? __pfx___mm_populate+0x10/0x10 [ 909.448809][T30418] ? up_write+0x282/0x4e0 [ 909.448840][T30418] vm_mmap_pgoff+0x37f/0x470 [ 909.448881][T30418] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 909.448917][T30418] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 909.448954][T30418] ? count_memcg_events+0x122/0x290 [ 909.448993][T30418] ? find_held_lock+0x2b/0x80 [ 909.449030][T30418] ksys_mmap_pgoff+0x7d/0x5c0 [ 909.449073][T30418] __x64_sys_mmap+0x125/0x190 [ 909.449104][T30418] do_syscall_64+0xcd/0xf80 [ 909.449130][T30418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.449156][T30418] RIP: 0033:0x7f629818f7c9 [ 909.449178][T30418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.449202][T30418] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 909.449225][T30418] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 909.449241][T30418] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 909.449255][T30418] RBP: 00007f6298213f91 R08: ffffffffffffffff R09: 0000000000008000 [ 909.449270][T30418] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 909.449284][T30418] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 909.449315][T30418] [ 909.500215][T30418] memory: usage 3072kB, limit 3072kB, failcnt 54454 [ 909.500242][T30418] memory+swap: usage 4200kB, limit 9007199254740988kB, failcnt 0 [ 909.500260][T30418] kmem: usage 2600kB, limit 9007199254740988kB, failcnt 0 [ 909.500276][T30418] Memory cgroup stats for /syz2: [ 909.500543][T30418] cache 0 [ 909.500554][T30418] rss 483328 [ 909.500564][T30418] rss_huge 0 [ 909.500574][T30418] shmem 0 [ 909.500583][T30418] mapped_file 0 [ 909.500593][T30418] dirty 0 [ 909.500602][T30418] writeback 0 [ 909.500611][T30418] workingset_refault_anon 4106 [ 909.500622][T30418] workingset_refault_file 17708 [ 909.500633][T30418] swap 1155072 [ 909.500643][T30418] swapcached 8192 [ 909.500660][T30418] pgpgin 199874 [ 909.500669][T30418] pgpgout 204399 [ 909.500679][T30418] pgfault 324565 [ 909.500689][T30418] pgmajfault 4498 [ 909.500699][T30418] inactive_anon 0 [ 909.500709][T30418] active_anon 483328 [ 909.500719][T30418] inactive_file 0 [ 909.500729][T30418] active_file 0 [ 909.500738][T30418] unevictable 0 [ 909.500748][T30418] hierarchical_memory_limit 3145728 [ 909.500760][T30418] hierarchical_memsw_limit 9223372036854771712 [ 909.500772][T30418] total_cache 0 [ 909.500782][T30418] total_rss 483328 [ 909.500791][T30418] total_rss_huge 0 [ 909.500801][T30418] total_shmem 0 [ 909.500811][T30418] total_mapped_file 0 [ 909.500821][T30418] total_dirty 0 [ 909.500831][T30418] total_writeback 0 [ 909.500841][T30418] total_workingset_refault_anon 4106 [ 909.500852][T30418] total_workingset_refault_file 17708 [ 909.500863][T30418] total_swap 1155072 [ 909.500873][T30418] total_swapcached 8192 [ 909.500883][T30418] total_pgpgin 199874 [ 909.500893][T30418] total_pgpgout 204399 [ 909.500903][T30418] total_pgfault 324565 [ 909.500914][T30418] total_pgmajfault 4498 [ 909.500924][T30418] total_inactive_anon 0 [ 909.500934][T30418] total_active_anon 483328 [ 909.500944][T30418] total_inactive_file 0 [ 909.500955][T30418] total_active_file 0 [ 909.500966][T30418] total_unevictable 0 [ 909.500976][T30418] anon_cost 7 [ 909.500985][T30418] file_cost 0 [ 909.500996][T30418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11647,pid=30417,uid=0 [ 909.501190][T30418] Memory cgroup out of memory: Killed process 30417 (syz.2.11647) total-vm:108180kB, anon-rss:1524kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 911.532079][T30473] netlink: 206 bytes leftover after parsing attributes in process `syz.0.11671'. [ 911.741549][T30476] bridge0: port 3(syz_tun) entered blocking state [ 911.752783][T30476] bridge0: port 3(syz_tun) entered disabled state [ 911.752964][T30476] syz_tun: entered allmulticast mode [ 911.754785][T30476] syz_tun: entered promiscuous mode [ 911.755288][T30476] bridge0: port 3(syz_tun) entered blocking state [ 911.755405][T30476] bridge0: port 3(syz_tun) entered forwarding state [ 912.032085][T30480] syz.2.11675 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 912.032132][T30480] CPU: 0 UID: 0 PID: 30480 Comm: syz.2.11675 Tainted: G U L syzkaller #0 PREEMPT(full) [ 912.032178][T30480] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 912.032188][T30480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 912.032203][T30480] Call Trace: [ 912.032215][T30480] [ 912.032226][T30480] dump_stack_lvl+0x16c/0x1f0 [ 912.032272][T30480] dump_header+0x101/0x960 [ 912.032309][T30480] oom_kill_process+0x176/0x910 [ 912.032340][T30480] out_of_memory+0x350/0x1700 [ 912.032368][T30480] ? __lock_acquire+0x436/0x2890 [ 912.032396][T30480] ? __pfx_out_of_memory+0x10/0x10 [ 912.032432][T30480] mem_cgroup_out_of_memory+0x118/0x130 [ 912.032464][T30480] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 912.032501][T30480] ? do_raw_spin_unlock+0x172/0x230 [ 912.032536][T30480] try_charge_memcg+0x695/0xd30 [ 912.032581][T30480] ? __pfx_try_charge_memcg+0x10/0x10 [ 912.032620][T30480] ? __print_lock_name+0xc1/0xe0 [ 912.032654][T30480] ? rcu_read_unlock+0x17/0x60 [ 912.032684][T30480] charge_memcg+0x8a/0x230 [ 912.032723][T30480] __mem_cgroup_charge+0x2b/0x1e0 [ 912.032749][T30480] do_anonymous_page+0xca9/0x2190 [ 912.032787][T30480] __handle_mm_fault+0x1ecf/0x2bb0 [ 912.032821][T30480] ? __pfx___handle_mm_fault+0x10/0x10 [ 912.032849][T30480] ? __pte_offset_map_lock+0x174/0x310 [ 912.032886][T30480] ? find_held_lock+0x2b/0x80 [ 912.032927][T30480] ? follow_page_pte+0x5cf/0x1390 [ 912.032971][T30480] handle_mm_fault+0x3fe/0xad0 [ 912.033002][T30480] __get_user_pages+0x54e/0x3590 [ 912.033052][T30480] ? __pfx___get_user_pages+0x10/0x10 [ 912.033098][T30480] populate_vma_page_range+0x267/0x3f0 [ 912.033146][T30480] ? __pfx_populate_vma_page_range+0x10/0x10 [ 912.033185][T30480] ? __pfx_find_vma_intersection+0x10/0x10 [ 912.033224][T30480] ? do_mmap+0x69c/0x1210 [ 912.033265][T30480] __mm_populate+0x1d8/0x380 [ 912.033307][T30480] ? __pfx___mm_populate+0x10/0x10 [ 912.033349][T30480] ? up_write+0x282/0x4e0 [ 912.033380][T30480] vm_mmap_pgoff+0x37f/0x470 [ 912.033424][T30480] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 912.033459][T30480] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 912.033501][T30480] ? count_memcg_events+0x122/0x290 [ 912.033540][T30480] ? find_held_lock+0x2b/0x80 [ 912.033575][T30480] ksys_mmap_pgoff+0x7d/0x5c0 [ 912.033617][T30480] __x64_sys_mmap+0x125/0x190 [ 912.033646][T30480] do_syscall_64+0xcd/0xf80 [ 912.033671][T30480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.033698][T30480] RIP: 0033:0x7f629818f7c9 [ 912.033719][T30480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.033744][T30480] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 912.033767][T30480] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 912.033785][T30480] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 912.033802][T30480] RBP: 00007f6298213f91 R08: 0000000000000002 R09: 0000000000008000 [ 912.033818][T30480] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 912.033834][T30480] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 912.033867][T30480] [ 912.033876][T30480] memory: usage 3072kB, limit 3072kB, failcnt 54562 [ 912.033894][T30480] memory+swap: usage 3828kB, limit 9007199254740988kB, failcnt 0 [ 912.033911][T30480] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 912.033928][T30480] Memory cgroup stats for /syz2: [ 912.034087][T30480] cache 0 [ 912.034098][T30480] rss 503808 [ 912.034108][T30480] rss_huge 0 [ 912.034118][T30480] shmem 0 [ 912.034127][T30480] mapped_file 0 [ 912.034142][T30480] dirty 0 [ 912.034152][T30480] writeback 0 [ 912.034161][T30480] workingset_refault_anon 4120 [ 912.034173][T30480] workingset_refault_file 17708 [ 912.034184][T30480] swap 774144 [ 912.034194][T30480] swapcached 8192 [ 912.034204][T30480] pgpgin 200316 [ 912.034214][T30480] pgpgout 204836 [ 912.034224][T30480] pgfault 325663 [ 912.034234][T30480] pgmajfault 4510 [ 912.034244][T30480] inactive_anon 0 [ 912.034254][T30480] active_anon 503808 [ 912.034264][T30480] inactive_file 0 [ 912.034274][T30480] active_file 0 [ 912.034284][T30480] unevictable 0 [ 912.034294][T30480] hierarchical_memory_limit 3145728 [ 912.034305][T30480] hierarchical_memsw_limit 9223372036854771712 [ 912.034317][T30480] total_cache 0 [ 912.034326][T30480] total_rss 503808 [ 912.034336][T30480] total_rss_huge 0 [ 912.034346][T30480] total_shmem 0 [ 912.034356][T30480] total_mapped_file 0 [ 912.034366][T30480] total_dirty 0 [ 912.034375][T30480] total_writeback 0 [ 912.034385][T30480] total_workingset_refault_anon 4120 [ 912.034397][T30480] total_workingset_refault_file 17708 [ 912.034408][T30480] total_swap 774144 [ 912.034418][T30480] total_swapcached 8192 [ 912.034428][T30480] total_pgpgin 200316 [ 912.034438][T30480] total_pgpgout 204836 [ 912.034448][T30480] total_pgfault 325663 [ 912.034459][T30480] total_pgmajfault 4510 [ 912.034469][T30480] total_inactive_anon 0 [ 912.034479][T30480] total_active_anon 503808 [ 912.034489][T30480] total_inactive_file 0 [ 912.034500][T30480] total_active_file 0 [ 912.034510][T30480] total_unevictable 0 [ 912.034520][T30480] anon_cost 11 [ 912.034530][T30480] file_cost 0 [ 912.034540][T30480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11675,pid=30479,uid=0 [ 912.034677][T30480] Memory cgroup out of memory: Killed process 30479 (syz.2.11675) total-vm:108180kB, anon-rss:1524kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 912.542584][ T31] audit: type=1800 audit(4294967299.722:49): pid=30492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11681" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 913.598205][T30519] FAULT_INJECTION: forcing a failure. [ 913.598205][T30519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.598251][T30519] CPU: 0 UID: 0 PID: 30519 Comm: syz.2.11694 Tainted: G U L syzkaller #0 PREEMPT(full) [ 913.598290][T30519] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 913.598301][T30519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.598317][T30519] Call Trace: [ 913.598326][T30519] [ 913.598337][T30519] dump_stack_lvl+0x16c/0x1f0 [ 913.598389][T30519] should_fail_ex+0x512/0x640 [ 913.598423][T30519] _copy_from_user+0x2e/0xd0 [ 913.598454][T30519] get_itimerspec64+0x15b/0x2d0 [ 913.598483][T30519] ? __pfx_get_itimerspec64+0x10/0x10 [ 913.598512][T30519] ? _copy_from_user+0x59/0xd0 [ 913.598545][T30519] __x64_sys_timerfd_settime+0x15f/0x280 [ 913.598582][T30519] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 913.598632][T30519] do_syscall_64+0xcd/0xf80 [ 913.598659][T30519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.598686][T30519] RIP: 0033:0x7f629818f7c9 [ 913.598706][T30519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.598731][T30519] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 913.598755][T30519] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 913.598772][T30519] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 913.598788][T30519] RBP: 00007f6298213f91 R08: 0000000000000000 R09: 0000000000000000 [ 913.598804][T30519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.598820][T30519] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 913.598852][T30519] [ 915.492914][T30563] syz.2.11714 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 915.492960][T30563] CPU: 0 UID: 0 PID: 30563 Comm: syz.2.11714 Tainted: G U L syzkaller #0 PREEMPT(full) [ 915.493014][T30563] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 915.493024][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.493039][T30563] Call Trace: [ 915.493047][T30563] [ 915.493057][T30563] dump_stack_lvl+0x16c/0x1f0 [ 915.493144][T30563] dump_header+0x101/0x960 [ 915.493174][T30563] oom_kill_process+0x176/0x910 [ 915.493203][T30563] out_of_memory+0x350/0x1700 [ 915.493229][T30563] ? __lock_acquire+0x436/0x2890 [ 915.493256][T30563] ? __pfx_out_of_memory+0x10/0x10 [ 915.493290][T30563] mem_cgroup_out_of_memory+0x118/0x130 [ 915.493319][T30563] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 915.493355][T30563] ? do_raw_spin_unlock+0x172/0x230 [ 915.493387][T30563] try_charge_memcg+0x695/0xd30 [ 915.493433][T30563] ? __pfx_try_charge_memcg+0x10/0x10 [ 915.493473][T30563] ? __print_lock_name+0xc1/0xe0 [ 915.493506][T30563] ? rcu_read_unlock+0x17/0x60 [ 915.493537][T30563] charge_memcg+0x8a/0x230 [ 915.493576][T30563] __mem_cgroup_charge+0x2b/0x1e0 [ 915.493602][T30563] do_anonymous_page+0xca9/0x2190 [ 915.493640][T30563] __handle_mm_fault+0x1ecf/0x2bb0 [ 915.493674][T30563] ? __pfx___handle_mm_fault+0x10/0x10 [ 915.493702][T30563] ? __pte_offset_map_lock+0x174/0x310 [ 915.493739][T30563] ? find_held_lock+0x2b/0x80 [ 915.493781][T30563] ? follow_page_pte+0x5cf/0x1390 [ 915.493825][T30563] handle_mm_fault+0x3fe/0xad0 [ 915.493857][T30563] __get_user_pages+0x54e/0x3590 [ 915.493906][T30563] ? __pfx___get_user_pages+0x10/0x10 [ 915.493953][T30563] populate_vma_page_range+0x267/0x3f0 [ 915.493994][T30563] ? __pfx_populate_vma_page_range+0x10/0x10 [ 915.494034][T30563] ? __pfx_find_vma_intersection+0x10/0x10 [ 915.494073][T30563] ? do_mmap+0x69c/0x1210 [ 915.494118][T30563] __mm_populate+0x1d8/0x380 [ 915.494159][T30563] ? __pfx___mm_populate+0x10/0x10 [ 915.494201][T30563] ? up_write+0x282/0x4e0 [ 915.494231][T30563] vm_mmap_pgoff+0x37f/0x470 [ 915.494270][T30563] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 915.494305][T30563] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 915.494341][T30563] ? count_memcg_events+0x122/0x290 [ 915.494380][T30563] ? find_held_lock+0x2b/0x80 [ 915.494416][T30563] ksys_mmap_pgoff+0x7d/0x5c0 [ 915.494457][T30563] __x64_sys_mmap+0x125/0x190 [ 915.494485][T30563] do_syscall_64+0xcd/0xf80 [ 915.494509][T30563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.494533][T30563] RIP: 0033:0x7f629818f7c9 [ 915.494552][T30563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.494575][T30563] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 915.494596][T30563] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 915.494612][T30563] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 915.494626][T30563] RBP: 00007f6298213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 915.494641][T30563] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 915.494655][T30563] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 915.494686][T30563] [ 915.494694][T30563] memory: usage 3072kB, limit 3072kB, failcnt 54704 [ 915.494710][T30563] memory+swap: usage 3824kB, limit 9007199254740988kB, failcnt 0 [ 915.494727][T30563] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 915.494743][T30563] Memory cgroup stats for /syz2: [ 915.494894][T30563] cache 0 [ 915.494906][T30563] rss 499712 [ 915.494915][T30563] rss_huge 0 [ 915.494925][T30563] shmem 0 [ 915.494934][T30563] mapped_file 0 [ 915.494944][T30563] dirty 0 [ 915.494954][T30563] writeback 0 [ 915.494963][T30563] workingset_refault_anon 4147 [ 915.494974][T30563] workingset_refault_file 17708 [ 915.494985][T30563] swap 770048 [ 915.494995][T30563] swapcached 12288 [ 915.495005][T30563] pgpgin 200906 [ 915.495014][T30563] pgpgout 205426 [ 915.495024][T30563] pgfault 327221 [ 915.495034][T30563] pgmajfault 4517 [ 915.495044][T30563] inactive_anon 0 [ 915.495054][T30563] active_anon 495616 [ 915.495064][T30563] inactive_file 0 [ 915.495074][T30563] active_file 0 [ 915.495084][T30563] unevictable 0 [ 915.495094][T30563] hierarchical_memory_limit 3145728 [ 915.495111][T30563] hierarchical_memsw_limit 9223372036854771712 [ 915.495123][T30563] total_cache 0 [ 915.495133][T30563] total_rss 499712 [ 915.495143][T30563] total_rss_huge 0 [ 915.495153][T30563] total_shmem 0 [ 915.495163][T30563] total_mapped_file 0 [ 915.495174][T30563] total_dirty 0 [ 915.495183][T30563] total_writeback 0 [ 915.495194][T30563] total_workingset_refault_anon 4147 [ 915.495205][T30563] total_workingset_refault_file 17708 [ 915.495217][T30563] total_swap 770048 [ 915.495227][T30563] total_swapcached 12288 [ 915.495237][T30563] total_pgpgin 200906 [ 915.495248][T30563] total_pgpgout 205426 [ 915.495258][T30563] total_pgfault 327221 [ 915.495268][T30563] total_pgmajfault 4517 [ 915.495278][T30563] total_inactive_anon 0 [ 915.495289][T30563] total_active_anon 495616 [ 915.495299][T30563] total_inactive_file 0 [ 915.495310][T30563] total_active_file 0 [ 915.495320][T30563] total_unevictable 0 [ 915.495330][T30563] anon_cost 32 [ 915.495340][T30563] file_cost 0 [ 915.495350][T30563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11714,pid=30562,uid=0 [ 915.495472][T30563] Memory cgroup out of memory: Killed process 30562 (syz.2.11714) total-vm:108180kB, anon-rss:1524kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 916.616167][T30591] FAULT_INJECTION: forcing a failure. [ 916.616167][T30591] name failslab, interval 1, probability 0, space 0, times 0 [ 916.616233][T30591] CPU: 0 UID: 0 PID: 30591 Comm: syz.2.11734 Tainted: G U L syzkaller #0 PREEMPT(full) [ 916.616272][T30591] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 916.616282][T30591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.616297][T30591] Call Trace: [ 916.616306][T30591] [ 916.616315][T30591] dump_stack_lvl+0x16c/0x1f0 [ 916.616361][T30591] should_fail_ex+0x512/0x640 [ 916.616391][T30591] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 916.616435][T30591] should_failslab+0xc2/0x120 [ 916.616490][T30591] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 916.616528][T30591] ? snd_timer_instance_new+0x65/0x2e0 [ 916.616561][T30591] ? kstrdup+0x53/0x100 [ 916.616589][T30591] kstrdup+0x53/0x100 [ 916.616622][T30591] snd_timer_instance_new+0x65/0x2e0 [ 916.616648][T30591] __snd_timer_user_ioctl.isra.0+0x170b/0x27b0 [ 916.616681][T30591] ? lock_acquire+0x179/0x330 [ 916.616706][T30591] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 916.616739][T30591] ? __pfx___might_resched+0x10/0x10 [ 916.616777][T30591] ? rcu_is_watching+0x12/0xc0 [ 916.616820][T30591] ? do_vfs_ioctl+0x128/0x14f0 [ 916.616850][T30591] ? snd_timer_user_ioctl+0x4a/0xd0 [ 916.616880][T30591] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 916.616914][T30591] ? __pfx___mutex_lock+0x10/0x10 [ 916.616945][T30591] ? find_held_lock+0x2b/0x80 [ 916.617002][T30591] snd_timer_user_ioctl+0x76/0xd0 [ 916.617031][T30591] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 916.617063][T30591] __x64_sys_ioctl+0x18e/0x210 [ 916.617097][T30591] do_syscall_64+0xcd/0xf80 [ 916.617123][T30591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.617150][T30591] RIP: 0033:0x7f629818f7c9 [ 916.617171][T30591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.617199][T30591] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.617223][T30591] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 916.617241][T30591] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000003 [ 916.617258][T30591] RBP: 00007f6298213f91 R08: 0000000000000000 R09: 0000000000000000 [ 916.617275][T30591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.617291][T30591] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 916.617326][T30591] [ 917.247158][T30606] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 920.574493][T30663] syz.2.11756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 920.763125][T30663] CPU: 0 UID: 0 PID: 30663 Comm: syz.2.11756 Tainted: G U L syzkaller #0 PREEMPT(full) [ 920.763170][T30663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 920.763179][T30663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.763193][T30663] Call Trace: [ 920.763201][T30663] [ 920.763212][T30663] dump_stack_lvl+0x16c/0x1f0 [ 920.763256][T30663] dump_header+0x101/0x960 [ 920.763286][T30663] oom_kill_process+0x176/0x910 [ 920.763327][T30663] out_of_memory+0x350/0x1700 [ 920.763354][T30663] ? __lock_acquire+0x436/0x2890 [ 920.763380][T30663] ? __pfx_out_of_memory+0x10/0x10 [ 920.763419][T30663] mem_cgroup_out_of_memory+0x118/0x130 [ 920.763454][T30663] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 920.763491][T30663] ? do_raw_spin_unlock+0x172/0x230 [ 920.763524][T30663] try_charge_memcg+0x695/0xd30 [ 920.763567][T30663] ? __pfx_try_charge_memcg+0x10/0x10 [ 920.763612][T30663] ? __print_lock_name+0xc1/0xe0 [ 920.763645][T30663] ? rcu_read_unlock+0x17/0x60 [ 920.763675][T30663] charge_memcg+0x8a/0x230 [ 920.763712][T30663] __mem_cgroup_charge+0x2b/0x1e0 [ 920.763738][T30663] shmem_alloc_and_add_folio+0x50c/0xc20 [ 920.763774][T30663] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 920.763804][T30663] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 920.763839][T30663] shmem_get_folio_gfp+0x67f/0x1610 [ 920.763873][T30663] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 920.763901][T30663] ? __pfx_mt_find+0x10/0x10 [ 920.763931][T30663] shmem_write_begin+0x1a4/0x3b0 [ 920.763962][T30663] ? __pfx_shmem_write_begin+0x10/0x10 [ 920.763992][T30663] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 920.764028][T30663] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.764070][T30663] generic_perform_write+0x3c4/0x900 [ 920.764103][T30663] ? __pfx_generic_perform_write+0x10/0x10 [ 920.764131][T30663] ? file_update_time_flags+0x35c/0x520 [ 920.764161][T30663] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 920.764193][T30663] shmem_file_write_iter+0x10e/0x140 [ 920.764228][T30663] __kernel_write_iter+0x31a/0xb10 [ 920.764267][T30663] ? __pfx___kernel_write_iter+0x10/0x10 [ 920.764302][T30663] ? __up_read+0x2d1/0x700 [ 920.764332][T30663] ? dump_user_range+0x756/0xb70 [ 920.764375][T30663] dump_user_range+0x413/0xb70 [ 920.764418][T30663] ? __pfx_dump_user_range+0x10/0x10 [ 920.764457][T30663] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 920.764489][T30663] ? __pfx_writenote+0x10/0x10 [ 920.764518][T30663] elf_core_dump+0x29c3/0x3c10 [ 920.764556][T30663] ? __pfx_elf_core_dump+0x10/0x10 [ 920.764577][T30663] ? kasan_save_stack+0x33/0x60 [ 920.764615][T30663] ? kasan_save_track+0x14/0x30 [ 920.764646][T30663] ? __kasan_kmalloc+0xaa/0xb0 [ 920.764676][T30663] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 920.764708][T30663] ? vfs_coredump+0x1dd9/0x55e0 [ 920.764747][T30663] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 920.764779][T30663] ? irqentry_exit+0x38a/0x8c0 [ 920.764798][T30663] ? asm_exc_page_fault+0x26/0x30 [ 920.764827][T30663] ? 0xffffffffff600000 [ 920.764892][T30663] ? vfs_coredump+0x2b85/0x55e0 [ 920.764926][T30663] vfs_coredump+0x2b85/0x55e0 [ 920.764972][T30663] ? __pfx_vfs_coredump+0x10/0x10 [ 920.765007][T30663] ? __lock_acquire+0x436/0x2890 [ 920.765036][T30663] ? __lock_acquire+0x436/0x2890 [ 920.765061][T30663] ? lock_acquire+0x179/0x330 [ 920.765089][T30663] ? lock_acquire+0x179/0x330 [ 920.765130][T30663] ? arch_stack_walk+0xa6/0x100 [ 920.765169][T30663] ? stack_trace_save+0x8e/0xc0 [ 920.765207][T30663] ? __pfx_stack_trace_save+0x10/0x10 [ 920.765245][T30663] ? stack_depot_save_flags+0x29/0x9b0 [ 920.765275][T30663] ? __lock_acquire+0x436/0x2890 [ 920.765300][T30663] ? kasan_save_stack+0x42/0x60 [ 920.765378][T30663] ? proc_coredump_connector+0x2d1/0x4f0 [ 920.765419][T30663] ? __pfx_proc_coredump_connector+0x10/0x10 [ 920.765465][T30663] ? rcu_is_watching+0x12/0xc0 [ 920.765503][T30663] get_signal+0x22e1/0x26d0 [ 920.765546][T30663] ? __pfx_get_signal+0x10/0x10 [ 920.765584][T30663] ? find_held_lock+0x2b/0x80 [ 920.765614][T30663] ? fixup_vdso_exception+0x34b/0x400 [ 920.765658][T30663] arch_do_signal_or_restart+0x8f/0x7a0 [ 920.765693][T30663] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 920.765738][T30663] ? do_user_addr_fault+0xa62/0x1370 [ 920.765772][T30663] irqentry_exit+0x38a/0x8c0 [ 920.765798][T30663] asm_exc_page_fault+0x26/0x30 [ 920.765821][T30663] RIP: 0033:0x0 [ 920.765836][T30663] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 920.765848][T30663] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 920.765866][T30663] RAX: 0000000000000000 RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 920.765881][T30663] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 920.765895][T30663] RBP: 00007f6298213f91 R08: 00000000000003ff R09: 0000000000000000 [ 920.765927][T30663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.765942][T30663] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 920.765975][T30663] [ 922.324969][T30708] ovs_ÿþÿþ: entered promiscuous mode [ 922.437922][T30663] memory: usage 3072kB, limit 3072kB, failcnt 55079 [ 922.446501][T30663] memory+swap: usage 4456kB, limit 9007199254740988kB, failcnt 0 [ 922.457111][T30663] kmem: usage 2904kB, limit 9007199254740988kB, failcnt 0 [ 922.465592][T30663] Memory cgroup stats for /syz2: [ 922.465758][T30663] cache 0 [ 922.477135][T30663] rss 172032 [ 922.480382][T30663] rss_huge 0 [ 922.493825][T30663] shmem 0 [ 922.498229][T30663] mapped_file 0 [ 922.502543][T30663] dirty 0 [ 922.505803][T30663] writeback 0 [ 922.511019][T30663] workingset_refault_anon 4184 [ 922.517967][T30663] workingset_refault_file 17708 [ 922.524427][T30663] swap 1417216 [ 922.528312][T30663] swapcached 0 [ 922.532018][T30663] pgpgin 201653 [ 922.538623][T30663] pgpgout 206254 [ 922.542594][T30663] pgfault 328809 [ 922.548051][T30663] pgmajfault 4528 [ 922.552298][T30663] inactive_anon 0 [ 922.557357][T30663] active_anon 0 [ 922.561809][T30663] inactive_file 0 [ 922.565488][T30663] active_file 0 [ 922.570332][T30663] unevictable 172032 [ 922.575851][T30663] hierarchical_memory_limit 3145728 [ 922.581954][T30663] hierarchical_memsw_limit 9223372036854771712 [ 922.590434][T30663] total_cache 0 [ 922.594725][T30663] total_rss 172032 [ 922.602648][T30663] total_rss_huge 0 [ 922.607524][T30663] total_shmem 0 [ 922.611776][T30663] total_mapped_file 0 [ 922.617575][T30663] total_dirty 0 [ 922.621957][T30663] total_writeback 0 [ 922.625996][T30663] total_workingset_refault_anon 4184 [ 922.633025][T30663] total_workingset_refault_file 17708 [ 922.641171][T30663] total_swap 1417216 [ 922.645752][T30663] total_swapcached 0 [ 922.650643][T30663] total_pgpgin 201653 [ 922.655046][T30663] total_pgpgout 206254 [ 922.660675][T30663] total_pgfault 328809 [ 922.666259][T30663] total_pgmajfault 4528 [ 922.671010][T30663] total_inactive_anon 0 [ 922.681166][T30663] total_active_anon 0 [ 922.686734][T30663] total_inactive_file 0 [ 922.691782][T30663] total_active_file 0 [ 922.696923][T30663] total_unevictable 172032 [ 922.702102][T30663] anon_cost 4 [ 922.709761][T30663] file_cost 0 [ 922.713379][T30663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11756,pid=30652,uid=0 [ 922.731253][T30663] Memory cgroup out of memory: Killed process 30652 (syz.2.11756) total-vm:108176kB, anon-rss:1268kB, file-rss:22624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 923.983349][T30737] bridge0: port 4(veth0_to_bridge) entered blocking state [ 924.033218][T30737] bridge0: port 4(veth0_to_bridge) entered disabled state [ 924.071800][T30737] veth0_to_bridge: entered allmulticast mode [ 924.109859][T30737] veth0_to_bridge: entered promiscuous mode [ 924.138230][T30737] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.174632][T30737] bridge0: port 4(veth0_to_bridge) entered blocking state [ 924.183351][T30737] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 926.621178][T30775] bridge0: port 4(veth0_to_bridge) entered blocking state [ 926.667435][T30775] bridge0: port 4(veth0_to_bridge) entered disabled state [ 926.697323][T30775] veth0_to_bridge: entered allmulticast mode [ 926.734485][T30775] veth0_to_bridge: entered promiscuous mode [ 926.776995][T30775] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.864575][T30775] bridge0: port 4(veth0_to_bridge) entered blocking state [ 926.872061][T30775] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 927.276488][ T31] audit: type=1807 audit(4294967314.532:50): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 927.278124][T30785] ima: policy update failed [ 927.379161][ T31] audit: type=1802 audit(4294967314.532:51): pid=30787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.11816" res=0 errno=0 [ 927.622048][ T31] audit: type=1802 audit(4294967314.873:52): pid=30785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.11816" res=0 errno=0 [ 927.848112][T30663] syz.2.11756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 927.869547][T30663] CPU: 0 UID: 0 PID: 30663 Comm: syz.2.11756 Tainted: G U L syzkaller #0 PREEMPT(full) [ 927.869595][T30663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 927.869606][T30663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.869622][T30663] Call Trace: [ 927.869633][T30663] [ 927.869644][T30663] dump_stack_lvl+0x16c/0x1f0 [ 927.869699][T30663] dump_header+0x101/0x960 [ 927.869732][T30663] oom_kill_process+0x176/0x910 [ 927.869772][T30663] out_of_memory+0x350/0x1700 [ 927.869802][T30663] ? __lock_acquire+0x436/0x2890 [ 927.869833][T30663] ? __pfx_out_of_memory+0x10/0x10 [ 927.869872][T30663] mem_cgroup_out_of_memory+0x118/0x130 [ 927.869905][T30663] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 927.869952][T30663] ? do_raw_spin_unlock+0x172/0x230 [ 927.869989][T30663] try_charge_memcg+0x695/0xd30 [ 927.870037][T30663] ? __pfx_try_charge_memcg+0x10/0x10 [ 927.870079][T30663] ? __print_lock_name+0xc1/0xe0 [ 927.870114][T30663] ? rcu_read_unlock+0x17/0x60 [ 927.870147][T30663] charge_memcg+0x8a/0x230 [ 927.870188][T30663] __mem_cgroup_charge+0x2b/0x1e0 [ 927.870216][T30663] shmem_alloc_and_add_folio+0x50c/0xc20 [ 927.870255][T30663] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 927.870288][T30663] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 927.870326][T30663] shmem_get_folio_gfp+0x67f/0x1610 [ 927.870363][T30663] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 927.870404][T30663] shmem_write_begin+0x1a4/0x3b0 [ 927.870439][T30663] ? __pfx_shmem_write_begin+0x10/0x10 [ 927.870472][T30663] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 927.870513][T30663] ? lockdep_hardirqs_on+0x7c/0x110 [ 927.870560][T30663] generic_perform_write+0x3c4/0x900 [ 927.870597][T30663] ? __pfx_generic_perform_write+0x10/0x10 [ 927.870628][T30663] ? file_update_time_flags+0x35c/0x520 [ 927.870660][T30663] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 927.870696][T30663] shmem_file_write_iter+0x10e/0x140 [ 927.870734][T30663] __kernel_write_iter+0x31a/0xb10 [ 927.870785][T30663] ? __pfx___kernel_write_iter+0x10/0x10 [ 927.870824][T30663] ? __up_read+0x2d1/0x700 [ 927.870857][T30663] ? dump_user_range+0x756/0xb70 [ 927.870897][T30663] ? dump_user_range+0x423/0xb70 [ 927.870942][T30663] dump_user_range+0x413/0xb70 [ 927.870991][T30663] ? __pfx_dump_user_range+0x10/0x10 [ 927.871034][T30663] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 927.871071][T30663] ? __pfx_writenote+0x10/0x10 [ 927.871104][T30663] elf_core_dump+0x29c3/0x3c10 [ 927.871147][T30663] ? __pfx_elf_core_dump+0x10/0x10 [ 927.871170][T30663] ? kasan_save_stack+0x33/0x60 [ 927.871205][T30663] ? kasan_save_track+0x14/0x30 [ 927.871240][T30663] ? __kasan_kmalloc+0xaa/0xb0 [ 927.871274][T30663] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 927.871311][T30663] ? vfs_coredump+0x1dd9/0x55e0 [ 927.871350][T30663] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 927.871391][T30663] ? irqentry_exit+0x38a/0x8c0 [ 927.871414][T30663] ? asm_exc_page_fault+0x26/0x30 [ 927.871447][T30663] ? 0xffffffffff600000 [ 927.871528][T30663] ? vfs_coredump+0x2b85/0x55e0 [ 927.871567][T30663] vfs_coredump+0x2b85/0x55e0 [ 927.871620][T30663] ? __pfx_vfs_coredump+0x10/0x10 [ 927.871659][T30663] ? __lock_acquire+0x436/0x2890 [ 927.871691][T30663] ? __lock_acquire+0x436/0x2890 [ 927.871719][T30663] ? lock_acquire+0x179/0x330 [ 927.871756][T30663] ? lock_acquire+0x179/0x330 [ 927.871805][T30663] ? arch_stack_walk+0xa6/0x100 [ 927.871851][T30663] ? stack_trace_save+0x8e/0xc0 [ 927.871894][T30663] ? __pfx_stack_trace_save+0x10/0x10 [ 927.871937][T30663] ? stack_depot_save_flags+0x29/0x9b0 [ 927.871971][T30663] ? __lock_acquire+0x436/0x2890 [ 927.871999][T30663] ? kasan_save_stack+0x42/0x60 [ 927.872088][T30663] ? proc_coredump_connector+0x2d1/0x4f0 [ 927.872133][T30663] ? __pfx_proc_coredump_connector+0x10/0x10 [ 927.872186][T30663] ? rcu_is_watching+0x12/0xc0 [ 927.872228][T30663] get_signal+0x22e1/0x26d0 [ 927.872280][T30663] ? __pfx_get_signal+0x10/0x10 [ 927.872317][T30663] ? find_held_lock+0x2b/0x80 [ 927.872350][T30663] ? fixup_vdso_exception+0x34b/0x400 [ 927.872401][T30663] arch_do_signal_or_restart+0x8f/0x7a0 [ 927.872441][T30663] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 927.872491][T30663] ? do_user_addr_fault+0xa62/0x1370 [ 927.872529][T30663] irqentry_exit+0x38a/0x8c0 [ 927.872558][T30663] asm_exc_page_fault+0x26/0x30 [ 927.872583][T30663] RIP: 0033:0x0 [ 927.872601][T30663] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 927.872614][T30663] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 927.872634][T30663] RAX: 0000000000000000 RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 927.872652][T30663] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 927.872669][T30663] RBP: 00007f6298213f91 R08: 00000000000003ff R09: 0000000000000000 [ 927.872686][T30663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.872702][T30663] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 927.872744][T30663] [ 928.405163][T30663] memory: usage 3072kB, limit 3072kB, failcnt 63042 [ 928.412367][T30663] memory+swap: usage 30300kB, limit 9007199254740988kB, failcnt 0 [ 928.420749][T30663] kmem: usage 2952kB, limit 9007199254740988kB, failcnt 0 [ 928.429276][T30663] Memory cgroup stats for /syz2: [ 928.429435][T30663] cache 106496 [ 928.437906][T30663] rss 16384 [ 928.441646][T30663] rss_huge 0 [ 928.444876][T30663] shmem 106496 [ 928.451058][T30663] mapped_file 0 [ 928.454561][T30663] dirty 0 [ 928.457512][T30663] writeback 0 [ 928.461319][T30663] workingset_refault_anon 4950 [ 928.466105][T30663] workingset_refault_file 17708 [ 928.471368][T30663] swap 27881472 [ 928.475020][T30663] swapcached 12288 [ 928.479184][T30663] pgpgin 209994 [ 928.482945][T30663] pgpgout 214607 [ 928.486518][T30663] pgfault 331241 [ 928.491630][T30663] pgmajfault 5008 [ 928.495938][T30663] inactive_anon 0 [ 928.502580][T30663] active_anon 16384 [ 928.506923][T30663] inactive_file 0 [ 928.511135][T30663] active_file 0 [ 928.514775][T30663] unevictable 0 [ 928.519221][T30663] hierarchical_memory_limit 3145728 [ 928.524576][T30663] hierarchical_memsw_limit 9223372036854771712 [ 928.532498][T30663] total_cache 106496 [ 928.536480][T30663] total_rss 16384 [ 928.540603][T30663] total_rss_huge 0 [ 928.544428][T30663] total_shmem 106496 [ 928.550365][T30663] total_mapped_file 0 [ 928.554393][T30663] total_dirty 0 [ 928.558557][T30663] total_writeback 0 [ 928.562415][T30663] total_workingset_refault_anon 4950 [ 928.567907][T30663] total_workingset_refault_file 17708 [ 928.573993][T30663] total_swap 27881472 [ 928.578399][T30663] total_swapcached 12288 [ 928.582680][T30663] total_pgpgin 209994 [ 928.586811][T30663] total_pgpgout 214607 [ 928.591487][T30663] total_pgfault 331241 [ 928.595853][T30663] total_pgmajfault 5008 [ 928.601868][T30663] total_inactive_anon 0 [ 928.606053][T30663] total_active_anon 16384 [ 928.613205][T30663] total_inactive_file 0 [ 928.617431][T30663] total_active_file 0 [ 928.622163][T30663] total_unevictable 0 [ 928.626618][T30663] anon_cost 412 [ 928.631237][T30663] file_cost 0 [ 928.634926][T30663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11756,pid=30663,uid=0 [ 928.652758][T30663] Memory cgroup out of memory: Killed process 30663 (syz.2.11756) total-vm:108176kB, anon-rss:1164kB, file-rss:42752kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 930.037731][T30830] ovs_ÿþÿþ?: entered promiscuous mode [ 931.560867][T30868] syz.2.11853 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 931.633114][T30868] CPU: 0 UID: 0 PID: 30868 Comm: syz.2.11853 Tainted: G U L syzkaller #0 PREEMPT(full) [ 931.633159][T30868] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 931.633169][T30868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.633184][T30868] Call Trace: [ 931.633192][T30868] [ 931.633202][T30868] dump_stack_lvl+0x16c/0x1f0 [ 931.633246][T30868] dump_header+0x101/0x960 [ 931.633276][T30868] oom_kill_process+0x176/0x910 [ 931.633305][T30868] out_of_memory+0x350/0x1700 [ 931.633332][T30868] ? __lock_acquire+0x436/0x2890 [ 931.633358][T30868] ? __pfx_out_of_memory+0x10/0x10 [ 931.633392][T30868] mem_cgroup_out_of_memory+0x118/0x130 [ 931.633426][T30868] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 931.633463][T30868] ? do_raw_spin_unlock+0x172/0x230 [ 931.633497][T30868] try_charge_memcg+0x695/0xd30 [ 931.633543][T30868] ? __pfx_try_charge_memcg+0x10/0x10 [ 931.633582][T30868] ? peak_open+0x31/0x50 [ 931.633608][T30868] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 931.633645][T30868] obj_cgroup_charge_account+0x336/0x670 [ 931.633698][T30868] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 931.633750][T30868] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 931.633787][T30868] ? neigh_sysctl_register+0xb2/0x670 [ 931.633826][T30868] ? kmemdup_noprof+0x29/0x60 [ 931.633862][T30868] ? lockdep_hardirqs_on+0x7c/0x110 [ 931.633900][T30868] kmemdup_noprof+0x29/0x60 [ 931.633930][T30868] neigh_sysctl_register+0xb2/0x670 [ 931.633967][T30868] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 931.634001][T30868] ? inetdev_init+0x245/0x580 [ 931.634024][T30868] ? inetdev_event+0xc32/0x1870 [ 931.634048][T30868] ? notifier_call_chain+0xbc/0x3e0 [ 931.634091][T30868] ? setup_net+0x11d/0x3a0 [ 931.634125][T30868] ? copy_net_ns+0x351/0x7c0 [ 931.634161][T30868] ? create_new_namespaces+0x3ea/0xab0 [ 931.634193][T30868] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 931.634227][T30868] ? ksys_unshare+0x45b/0xa40 [ 931.634264][T30868] ? __x64_sys_unshare+0x31/0x40 [ 931.634285][T30868] ? do_syscall_64+0xcd/0xf80 [ 931.634310][T30868] devinet_sysctl_register+0xb6/0x200 [ 931.634340][T30868] inetdev_init+0x2b8/0x580 [ 931.634367][T30868] inetdev_event+0xc32/0x1870 [ 931.634395][T30868] ? ib_netdevice_event+0xfc/0x330 [ 931.634427][T30868] ? __pfx_inetdev_event+0x10/0x10 [ 931.634454][T30868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 931.634496][T30868] notifier_call_chain+0xbc/0x3e0 [ 931.634535][T30868] ? __pfx_inetdev_event+0x10/0x10 [ 931.634567][T30868] call_netdevice_notifiers_info+0xbe/0x110 [ 931.634594][T30868] register_netdevice+0x1792/0x21d0 [ 931.634638][T30868] ? __pfx_register_netdevice+0x10/0x10 [ 931.634691][T30868] __ip_tunnel_create+0x540/0x6b0 [ 931.634719][T30868] ? __pfx___ip_tunnel_create+0x10/0x10 [ 931.634752][T30868] ip_tunnel_init_net+0x22f/0x7d0 [ 931.634782][T30868] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 931.634815][T30868] ? trace_kmalloc+0x2b/0xb0 [ 931.634851][T30868] ? __kmalloc_noprof+0x35d/0x910 [ 931.634880][T30868] ? __pfx_vti_init_net+0x10/0x10 [ 931.634909][T30868] vti_init_net+0x2e/0x140 [ 931.634937][T30868] ops_init+0x1e2/0x5f0 [ 931.634975][T30868] setup_net+0x11d/0x3a0 [ 931.635010][T30868] ? __pfx_setup_net+0x10/0x10 [ 931.635044][T30868] ? lockdep_init_map_type+0x5c/0x270 [ 931.635069][T30868] ? mutex_init_lockep+0x110/0x150 [ 931.635099][T30868] copy_net_ns+0x351/0x7c0 [ 931.635141][T30868] create_new_namespaces+0x3ea/0xab0 [ 931.635182][T30868] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 931.635219][T30868] ksys_unshare+0x45b/0xa40 [ 931.635259][T30868] ? __pfx_ksys_unshare+0x10/0x10 [ 931.635315][T30868] ? xfd_validate_state+0x61/0x180 [ 931.635347][T30868] __x64_sys_unshare+0x31/0x40 [ 931.635369][T30868] do_syscall_64+0xcd/0xf80 [ 931.635392][T30868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.635417][T30868] RIP: 0033:0x7f629818f7c9 [ 931.635436][T30868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.635460][T30868] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 931.635482][T30868] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 931.635498][T30868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 931.635513][T30868] RBP: 00007f6298213f91 R08: 0000000000000000 R09: 0000000000000000 [ 931.635527][T30868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.635541][T30868] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 931.635680][T30868] [ 932.120746][T30882] Process accounting paused [ 933.402881][T30868] memory: usage 3072kB, limit 3072kB, failcnt 63753 [ 933.437021][T30868] memory+swap: usage 3888kB, limit 9007199254740988kB, failcnt 0 [ 933.467121][T30868] kmem: usage 3036kB, limit 9007199254740988kB, failcnt 0 [ 933.494367][T30868] Memory cgroup stats for /syz2: [ 933.494541][T30868] cache 0 [ 933.513775][T30868] rss 12288 [ 933.523312][T30868] rss_huge 0 [ 933.531657][T30868] shmem 0 [ 933.539303][T30868] mapped_file 0 [ 933.555621][T30868] dirty 0 [ 933.563779][T30868] writeback 4096 [ 933.572181][T30868] workingset_refault_anon 5063 [ 933.584307][T30868] workingset_refault_file 17708 [ 933.596733][T30868] swap 851968 [ 933.608616][T30868] swapcached 20480 [ 933.618483][T30868] pgpgin 211278 [ 933.629026][T30868] pgpgout 215916 [ 933.637651][T30868] pgfault 332844 [ 933.648503][T30868] pgmajfault 5078 [ 933.666892][T30868] inactive_anon 16384 [ 933.679119][T30868] active_anon 0 [ 933.694254][T30868] inactive_file 0 [ 933.706249][T30868] active_file 0 [ 933.716601][T30868] unevictable 0 [ 933.727203][T30868] hierarchical_memory_limit 3145728 [ 933.740091][T30868] hierarchical_memsw_limit 9223372036854771712 [ 933.762920][T30868] total_cache 0 [ 933.773680][T30868] total_rss 12288 [ 933.782750][T30868] total_rss_huge 0 [ 933.796136][T30868] total_shmem 0 [ 933.805633][T30868] total_mapped_file 0 [ 933.816692][T30868] total_dirty 0 [ 933.825281][T30868] total_writeback 4096 [ 933.837910][T30868] total_workingset_refault_anon 5063 [ 933.852956][T30868] total_workingset_refault_file 17708 [ 933.867491][T30868] total_swap 851968 [ 933.878430][T30868] total_swapcached 20480 [ 933.888457][T30868] total_pgpgin 211278 [ 933.898584][T30868] total_pgpgout 215916 [ 933.916298][T30868] total_pgfault 332844 [ 933.931062][T30868] total_pgmajfault 5078 [ 933.942479][T30868] total_inactive_anon 16384 [ 933.955361][T30868] total_active_anon 0 [ 933.965930][T30868] total_inactive_file 0 [ 933.977881][T30868] total_active_file 0 [ 933.995181][T30868] total_unevictable 0 [ 934.005713][T30868] anon_cost 42 [ 934.009153][T30868] file_cost 0 [ 934.019770][T30868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11853,pid=30864,uid=0 [ 934.055671][T30868] Memory cgroup out of memory: Killed process 30864 (syz.2.11853) total-vm:102164kB, anon-rss:1268kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 934.954372][T30925] FAULT_INJECTION: forcing a failure. [ 934.954372][T30925] name failslab, interval 1, probability 0, space 0, times 0 [ 935.018177][T30925] CPU: 0 UID: 0 PID: 30925 Comm: syz.1.11875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 935.018220][T30925] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 935.018230][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.018246][T30925] Call Trace: [ 935.018254][T30925] [ 935.018264][T30925] dump_stack_lvl+0x16c/0x1f0 [ 935.018309][T30925] should_fail_ex+0x512/0x640 [ 935.018354][T30925] ? kmem_cache_alloc_noprof+0x62/0x770 [ 935.018388][T30925] should_failslab+0xc2/0x120 [ 935.018427][T30925] kmem_cache_alloc_noprof+0x83/0x770 [ 935.018457][T30925] ? sk_prot_alloc+0x60/0x2a0 [ 935.018502][T30925] ? sk_prot_alloc+0x60/0x2a0 [ 935.018539][T30925] sk_prot_alloc+0x60/0x2a0 [ 935.018580][T30925] sk_alloc+0x36/0xe30 [ 935.018612][T30925] rds_create+0x9e/0x5f0 [ 935.018644][T30925] __sock_create+0x339/0x8a0 [ 935.018673][T30925] __sys_socket+0x14d/0x260 [ 935.018698][T30925] ? __pfx___sys_socket+0x10/0x10 [ 935.018724][T30925] ? xfd_validate_state+0x61/0x180 [ 935.018745][T30925] ? __pfx_ksys_write+0x10/0x10 [ 935.018787][T30925] __x64_sys_socket+0x72/0xb0 [ 935.018811][T30925] ? lockdep_hardirqs_on+0x7c/0x110 [ 935.018850][T30925] do_syscall_64+0xcd/0xf80 [ 935.018874][T30925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.018899][T30925] RIP: 0033:0x7f4371b8f7c9 [ 935.018920][T30925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.018944][T30925] RSP: 002b:00007f4372a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 935.018968][T30925] RAX: ffffffffffffffda RBX: 00007f4371de5fa0 RCX: 00007f4371b8f7c9 [ 935.018999][T30925] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 935.019014][T30925] RBP: 00007f4371c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 935.019031][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.019047][T30925] R13: 00007f4371de6038 R14: 00007f4371de5fa0 R15: 00007ffe5b9def58 [ 935.019081][T30925] [ 935.243269][T30921] syz.2.11873 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 935.255703][T30921] CPU: 0 UID: 0 PID: 30921 Comm: syz.2.11873 Tainted: G U L syzkaller #0 PREEMPT(full) [ 935.255745][T30921] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 935.255755][T30921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.255774][T30921] Call Trace: [ 935.255783][T30921] [ 935.255792][T30921] dump_stack_lvl+0x16c/0x1f0 [ 935.255836][T30921] dump_header+0x101/0x960 [ 935.255870][T30921] oom_kill_process+0x176/0x910 [ 935.255900][T30921] out_of_memory+0x350/0x1700 [ 935.255927][T30921] ? __lock_acquire+0x436/0x2890 [ 935.255971][T30921] ? __pfx_out_of_memory+0x10/0x10 [ 935.256006][T30921] mem_cgroup_out_of_memory+0x118/0x130 [ 935.256035][T30921] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 935.256079][T30921] ? do_raw_spin_unlock+0x172/0x230 [ 935.256113][T30921] try_charge_memcg+0x695/0xd30 [ 935.256157][T30921] ? __pfx_try_charge_memcg+0x10/0x10 [ 935.256202][T30921] ? find_held_lock+0x2b/0x80 [ 935.256238][T30921] charge_memcg+0x8a/0x230 [ 935.256279][T30921] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 935.256309][T30921] __read_swap_cache_async+0x397/0x500 [ 935.256344][T30921] ? __pfx___read_swap_cache_async+0x10/0x10 [ 935.256380][T30921] ? update_load_avg+0x233/0x2220 [ 935.256406][T30921] swap_cluster_readahead+0x432/0x770 [ 935.256443][T30921] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 935.256520][T30921] ? __lock_acquire+0x436/0x2890 [ 935.256587][T30921] ? get_vma_policy+0x242/0x3c0 [ 935.256612][T30921] swapin_readahead+0x160/0x1220 [ 935.256643][T30921] ? rcu_is_watching+0x12/0xc0 [ 935.256676][T30921] ? finish_task_switch.isra.0+0x207/0xbd0 [ 935.256716][T30921] ? __pfx_swapin_readahead+0x10/0x10 [ 935.256747][T30921] ? find_held_lock+0x2b/0x80 [ 935.256776][T30921] ? swap_cache_get_folio+0x267/0x8e0 [ 935.256803][T30921] ? swap_cache_get_folio+0x267/0x8e0 [ 935.256830][T30921] ? swap_cache_get_folio+0x267/0x8e0 [ 935.256865][T30921] ? swap_cache_get_folio+0x267/0x8e0 [ 935.256894][T30921] ? swap_cache_get_folio+0x293/0x8e0 [ 935.256924][T30921] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 935.256951][T30921] ? __pfx_get_swap_device+0x10/0x10 [ 935.256986][T30921] ? rcu_read_unlock+0x2d/0xb0 [ 935.257019][T30921] ? do_swap_page+0x962/0x64a0 [ 935.257042][T30921] do_swap_page+0x962/0x64a0 [ 935.257076][T30921] ? __lock_acquire+0x436/0x2890 [ 935.257102][T30921] ? rcu_is_watching+0x12/0xc0 [ 935.257134][T30921] ? __free_object+0x286/0x410 [ 935.257170][T30921] ? lockdep_hardirqs_on+0x7c/0x110 [ 935.257210][T30921] ? __pfx_do_swap_page+0x10/0x10 [ 935.257238][T30921] ? __pfx_default_wake_function+0x10/0x10 [ 935.257280][T30921] ? rcu_is_watching+0x12/0xc0 [ 935.257315][T30921] ? ___pte_offset_map+0x175/0x380 [ 935.257355][T30921] __handle_mm_fault+0x19cb/0x2bb0 [ 935.257386][T30921] ? reacquire_held_locks+0xcd/0x1f0 [ 935.257410][T30921] ? __pfx___handle_mm_fault+0x10/0x10 [ 935.257439][T30921] ? lock_vma_under_rcu+0x176/0x580 [ 935.257474][T30921] ? lockdep_hardirqs_on+0x7c/0x110 [ 935.257519][T30921] handle_mm_fault+0x3fe/0xad0 [ 935.257549][T30921] do_user_addr_fault+0x60c/0x1370 [ 935.257582][T30921] ? rcu_is_watching+0x12/0xc0 [ 935.257618][T30921] exc_page_fault+0x64/0xc0 [ 935.257655][T30921] asm_exc_page_fault+0x26/0x30 [ 935.257680][T30921] RIP: 0033:0x7f6298065472 [ 935.257701][T30921] Code: 24 f0 00 00 00 48 69 d2 e8 03 00 00 48 29 d1 ba 80 00 00 00 48 69 c9 40 42 0f 00 48 89 8c 24 f8 00 00 00 31 c9 e8 3e a3 12 00 <41> 8b 04 24 85 c0 0f 84 52 ff ff ff 4c 8b 6c 24 60 4c 8b 44 24 40 [ 935.257725][T30921] RSP: 002b:00007ffd9786d300 EFLAGS: 00010286 [ 935.257744][T30921] RAX: ffffffffffffffff RBX: 00000000000e543f RCX: ffffffffffffffa8 [ 935.257761][T30921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f62983e5fac [ 935.257776][T30921] RBP: 0000000000000032 R08: 00007f6298fae000 R09: 000000019786d5ef [ 935.257792][T30921] R10: 00007ffd9786d3f0 R11: 0000000000000246 R12: 00007f62983e5fac [ 935.257808][T30921] R13: 00007ffd9786d3f0 R14: 00000000000e5471 R15: 00007ffd9786d410 [ 935.257840][T30921] [ 936.771749][T30921] memory: usage 3072kB, limit 3072kB, failcnt 63947 [ 936.814646][T30921] memory+swap: usage 3816kB, limit 9007199254740988kB, failcnt 0 [ 936.860594][T30921] kmem: usage 2664kB, limit 9007199254740988kB, failcnt 0 [ 936.918907][T30921] Memory cgroup stats for /syz2: [ 936.919074][T30921] cache 0 [ 936.950288][T30921] rss 417792 [ 936.953683][T30921] rss_huge 0 [ 936.977952][T30921] shmem 0 [ 936.986437][T30921] mapped_file 0 [ 937.007381][T30921] dirty 0 [ 937.017533][T30921] writeback 0 [ 937.056387][T30921] workingset_refault_anon 5119 [ 937.063385][T30921] workingset_refault_file 17708 [ 937.092489][T30921] swap 761856 [ 937.096302][T30921] swapcached 4096 [ 937.133963][T30921] pgpgin 211447 [ 937.144066][T30921] pgpgout 215988 [ 937.190764][T30921] pgfault 333058 [ 937.194611][T30921] pgmajfault 5132 [ 937.211297][T30921] inactive_anon 0 [ 937.215787][T30921] active_anon 417792 [ 937.258325][T30921] inactive_file 0 [ 937.284855][T30921] active_file 0 [ 937.294981][T30921] unevictable 0 [ 937.317251][T30921] hierarchical_memory_limit 3145728 [ 937.323486][T30921] hierarchical_memsw_limit 9223372036854771712 [ 937.388699][T30921] total_cache 0 [ 937.392420][T30921] total_rss 417792 [ 937.423348][T30921] total_rss_huge 0 [ 937.436482][T30921] total_shmem 0 [ 937.456385][T30921] total_mapped_file 0 [ 937.460645][T30921] total_dirty 0 [ 937.506275][T30921] total_writeback 0 [ 937.510333][T30921] total_workingset_refault_anon 5119 [ 937.550983][T30921] total_workingset_refault_file 17708 [ 937.583359][T30921] total_swap 761856 [ 937.616110][T30921] total_swapcached 4096 [ 937.636077][T30921] total_pgpgin 211447 [ 937.640292][T30921] total_pgpgout 215988 [ 937.644498][T30921] total_pgfault 333058 [ 937.698445][T30921] total_pgmajfault 5132 [ 937.720763][T30921] total_inactive_anon 0 [ 937.764101][T30921] total_active_anon 417792 [ 937.774237][T30921] total_inactive_file 0 [ 937.795034][T30921] total_active_file 0 [ 937.816004][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.823181][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.867302][T30921] total_unevictable 0 [ 937.886785][T30921] anon_cost 8 [ 937.902368][T30921] file_cost 0 [ 937.921541][T30921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11873,pid=30921,uid=0 [ 938.006189][T30921] Memory cgroup out of memory: Killed process 30921 (syz.2.11873) total-vm:106132kB, anon-rss:1396kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 938.195897][T30974] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11898'. [ 939.020979][T30992] FAULT_INJECTION: forcing a failure. [ 939.020979][T30992] name failslab, interval 1, probability 0, space 0, times 0 [ 939.038269][T30992] CPU: 0 UID: 0 PID: 30992 Comm: syz.1.11914 Tainted: G U L syzkaller #0 PREEMPT(full) [ 939.038314][T30992] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 939.038328][T30992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 939.038344][T30992] Call Trace: [ 939.038358][T30992] [ 939.038369][T30992] dump_stack_lvl+0x16c/0x1f0 [ 939.038418][T30992] should_fail_ex+0x512/0x640 [ 939.038453][T30992] should_failslab+0xc2/0x120 [ 939.038494][T30992] __kmalloc_cache_noprof+0x80/0x800 [ 939.038526][T30992] ? report_access+0x100/0x550 [ 939.038576][T30992] ? report_access+0x100/0x550 [ 939.038610][T30992] report_access+0x100/0x550 [ 939.038649][T30992] yama_ptrace_access_check+0x589/0xd10 [ 939.038692][T30992] security_ptrace_access_check+0xb2/0x210 [ 939.038737][T30992] __ptrace_may_access+0x498/0x940 [ 939.038778][T30992] ptrace_attach+0x24f/0x6c0 [ 939.038816][T30992] __x64_sys_ptrace+0x25c/0x2a0 [ 939.038859][T30992] do_syscall_64+0xcd/0xf80 [ 939.038885][T30992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.038917][T30992] RIP: 0033:0x7f4371b8f7c9 [ 939.038938][T30992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.038969][T30992] RSP: 002b:00007f4372a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 939.038993][T30992] RAX: ffffffffffffffda RBX: 00007f4371de5fa0 RCX: 00007f4371b8f7c9 [ 939.039010][T30992] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 939.039025][T30992] RBP: 00007f4371c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 939.039041][T30992] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 939.039057][T30992] R13: 00007f4371de6038 R14: 00007f4371de5fa0 R15: 00007ffe5b9def58 [ 939.039090][T30992] [ 939.579854][T30996] sctp: [Deprecated]: syz.3.11907 (pid 30996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.579854][T30996] Use struct sctp_sack_info instead [ 942.238646][T31074] FAULT_INJECTION: forcing a failure. [ 942.238646][T31074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.323599][T31074] CPU: 0 UID: 0 PID: 31074 Comm: syz.2.11945 Tainted: G U L syzkaller #0 PREEMPT(full) [ 942.323652][T31074] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 942.323773][T31074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.323796][T31074] Call Trace: [ 942.323808][T31074] [ 942.323824][T31074] dump_stack_lvl+0x16c/0x1f0 [ 942.323879][T31074] should_fail_ex+0x512/0x640 [ 942.323918][T31074] _copy_from_user+0x2e/0xd0 [ 942.323951][T31074] restore_altstack+0x93/0x170 [ 942.323979][T31074] ? __pfx_restore_altstack+0x10/0x10 [ 942.324007][T31074] ? _raw_spin_unlock_irq+0x23/0x50 [ 942.324050][T31074] ? lockdep_hardirqs_on+0x7c/0x110 [ 942.324097][T31074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 942.324144][T31074] ? set_current_blocked+0xdd/0x120 [ 942.324181][T31074] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 942.324222][T31074] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 942.324261][T31074] ? rcu_is_watching+0x12/0xc0 [ 942.324310][T31074] do_syscall_64+0xcd/0xf80 [ 942.324336][T31074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.324365][T31074] RIP: 0033:0x7f629812b889 [ 942.324388][T31074] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 942.324417][T31074] RSP: 002b:00007f6298faca80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 942.324444][T31074] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629812b889 [ 942.324465][T31074] RDX: 00007f6298faca80 RSI: 00007f6298facbb0 RDI: 0000000000000011 [ 942.324492][T31074] RBP: 00007f6298213f91 R08: 0000000000000000 R09: 0000000000000000 [ 942.324511][T31074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.324528][T31074] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 942.324562][T31074] [ 942.946042][ T5833] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 943.064375][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 943.064418][ T5833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 943.064428][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 943.064443][ T5833] Call Trace: [ 943.064451][ T5833] [ 943.064461][ T5833] dump_stack_lvl+0x16c/0x1f0 [ 943.064505][ T5833] dump_header+0x101/0x960 [ 943.064535][ T5833] oom_kill_process+0x176/0x910 [ 943.064564][ T5833] out_of_memory+0x350/0x1700 [ 943.064590][ T5833] ? __lock_acquire+0x436/0x2890 [ 943.064616][ T5833] ? __pfx_out_of_memory+0x10/0x10 [ 943.064650][ T5833] mem_cgroup_out_of_memory+0x118/0x130 [ 943.064680][ T5833] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 943.064715][ T5833] ? do_raw_spin_unlock+0x172/0x230 [ 943.064748][ T5833] try_charge_memcg+0x695/0xd30 [ 943.064791][ T5833] ? __pfx_try_charge_memcg+0x10/0x10 [ 943.064834][ T5833] ? find_held_lock+0x2b/0x80 [ 943.064868][ T5833] charge_memcg+0x8a/0x230 [ 943.064905][ T5833] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 943.064934][ T5833] __read_swap_cache_async+0x397/0x500 [ 943.064967][ T5833] ? __pfx___read_swap_cache_async+0x10/0x10 [ 943.064999][ T5833] ? __lock_acquire+0x436/0x2890 [ 943.065028][ T5833] swap_cluster_readahead+0x432/0x770 [ 943.065064][ T5833] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 943.065097][ T5833] ? __lock_acquire+0x436/0x2890 [ 943.065127][ T5833] ? update_load_avg+0x233/0x2220 [ 943.065150][ T5833] ? get_vma_policy+0x242/0x3c0 [ 943.065174][ T5833] swapin_readahead+0x160/0x1220 [ 943.065213][ T5833] ? __pfx_swapin_readahead+0x10/0x10 [ 943.065243][ T5833] ? find_held_lock+0x2b/0x80 [ 943.065272][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 943.065298][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 943.065324][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 943.065361][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 943.065389][ T5833] ? swap_cache_get_folio+0x293/0x8e0 [ 943.065419][ T5833] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 943.065447][ T5833] ? __pfx_get_swap_device+0x10/0x10 [ 943.065482][ T5833] ? rcu_read_unlock+0x2d/0xb0 [ 943.065514][ T5833] ? do_swap_page+0x962/0x64a0 [ 943.065537][ T5833] do_swap_page+0x962/0x64a0 [ 943.065572][ T5833] ? __lock_acquire+0x436/0x2890 [ 943.065602][ T5833] ? __pfx_do_swap_page+0x10/0x10 [ 943.065629][ T5833] ? __pfx_default_wake_function+0x10/0x10 [ 943.065664][ T5833] ? rcu_is_watching+0x12/0xc0 [ 943.065697][ T5833] ? __free_object+0x286/0x410 [ 943.065735][ T5833] ? rcu_is_watching+0x12/0xc0 [ 943.065768][ T5833] ? ___pte_offset_map+0x175/0x380 [ 943.065807][ T5833] __handle_mm_fault+0x19cb/0x2bb0 [ 943.065838][ T5833] ? reacquire_held_locks+0xcd/0x1f0 [ 943.065861][ T5833] ? __pfx___handle_mm_fault+0x10/0x10 [ 943.065891][ T5833] ? lock_vma_under_rcu+0x176/0x580 [ 943.065927][ T5833] ? get_timespec64+0x136/0x1b0 [ 943.065958][ T5833] handle_mm_fault+0x3fe/0xad0 [ 943.065989][ T5833] do_user_addr_fault+0x60c/0x1370 [ 943.066022][ T5833] ? rcu_is_watching+0x12/0xc0 [ 943.066058][ T5833] exc_page_fault+0x64/0xc0 [ 943.066097][ T5833] asm_exc_page_fault+0x26/0x30 [ 943.066120][ T5833] RIP: 0033:0x7f62981c2088 [ 943.066140][ T5833] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 943.066165][ T5833] RSP: 002b:00007ffd9786d4b0 EFLAGS: 00010293 [ 943.066185][ T5833] RAX: 0000000000000000 RBX: 000000000000151f RCX: 00007f62981c2085 [ 943.066201][ T5833] RDX: 00007ffd9786d4f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 943.066223][ T5833] RBP: 00007ffd9786d55c R08: 0000000000000000 R09: 0000000000000000 [ 943.066238][ T5833] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 943.066258][ T5833] R13: 00000000000927c0 R14: 00000000000e7275 R15: 00007ffd9786d5b0 [ 943.066290][ T5833] [ 943.526882][T31034] kexec: Could not allocate control_code_buffer [ 943.564745][ T5833] memory: usage 3072kB, limit 3072kB, failcnt 64142 [ 943.572008][ T5833] memory+swap: usage 3936kB, limit 9007199254740988kB, failcnt 0 [ 943.581219][ T5833] kmem: usage 2576kB, limit 9007199254740988kB, failcnt 0 [ 943.589044][ T5833] Memory cgroup stats for /syz2: [ 943.589212][ T5833] cache 0 [ 943.597853][ T5833] rss 339968 [ 943.601485][ T5833] rss_huge 0 [ 943.605285][ T5833] shmem 0 [ 943.608527][ T5833] mapped_file 0 [ 943.612813][ T5833] dirty 0 [ 943.616214][ T5833] writeback 0 [ 943.620046][ T5833] workingset_refault_anon 5175 [ 943.625016][ T5833] workingset_refault_file 17708 [ 943.630226][ T5833] swap 876544 [ 943.634281][ T5833] swapcached 28672 [ 943.638741][ T5833] pgpgin 212225 [ 943.642431][ T5833] pgpgout 216782 [ 943.646508][ T5833] pgfault 335029 [ 943.650277][ T5833] pgmajfault 5161 [ 943.654039][ T5833] inactive_anon 155648 [ 943.658524][ T5833] active_anon 192512 [ 943.662462][ T5833] inactive_file 0 [ 943.666299][ T5833] active_file 0 [ 943.670404][ T5833] unevictable 0 [ 943.674277][ T5833] hierarchical_memory_limit 3145728 [ 943.680542][ T5833] hierarchical_memsw_limit 9223372036854771712 [ 943.687939][ T5833] total_cache 0 [ 943.692067][ T5833] total_rss 339968 [ 943.696333][ T5833] total_rss_huge 0 [ 943.701102][ T5833] total_shmem 0 [ 943.705136][ T5833] total_mapped_file 0 [ 943.709424][ T5833] total_dirty 0 [ 943.714369][ T5833] total_writeback 0 [ 943.718953][ T5833] total_workingset_refault_anon 5175 [ 943.724282][ T5833] total_workingset_refault_file 17708 [ 943.729965][ T5833] total_swap 876544 [ 943.736248][ T5833] total_swapcached 28672 [ 943.741261][ T5833] total_pgpgin 212225 [ 943.745479][ T5833] total_pgpgout 216782 [ 943.750706][ T5833] total_pgfault 335029 [ 943.754993][ T5833] total_pgmajfault 5161 [ 943.759472][ T5833] total_inactive_anon 155648 [ 943.764837][ T5833] total_active_anon 192512 [ 943.770688][ T5833] total_inactive_file 0 [ 943.775424][ T5833] total_active_file 0 [ 943.780025][ T5833] total_unevictable 0 [ 943.785154][ T5833] anon_cost 46 [ 943.789220][ T5833] file_cost 0 [ 943.792717][ T5833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11948,pid=31077,uid=0 [ 943.810888][ T5833] Memory cgroup out of memory: Killed process 31077 (syz.2.11948) total-vm:108180kB, anon-rss:1396kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 944.550035][T31110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11961'. [ 945.228650][T31106] syz.2.11960 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 945.296640][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.2.11960 Tainted: G U L syzkaller #0 PREEMPT(full) [ 945.296683][T31106] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 945.296692][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.296707][T31106] Call Trace: [ 945.296715][T31106] [ 945.296725][T31106] dump_stack_lvl+0x16c/0x1f0 [ 945.296779][T31106] dump_header+0x101/0x960 [ 945.296814][T31106] oom_kill_process+0x176/0x910 [ 945.296845][T31106] out_of_memory+0x350/0x1700 [ 945.296877][T31106] ? __lock_acquire+0x436/0x2890 [ 945.296906][T31106] ? __pfx_out_of_memory+0x10/0x10 [ 945.296941][T31106] mem_cgroup_out_of_memory+0x118/0x130 [ 945.296972][T31106] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 945.297027][T31106] ? do_raw_spin_unlock+0x172/0x230 [ 945.297061][T31106] try_charge_memcg+0x695/0xd30 [ 945.297109][T31106] ? __pfx_try_charge_memcg+0x10/0x10 [ 945.297156][T31106] ? __print_lock_name+0xc1/0xe0 [ 945.297189][T31106] ? rcu_read_unlock+0x17/0x60 [ 945.297219][T31106] charge_memcg+0x8a/0x230 [ 945.297256][T31106] __mem_cgroup_charge+0x2b/0x1e0 [ 945.297282][T31106] do_anonymous_page+0xca9/0x2190 [ 945.297319][T31106] __handle_mm_fault+0x1ecf/0x2bb0 [ 945.297352][T31106] ? __pfx___handle_mm_fault+0x10/0x10 [ 945.297380][T31106] ? __pte_offset_map_lock+0x174/0x310 [ 945.297429][T31106] ? find_held_lock+0x2b/0x80 [ 945.297469][T31106] ? follow_page_pte+0x5cf/0x1390 [ 945.297511][T31106] handle_mm_fault+0x3fe/0xad0 [ 945.297543][T31106] __get_user_pages+0x54e/0x3590 [ 945.297590][T31106] ? __pfx___get_user_pages+0x10/0x10 [ 945.297635][T31106] populate_vma_page_range+0x267/0x3f0 [ 945.297676][T31106] ? __pfx_populate_vma_page_range+0x10/0x10 [ 945.297717][T31106] ? __pfx_find_vma_intersection+0x10/0x10 [ 945.297758][T31106] ? do_mmap+0x69c/0x1210 [ 945.297798][T31106] __mm_populate+0x1d8/0x380 [ 945.297839][T31106] ? __pfx___mm_populate+0x10/0x10 [ 945.297881][T31106] ? up_write+0x282/0x4e0 [ 945.297911][T31106] vm_mmap_pgoff+0x37f/0x470 [ 945.297950][T31106] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 945.297985][T31106] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 945.298020][T31106] ? count_memcg_events+0x122/0x290 [ 945.298059][T31106] ? find_held_lock+0x2b/0x80 [ 945.298095][T31106] ksys_mmap_pgoff+0x7d/0x5c0 [ 945.298136][T31106] __x64_sys_mmap+0x125/0x190 [ 945.298166][T31106] do_syscall_64+0xcd/0xf80 [ 945.298190][T31106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.298215][T31106] RIP: 0033:0x7f629818f7c9 [ 945.298233][T31106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.298257][T31106] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 945.298279][T31106] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 945.298296][T31106] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 945.298313][T31106] RBP: 00007f6298213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 945.298330][T31106] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 945.298346][T31106] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 945.298379][T31106] [ 945.298389][T31106] memory: usage 3072kB, limit 3072kB, failcnt 64961 [ 946.157702][T31141] sctp: [Deprecated]: syz.0.11977 (pid 31141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.157702][T31141] Use struct sctp_sack_info instead [ 946.347366][T31106] memory+swap: usage 6880kB, limit 9007199254740988kB, failcnt 0 [ 946.386533][T31106] kmem: usage 2612kB, limit 9007199254740988kB, failcnt 0 [ 946.393762][T31106] Memory cgroup stats for /syz2: [ 946.393932][T31106] cache 0 [ 946.443636][T31106] rss 450560 [ 946.453716][T31106] rss_huge 0 [ 946.463793][T31106] shmem 0 [ 946.470645][T31149] Invalid ELF header magic: != ELF [ 946.480678][T31106] mapped_file 0 [ 946.492521][T31106] dirty 0 [ 946.502596][T31106] writeback 0 [ 946.524486][T31106] workingset_refault_anon 5235 [ 946.529436][T31106] workingset_refault_file 17708 [ 946.553720][T31106] swap 3899392 [ 946.557187][T31106] swapcached 8192 [ 946.586066][T31106] pgpgin 213207 [ 946.600336][T31106] pgpgout 217740 [ 946.629033][T31106] pgfault 336161 [ 946.632655][T31106] pgmajfault 5198 [ 946.653334][T31106] inactive_anon 0 [ 946.684145][T31106] active_anon 450560 [ 946.688117][T31106] inactive_file 0 [ 946.725182][T31106] active_file 0 [ 946.728803][T31106] unevictable 0 [ 946.754156][T31106] hierarchical_memory_limit 3145728 [ 946.776370][T31106] hierarchical_memsw_limit 9223372036854771712 [ 946.814097][T31106] total_cache 0 [ 946.817625][T31106] total_rss 450560 [ 946.821444][T31106] total_rss_huge 0 [ 946.868357][T31106] total_shmem 0 [ 946.871866][T31106] total_mapped_file 0 [ 946.888113][T31106] total_dirty 0 [ 946.907537][T31106] total_writeback 0 [ 946.930699][T31161] FAULT_INJECTION: forcing a failure. [ 946.930699][T31161] name failslab, interval 1, probability 0, space 0, times 0 [ 946.943940][T31161] CPU: 0 UID: 0 PID: 31161 Comm: syz.3.11985 Tainted: G U L syzkaller #0 PREEMPT(full) [ 946.943983][T31161] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 946.943993][T31161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 946.944009][T31161] Call Trace: [ 946.944017][T31161] [ 946.944026][T31161] dump_stack_lvl+0x16c/0x1f0 [ 946.944081][T31161] should_fail_ex+0x512/0x640 [ 946.944114][T31161] should_failslab+0xc2/0x120 [ 946.944154][T31161] __kmalloc_cache_noprof+0x80/0x800 [ 946.944184][T31161] ? report_access+0x100/0x550 [ 946.944223][T31161] ? report_access+0x100/0x550 [ 946.944256][T31161] report_access+0x100/0x550 [ 946.944293][T31161] yama_ptrace_access_check+0x589/0xd10 [ 946.944336][T31161] security_ptrace_access_check+0xb2/0x210 [ 946.944379][T31161] __ptrace_may_access+0x498/0x940 [ 946.944418][T31161] ptrace_attach+0x24f/0x6c0 [ 946.944456][T31161] __x64_sys_ptrace+0x25c/0x2a0 [ 946.944495][T31161] do_syscall_64+0xcd/0xf80 [ 946.944519][T31161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.944545][T31161] RIP: 0033:0x7fb75ed8f7c9 [ 946.944565][T31161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.944599][T31161] RSP: 002b:00007fb75fc9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 946.944628][T31161] RAX: ffffffffffffffda RBX: 00007fb75efe5fa0 RCX: 00007fb75ed8f7c9 [ 946.944645][T31161] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 946.944660][T31161] RBP: 00007fb75ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 946.944676][T31161] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 946.944692][T31161] R13: 00007fb75efe6038 R14: 00007fb75efe5fa0 R15: 00007ffdf0186408 [ 946.944724][T31161] [ 947.134858][T31106] total_workingset_refault_anon 5235 [ 947.140290][T31106] total_workingset_refault_file 17708 [ 947.146806][T31106] total_swap 3899392 [ 947.151248][T31106] total_swapcached 8192 [ 947.155574][T31106] total_pgpgin 213207 [ 947.159673][T31106] total_pgpgout 217740 [ 947.163904][T31106] total_pgfault 336161 [ 947.167976][T31106] total_pgmajfault 5198 [ 947.172244][T31106] total_inactive_anon 0 [ 947.176403][T31106] total_active_anon 450560 [ 947.181317][T31106] total_inactive_file 0 [ 947.185601][T31106] total_active_file 0 [ 947.189612][T31106] total_unevictable 0 [ 947.193823][T31106] anon_cost 37 [ 947.197463][T31106] file_cost 0 [ 947.202059][T31106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11960,pid=31105,uid=0 [ 947.217271][T31106] Memory cgroup out of memory: Killed process 31105 (syz.2.11960) total-vm:108180kB, anon-rss:1524kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 947.641075][ T5833] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 947.719492][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 947.719533][ T5833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 947.719541][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 947.719556][ T5833] Call Trace: [ 947.719564][ T5833] [ 947.719574][ T5833] dump_stack_lvl+0x16c/0x1f0 [ 947.719617][ T5833] dump_header+0x101/0x960 [ 947.719647][ T5833] oom_kill_process+0x176/0x910 [ 947.719676][ T5833] out_of_memory+0x350/0x1700 [ 947.719702][ T5833] ? __lock_acquire+0x436/0x2890 [ 947.719728][ T5833] ? __pfx_out_of_memory+0x10/0x10 [ 947.719762][ T5833] mem_cgroup_out_of_memory+0x118/0x130 [ 947.719791][ T5833] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 947.719827][ T5833] ? do_raw_spin_unlock+0x172/0x230 [ 947.719859][ T5833] try_charge_memcg+0x695/0xd30 [ 947.719902][ T5833] ? __pfx_try_charge_memcg+0x10/0x10 [ 947.719961][ T5833] ? find_held_lock+0x2b/0x80 [ 947.719998][ T5833] charge_memcg+0x8a/0x230 [ 947.720035][ T5833] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 947.720065][ T5833] __read_swap_cache_async+0x397/0x500 [ 947.720100][ T5833] ? __pfx___read_swap_cache_async+0x10/0x10 [ 947.720142][ T5833] swap_cluster_readahead+0x432/0x770 [ 947.720171][ T5833] ? should_fail_alloc_page+0xee/0x130 [ 947.720215][ T5833] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 947.720251][ T5833] ? trace_pelt_se_tp+0xed/0x130 [ 947.720274][ T5833] ? __update_load_avg_se+0x3fb/0x940 [ 947.720316][ T5833] ? update_load_avg+0x233/0x2220 [ 947.720341][ T5833] ? get_vma_policy+0x242/0x3c0 [ 947.720367][ T5833] swapin_readahead+0x160/0x1220 [ 947.720407][ T5833] ? __pfx_swapin_readahead+0x10/0x10 [ 947.720439][ T5833] ? find_held_lock+0x2b/0x80 [ 947.720470][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 947.720497][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 947.720525][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 947.720556][ T5833] ? swap_cache_get_folio+0x267/0x8e0 [ 947.720585][ T5833] ? swap_cache_get_folio+0x293/0x8e0 [ 947.720615][ T5833] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 947.720653][ T5833] ? __pfx_get_swap_device+0x10/0x10 [ 947.720689][ T5833] ? rcu_read_unlock+0x2d/0xb0 [ 947.720721][ T5833] ? do_swap_page+0x962/0x64a0 [ 947.720743][ T5833] do_swap_page+0x962/0x64a0 [ 947.720771][ T5833] ? __lock_acquire+0x436/0x2890 [ 947.720801][ T5833] ? __pfx_do_swap_page+0x10/0x10 [ 947.720828][ T5833] ? __pfx_default_wake_function+0x10/0x10 [ 947.720863][ T5833] ? rcu_is_watching+0x12/0xc0 [ 947.720896][ T5833] ? __free_object+0x286/0x410 [ 947.720938][ T5833] ? rcu_is_watching+0x12/0xc0 [ 947.720971][ T5833] ? ___pte_offset_map+0x175/0x380 [ 947.721009][ T5833] __handle_mm_fault+0x19cb/0x2bb0 [ 947.721040][ T5833] ? reacquire_held_locks+0xcd/0x1f0 [ 947.721064][ T5833] ? __pfx___handle_mm_fault+0x10/0x10 [ 947.721093][ T5833] ? lock_vma_under_rcu+0x176/0x580 [ 947.721127][ T5833] ? get_timespec64+0x136/0x1b0 [ 947.721158][ T5833] handle_mm_fault+0x3fe/0xad0 [ 947.721189][ T5833] do_user_addr_fault+0x60c/0x1370 [ 947.721221][ T5833] ? rcu_is_watching+0x12/0xc0 [ 947.721258][ T5833] exc_page_fault+0x64/0xc0 [ 947.721296][ T5833] asm_exc_page_fault+0x26/0x30 [ 947.721320][ T5833] RIP: 0033:0x7f62981c2088 [ 947.721341][ T5833] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 947.721365][ T5833] RSP: 002b:00007ffd9786d4b0 EFLAGS: 00010293 [ 947.721384][ T5833] RAX: 0000000000000000 RBX: 0000000000001527 RCX: 00007f62981c2085 [ 947.721399][ T5833] RDX: 00007ffd9786d4f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.721414][ T5833] RBP: 00007ffd9786d55c R08: 0000000000000000 R09: 0000000000000000 [ 947.721429][ T5833] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 947.721444][ T5833] R13: 00000000000927c0 R14: 00000000000e85a3 R15: 00007ffd9786d5b0 [ 947.721475][ T5833] [ 947.721484][ T5833] memory: usage 2812kB, limit 3072kB, failcnt 65106 [ 948.157399][ T5833] memory+swap: usage 3560kB, limit 9007199254740988kB, failcnt 0 [ 948.165884][ T5833] kmem: usage 2616kB, limit 9007199254740988kB, failcnt 0 [ 948.174758][ T5833] Memory cgroup stats for /syz2: [ 948.174923][ T5833] cache 0 [ 948.183666][ T5833] rss 73728 [ 948.187509][ T5833] rss_huge 0 [ 948.190745][ T5833] shmem 0 [ 948.193699][ T5833] mapped_file 0 [ 948.198306][ T5833] dirty 0 [ 948.201300][ T5833] writeback 24576 [ 948.204941][ T5833] workingset_refault_anon 5257 [ 948.210357][ T5833] workingset_refault_file 17708 [ 948.215331][ T5833] swap 765952 [ 948.219754][ T5833] swapcached 65536 [ 948.223508][ T5833] pgpgin 213303 [ 948.227476][ T5833] pgpgout 217921 [ 948.231059][ T5833] pgfault 336431 [ 948.235085][ T5833] pgmajfault 5213 [ 948.240047][ T5833] inactive_anon 0 [ 948.243804][ T5833] active_anon 73728 [ 948.248324][ T5833] inactive_file 0 [ 948.251989][ T5833] active_file 0 [ 948.255491][ T5833] unevictable 0 [ 948.261511][ T5833] hierarchical_memory_limit 3145728 [ 948.269114][ T5833] hierarchical_memsw_limit 9223372036854771712 [ 948.275314][ T5833] total_cache 0 [ 948.279389][ T5833] total_rss 73728 [ 948.283052][ T5833] total_rss_huge 0 [ 948.287291][ T5833] total_shmem 0 [ 948.290794][ T5833] total_mapped_file 0 [ 948.294890][ T5833] total_dirty 0 [ 948.299312][ T5833] total_writeback 24576 [ 948.303653][ T5833] total_workingset_refault_anon 5257 [ 948.309730][ T5833] total_workingset_refault_file 17708 [ 948.315582][ T5833] total_swap 765952 [ 948.319413][ T5833] total_swapcached 65536 [ 948.324609][ T5833] total_pgpgin 213303 [ 948.329351][ T5833] total_pgpgout 217921 [ 948.333489][ T5833] total_pgfault 336431 [ 948.338076][ T5833] total_pgmajfault 5213 [ 948.342451][ T5833] total_inactive_anon 0 [ 948.348610][ T5833] total_active_anon 73728 [ 948.353089][ T5833] total_inactive_file 0 [ 948.358023][ T5833] total_active_file 0 [ 948.362137][ T5833] total_unevictable 0 [ 948.368958][ T5833] anon_cost 114 [ 948.373350][ T5833] file_cost 0 [ 948.377103][ T5833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11990,pid=31170,uid=0 [ 948.393413][ T5833] Memory cgroup out of memory: Killed process 31170 (syz.2.11990) total-vm:104080kB, anon-rss:1140kB, file-rss:22900kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 948.468395][T31177] FAULT_INJECTION: forcing a failure. [ 948.468395][T31177] name failslab, interval 1, probability 0, space 0, times 0 [ 948.565015][T31177] CPU: 0 UID: 0 PID: 31177 Comm: syz.3.11996 Tainted: G U L syzkaller #0 PREEMPT(full) [ 948.565058][T31177] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 948.565068][T31177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.565084][T31177] Call Trace: [ 948.565092][T31177] [ 948.565102][T31177] dump_stack_lvl+0x16c/0x1f0 [ 948.565148][T31177] should_fail_ex+0x512/0x640 [ 948.565177][T31177] ? __kvmalloc_node_noprof+0x129/0xa40 [ 948.565215][T31177] should_failslab+0xc2/0x120 [ 948.565255][T31177] __kvmalloc_node_noprof+0x14a/0xa40 [ 948.565290][T31177] ? __x64_sys_futex+0x1e0/0x4c0 [ 948.565318][T31177] ? __x64_sys_futex+0x1e9/0x4c0 [ 948.565346][T31177] ? keyctl_update_key+0xdf/0x160 [ 948.565368][T31177] ? __sys_socket+0xac/0x260 [ 948.565391][T31177] ? fput+0x70/0xf0 [ 948.565418][T31177] ? keyctl_update_key+0xdf/0x160 [ 948.565440][T31177] keyctl_update_key+0xdf/0x160 [ 948.565464][T31177] __do_sys_keyctl+0x14b/0x590 [ 948.565498][T31177] do_syscall_64+0xcd/0xf80 [ 948.565522][T31177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.565549][T31177] RIP: 0033:0x7fb75ed8f7c9 [ 948.565569][T31177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.565594][T31177] RSP: 002b:00007fb75fc9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 948.565618][T31177] RAX: ffffffffffffffda RBX: 00007fb75efe5fa0 RCX: 00007fb75ed8f7c9 [ 948.565635][T31177] RDX: 0000000000000107 RSI: ffffeffffffffffe RDI: 0000000000000002 [ 948.565650][T31177] RBP: 00007fb75ee13f91 R08: 000800000000000c R09: 0000000000000000 [ 948.565666][T31177] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 948.565681][T31177] R13: 00007fb75efe6038 R14: 00007fb75efe5fa0 R15: 00007ffdf0186408 [ 948.565712][T31177] [ 949.662126][T31208] Invalid ELF header magic: != ELF [ 949.897770][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12012'. [ 949.926590][T31217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12013'. [ 950.674108][T31226] syz.2.12026 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 950.737334][T31226] CPU: 0 UID: 0 PID: 31226 Comm: syz.2.12026 Tainted: G U L syzkaller #0 PREEMPT(full) [ 950.737378][T31226] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 950.737388][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.737403][T31226] Call Trace: [ 950.737411][T31226] [ 950.737422][T31226] dump_stack_lvl+0x16c/0x1f0 [ 950.737468][T31226] dump_header+0x101/0x960 [ 950.737498][T31226] oom_kill_process+0x176/0x910 [ 950.737526][T31226] out_of_memory+0x350/0x1700 [ 950.737552][T31226] ? __lock_acquire+0x436/0x2890 [ 950.737579][T31226] ? __pfx_out_of_memory+0x10/0x10 [ 950.737613][T31226] mem_cgroup_out_of_memory+0x118/0x130 [ 950.737642][T31226] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 950.737679][T31226] ? do_raw_spin_unlock+0x172/0x230 [ 950.737713][T31226] try_charge_memcg+0x695/0xd30 [ 950.737758][T31226] ? __pfx_try_charge_memcg+0x10/0x10 [ 950.737812][T31226] ? __print_lock_name+0xc1/0xe0 [ 950.737845][T31226] ? rcu_read_unlock+0x17/0x60 [ 950.737876][T31226] charge_memcg+0x8a/0x230 [ 950.737921][T31226] __mem_cgroup_charge+0x2b/0x1e0 [ 950.737948][T31226] do_anonymous_page+0xca9/0x2190 [ 950.737986][T31226] __handle_mm_fault+0x1ecf/0x2bb0 [ 950.738020][T31226] ? __pfx___handle_mm_fault+0x10/0x10 [ 950.738048][T31226] ? __pte_offset_map_lock+0x174/0x310 [ 950.738085][T31226] ? find_held_lock+0x2b/0x80 [ 950.738126][T31226] ? follow_page_pte+0x5cf/0x1390 [ 950.738170][T31226] handle_mm_fault+0x3fe/0xad0 [ 950.738202][T31226] __get_user_pages+0x54e/0x3590 [ 950.738252][T31226] ? __pfx___get_user_pages+0x10/0x10 [ 950.738298][T31226] populate_vma_page_range+0x267/0x3f0 [ 950.738341][T31226] ? __pfx_populate_vma_page_range+0x10/0x10 [ 950.738381][T31226] ? __pfx_find_vma_intersection+0x10/0x10 [ 950.738420][T31226] ? do_mmap+0x69c/0x1210 [ 950.738460][T31226] __mm_populate+0x1d8/0x380 [ 950.738502][T31226] ? __pfx___mm_populate+0x10/0x10 [ 950.738544][T31226] ? up_write+0x282/0x4e0 [ 950.738574][T31226] vm_mmap_pgoff+0x37f/0x470 [ 950.738613][T31226] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 950.738649][T31226] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 950.738688][T31226] ? count_memcg_events+0x122/0x290 [ 950.738727][T31226] ? find_held_lock+0x2b/0x80 [ 950.738763][T31226] ksys_mmap_pgoff+0x7d/0x5c0 [ 950.738804][T31226] __x64_sys_mmap+0x125/0x190 [ 950.738834][T31226] do_syscall_64+0xcd/0xf80 [ 950.738859][T31226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.738884][T31226] RIP: 0033:0x7f629818f7c9 [ 950.738903][T31226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.738933][T31226] RSP: 002b:00007f6298fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 950.738956][T31226] RAX: ffffffffffffffda RBX: 00007f62983e5fa0 RCX: 00007f629818f7c9 [ 950.738972][T31226] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 950.738988][T31226] RBP: 00007f6298213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 950.739004][T31226] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 950.739019][T31226] R13: 00007f62983e6038 R14: 00007f62983e5fa0 R15: 00007ffd9786d198 [ 950.739053][T31226] [ 950.739064][T31226] memory: usage 3072kB, limit 3072kB, failcnt 65363 [ 951.100780][T31195] kexec: Could not allocate control_code_buffer [ 951.198516][T31235] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 951.260118][T31237] Invalid ELF header magic: != ELF [ 951.943089][T31226] memory+swap: usage 3824kB, limit 9007199254740988kB, failcnt 0 [ 951.970931][T31226] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 951.994707][T31226] Memory cgroup stats for /syz2: [ 951.994872][T31226] cache 0 [ 952.019162][T31226] rss 503808 [ 952.022443][T31226] rss_huge 0 [ 952.058581][T31226] shmem 0 [ 952.061594][T31226] mapped_file 0 [ 952.065274][T31226] dirty 0 [ 952.093526][T31226] writeback 0 [ 952.117523][T31226] workingset_refault_anon 5369 [ 952.135224][T31226] workingset_refault_file 17708 [ 952.167215][T31226] swap 770048 [ 952.170806][T31226] swapcached 4096 [ 952.207151][T31226] pgpgin 213765 [ 952.210901][T31226] pgpgout 218285 [ 952.215770][T31226] pgfault 337424 [ 952.261946][T31226] pgmajfault 5286 [ 952.266429][T31226] inactive_anon 0 [ 952.293162][T31226] active_anon 503808 [ 952.310677][T31226] inactive_file 0 [ 952.334892][T31226] active_file 0 [ 952.345195][T31226] unevictable 0 [ 952.376315][T31226] hierarchical_memory_limit 3145728 [ 952.406261][T31226] hierarchical_memsw_limit 9223372036854771712 [ 952.412626][T31226] total_cache 0 [ 952.468909][T31226] total_rss 503808 [ 952.472805][T31226] total_rss_huge 0 [ 952.488783][T31226] total_shmem 0 [ 952.502840][T31226] total_mapped_file 0 [ 952.539408][T31226] total_dirty 0 [ 952.543297][T31226] total_writeback 0 [ 952.568110][T31226] total_workingset_refault_anon 5369 [ 952.574023][T31226] total_workingset_refault_file 17708 [ 952.645373][T31226] total_swap 770048 [ 952.655254][T31226] total_swapcached 4096 [ 952.671796][T31226] total_pgpgin 213765 [ 952.687704][T31226] total_pgpgout 218285 [ 952.704759][T31226] total_pgfault 337424 [ 952.720660][T31226] total_pgmajfault 5286 [ 952.752453][T31226] total_inactive_anon 0 [ 952.769993][T31226] total_active_anon 503808 [ 952.801210][T31226] total_inactive_file 0 [ 952.817061][T31226] total_active_file 0 [ 952.821389][T31226] total_unevictable 0 [ 952.852005][T31226] anon_cost 9 [ 952.878613][T31226] file_cost 0 [ 952.881998][T31226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.12026,pid=31224,uid=0 [ 952.973553][T31226] Memory cgroup out of memory: Killed process 31224 (syz.2.12026) total-vm:108180kB, anon-rss:1524kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 953.440578][T31245] kexec: Could not allocate control_code_buffer [ 953.615715][T31285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12044'. [ 953.796513][T31287] netlink: 'syz.1.12046': attribute type 3 has an invalid length. [ 953.850013][T31287] netlink: 332 bytes leftover after parsing attributes in process `syz.1.12046'. [ 953.962568][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12048'. [ 954.032314][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12048'. [ 956.379319][T31306] kexec: Could not allocate control_code_buffer [ 957.412418][T31376] netlink: 346 bytes leftover after parsing attributes in process `syz.0.12083'. [ 958.240729][T31400] netlink: 346 bytes leftover after parsing attributes in process `syz.3.12095'. [ 958.600090][T31371] kexec: Could not allocate control_code_buffer [ 958.750037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.763334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.777940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.791220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.804338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.817979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.831619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.844832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.857557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.870312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.733051][ C0] net_ratelimit: 9546 callbacks suppressed [ 963.733072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.756408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.771484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.787733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.802358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.821478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.837393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.852318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.867144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.882207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.719859][ C0] net_ratelimit: 9319 callbacks suppressed [ 968.719882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.738991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.752313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.765377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.778906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.791718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.804706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.817784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.830979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.844820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.706340][ C0] net_ratelimit: 9402 callbacks suppressed [ 973.706363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.726627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.740858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.755938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.770757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.785211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.800072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.814528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.830789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.844441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.693545][ C0] net_ratelimit: 9754 callbacks suppressed [ 978.693569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.712379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.726055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.739404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.753805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.766778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.780750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.793745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.809498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.822313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.679925][ C0] net_ratelimit: 4664 callbacks suppressed [ 983.679947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.698812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.712966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.725917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.740532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.753721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.767706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.781564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.797839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.811072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.667054][ C0] net_ratelimit: 4552 callbacks suppressed [ 988.667076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.689023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.705046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.718535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.734472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.748449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.762968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.776289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.791798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.805506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.653206][ C0] net_ratelimit: 6166 callbacks suppressed [ 993.653229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.671687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.684680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.698300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.713184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.727026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.742216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.757194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.771729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.786903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.639649][ C0] net_ratelimit: 6184 callbacks suppressed [ 998.639673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.659425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.674576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.690593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.707458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.721751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.736284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.749688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.762739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.776688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.625881][ C0] net_ratelimit: 5837 callbacks suppressed [ 1003.625903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.645616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.659194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.673736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.687909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.701496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.714649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.729117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.742765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.756338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.184355][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.008803][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.612277][ C0] net_ratelimit: 6314 callbacks suppressed [ 1008.612304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.630904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.643764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.657531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.670438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.683130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.696244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.710068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.722829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.735554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.598505][ C0] net_ratelimit: 6593 callbacks suppressed [ 1013.598527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.625047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.640903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.655748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.673575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.690187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.704116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.717479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.732714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.747010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.585330][ C0] net_ratelimit: 6141 callbacks suppressed [ 1018.585351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.605832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.618932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.631644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.644444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.658759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.671702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.684915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.697777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.711879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.572222][ C0] net_ratelimit: 6371 callbacks suppressed [ 1023.572247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.591508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.605823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.619795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.634394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.648172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.661575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.675259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.691070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.704760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.559030][ C0] net_ratelimit: 5942 callbacks suppressed [ 1028.559051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.578402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.593446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.607679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.623408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.636518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.651077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.665304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.679435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.695407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.545948][ C0] net_ratelimit: 6030 callbacks suppressed [ 1033.545971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.564720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.577487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.590088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.604206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.617071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.629700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.642572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.656453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.669242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.531329][ C0] net_ratelimit: 6487 callbacks suppressed [ 1038.531350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.549961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.562501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.576363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.589140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.601819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.614562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.628213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.640750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.653331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.518634][ C0] net_ratelimit: 6485 callbacks suppressed [ 1043.518655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.537106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.549996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.562570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.576308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.588968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.601850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.614683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.628432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.641010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.504569][ C0] net_ratelimit: 6387 callbacks suppressed [ 1048.504592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.523002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.535573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.549378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.561995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.575280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.587942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.602359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.614913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.627502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.491446][ C0] net_ratelimit: 6493 callbacks suppressed [ 1053.491467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.510097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.522797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.535487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.549247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.561854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.574652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.587206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.600931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.613569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.478330][ C0] net_ratelimit: 6786 callbacks suppressed [ 1058.478355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.496977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.509630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.522129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.535822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.548363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.561048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.573598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.587132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.599864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.283751][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.304484][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.264978][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1063.271976][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31410/1:b..l [ 1063.280772][ C0] rcu: (detected by 0, t=10502 jiffies, g=161721, q=965 ncpus=1) [ 1063.288627][ C0] task:syz.2.12097 state:R running task stack:28488 pid:31410 tgid:31410 ppid:5833 task_flags:0x400040 flags:0x00080000 [ 1063.303517][ C0] Call Trace: [ 1063.306824][ C0] [ 1063.309796][ C0] ? __schedule+0x10b9/0x6150 [ 1063.314508][ C0] __schedule+0x1139/0x6150 [ 1063.319159][ C0] ? delete_node+0x207/0x8d0 [ 1063.323834][ C0] ? __pfx___schedule+0x10/0x10 [ 1063.328763][ C0] ? mark_held_locks+0x49/0x80 [ 1063.333559][ C0] preempt_schedule_irq+0x51/0x90 [ 1063.338786][ C0] irqentry_exit+0x1d8/0x8c0 [ 1063.343431][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1063.349536][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 1063.355307][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c 10 3d 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb [ 1063.374965][ C0] RSP: 0018:ffffc9000be3f9a8 EFLAGS: 00000282 [ 1063.381058][ C0] RAX: 0000000000000046 RBX: ffff88807c71a9d8 RCX: 0000000000000001 [ 1063.389215][ C0] RDX: 0000000000000000 RSI: ffffffff8daa50c6 RDI: ffffffff8bf2b600 [ 1063.397201][ C0] RBP: ffffffff8e3c9460 R08: 0000000000000005 R09: 0000000000000000 [ 1063.405213][ C0] R10: 0000000000000001 R11: ffff88807c71a9b0 R12: ffff88807c719e80 [ 1063.413207][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000002 [ 1063.421217][ C0] rcu_read_lock_sched_held+0x3e/0x70 [ 1063.426647][ C0] cpuset_can_fork+0x2e2/0x540 [ 1063.431440][ C0] ? __pfx_cpuset_can_fork+0x10/0x10 [ 1063.436769][ C0] cgroup_can_fork+0x3dd/0x13f0 [ 1063.441655][ C0] ? mutex_init_lockep+0x110/0x150 [ 1063.446798][ C0] copy_process+0x4560/0x7430 [ 1063.451515][ C0] ? __pfx_copy_process+0x10/0x10 [ 1063.456604][ C0] ? _copy_from_user+0x59/0xd0 [ 1063.461394][ C0] kernel_clone+0xfc/0x910 [ 1063.465835][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1063.471237][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1063.476322][ C0] ? __lock_acquire+0x436/0x2890 [ 1063.481283][ C0] __do_sys_clone3+0x212/0x290 [ 1063.486076][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 1063.491426][ C0] do_syscall_64+0xcd/0xf80 [ 1063.495945][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.501853][ C0] RIP: 0033:0x7f62981c3f09 [ 1063.506304][ C0] RSP: 002b:00007ffd9786d068 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1063.514747][ C0] RAX: ffffffffffffffda RBX: 00007f6298146300 RCX: 00007f62981c3f09 [ 1063.522746][ C0] RDX: 00007f6298146300 RSI: 0000000000000058 RDI: 00007ffd9786d0b0 [ 1063.530734][ C0] RBP: 00007f6298fad6c0 R08: 00007f6298fad6c0 R09: 00007ffd9786d197 [ 1063.538729][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 1063.546735][ C0] R13: 000000000000000b R14: 00007ffd9786d0b0 R15: 00007ffd9786d198 [ 1063.554757][ C0] [ 1063.557794][ C0] rcu: rcu_preempt kthread starved for 836 jiffies! g161721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1063.569001][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1063.578982][ C0] rcu: RCU grace-period kthread stack dump: [ 1063.584988][ C0] task:rcu_preempt state:R running task stack:28584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1063.598580][ C0] Call Trace: [ 1063.601882][ C0] [ 1063.604830][ C0] ? __schedule+0x10b9/0x6150 [ 1063.609543][ C0] __schedule+0x1139/0x6150 [ 1063.614163][ C0] ? __lock_acquire+0x436/0x2890 [ 1063.619121][ C0] ? __mod_timer+0x8f2/0xd30 [ 1063.623737][ C0] ? __pfx___schedule+0x10/0x10 [ 1063.628612][ C0] ? find_held_lock+0x2b/0x80 [ 1063.633312][ C0] ? schedule+0x2d7/0x3a0 [ 1063.637717][ C0] schedule+0xe7/0x3a0 [ 1063.641826][ C0] schedule_timeout+0x123/0x290 [ 1063.646751][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1063.652190][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1063.657544][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1063.663395][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1063.669025][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1063.674000][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1063.679599][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.684935][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1063.690076][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1063.694948][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1063.700960][ C0] rcu_gp_kthread+0x26d/0x380 [ 1063.705652][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1063.710871][ C0] ? rcu_is_watching+0x12/0xc0 [ 1063.715661][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.720894][ C0] ? __kthread_parkme+0x19e/0x250 [ 1063.725958][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1063.731357][ C0] kthread+0x3c5/0x780 [ 1063.735454][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.740063][ C0] ? rcu_is_watching+0x12/0xc0 [ 1063.744848][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.749479][ C0] ret_from_fork+0x983/0xb10 [ 1063.754089][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.759217][ C0] ? __switch_to+0x7af/0x10d0 [ 1063.763912][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.768515][ C0] ret_from_fork_asm+0x1a/0x30 [ 1063.773337][ C0] [ 1063.776365][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1063.782888][ C0] CPU: 0 UID: 0 PID: 3411 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 1063.794192][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1063.799396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1063.809501][ C0] Workqueue: bat_events batadv_tt_purge [ 1063.815108][ C0] RIP: 0010:kasan_byte_accessible+0xe/0x30 [ 1063.821112][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df <48> c1 ef 03 48 01 c7 0f b6 07 3c 07 0f 96 c0 e9 be 8d 51 09 66 66 [ 1063.840754][ C0] RSP: 0018:ffffc90000006a60 EFLAGS: 00000202 [ 1063.846837][ C0] RAX: dffffc0000000000 RBX: ffffffff8e3c9520 RCX: 0000000000000002 [ 1063.854836][ C0] RDX: 0000000000000000 RSI: ffffffff816c7681 RDI: ffffffff8e3c9520 [ 1063.862847][ C0] RBP: ffffffff8e3c9520 R08: 0000000000000000 R09: 0000000000000000 [ 1063.870856][ C0] R10: 0000000000000002 R11: 00000000000846a8 R12: ffffffff816c7681 [ 1063.878851][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1063.886834][ C0] FS: 0000000000000000(0000) GS:ffff8881248fa000(0000) knlGS:0000000000000000 [ 1063.895785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.902421][ C0] CR2: 00007f2409036a65 CR3: 000000007a5fc000 CR4: 00000000003526f0 [ 1063.910420][ C0] Call Trace: [ 1063.913724][ C0] [ 1063.916579][ C0] __kasan_check_byte+0x13/0x50 [ 1063.921498][ C0] lock_acquire+0xfc/0x330 [ 1063.925953][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1063.931202][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1063.937407][ C0] unwind_next_frame+0xd1/0x20b0 [ 1063.942392][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1063.947533][ C0] ? process_backlog+0x4a2/0x1650 [ 1063.952582][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1063.958809][ C0] arch_stack_walk+0x94/0x100 [ 1063.963543][ C0] ? process_backlog+0x4a2/0x1650 [ 1063.968688][ C0] stack_trace_save+0x8e/0xc0 [ 1063.973392][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1063.978894][ C0] ? __lock_acquire+0x436/0x2890 [ 1063.983852][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1063.988814][ C0] ? kmem_cache_free+0x2d8/0x770 [ 1063.993771][ C0] kasan_save_stack+0x33/0x60 [ 1063.998467][ C0] ? kasan_save_stack+0x33/0x60 [ 1064.003424][ C0] ? kasan_save_track+0x14/0x30 [ 1064.008298][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1064.013669][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1064.018649][ C0] ? kmem_cache_free+0x2d8/0x770 [ 1064.023668][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.028369][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1064.033602][ C0] ? ip6_mc_input+0x82c/0xf60 [ 1064.038315][ C0] ? ip6_rcv_finish+0x3df/0x580 [ 1064.043205][ C0] ? ip_sabotage_in+0x21e/0x290 [ 1064.048091][ C0] ? nf_hook_slow+0xbe/0x200 [ 1064.052706][ C0] ? nf_hook.constprop.0+0x424/0x750 [ 1064.058009][ C0] ? ipv6_rcv+0xa4/0x650 [ 1064.062297][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 1064.068390][ C0] ? __netif_receive_skb+0x1d/0x160 [ 1064.073612][ C0] ? netif_receive_skb+0x137/0x760 [ 1064.078737][ C0] ? br_pass_frame_up+0x346/0x490 [ 1064.083815][ C0] ? br_handle_frame_finish+0x10e8/0x1f00 [ 1064.089597][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 1064.094738][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1064.100941][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1064.106539][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 1064.111860][ C0] ? br_handle_frame+0xb28/0x14e0 [ 1064.116925][ C0] ? __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1064.123810][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 1064.129848][ C0] ? __netif_receive_skb+0x1d/0x160 [ 1064.135115][ C0] ? process_backlog+0x4a2/0x1650 [ 1064.140205][ C0] kasan_save_track+0x14/0x30 [ 1064.144925][ C0] kasan_save_free_info+0x3b/0x60 [ 1064.149971][ C0] __kasan_slab_free+0x5f/0x80 [ 1064.154760][ C0] kmem_cache_free+0x2d8/0x770 [ 1064.159560][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.164257][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.168984][ C0] kfree_skbmem+0x1a4/0x1f0 [ 1064.173507][ C0] sk_skb_reason_drop+0x136/0x1a0 [ 1064.178564][ C0] ip6_mc_input+0x82c/0xf60 [ 1064.183110][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1064.188422][ C0] ? __netif_receive_skb_core.constprop.0+0x6fd/0x35b0 [ 1064.195304][ C0] ip6_rcv_finish+0x3df/0x580 [ 1064.200012][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1064.205231][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1064.210453][ C0] ip_sabotage_in+0x21e/0x290 [ 1064.215154][ C0] nf_hook_slow+0xbe/0x200 [ 1064.219605][ C0] nf_hook.constprop.0+0x424/0x750 [ 1064.224752][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1064.230006][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1064.235713][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 1064.240607][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1064.245851][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 1064.250680][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1064.255376][ C0] ipv6_rcv+0xa4/0x650 [ 1064.259476][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1064.264188][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1064.270126][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1064.276572][ C0] ? get_rps_cpu+0x68a/0x16c0 [ 1064.281332][ C0] __netif_receive_skb+0x1d/0x160 [ 1064.286383][ C0] netif_receive_skb+0x137/0x760 [ 1064.291356][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1064.296848][ C0] ? br_netif_receive_skb+0xff/0x200 [ 1064.302160][ C0] br_pass_frame_up+0x346/0x490 [ 1064.307042][ C0] br_handle_frame_finish+0x10e8/0x1f00 [ 1064.312627][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1064.318579][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 1064.323692][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1064.328862][ C0] ? nf_hook_slow+0x132/0x200 [ 1064.333681][ C0] br_nf_hook_thresh+0x307/0x410 [ 1064.338659][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1064.344679][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1064.350171][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1064.356095][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1064.361313][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1064.367229][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1064.373239][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1064.379250][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1064.385181][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1064.390585][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1064.396504][ C0] ? lock_acquire+0x179/0x330 [ 1064.401200][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1064.407735][ C0] ? net_generic+0xea/0x2a0 [ 1064.412276][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1064.417514][ C0] br_handle_frame+0xb28/0x14e0 [ 1064.422445][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1064.427963][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1064.433906][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1064.439224][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1064.445950][ C0] ? kmem_cache_free+0x2d8/0x770 [ 1064.450945][ C0] ? find_held_lock+0x2b/0x80 [ 1064.455679][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.460410][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1064.467564][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.472284][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1064.476977][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1064.482259][ C0] ? ip6_mc_input+0x515/0xf60 [ 1064.486968][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1064.492038][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1064.497279][ C0] ? __lock_acquire+0x436/0x2890 [ 1064.502248][ C0] ? process_backlog+0x450/0x1650 [ 1064.507289][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1064.513183][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1064.519656][ C0] ? lock_acquire+0x179/0x330 [ 1064.524369][ C0] ? process_backlog+0x450/0x1650 [ 1064.529419][ C0] __netif_receive_skb+0x1d/0x160 [ 1064.534465][ C0] process_backlog+0x4a2/0x1650 [ 1064.539337][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 1064.544731][ C0] net_rx_action+0x9f9/0xfa0 [ 1064.549355][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1064.554499][ C0] ? __print_lock_name+0xc0/0xe0 [ 1064.559489][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1064.564714][ C0] ? sched_clock+0x38/0x60 [ 1064.569152][ C0] ? sched_clock_cpu+0x6c/0x530 [ 1064.574129][ C0] ? mark_held_locks+0x49/0x80 [ 1064.578930][ C0] handle_softirqs+0x219/0x950 [ 1064.583738][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1064.589161][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 1064.594642][ C0] do_softirq+0xb2/0xf0 [ 1064.598815][ C0] [ 1064.601748][ C0] [ 1064.604684][ C0] __local_bh_enable_ip+0x100/0x120 [ 1064.609901][ C0] batadv_tt_local_purge+0x21c/0x3c0 [ 1064.615207][ C0] ? look_up_lock_class+0x6b/0x130 [ 1064.620380][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 1064.626218][ C0] batadv_tt_purge+0x8b/0xb80 [ 1064.630913][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1064.636744][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 1064.642415][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1064.647728][ C0] ? rcu_is_watching+0x12/0xc0 [ 1064.652518][ C0] process_one_work+0x9ba/0x1b20 [ 1064.657493][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1064.662912][ C0] ? assign_work+0x1a0/0x250 [ 1064.667519][ C0] rescuer_thread+0x8c5/0xf10 [ 1064.672221][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1064.677459][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1064.682690][ C0] ? __kthread_parkme+0x19e/0x250 [ 1064.687827][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1064.693137][ C0] kthread+0x3c5/0x780 [ 1064.697220][ C0] ? __pfx_kthread+0x10/0x10 [ 1064.701826][ C0] ? rcu_is_watching+0x12/0xc0 [ 1064.706706][ C0] ? __pfx_kthread+0x10/0x10 [ 1064.711327][ C0] ret_from_fork+0x983/0xb10 [ 1064.716028][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.721157][ C0] ? __switch_to+0x7af/0x10d0 [ 1064.725857][ C0] ? __pfx_kthread+0x10/0x10 [ 1064.730471][ C0] ret_from_fork_asm+0x1a/0x30 [ 1064.735278][ C0] [ 1064.739404][ C0] net_ratelimit: 6778 callbacks suppressed [ 1064.739424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.757794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.770419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.782984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.800929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.813605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.826348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.838969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.853189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.866035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.725851][ C0] net_ratelimit: 6566 callbacks suppressed [ 1069.725872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.744520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.757220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.769771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.783322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.796037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.808717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.821359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.834989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.848008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)