last executing test programs: 2.112024443s ago: executing program 2 (id=15622): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) 1.607639888s ago: executing program 2 (id=15636): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1f1d02, 0x0) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 1.331827847s ago: executing program 2 (id=15631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.066189576s ago: executing program 2 (id=15637): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1000, 0x0) r0 = socket(0x2, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0xe, 0x0, 0x0) 884.988171ms ago: executing program 3 (id=15641): setresuid$auto(0x0, 0x8, 0x8000) r0 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 819.516373ms ago: executing program 2 (id=15642): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 781.011371ms ago: executing program 0 (id=15643): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0xa, 0x3, 0x73) setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff) 762.652727ms ago: executing program 1 (id=15644): mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) 710.67623ms ago: executing program 3 (id=15645): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008) 636.659898ms ago: executing program 1 (id=15646): semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x4, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x7f, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x0, 0x36ec}, 0x1f4, 0x0) 636.07587ms ago: executing program 0 (id=15654): recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x100) r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0}, 0x8) 488.679729ms ago: executing program 1 (id=15647): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setuid$auto(0xe) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0xa) 481.370145ms ago: executing program 0 (id=15656): mmap$auto(0x0, 0x4, 0x4000000000e3, 0x2cb8, 0x401, 0x300000000000) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r0, 0x0, 0x7, 0xb) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, &(0x7f0000000000)=""/153, 0x99) 469.714933ms ago: executing program 3 (id=15648): socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 380.99623ms ago: executing program 0 (id=15649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 349.240913ms ago: executing program 1 (id=15650): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) 341.128296ms ago: executing program 3 (id=15651): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) 274.823643ms ago: executing program 2 (id=15652): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 230.221511ms ago: executing program 0 (id=15653): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') 225.433926ms ago: executing program 1 (id=15655): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd7000ddc35e346000000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) 207.631798ms ago: executing program 3 (id=15657): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x12, 0x8000000000000000, 0x8000) 76.788621ms ago: executing program 3 (id=15658): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0xc2b, 0x7131, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0x26, 0xc, 0x40005, 0x9, 0x0, 0x2, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 22.088375ms ago: executing program 0 (id=15659): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) epoll_create$auto(0x4) ioctl$auto(0x3, 0x80000541b, 0xb551) 0s ago: executing program 1 (id=15660): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x8004551a, r0) kernel console output (not intermixed with test programs): 91] ? __x64_sys_futex+0x358/0x4d0 [ 770.108182][ T5791] ? xfd_validate_state+0x129/0x190 [ 770.108208][ T5791] __do_sys_keyctl+0x3b2/0x5a0 [ 770.108231][ T5791] do_syscall_64+0x106/0xf80 [ 770.108249][ T5791] ? clear_bhb_loop+0x40/0x90 [ 770.108269][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.108285][ T5791] RIP: 0033:0x7ff8fdf9c799 [ 770.108300][ T5791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.108315][ T5791] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 770.108330][ T5791] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 770.108341][ T5791] RDX: 7ffffffffffffffd RSI: 0000000000000000 RDI: 0000000000000016 [ 770.108351][ T5791] RBP: 00007ff8fe032bd9 R08: 0004000000000000 R09: 0000000000000000 [ 770.108361][ T5791] R10: 00000000000099a5 R11: 0000000000000246 R12: 0000000000000000 [ 770.108371][ T5791] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 770.108392][ T5791] [ 770.681192][ T5819] FAULT_INJECTION: forcing a failure. [ 770.681192][ T5819] name failslab, interval 1, probability 0, space 0, times 0 [ 770.733485][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.0.14765 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 770.733516][ T5819] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 770.733524][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.733534][ T5819] Call Trace: [ 770.733540][ T5819] [ 770.733547][ T5819] dump_stack_lvl+0x100/0x190 [ 770.733585][ T5819] should_fail_ex.cold+0x5/0xa [ 770.733604][ T5819] should_failslab+0xc2/0x120 [ 770.733621][ T5819] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 770.733646][ T5819] ? snd_timer_instance_new+0x65/0x2e0 [ 770.733777][ T5819] kstrdup+0x51/0xe0 [ 770.733802][ T5819] snd_timer_instance_new+0x65/0x2e0 [ 770.733827][ T5819] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 770.733846][ T5819] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 770.733867][ T5819] ? rcu_is_watching+0x12/0xc0 [ 770.733895][ T5819] ? snd_timer_user_ioctl+0x4a/0xd0 [ 770.733911][ T5819] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 770.733934][ T5819] ? __pfx___mutex_lock+0x10/0x10 [ 770.733960][ T5819] ? find_held_lock+0x2b/0x80 [ 770.733985][ T5819] snd_timer_user_ioctl+0x76/0xd0 [ 770.734000][ T5819] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 770.734018][ T5819] __x64_sys_ioctl+0x18e/0x210 [ 770.734042][ T5819] do_syscall_64+0x106/0xf80 [ 770.734060][ T5819] ? clear_bhb_loop+0x40/0x90 [ 770.734078][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.734094][ T5819] RIP: 0033:0x7fdd8499c799 [ 770.734108][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.734123][ T5819] RSP: 002b:00007fdd85942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.734138][ T5819] RAX: ffffffffffffffda RBX: 00007fdd84c15fa0 RCX: 00007fdd8499c799 [ 770.734148][ T5819] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000003 [ 770.734158][ T5819] RBP: 00007fdd84a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 770.734167][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.734176][ T5819] R13: 00007fdd84c16038 R14: 00007fdd84c15fa0 R15: 00007ffd733988d8 [ 770.734196][ T5819] [ 772.515483][ T5896] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 772.911081][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14801'. [ 773.449260][ T5937] netlink: 472 bytes leftover after parsing attributes in process `syz.2.14811'. [ 774.522203][ T5973] tunl0: entered allmulticast mode [ 774.580792][ T5978] netlink: 206 bytes leftover after parsing attributes in process `syz.3.14827'. [ 775.360590][ T6007] FAULT_INJECTION: forcing a failure. [ 775.360590][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 775.410168][ T6009] syz.2.14845 (6009): /proc/6008/oom_adj is deprecated, please use /proc/6008/oom_score_adj instead. [ 775.436199][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.0.14844 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 775.436231][ T6007] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 775.436238][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.436248][ T6007] Call Trace: [ 775.436254][ T6007] [ 775.436261][ T6007] dump_stack_lvl+0x100/0x190 [ 775.436290][ T6007] should_fail_ex.cold+0x5/0xa [ 775.436309][ T6007] should_failslab+0xc2/0x120 [ 775.436325][ T6007] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 775.436350][ T6007] ? register_pidns_sysctls+0x48/0x1c0 [ 775.436370][ T6007] ? rcu_is_watching+0x12/0xc0 [ 775.436396][ T6007] kmemdup_noprof+0x29/0x60 [ 775.436419][ T6007] register_pidns_sysctls+0x48/0x1c0 [ 775.436438][ T6007] ? __ns_common_init+0x299/0x4b0 [ 775.436457][ T6007] copy_pid_ns+0x680/0x10a0 [ 775.436483][ T6007] ? __pfx_copy_pid_ns+0x10/0x10 [ 775.436502][ T6007] ? rcu_is_watching+0x12/0xc0 [ 775.436525][ T6007] ? copy_mnt_ns+0x106/0xc30 [ 775.436544][ T6007] ? create_new_namespaces+0x30/0xac0 [ 775.436563][ T6007] create_new_namespaces+0x2aa/0xac0 [ 775.436584][ T6007] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 775.436603][ T6007] ksys_unshare+0x473/0xad0 [ 775.436623][ T6007] ? __pfx_ksys_unshare+0x10/0x10 [ 775.436648][ T6007] __x64_sys_unshare+0x31/0x40 [ 775.436666][ T6007] do_syscall_64+0x106/0xf80 [ 775.436684][ T6007] ? clear_bhb_loop+0x40/0x90 [ 775.436703][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.436718][ T6007] RIP: 0033:0x7fdd8499c799 [ 775.436732][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.436748][ T6007] RSP: 002b:00007fdd85942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 775.436763][ T6007] RAX: ffffffffffffffda RBX: 00007fdd84c15fa0 RCX: 00007fdd8499c799 [ 775.436773][ T6007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 775.436782][ T6007] RBP: 00007fdd84a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 775.436792][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.436800][ T6007] R13: 00007fdd84c16038 R14: 00007fdd84c15fa0 R15: 00007ffd733988d8 [ 775.436820][ T6007] [ 776.629640][ T6318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 776.706074][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 776.706103][ T6318] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 776.706109][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 776.706118][ T6318] Call Trace: [ 776.706124][ T6318] [ 776.706130][ T6318] dump_stack_lvl+0x100/0x190 [ 776.706156][ T6318] dump_header+0xfb/0x606 [ 776.706173][ T6318] oom_kill_process.cold+0xd/0x330 [ 776.706191][ T6318] out_of_memory+0x340/0x14f0 [ 776.706217][ T6318] ? __pfx_out_of_memory+0x10/0x10 [ 776.706243][ T6318] mem_cgroup_out_of_memory+0xc6/0x130 [ 776.706263][ T6318] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 776.706281][ T6318] ? find_held_lock+0x2b/0x80 [ 776.706299][ T6318] ? do_raw_spin_unlock+0x145/0x1e0 [ 776.706320][ T6318] ? _raw_spin_unlock+0x28/0x50 [ 776.706338][ T6318] try_charge_memcg+0x652/0xc90 [ 776.706358][ T6318] ? __pfx_try_charge_memcg+0x10/0x10 [ 776.706377][ T6318] ? find_held_lock+0x2b/0x80 [ 776.706390][ T6318] ? rcu_read_unlock+0x17/0x60 [ 776.706405][ T6318] ? rcu_read_unlock+0x17/0x60 [ 776.706422][ T6318] charge_memcg+0xa6/0x280 [ 776.706437][ T6318] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 776.706457][ T6318] __swap_cache_prepare_and_add+0x528/0x9e0 [ 776.706486][ T6318] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 776.706505][ T6318] ? __pfx_swap_entry_swapped+0x10/0x10 [ 776.706525][ T6318] swap_cache_alloc_folio+0x1cb/0x300 [ 776.706547][ T6318] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 776.706569][ T6318] ? rcu_is_watching+0x12/0xc0 [ 776.706593][ T6318] swap_cluster_readahead+0x411/0x770 [ 776.706618][ T6318] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 776.706642][ T6318] ? update_cfs_rq_load_avg+0x51/0x550 [ 776.706662][ T6318] ? __lock_acquire+0x4a5/0x2630 [ 776.706682][ T6318] ? get_vma_policy+0x23f/0x3b0 [ 776.706700][ T6318] swapin_readahead+0x160/0x12c0 [ 776.706726][ T6318] ? __pfx_swapin_readahead+0x10/0x10 [ 776.706745][ T6318] ? find_held_lock+0x2b/0x80 [ 776.706758][ T6318] ? swap_table_get+0x103/0x2c0 [ 776.706781][ T6318] ? swap_table_get+0x103/0x2c0 [ 776.706802][ T6318] ? swap_table_get+0x10d/0x2c0 [ 776.706821][ T6318] ? swap_cache_get_folio+0x1ae/0x600 [ 776.706841][ T6318] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 776.706859][ T6318] ? __pfx_get_swap_device+0x10/0x10 [ 776.706878][ T6318] ? do_swap_page+0xb2e/0x68e0 [ 776.706896][ T6318] do_swap_page+0xb2e/0x68e0 [ 776.706925][ T6318] ? __pfx_do_swap_page+0x10/0x10 [ 776.706944][ T6318] ? __free_object+0x2a8/0x400 [ 776.706963][ T6318] ? lockdep_hardirqs_on+0x78/0x100 [ 776.706982][ T6318] ? rcu_is_watching+0x12/0xc0 [ 776.707003][ T6318] ? __pte_offset_map+0x179/0x310 [ 776.707020][ T6318] __handle_mm_fault+0x18c1/0x2b60 [ 776.707043][ T6318] ? reacquire_held_locks+0xce/0x1e0 [ 776.707061][ T6318] ? __pfx___handle_mm_fault+0x10/0x10 [ 776.707084][ T6318] ? lock_vma_under_rcu+0x17c/0x590 [ 776.707114][ T6318] handle_mm_fault+0x36d/0xa20 [ 776.707137][ T6318] do_user_addr_fault+0x5a3/0x12f0 [ 776.707166][ T6318] exc_page_fault+0x6f/0xd0 [ 776.707182][ T6318] asm_exc_page_fault+0x26/0x30 [ 776.707197][ T6318] RIP: 0033:0x7ff8fdf5cfce [ 776.707211][ T6318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 776.707225][ T6318] RSP: 002b:00007ffcfa489a88 EFLAGS: 00010246 [ 776.707236][ T6318] RAX: 0000000000000000 RBX: 000055558903a500 RCX: 00007ff8fdf5cfce [ 776.707246][ T6318] RDX: 00007ffcfa489ae0 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.707255][ T6318] RBP: 00007ffcfa489b4c R08: 0000000000000000 R09: 0000000000000000 [ 776.707263][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 776.707272][ T6318] R13: 00000000000927c0 R14: 00000000000be521 R15: 00007ffcfa489ba0 [ 776.707292][ T6318] [ 776.707298][ T6318] memory: usage 3072kB, limit 3072kB, failcnt 115912 [ 777.799796][ T6318] memory+swap: usage 3280kB, limit 9007199254740988kB, failcnt 0 [ 777.840720][ T6318] kmem: usage 1672kB, limit 9007199254740988kB, failcnt 0 [ 777.868577][ T6318] Memory cgroup stats for /syz1: [ 777.868689][ T6318] cache 0 [ 777.892192][ T6318] rss 1433600 [ 777.903863][ T6318] rss_huge 0 [ 777.914735][ T6318] shmem 0 [ 777.923407][ T6318] mapped_file 0 [ 777.937918][ T6318] dirty 0 [ 777.948734][ T6318] writeback 0 [ 777.958957][ T6318] workingset_refault_anon 4454 [ 777.975734][ T6318] workingset_refault_file 25967 [ 777.993639][ T6318] swap 212992 [ 778.005673][ T6318] swapcached 426131456 [ 778.018684][ T6318] pgpgin 334322 [ 778.029830][ T6318] pgpgout 356912 [ 778.044054][ T6318] pgfault 408006 [ 778.056426][ T6318] pgmajfault 2549 [ 778.070555][ T6318] inactive_anon 0 [ 778.086058][ T6318] active_anon 1433600 [ 778.101875][ T6318] inactive_file 0 [ 778.118139][ T6318] active_file 0 [ 778.132315][ T6318] unevictable 0 [ 778.146897][ T6318] hierarchical_memory_limit 3145728 [ 778.171197][ T6318] hierarchical_memsw_limit 9223372036854771712 [ 778.216677][ T6318] total_cache 0 [ 778.249471][ T6318] total_rss 1433600 [ 778.281351][ T6318] total_rss_huge 0 [ 778.295144][ T6318] total_shmem 0 [ 778.298791][ T6318] total_mapped_file 0 [ 778.332956][ T6318] total_dirty 0 [ 778.336478][ T6318] total_writeback 0 [ 778.377382][ T6318] total_workingset_refault_anon 4454 [ 778.398683][ T6318] total_workingset_refault_file 25967 [ 778.430607][ T6318] total_swap 212992 [ 778.434454][ T6318] total_swapcached 426131456 [ 778.465675][ T6318] total_pgpgin 334322 [ 778.469893][ T6318] total_pgpgout 356912 [ 778.502679][ T6318] total_pgfault 408006 [ 778.506770][ T6318] total_pgmajfault 2549 [ 778.526436][ T6318] total_inactive_anon 0 [ 778.545374][ T6318] total_active_anon 1433600 [ 778.574081][ T6318] total_inactive_file 0 [ 778.601744][ T6318] total_active_file 0 [ 778.605809][ T6318] total_unevictable 0 [ 778.626424][ T6318] anon_cost 20 [ 778.646713][ T6318] file_cost 0 [ 778.659243][ T6318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.14857,pid=6059,uid=0 [ 778.736207][ T6318] Memory cgroup out of memory: Killed process 6059 (syz.1.14857) total-vm:108372kB, anon-rss:2636kB, file-rss:21456kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 779.124922][ T6135] FAULT_INJECTION: forcing a failure. [ 779.124922][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 779.185875][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.2.14888 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 779.185905][ T6135] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 779.185913][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.185922][ T6135] Call Trace: [ 779.185929][ T6135] [ 779.185935][ T6135] dump_stack_lvl+0x100/0x190 [ 779.185964][ T6135] should_fail_ex.cold+0x5/0xa [ 779.185983][ T6135] should_failslab+0xc2/0x120 [ 779.185999][ T6135] __kmalloc_cache_noprof+0x7a/0x6f0 [ 779.186019][ T6135] ? allocate_file_region_entries+0x1a0/0x620 [ 779.186047][ T6135] allocate_file_region_entries+0x1a0/0x620 [ 779.186074][ T6135] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 779.186103][ T6135] region_chg+0x85/0x140 [ 779.186126][ T6135] __vma_reservation_common+0x376/0x720 [ 779.186150][ T6135] ? __pfx___vma_reservation_common+0x10/0x10 [ 779.186183][ T6135] ? __pfx___might_resched+0x10/0x10 [ 779.186211][ T6135] hugetlb_no_page+0xb2b/0x1970 [ 779.186239][ T6135] hugetlb_fault+0x5df/0x1450 [ 779.186260][ T6135] ? __pfx_hugetlb_fault+0x10/0x10 [ 779.186287][ T6135] ? find_vma+0xbf/0x140 [ 779.186302][ T6135] ? __pfx_find_vma+0x10/0x10 [ 779.186319][ T6135] handle_mm_fault+0x5f1/0xa20 [ 779.186343][ T6135] do_user_addr_fault+0x74c/0x12f0 [ 779.186372][ T6135] exc_page_fault+0x6f/0xd0 [ 779.186391][ T6135] asm_exc_page_fault+0x26/0x30 [ 779.186407][ T6135] RIP: 0010:__put_user_4+0xd/0x20 [ 779.186426][ T6135] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 779.186441][ T6135] RSP: 0018:ffffc90005e2fe58 EFLAGS: 00050202 [ 779.186454][ T6135] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 779.186463][ T6135] RDX: 0000000000000000 RSI: ffffffff8255f691 RDI: ffff88802ea1245c [ 779.186473][ T6135] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c5 [ 779.186482][ T6135] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000bc5fce [ 779.186492][ T6135] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 779.186507][ T6135] ? __might_fault+0x111/0x140 [ 779.186542][ T6135] __do_sys_prctl+0xd67/0x2330 [ 779.186568][ T6135] ? __pfx___do_sys_prctl+0x10/0x10 [ 779.186596][ T6135] do_syscall_64+0x106/0xf80 [ 779.186613][ T6135] ? clear_bhb_loop+0x40/0x90 [ 779.186632][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.186647][ T6135] RIP: 0033:0x7fe32b39c799 [ 779.186660][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.186675][ T6135] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 779.186689][ T6135] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 779.186699][ T6135] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 779.186708][ T6135] RBP: 00007fe32b432bd9 R08: 0000000000000001 R09: 0000000000000000 [ 779.186717][ T6135] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 779.186725][ T6135] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 779.186745][ T6135] [ 781.230341][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14920'. [ 781.268040][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14920'. [ 781.560790][ T6263] bridge_slave_1: left allmulticast mode [ 781.583072][ T6263] bridge_slave_1: left promiscuous mode [ 781.606759][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.741433][ T6260] syz.1.14929 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 781.803563][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.1.14929 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 781.803594][ T6260] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 781.803601][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.803610][ T6260] Call Trace: [ 781.803615][ T6260] [ 781.803621][ T6260] dump_stack_lvl+0x100/0x190 [ 781.803648][ T6260] dump_header+0xfb/0x606 [ 781.803665][ T6260] oom_kill_process.cold+0xd/0x330 [ 781.803683][ T6260] out_of_memory+0x340/0x14f0 [ 781.803708][ T6260] ? __pfx_out_of_memory+0x10/0x10 [ 781.803734][ T6260] mem_cgroup_out_of_memory+0xc6/0x130 [ 781.803755][ T6260] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 781.803773][ T6260] ? find_held_lock+0x2b/0x80 [ 781.803791][ T6260] ? do_raw_spin_unlock+0x145/0x1e0 [ 781.803812][ T6260] ? _raw_spin_unlock+0x28/0x50 [ 781.803830][ T6260] try_charge_memcg+0x652/0xc90 [ 781.803850][ T6260] ? __pfx_try_charge_memcg+0x10/0x10 [ 781.803869][ T6260] ? find_held_lock+0x2b/0x80 [ 781.803882][ T6260] ? rcu_read_unlock+0x17/0x60 [ 781.803897][ T6260] ? rcu_read_unlock+0x17/0x60 [ 781.803914][ T6260] charge_memcg+0xa6/0x280 [ 781.803929][ T6260] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 781.803955][ T6260] __swap_cache_prepare_and_add+0x528/0x9e0 [ 781.803984][ T6260] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 781.804004][ T6260] ? __pfx_swap_entry_swapped+0x10/0x10 [ 781.804024][ T6260] swap_cache_alloc_folio+0x1cb/0x300 [ 781.804045][ T6260] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 781.804065][ T6260] ? __lock_acquire+0x4a5/0x2630 [ 781.804087][ T6260] swap_cluster_readahead+0x411/0x770 [ 781.804112][ T6260] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 781.804132][ T6260] ? trace_ignore_this_task+0xbc/0x100 [ 781.804152][ T6260] ? trace_ignore_this_task+0xbc/0x100 [ 781.804179][ T6260] ? finish_task_switch.isra.0+0x200/0xb80 [ 781.804198][ T6260] ? get_vma_policy+0x23f/0x3b0 [ 781.804216][ T6260] swapin_readahead+0x160/0x12c0 [ 781.804236][ T6260] ? rcu_is_watching+0x12/0xc0 [ 781.804262][ T6260] ? __pfx_swapin_readahead+0x10/0x10 [ 781.804281][ T6260] ? find_held_lock+0x2b/0x80 [ 781.804294][ T6260] ? swap_table_get+0x103/0x2c0 [ 781.804311][ T6260] ? swap_table_get+0x103/0x2c0 [ 781.804333][ T6260] ? swap_table_get+0x10d/0x2c0 [ 781.804356][ T6260] ? swap_cache_get_folio+0x1ae/0x600 [ 781.804377][ T6260] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 781.804395][ T6260] ? __pfx_get_swap_device+0x10/0x10 [ 781.804413][ T6260] ? do_swap_page+0xb2e/0x68e0 [ 781.804432][ T6260] do_swap_page+0xb2e/0x68e0 [ 781.804453][ T6260] ? __free_object+0x2a8/0x400 [ 781.804472][ T6260] ? lockdep_hardirqs_on+0x78/0x100 [ 781.804494][ T6260] ? __pfx_do_swap_page+0x10/0x10 [ 781.804518][ T6260] ? rcu_is_watching+0x12/0xc0 [ 781.804539][ T6260] ? __pte_offset_map+0x179/0x310 [ 781.804556][ T6260] __handle_mm_fault+0x18c1/0x2b60 [ 781.804579][ T6260] ? reacquire_held_locks+0xce/0x1e0 [ 781.804597][ T6260] ? __pfx___handle_mm_fault+0x10/0x10 [ 781.804620][ T6260] ? lock_vma_under_rcu+0x17c/0x590 [ 781.804650][ T6260] handle_mm_fault+0x36d/0xa20 [ 781.804673][ T6260] do_user_addr_fault+0x5a3/0x12f0 [ 781.804702][ T6260] exc_page_fault+0x6f/0xd0 [ 781.804720][ T6260] asm_exc_page_fault+0x26/0x30 [ 781.804735][ T6260] RIP: 0033:0x7ff8fdf9c7ab [ 781.804748][ T6260] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 781.804763][ T6260] RSP: 002b:00007ffcfa489908 EFLAGS: 00010213 [ 781.804775][ T6260] RAX: 000000000000006e RBX: 00000000000bf930 RCX: ffffffffffffffe8 [ 781.804785][ T6260] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8fe215fac [ 781.804794][ T6260] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 781.804803][ T6260] R10: 00007ffcfa489a10 R11: 0000000000000246 R12: 00007ffcfa489a30 [ 781.804812][ T6260] R13: 00007ff8fe215fac R14: 00000000000bf962 R15: 00007ffcfa489a10 [ 781.804831][ T6260] [ 781.807191][ T6260] memory: usage 3072kB, limit 3072kB, failcnt 116040 [ 782.820704][ T6260] memory+swap: usage 3420kB, limit 9007199254740988kB, failcnt 0 [ 782.830040][ T6260] kmem: usage 1748kB, limit 9007199254740988kB, failcnt 0 [ 782.837263][ T6260] Memory cgroup stats for /syz1: [ 782.837362][ T6260] cache 0 [ 782.847191][ T6260] rss 1355776 [ 782.850828][ T6260] rss_huge 0 [ 782.854013][ T6260] shmem 0 [ 782.856954][ T6260] mapped_file 0 [ 782.860872][ T6260] dirty 0 [ 782.863849][ T6260] writeback 0 [ 782.867190][ T6260] workingset_refault_anon 4475 [ 782.872454][ T6260] workingset_refault_file 25967 [ 782.877960][ T6260] swap 356352 [ 782.881497][ T6260] swapcached 426508288 [ 782.885643][ T6260] pgpgin 335178 [ 782.891443][ T6260] pgpgout 357787 [ 782.894982][ T6260] pgfault 409737 [ 782.898894][ T6260] pgmajfault 2556 [ 782.902513][ T6260] inactive_anon 0 [ 782.906126][ T6260] active_anon 1355776 [ 782.911365][ T6260] inactive_file 0 [ 782.915006][ T6260] active_file 0 [ 782.918739][ T6260] unevictable 0 [ 782.922236][ T6260] hierarchical_memory_limit 3145728 [ 782.927662][ T6260] hierarchical_memsw_limit 9223372036854771712 [ 782.933857][ T6260] total_cache 0 [ 782.937561][ T6260] total_rss 1355776 [ 782.941354][ T6260] total_rss_huge 0 [ 782.945130][ T6260] total_shmem 0 [ 782.950558][ T6260] total_mapped_file 0 [ 782.954540][ T6260] total_dirty 0 [ 782.958349][ T6260] total_writeback 0 [ 782.962146][ T6260] total_workingset_refault_anon 4475 [ 782.967767][ T6260] total_workingset_refault_file 25967 [ 782.973188][ T6260] total_swap 356352 [ 782.977341][ T6260] total_swapcached 426508288 [ 782.981920][ T6260] total_pgpgin 335178 [ 782.985950][ T6260] total_pgpgout 357787 [ 782.990343][ T6260] total_pgfault 409737 [ 782.994398][ T6260] total_pgmajfault 2556 [ 783.000696][ T6260] total_inactive_anon 0 [ 783.005017][ T6260] total_active_anon 1355776 [ 783.009878][ T6260] total_inactive_file 0 [ 783.014479][ T6260] total_active_file 0 [ 783.019338][ T6260] total_unevictable 0 [ 783.023337][ T6260] anon_cost 27 [ 783.027038][ T6260] file_cost 0 [ 783.030317][ T6260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.14929,pid=6260,uid=0 [ 783.045613][ T6260] Memory cgroup out of memory: Killed process 6260 (syz.1.14929) total-vm:108372kB, anon-rss:2556kB, file-rss:21456kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 785.238125][ T6457] netlink: 'syz.3.14983': attribute type 2 has an invalid length. [ 785.332070][ T6461] sctp: [Deprecated]: syz.2.14985 (pid 6461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 785.332070][ T6461] Use struct sctp_sack_info instead [ 785.449047][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14987'. [ 785.556107][ T6471] netlink: 338 bytes leftover after parsing attributes in process `syz.2.14990'. [ 785.823916][ T6487] FAULT_INJECTION: forcing a failure. [ 785.823916][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 785.888453][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.0.14996 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 785.888484][ T6487] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 785.888492][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.888502][ T6487] Call Trace: [ 785.888508][ T6487] [ 785.888514][ T6487] dump_stack_lvl+0x100/0x190 [ 785.888555][ T6487] should_fail_ex.cold+0x5/0xa [ 785.888575][ T6487] should_failslab+0xc2/0x120 [ 785.888591][ T6487] __kmalloc_cache_noprof+0x7a/0x6f0 [ 785.888611][ T6487] ? allocate_file_region_entries+0x1a0/0x620 [ 785.888639][ T6487] allocate_file_region_entries+0x1a0/0x620 [ 785.888665][ T6487] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 785.888694][ T6487] region_chg+0x85/0x140 [ 785.888716][ T6487] __vma_reservation_common+0x376/0x720 [ 785.888740][ T6487] ? __pfx___vma_reservation_common+0x10/0x10 [ 785.888763][ T6487] ? __pfx___might_resched+0x10/0x10 [ 785.888789][ T6487] hugetlb_no_page+0xb2b/0x1970 [ 785.888815][ T6487] hugetlb_fault+0x5df/0x1450 [ 785.888836][ T6487] ? __pfx_hugetlb_fault+0x10/0x10 [ 785.888862][ T6487] ? find_vma+0xbf/0x140 [ 785.888877][ T6487] ? __pfx_find_vma+0x10/0x10 [ 785.888893][ T6487] handle_mm_fault+0x5f1/0xa20 [ 785.888918][ T6487] do_user_addr_fault+0x74c/0x12f0 [ 785.888947][ T6487] exc_page_fault+0x6f/0xd0 [ 785.888967][ T6487] asm_exc_page_fault+0x26/0x30 [ 785.888982][ T6487] RIP: 0010:__put_user_4+0xd/0x20 [ 785.889000][ T6487] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 785.889015][ T6487] RSP: 0018:ffffc900033f7e58 EFLAGS: 00050202 [ 785.889029][ T6487] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 785.889038][ T6487] RDX: 0000000000000000 RSI: ffffffff8255f691 RDI: ffff8880337885dc [ 785.889048][ T6487] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c5 [ 785.889056][ T6487] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff9200067efce [ 785.889066][ T6487] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 785.889081][ T6487] ? __might_fault+0x111/0x140 [ 785.889105][ T6487] __do_sys_prctl+0xd67/0x2330 [ 785.889128][ T6487] ? __pfx___do_sys_prctl+0x10/0x10 [ 785.889155][ T6487] do_syscall_64+0x106/0xf80 [ 785.889172][ T6487] ? clear_bhb_loop+0x40/0x90 [ 785.889190][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.889206][ T6487] RIP: 0033:0x7fdd8499c799 [ 785.889219][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.889234][ T6487] RSP: 002b:00007fdd85942028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 785.889247][ T6487] RAX: ffffffffffffffda RBX: 00007fdd84c15fa0 RCX: 00007fdd8499c799 [ 785.889257][ T6487] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 785.889265][ T6487] RBP: 00007fdd84a32bd9 R08: 0000000000000001 R09: 0000000000000000 [ 785.889274][ T6487] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 785.889283][ T6487] R13: 00007fdd84c16038 R14: 00007fdd84c15fa0 R15: 00007ffd733988d8 [ 785.889303][ T6487] [ 787.142878][ T6518] [U] ^C [ 787.505535][ T6530] FAULT_INJECTION: forcing a failure. [ 787.505535][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 787.564130][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.0.15016 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 787.564161][ T6530] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 787.564169][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.564178][ T6530] Call Trace: [ 787.564184][ T6530] [ 787.564192][ T6530] dump_stack_lvl+0x100/0x190 [ 787.564232][ T6530] should_fail_ex.cold+0x5/0xa [ 787.564250][ T6530] ? lsm_blob_alloc+0x68/0x90 [ 787.564269][ T6530] should_failslab+0xc2/0x120 [ 787.564285][ T6530] __kmalloc_noprof+0xe0/0x850 [ 787.564308][ T6530] ? trace_kmem_cache_alloc+0xf3/0x120 [ 787.564327][ T6530] lsm_blob_alloc+0x68/0x90 [ 787.564345][ T6530] security_prepare_creds+0x2d/0x290 [ 787.564364][ T6530] prepare_creds+0x5d6/0x950 [ 787.564388][ T6530] lookup_user_key+0x8e9/0x1300 [ 787.564413][ T6530] ? __pfx_lookup_user_key+0x10/0x10 [ 787.564436][ T6530] ? find_held_lock+0x2b/0x80 [ 787.564451][ T6530] ? setid_policy_lookup+0x10c/0x350 [ 787.564537][ T6530] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 787.564566][ T6530] ? bpf_lsm_capable+0x9/0x10 [ 787.564583][ T6530] ? security_capable+0x80/0x260 [ 787.564607][ T6530] keyctl_get_persistent+0x197/0x8b0 [ 787.564626][ T6530] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 787.564646][ T6530] ? __x64_sys_futex+0x34f/0x4d0 [ 787.564665][ T6530] ? __x64_sys_futex+0x358/0x4d0 [ 787.564685][ T6530] ? xfd_validate_state+0x129/0x190 [ 787.564711][ T6530] __do_sys_keyctl+0x3b2/0x5a0 [ 787.564734][ T6530] do_syscall_64+0x106/0xf80 [ 787.564752][ T6530] ? clear_bhb_loop+0x40/0x90 [ 787.564772][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.564788][ T6530] RIP: 0033:0x7fdd8499c799 [ 787.564802][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.564817][ T6530] RSP: 002b:00007fdd85942028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 787.564832][ T6530] RAX: ffffffffffffffda RBX: 00007fdd84c15fa0 RCX: 00007fdd8499c799 [ 787.564843][ T6530] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 787.564853][ T6530] RBP: 00007fdd84a32bd9 R08: 000000000000000c R09: 0000000000000000 [ 787.564864][ T6530] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 787.564873][ T6530] R13: 00007fdd84c16038 R14: 00007fdd84c15fa0 R15: 00007ffd733988d8 [ 787.564894][ T6530] [ 788.464662][ T6318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 788.538320][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 788.538348][ T6318] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 788.538355][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.538364][ T6318] Call Trace: [ 788.538370][ T6318] [ 788.538376][ T6318] dump_stack_lvl+0x100/0x190 [ 788.538404][ T6318] dump_header+0xfb/0x606 [ 788.538420][ T6318] oom_kill_process.cold+0xd/0x330 [ 788.538438][ T6318] out_of_memory+0x340/0x14f0 [ 788.538463][ T6318] ? __pfx_out_of_memory+0x10/0x10 [ 788.538489][ T6318] mem_cgroup_out_of_memory+0xc6/0x130 [ 788.538509][ T6318] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 788.538527][ T6318] ? find_held_lock+0x2b/0x80 [ 788.538544][ T6318] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.538572][ T6318] ? _raw_spin_unlock+0x28/0x50 [ 788.538590][ T6318] try_charge_memcg+0x652/0xc90 [ 788.538610][ T6318] ? __pfx_try_charge_memcg+0x10/0x10 [ 788.538629][ T6318] ? find_held_lock+0x2b/0x80 [ 788.538642][ T6318] ? rcu_read_unlock+0x17/0x60 [ 788.538657][ T6318] ? rcu_read_unlock+0x17/0x60 [ 788.538674][ T6318] charge_memcg+0xa6/0x280 [ 788.538689][ T6318] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 788.538709][ T6318] __swap_cache_prepare_and_add+0x528/0x9e0 [ 788.538738][ T6318] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 788.538757][ T6318] ? __pfx_swap_entry_swapped+0x10/0x10 [ 788.538777][ T6318] swap_cache_alloc_folio+0x1cb/0x300 [ 788.538799][ T6318] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 788.538820][ T6318] ? rcu_is_watching+0x12/0xc0 [ 788.538845][ T6318] swap_cluster_readahead+0x411/0x770 [ 788.538870][ T6318] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 788.538893][ T6318] ? update_cfs_rq_load_avg+0x51/0x550 [ 788.538914][ T6318] ? __lock_acquire+0x4a5/0x2630 [ 788.538934][ T6318] ? get_vma_policy+0x23f/0x3b0 [ 788.538952][ T6318] swapin_readahead+0x160/0x12c0 [ 788.538978][ T6318] ? __pfx_swapin_readahead+0x10/0x10 [ 788.538998][ T6318] ? find_held_lock+0x2b/0x80 [ 788.539011][ T6318] ? swap_table_get+0x103/0x2c0 [ 788.539028][ T6318] ? swap_table_get+0x103/0x2c0 [ 788.539050][ T6318] ? swap_table_get+0x10d/0x2c0 [ 788.539069][ T6318] ? swap_cache_get_folio+0x1ae/0x600 [ 788.539089][ T6318] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 788.539107][ T6318] ? __pfx_get_swap_device+0x10/0x10 [ 788.539126][ T6318] ? do_swap_page+0xb2e/0x68e0 [ 788.539144][ T6318] do_swap_page+0xb2e/0x68e0 [ 788.539173][ T6318] ? __pfx_do_swap_page+0x10/0x10 [ 788.539193][ T6318] ? __free_object+0x2a8/0x400 [ 788.539213][ T6318] ? lockdep_hardirqs_on+0x78/0x100 [ 788.539232][ T6318] ? rcu_is_watching+0x12/0xc0 [ 788.539252][ T6318] ? __pte_offset_map+0x179/0x310 [ 788.539270][ T6318] __handle_mm_fault+0x18c1/0x2b60 [ 788.539293][ T6318] ? reacquire_held_locks+0xce/0x1e0 [ 788.539312][ T6318] ? __pfx___handle_mm_fault+0x10/0x10 [ 788.539334][ T6318] ? lock_vma_under_rcu+0x17c/0x590 [ 788.539366][ T6318] handle_mm_fault+0x36d/0xa20 [ 788.539388][ T6318] do_user_addr_fault+0x5a3/0x12f0 [ 788.539417][ T6318] exc_page_fault+0x6f/0xd0 [ 788.539434][ T6318] asm_exc_page_fault+0x26/0x30 [ 788.539448][ T6318] RIP: 0033:0x7ff8fdf5cfce [ 788.539462][ T6318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.539476][ T6318] RSP: 002b:00007ffcfa489a88 EFLAGS: 00010246 [ 788.539488][ T6318] RAX: 0000000000000000 RBX: 000055558903a500 RCX: 00007ff8fdf5cfce [ 788.539498][ T6318] RDX: 00007ffcfa489ae0 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.539506][ T6318] RBP: 00007ffcfa489b4c R08: 0000000000000000 R09: 0000000000000000 [ 788.539515][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 788.539524][ T6318] R13: 00000000000927c0 R14: 00000000000c1385 R15: 00007ffcfa489ba0 [ 788.539544][ T6318] [ 788.540123][ T6318] memory: usage 3072kB, limit 3072kB, failcnt 117098 [ 789.860715][ T6591] FAULT_INJECTION: forcing a failure. [ 789.860715][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 789.896299][ T6318] memory+swap: usage 3420kB, limit 9007199254740988kB, failcnt 0 [ 789.920221][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.2.15042 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 789.920253][ T6591] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 789.920260][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.920270][ T6591] Call Trace: [ 789.920276][ T6591] [ 789.920283][ T6591] dump_stack_lvl+0x100/0x190 [ 789.920312][ T6591] should_fail_ex.cold+0x5/0xa [ 789.920330][ T6591] ? sk_prot_alloc+0x10b/0x2a0 [ 789.920352][ T6591] should_failslab+0xc2/0x120 [ 789.920368][ T6591] __kmalloc_noprof+0xe0/0x850 [ 789.920390][ T6591] ? lockdep_init_map_type+0x5c/0x250 [ 789.920413][ T6591] sk_prot_alloc+0x10b/0x2a0 [ 789.920436][ T6591] sk_alloc+0x36/0xe80 [ 789.920453][ T6591] pppol2tp_create+0x32/0x250 [ 789.920615][ T6591] pppox_create+0x15c/0x2c0 [ 789.920670][ T6591] __sock_create+0x339/0x860 [ 789.920697][ T6591] __sys_socket+0x14d/0x260 [ 789.920725][ T6591] ? __pfx___sys_socket+0x10/0x10 [ 789.920753][ T6591] __x64_sys_socket+0x72/0xb0 [ 789.920766][ T6591] ? lockdep_hardirqs_on+0x78/0x100 [ 789.920785][ T6591] do_syscall_64+0x106/0xf80 [ 789.920803][ T6591] ? clear_bhb_loop+0x40/0x90 [ 789.920822][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.920838][ T6591] RIP: 0033:0x7fe32b39c799 [ 789.920852][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.920867][ T6591] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 789.920883][ T6591] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 789.920894][ T6591] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 789.920903][ T6591] RBP: 00007fe32b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 789.920913][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.920922][ T6591] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 789.920943][ T6591] [ 790.328751][ T6318] kmem: usage 1676kB, limit 9007199254740988kB, failcnt 0 [ 790.335878][ T6318] Memory cgroup stats for /syz1: [ 790.335974][ T6318] cache 0 [ 790.358558][ T6318] rss 1429504 [ 790.362382][ T6318] rss_huge 0 [ 790.365734][ T6318] shmem 0 [ 790.378532][ T6318] mapped_file 0 [ 790.382013][ T6318] dirty 0 [ 790.386058][ T6318] writeback 0 [ 790.412955][ T6318] workingset_refault_anon 4534 [ 790.439542][ T6318] workingset_refault_file 25967 [ 790.444405][ T6318] swap 356352 [ 790.467996][ T6318] swapcached 430043136 [ 790.472101][ T6318] pgpgin 337098 [ 790.475541][ T6318] pgpgout 359689 [ 790.497846][ T6318] pgfault 412631 [ 790.502772][ T6318] pgmajfault 2575 [ 790.506841][ T6318] inactive_anon 0 [ 790.527729][ T6318] active_anon 1429504 [ 790.532466][ T6318] inactive_file 0 [ 790.559646][ T6318] active_file 0 [ 790.563130][ T6318] unevictable 0 [ 790.579303][ T6318] hierarchical_memory_limit 3145728 [ 790.584520][ T6318] hierarchical_memsw_limit 9223372036854771712 [ 790.601882][ T6599] FAULT_INJECTION: forcing a failure. [ 790.601882][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 790.627568][ T6318] total_cache 0 [ 790.631066][ T6318] total_rss 1429504 [ 790.643624][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.0.15046 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 790.643654][ T6599] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 790.643662][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 790.643672][ T6599] Call Trace: [ 790.643678][ T6599] [ 790.643685][ T6599] dump_stack_lvl+0x100/0x190 [ 790.643713][ T6599] should_fail_ex.cold+0x5/0xa [ 790.643732][ T6599] should_failslab+0xc2/0x120 [ 790.643749][ T6599] __kvmalloc_node_noprof+0xfa/0xa00 [ 790.643771][ T6599] ? keyctl_update_key+0xdf/0x160 [ 790.643797][ T6599] keyctl_update_key+0xdf/0x160 [ 790.643818][ T6599] __do_sys_keyctl+0x302/0x5a0 [ 790.643841][ T6599] do_syscall_64+0x106/0xf80 [ 790.643859][ T6599] ? clear_bhb_loop+0x40/0x90 [ 790.643878][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.643893][ T6599] RIP: 0033:0x7fdd8499c799 [ 790.643906][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.643921][ T6599] RSP: 002b:00007fdd85942028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 790.643935][ T6599] RAX: ffffffffffffffda RBX: 00007fdd84c15fa0 RCX: 00007fdd8499c799 [ 790.643951][ T6599] RDX: 0000000000000107 RSI: ffffeffffffffffe RDI: 0000000000000002 [ 790.643960][ T6599] RBP: 00007fdd84a32bd9 R08: 000800000000000c R09: 0000000000000000 [ 790.643970][ T6599] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 790.643979][ T6599] R13: 00007fdd84c16038 R14: 00007fdd84c15fa0 R15: 00007ffd733988d8 [ 790.643999][ T6599] [ 790.823183][ T6318] total_rss_huge 0 [ 790.826985][ T6318] total_shmem 0 [ 790.830426][ T6318] total_mapped_file 0 [ 790.834409][ T6318] total_dirty 0 [ 790.837913][ T6318] total_writeback 0 [ 790.841740][ T6318] total_workingset_refault_anon 4534 [ 790.847324][ T6318] total_workingset_refault_file 25967 [ 790.852796][ T6318] total_swap 356352 [ 790.856881][ T6318] total_swapcached 430043136 [ 790.861459][ T6318] total_pgpgin 337098 [ 790.865447][ T6318] total_pgpgout 359689 [ 790.869563][ T6318] total_pgfault 412631 [ 790.873615][ T6318] total_pgmajfault 2575 [ 790.877805][ T6318] total_inactive_anon 0 [ 790.881937][ T6318] total_active_anon 1429504 [ 790.886451][ T6318] total_inactive_file 0 [ 790.890593][ T6318] total_active_file 0 [ 790.895694][ T6318] total_unevictable 0 [ 790.899664][ T6318] anon_cost 16 [ 790.903061][ T6318] file_cost 0 [ 790.906392][ T6318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15023,pid=6544,uid=0 [ 790.921282][ T6318] Memory cgroup out of memory: Killed process 6544 (syz.1.15023) total-vm:106324kB, anon-rss:2632kB, file-rss:21456kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 791.591177][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15061'. [ 791.634012][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15061'. [ 791.738954][ T6627] zswap: compressor not available [ 791.972956][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15068'. [ 792.745962][ T6671] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 792.920113][ T6679] hugetlbfs: syz.1.15084 (6679): Using mlock ulimits for SHM_HUGETLB is obsolete [ 793.414406][ T6697] FAULT_INJECTION: forcing a failure. [ 793.414406][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 793.466623][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.2.15091 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 793.466653][ T6697] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 793.466661][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.466670][ T6697] Call Trace: [ 793.466676][ T6697] [ 793.466683][ T6697] dump_stack_lvl+0x100/0x190 [ 793.466712][ T6697] should_fail_ex.cold+0x5/0xa [ 793.466730][ T6697] should_failslab+0xc2/0x120 [ 793.466746][ T6697] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 793.466768][ T6697] ? sk_prot_alloc+0x60/0x2a0 [ 793.466793][ T6697] sk_prot_alloc+0x60/0x2a0 [ 793.466816][ T6697] sk_alloc+0x36/0xe80 [ 793.466832][ T6697] rxrpc_create+0x116/0x8d0 [ 793.466973][ T6697] __sock_create+0x339/0x860 [ 793.467001][ T6697] __sys_socket+0x14d/0x260 [ 793.467024][ T6697] ? __pfx___sys_socket+0x10/0x10 [ 793.467052][ T6697] __x64_sys_socket+0x72/0xb0 [ 793.467066][ T6697] ? lockdep_hardirqs_on+0x78/0x100 [ 793.467084][ T6697] do_syscall_64+0x106/0xf80 [ 793.467101][ T6697] ? clear_bhb_loop+0x40/0x90 [ 793.467121][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.467137][ T6697] RIP: 0033:0x7fe32b39c799 [ 793.467160][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.467176][ T6697] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 793.467192][ T6697] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 793.467203][ T6697] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 793.467214][ T6697] RBP: 00007fe32b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 793.467224][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.467233][ T6697] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 793.467253][ T6697] [ 794.266011][ T6708] netlink: 350 bytes leftover after parsing attributes in process `syz.1.15092'. [ 794.279668][ T6710] netlink: Unknown conntrack attr (0) [ 795.155391][ T6746] futex_wake_op: syz.2.15113 tries to shift op by -2048; fix this program [ 795.205429][ T6746] 0x000000000001-0x000000020000 : "" [ 795.292417][ T6746] ftl_cs: FTL header corrupt! [ 795.315549][ T6743] syz.1.15112 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 795.372542][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.1.15112 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 795.372572][ T6743] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 795.372579][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.372588][ T6743] Call Trace: [ 795.372594][ T6743] [ 795.372600][ T6743] dump_stack_lvl+0x100/0x190 [ 795.372628][ T6743] dump_header+0xfb/0x606 [ 795.372646][ T6743] oom_kill_process.cold+0xd/0x330 [ 795.372664][ T6743] out_of_memory+0x340/0x14f0 [ 795.372690][ T6743] ? __pfx_out_of_memory+0x10/0x10 [ 795.372718][ T6743] mem_cgroup_out_of_memory+0xc6/0x130 [ 795.372739][ T6743] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 795.372758][ T6743] ? find_held_lock+0x2b/0x80 [ 795.372776][ T6743] ? do_raw_spin_unlock+0x145/0x1e0 [ 795.372798][ T6743] ? _raw_spin_unlock+0x28/0x50 [ 795.372817][ T6743] try_charge_memcg+0x652/0xc90 [ 795.372838][ T6743] ? __pfx_try_charge_memcg+0x10/0x10 [ 795.372853][ T6743] ? find_held_lock+0x2b/0x80 [ 795.372867][ T6743] ? rcu_read_unlock+0x17/0x60 [ 795.372882][ T6743] ? rcu_read_unlock+0x17/0x60 [ 795.372904][ T6743] charge_memcg+0xa6/0x280 [ 795.372920][ T6743] __mem_cgroup_charge+0x2b/0x1e0 [ 795.372938][ T6743] do_anonymous_page+0xb62/0x1fb0 [ 795.372974][ T6743] __handle_mm_fault+0x1d42/0x2b60 [ 795.373000][ T6743] ? __pfx___handle_mm_fault+0x10/0x10 [ 795.373021][ T6743] ? pte_offset_map_lock+0x174/0x320 [ 795.373037][ T6743] ? find_held_lock+0x2b/0x80 [ 795.373057][ T6743] ? follow_page_pte+0x5b3/0x1400 [ 795.373078][ T6743] handle_mm_fault+0x36d/0xa20 [ 795.373102][ T6743] __get_user_pages+0xf9c/0x34d0 [ 795.373126][ T6743] ? __pfx___get_user_pages+0x10/0x10 [ 795.373149][ T6743] populate_vma_page_range+0x267/0x3f0 [ 795.373168][ T6743] ? __pfx_populate_vma_page_range+0x10/0x10 [ 795.373185][ T6743] ? __pfx_find_vma_intersection+0x10/0x10 [ 795.373202][ T6743] ? do_mmap+0x93f/0x12f0 [ 795.373221][ T6743] __mm_populate+0x107/0x3a0 [ 795.373239][ T6743] ? __pfx___mm_populate+0x10/0x10 [ 795.373258][ T6743] ? up_write+0x290/0x4f0 [ 795.373281][ T6743] vm_mmap_pgoff+0x37f/0x470 [ 795.373301][ T6743] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 795.373319][ T6743] ? do_futex+0x192/0x350 [ 795.373338][ T6743] ? __pfx_do_futex+0x10/0x10 [ 795.373360][ T6743] ksys_mmap_pgoff+0xe1/0x650 [ 795.373377][ T6743] ? __x64_sys_futex+0x34f/0x4d0 [ 795.373394][ T6743] ? __x64_sys_futex+0x358/0x4d0 [ 795.373413][ T6743] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 795.373429][ T6743] ? xfd_validate_state+0x129/0x190 [ 795.373455][ T6743] __x64_sys_mmap+0x125/0x190 [ 795.373480][ T6743] do_syscall_64+0x106/0xf80 [ 795.373498][ T6743] ? clear_bhb_loop+0x40/0x90 [ 795.373516][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.373532][ T6743] RIP: 0033:0x7ff8fdf9c799 [ 795.373545][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.373561][ T6743] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 795.373576][ T6743] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 795.373586][ T6743] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 795.373596][ T6743] RBP: 00007ff8fe032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 795.373605][ T6743] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 795.373614][ T6743] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 795.373634][ T6743] [ 795.373641][ T6743] memory: usage 3072kB, limit 3072kB, failcnt 117305 [ 796.370250][ T6743] memory+swap: usage 3404kB, limit 9007199254740988kB, failcnt 0 [ 796.410533][ T6743] kmem: usage 1708kB, limit 9007199254740988kB, failcnt 0 [ 796.435406][ T6743] Memory cgroup stats for /syz1: [ 796.435520][ T6743] cache 0 [ 796.454244][ T6743] rss 1396736 [ 796.467972][ T6743] rss_huge 0 [ 796.480341][ T6743] shmem 0 [ 796.490903][ T6743] mapped_file 0 [ 796.503879][ T6743] dirty 0 [ 796.534333][ T6743] writeback 0 [ 796.544750][ T6743] workingset_refault_anon 4575 [ 796.561967][ T6743] workingset_refault_file 25967 [ 796.572706][ T6743] swap 339968 [ 796.580647][ T6743] swapcached 430436352 [ 796.589161][ T6743] pgpgin 338236 [ 796.596601][ T6743] pgpgout 360835 [ 796.608663][ T6743] pgfault 415346 [ 796.618639][ T6743] pgmajfault 2593 [ 796.629684][ T6743] inactive_anon 0 [ 796.637823][ T6743] active_anon 1396736 [ 796.646822][ T6743] inactive_file 0 [ 796.654925][ T6743] active_file 0 [ 796.663661][ T6743] unevictable 0 [ 796.672338][ T6743] hierarchical_memory_limit 3145728 [ 796.684051][ T6743] hierarchical_memsw_limit 9223372036854771712 [ 796.698209][ T6743] total_cache 0 [ 796.708297][ T6743] total_rss 1396736 [ 796.716645][ T6743] total_rss_huge 0 [ 796.724827][ T6743] total_shmem 0 [ 796.732582][ T6743] total_mapped_file 0 [ 796.743662][ T6743] total_dirty 0 [ 796.751641][ T6743] total_writeback 0 [ 796.760510][ T6743] total_workingset_refault_anon 4575 [ 796.773218][ T6743] total_workingset_refault_file 25967 [ 796.785891][ T6743] total_swap 339968 [ 796.794273][ T6743] total_swapcached 430436352 [ 796.805644][ T6743] total_pgpgin 338236 [ 796.824485][ T6743] total_pgpgout 360835 [ 796.840908][ T6743] total_pgfault 415346 [ 796.858424][ T6743] total_pgmajfault 2593 [ 796.878664][ T6743] total_inactive_anon 0 [ 796.892591][ T6743] total_active_anon 1396736 [ 796.908331][ T6743] total_inactive_file 0 [ 796.922235][ T6743] total_active_file 0 [ 796.934567][ T6743] total_unevictable 0 [ 796.949777][ T6743] anon_cost 12 [ 796.964780][ T6743] file_cost 0 [ 796.974965][ T6743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15112,pid=6742,uid=0 [ 797.021159][ T6787] overlayfs: missing 'lowerdir' [ 797.034297][ T6743] Memory cgroup out of memory: Killed process 6742 (syz.1.15112) total-vm:106324kB, anon-rss:2592kB, file-rss:22812kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 798.013019][ T6813] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 798.069081][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.1.15142 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 798.069113][ T6813] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 798.069121][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.069131][ T6813] Call Trace: [ 798.069136][ T6813] [ 798.069143][ T6813] dump_stack_lvl+0x100/0x190 [ 798.069173][ T6813] sysfs_warn_dup.cold+0x1c/0x28 [ 798.069196][ T6813] sysfs_do_create_link_sd+0x113/0x140 [ 798.069221][ T6813] sysfs_create_link+0x61/0xc0 [ 798.069241][ T6813] device_add+0x675/0x1950 [ 798.069267][ T6813] ? __pfx_device_add+0x10/0x10 [ 798.069283][ T6813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.069309][ T6813] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 798.069333][ T6813] wiphy_register+0x1e5b/0x2d30 [ 798.069353][ T6813] ? __rtnl_unlock+0xb9/0xf0 [ 798.069374][ T6813] ? netdev_run_todo+0x7a0/0x12c0 [ 798.069397][ T6813] ? __pfx_wiphy_register+0x10/0x10 [ 798.069418][ T6813] ? __asan_memset+0x23/0x50 [ 798.069440][ T6813] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 798.069469][ T6813] ieee80211_register_hw+0x2cfd/0x4140 [ 798.069501][ T6813] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 798.069521][ T6813] ? __pfx___debug_object_init+0x10/0x10 [ 798.069547][ T6813] ? find_held_lock+0x2b/0x80 [ 798.069563][ T6813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.069588][ T6813] ? __hrtimer_setup+0x178/0x280 [ 798.069610][ T6813] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 798.069646][ T6813] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 798.069673][ T6813] hwsim_new_radio_nl+0xc1f/0x1340 [ 798.069696][ T6813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.069723][ T6813] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 798.069747][ T6813] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 798.069790][ T6813] genl_family_rcv_msg_doit+0x214/0x300 [ 798.069816][ T6813] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 798.069841][ T6813] ? genl_get_cmd+0x3ef/0x720 [ 798.069866][ T6813] ? bpf_lsm_capable+0x9/0x10 [ 798.069882][ T6813] ? security_capable+0x80/0x260 [ 798.069903][ T6813] ? ns_capable+0xd2/0xf0 [ 798.069920][ T6813] genl_rcv_msg+0x560/0x800 [ 798.069944][ T6813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.069966][ T6813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.069994][ T6813] netlink_rcv_skb+0x159/0x420 [ 798.070014][ T6813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.070036][ T6813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.070065][ T6813] ? netlink_deliver_tap+0x1ae/0xcc0 [ 798.070086][ T6813] genl_rcv+0x28/0x40 [ 798.070108][ T6813] netlink_unicast+0x5aa/0x870 [ 798.070131][ T6813] ? __pfx_netlink_unicast+0x10/0x10 [ 798.070150][ T6813] ? __pfx___might_resched+0x10/0x10 [ 798.070171][ T6813] ? __lock_acquire+0x4a5/0x2630 [ 798.070196][ T6813] netlink_sendmsg+0x8b0/0xda0 [ 798.070220][ T6813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.070240][ T6813] ? __import_iovec+0x1d2/0x640 [ 798.070263][ T6813] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 798.070289][ T6813] ____sys_sendmsg+0x9e1/0xb70 [ 798.070311][ T6813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.070334][ T6813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.070360][ T6813] ? __pfx_futex_wake_mark+0x10/0x10 [ 798.070386][ T6813] ___sys_sendmsg+0x190/0x1e0 [ 798.070411][ T6813] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.070458][ T6813] __sys_sendmsg+0x170/0x220 [ 798.070477][ T6813] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.070496][ T6813] ? __x64_sys_futex+0x34f/0x4d0 [ 798.070527][ T6813] do_syscall_64+0x106/0xf80 [ 798.070545][ T6813] ? clear_bhb_loop+0x40/0x90 [ 798.070565][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.070581][ T6813] RIP: 0033:0x7ff8fdf9c799 [ 798.070597][ T6813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.070612][ T6813] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.070627][ T6813] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 798.070638][ T6813] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 798.070648][ T6813] RBP: 00007ff8fe032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 798.070658][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.070667][ T6813] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 798.070689][ T6813] [ 799.328774][ T6841] syz.1.15153 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 799.387462][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.1.15153 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 799.387492][ T6841] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 799.387499][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.387508][ T6841] Call Trace: [ 799.387514][ T6841] [ 799.387520][ T6841] dump_stack_lvl+0x100/0x190 [ 799.387548][ T6841] dump_header+0xfb/0x606 [ 799.387623][ T6841] oom_kill_process.cold+0xd/0x330 [ 799.387642][ T6841] out_of_memory+0x340/0x14f0 [ 799.387668][ T6841] ? __pfx_out_of_memory+0x10/0x10 [ 799.387696][ T6841] mem_cgroup_out_of_memory+0xc6/0x130 [ 799.387717][ T6841] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 799.387736][ T6841] ? find_held_lock+0x2b/0x80 [ 799.387755][ T6841] ? do_raw_spin_unlock+0x145/0x1e0 [ 799.387777][ T6841] ? _raw_spin_unlock+0x28/0x50 [ 799.387795][ T6841] try_charge_memcg+0x652/0xc90 [ 799.387816][ T6841] ? __pfx_try_charge_memcg+0x10/0x10 [ 799.387831][ T6841] ? find_held_lock+0x2b/0x80 [ 799.387845][ T6841] ? rcu_read_unlock+0x17/0x60 [ 799.387860][ T6841] ? rcu_read_unlock+0x17/0x60 [ 799.387882][ T6841] charge_memcg+0xa6/0x280 [ 799.387898][ T6841] __mem_cgroup_charge+0x2b/0x1e0 [ 799.387918][ T6841] do_anonymous_page+0xb62/0x1fb0 [ 799.387945][ T6841] __handle_mm_fault+0x1d42/0x2b60 [ 799.387971][ T6841] ? __pfx___handle_mm_fault+0x10/0x10 [ 799.387992][ T6841] ? pte_offset_map_lock+0x174/0x320 [ 799.388008][ T6841] ? find_held_lock+0x2b/0x80 [ 799.388028][ T6841] ? follow_page_pte+0x5b3/0x1400 [ 799.388049][ T6841] handle_mm_fault+0x36d/0xa20 [ 799.388073][ T6841] __get_user_pages+0xf9c/0x34d0 [ 799.388097][ T6841] ? __pfx___get_user_pages+0x10/0x10 [ 799.388119][ T6841] populate_vma_page_range+0x267/0x3f0 [ 799.388139][ T6841] ? __pfx_populate_vma_page_range+0x10/0x10 [ 799.388156][ T6841] ? __pfx_find_vma_intersection+0x10/0x10 [ 799.388173][ T6841] ? do_mmap+0x93f/0x12f0 [ 799.388191][ T6841] __mm_populate+0x107/0x3a0 [ 799.388209][ T6841] ? __pfx___mm_populate+0x10/0x10 [ 799.388228][ T6841] ? up_write+0x290/0x4f0 [ 799.388252][ T6841] vm_mmap_pgoff+0x37f/0x470 [ 799.388271][ T6841] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 799.388289][ T6841] ? do_futex+0x192/0x350 [ 799.388309][ T6841] ? __pfx_do_futex+0x10/0x10 [ 799.388327][ T6841] ? __pfx_do_mq_notify+0x10/0x10 [ 799.388351][ T6841] ksys_mmap_pgoff+0xe1/0x650 [ 799.388367][ T6841] ? __x64_sys_futex+0x34f/0x4d0 [ 799.388385][ T6841] ? __x64_sys_futex+0x358/0x4d0 [ 799.388404][ T6841] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 799.388420][ T6841] ? xfd_validate_state+0x129/0x190 [ 799.388446][ T6841] __x64_sys_mmap+0x125/0x190 [ 799.388470][ T6841] do_syscall_64+0x106/0xf80 [ 799.388487][ T6841] ? clear_bhb_loop+0x40/0x90 [ 799.388506][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.388522][ T6841] RIP: 0033:0x7ff8fdf9c799 [ 799.388536][ T6841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.388551][ T6841] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 799.388570][ T6841] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 799.388581][ T6841] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 799.388590][ T6841] RBP: 00007ff8fe032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 799.388599][ T6841] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 799.388608][ T6841] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 799.388628][ T6841] [ 799.388635][ T6841] memory: usage 3072kB, limit 3072kB, failcnt 117758 [ 799.937472][ T6869] FAULT_INJECTION: forcing a failure. [ 799.937472][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 799.966519][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.2.15165 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 799.966553][ T6869] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 799.966561][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.966570][ T6869] Call Trace: [ 799.966577][ T6869] [ 799.966584][ T6869] dump_stack_lvl+0x100/0x190 [ 799.966613][ T6869] should_fail_ex.cold+0x5/0xa [ 799.966632][ T6869] ? lsm_blob_alloc+0x68/0x90 [ 799.966650][ T6869] should_failslab+0xc2/0x120 [ 799.966666][ T6869] __kmalloc_noprof+0xe0/0x850 [ 799.966688][ T6869] ? trace_kmem_cache_alloc+0xf3/0x120 [ 799.966708][ T6869] lsm_blob_alloc+0x68/0x90 [ 799.966727][ T6869] security_prepare_creds+0x2d/0x290 [ 799.966746][ T6869] prepare_creds+0x5d6/0x950 [ 799.966770][ T6869] lookup_user_key+0x8e9/0x1300 [ 799.966795][ T6869] ? __pfx_lookup_user_key+0x10/0x10 [ 799.966819][ T6869] ? find_held_lock+0x2b/0x80 [ 799.966833][ T6869] ? setid_policy_lookup+0x10c/0x350 [ 799.966854][ T6869] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 799.966881][ T6869] ? bpf_lsm_capable+0x9/0x10 [ 799.966897][ T6869] ? security_capable+0x80/0x260 [ 799.966919][ T6869] keyctl_get_persistent+0x197/0x8b0 [ 799.966939][ T6869] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 799.966958][ T6869] ? __x64_sys_futex+0x34f/0x4d0 [ 799.966977][ T6869] ? __x64_sys_futex+0x358/0x4d0 [ 799.966998][ T6869] ? xfd_validate_state+0x129/0x190 [ 799.967023][ T6869] __do_sys_keyctl+0x3b2/0x5a0 [ 799.967046][ T6869] do_syscall_64+0x106/0xf80 [ 799.967064][ T6869] ? clear_bhb_loop+0x40/0x90 [ 799.967083][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.967099][ T6869] RIP: 0033:0x7fe32b39c799 [ 799.967112][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.967128][ T6869] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 799.967143][ T6869] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 799.967153][ T6869] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 799.967163][ T6869] RBP: 00007fe32b432bd9 R08: 000000000000000c R09: 0000000000000000 [ 799.967173][ T6869] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 799.967182][ T6869] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 799.967202][ T6869] [ 800.497569][ T6841] memory+swap: usage 4548kB, limit 9007199254740988kB, failcnt 0 [ 800.525704][ T6841] kmem: usage 1708kB, limit 9007199254740988kB, failcnt 0 [ 800.550229][ T6841] Memory cgroup stats for /syz1: [ 800.550343][ T6841] cache 0 [ 800.584619][ T6841] rss 1396736 [ 800.593847][ T6841] rss_huge 0 [ 800.603623][ T6841] shmem 0 [ 800.611829][ T6841] mapped_file 0 [ 800.630186][ T6841] dirty 0 [ 800.640447][ T6841] writeback 0 [ 800.651454][ T6841] workingset_refault_anon 4594 [ 800.670009][ T6841] workingset_refault_file 25967 [ 800.693090][ T6841] swap 1511424 [ 800.703182][ T6841] swapcached 431964160 [ 800.715606][ T6841] pgpgin 339325 [ 800.719080][ T6841] pgpgout 361924 [ 800.740102][ T6841] pgfault 417317 [ 800.751466][ T6841] pgmajfault 2599 [ 800.765386][ T6841] inactive_anon 0 [ 800.779110][ T6841] active_anon 1396736 [ 800.791290][ T6841] inactive_file 0 [ 800.805738][ T6841] active_file 0 [ 800.826031][ T6841] unevictable 0 [ 800.842325][ T6841] hierarchical_memory_limit 3145728 [ 800.864487][ T6841] hierarchical_memsw_limit 9223372036854771712 [ 800.886753][ T6841] total_cache 0 [ 800.899140][ T6841] total_rss 1396736 [ 800.912571][ T6841] total_rss_huge 0 [ 800.929283][ T6841] total_shmem 0 [ 800.941838][ T6841] total_mapped_file 0 [ 800.957551][ T6841] total_dirty 0 [ 800.969949][ T6841] total_writeback 0 [ 800.987858][ T6841] total_workingset_refault_anon 4594 [ 801.005436][ T6841] total_workingset_refault_file 25967 [ 801.026006][ T6841] total_swap 1511424 [ 801.039780][ T6841] total_swapcached 431964160 [ 801.059762][ T6841] total_pgpgin 339325 [ 801.078591][ T6841] total_pgpgout 361924 [ 801.091211][ T6904] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 801.100683][ T6841] total_pgfault 417317 [ 801.109520][ T6841] total_pgmajfault 2599 [ 801.118432][ T6904] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 801.129097][ T6841] total_inactive_anon 0 [ 801.138210][ T6841] total_active_anon 1396736 [ 801.152252][ T6841] total_inactive_file 0 [ 801.171572][ T6841] total_active_file 0 [ 801.188443][ T6841] total_unevictable 0 [ 801.206222][ T6841] anon_cost 43 [ 801.217354][ T6841] file_cost 0 [ 801.228381][ T6841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15153,pid=6840,uid=0 [ 801.278672][ T6841] Memory cgroup out of memory: Killed process 6840 (syz.1.15153) total-vm:106324kB, anon-rss:2592kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 802.632464][ T6959] zswap: compressor not available [ 802.797700][ T6976] FAULT_INJECTION: forcing a failure. [ 802.797700][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 802.863161][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.2.15209 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 802.863201][ T6976] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 802.863209][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.863218][ T6976] Call Trace: [ 802.863224][ T6976] [ 802.863231][ T6976] dump_stack_lvl+0x100/0x190 [ 802.863260][ T6976] should_fail_ex.cold+0x5/0xa [ 802.863279][ T6976] should_failslab+0xc2/0x120 [ 802.863295][ T6976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 802.863317][ T6976] ? security_file_alloc+0x34/0x2c0 [ 802.863333][ T6976] ? trace_kmem_cache_alloc+0xf3/0x120 [ 802.863352][ T6976] security_file_alloc+0x34/0x2c0 [ 802.863368][ T6976] init_file+0x95/0x480 [ 802.863386][ T6976] alloc_empty_file+0x73/0x1c0 [ 802.863405][ T6976] alloc_file_pseudo+0x13a/0x230 [ 802.863425][ T6976] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 802.863447][ T6976] ? _raw_spin_unlock+0x28/0x50 [ 802.863463][ T6976] ? alloc_fd+0x476/0x790 [ 802.863479][ T6976] __anon_inode_getfile+0xe8/0x280 [ 802.863500][ T6976] __anon_inode_getfd+0x5c/0xe0 [ 802.863519][ T6976] do_inotify_init+0x483/0x5e0 [ 802.863541][ T6976] __x64_sys_inotify_init1+0x30/0x40 [ 802.863561][ T6976] do_syscall_64+0x106/0xf80 [ 802.863578][ T6976] ? clear_bhb_loop+0x40/0x90 [ 802.863596][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.863612][ T6976] RIP: 0033:0x7fe32b39c799 [ 802.863625][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.863641][ T6976] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 802.863656][ T6976] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 802.863666][ T6976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 802.863676][ T6976] RBP: 00007fe32b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 802.863685][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.863694][ T6976] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 802.863714][ T6976] [ 803.809320][ T7019] netlink: zone id is out of range [ 803.836109][ T7019] netlink: zone id is out of range [ 803.868460][ T7019] netlink: zone id is out of range [ 803.888273][ T7019] netlink: zone id is out of range [ 803.917653][ T7019] netlink: zone id is out of range [ 803.957631][ T7019] netlink: zone id is out of range [ 803.974256][ T7019] netlink: zone id is out of range [ 804.001175][ T7019] netlink: zone id is out of range [ 804.107342][ T7032] sctp: [Deprecated]: syz.0.15233 (pid 7032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.107342][ T7032] Use struct sctp_sack_info instead [ 804.389467][ T7035] could not allocate digest TFM handle  [ 804.681688][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15243'. [ 805.007733][ T7072] FAULT_INJECTION: forcing a failure. [ 805.007733][ T7072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.063390][ T7072] CPU: 0 UID: 0 PID: 7072 Comm: syz.1.15251 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 805.063421][ T7072] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 805.063429][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.063438][ T7072] Call Trace: [ 805.063444][ T7072] [ 805.063451][ T7072] dump_stack_lvl+0x100/0x190 [ 805.063479][ T7072] should_fail_ex.cold+0x5/0xa [ 805.063498][ T7072] _copy_from_user+0x2e/0xd0 [ 805.063514][ T7072] get_itimerspec64+0x16c/0x2f0 [ 805.063533][ T7072] ? __pfx_get_itimerspec64+0x10/0x10 [ 805.063552][ T7072] ? __pfx_do_futex+0x10/0x10 [ 805.063576][ T7072] __x64_sys_timerfd_settime+0x15f/0x280 [ 805.063598][ T7072] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 805.063622][ T7072] ? xfd_validate_state+0x129/0x190 [ 805.063650][ T7072] do_syscall_64+0x106/0xf80 [ 805.063668][ T7072] ? clear_bhb_loop+0x40/0x90 [ 805.063686][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.063702][ T7072] RIP: 0033:0x7ff8fdf9c799 [ 805.063716][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.063731][ T7072] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 805.063746][ T7072] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 805.063756][ T7072] RDX: 0000200000000040 RSI: 0000000000000003 RDI: ffffffffffffffff [ 805.063766][ T7072] RBP: 00007ff8fe032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 805.063775][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.063784][ T7072] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 805.063804][ T7072] [ 805.244692][ T7077] futex_wake_op: syz.0.15252 tries to shift op by -2048; fix this program [ 805.256857][ T7077] 0x000000000001-0x000000020000 : "" [ 805.285867][ T7077] ftl_cs: FTL header corrupt! [ 805.483468][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.492722][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.136129][ T7125] IPVS: length: 7562853 != 24 [ 809.515110][ T7272] net_ratelimit: 6 callbacks suppressed [ 809.515125][ T7272] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 809.660761][ T7279] netlink: 342 bytes leftover after parsing attributes in process `syz.2.15344'. [ 810.412621][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15359'. [ 812.086051][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15387'. [ 812.819933][ T7405] ovs_ÿþÿþ?: entered promiscuous mode [ 813.018316][ T7411] FAULT_INJECTION: forcing a failure. [ 813.018316][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 813.077748][ T7411] CPU: 0 UID: 0 PID: 7411 Comm: syz.1.15397 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 813.077779][ T7411] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 813.077787][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.077797][ T7411] Call Trace: [ 813.077804][ T7411] [ 813.077811][ T7411] dump_stack_lvl+0x100/0x190 [ 813.077841][ T7411] should_fail_ex.cold+0x5/0xa [ 813.077861][ T7411] should_failslab+0xc2/0x120 [ 813.077878][ T7411] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 813.077901][ T7411] ? ptlock_alloc+0x1f/0x70 [ 813.077925][ T7411] ptlock_alloc+0x1f/0x70 [ 813.077945][ T7411] pte_alloc_one+0x84/0x3e0 [ 813.077963][ T7411] do_fault+0x8cc/0x1950 [ 813.077979][ T7411] ? __pmd_alloc+0x6aa/0x9c0 [ 813.077998][ T7411] __handle_mm_fault+0x180f/0x2b60 [ 813.078022][ T7411] ? mt_find+0x45e/0x8e0 [ 813.078043][ T7411] ? __pfx___handle_mm_fault+0x10/0x10 [ 813.078062][ T7411] ? __pfx_mt_find+0x10/0x10 [ 813.078097][ T7411] handle_mm_fault+0x36d/0xa20 [ 813.078120][ T7411] __get_user_pages+0xf9c/0x34d0 [ 813.078144][ T7411] ? __pfx___get_user_pages+0x10/0x10 [ 813.078173][ T7411] populate_vma_page_range+0x267/0x3f0 [ 813.078193][ T7411] ? __pfx_populate_vma_page_range+0x10/0x10 [ 813.078211][ T7411] ? __pfx_find_vma_intersection+0x10/0x10 [ 813.078229][ T7411] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 813.078254][ T7411] __mm_populate+0x107/0x3a0 [ 813.078273][ T7411] ? __pfx___mm_populate+0x10/0x10 [ 813.078292][ T7411] ? up_write+0x290/0x4f0 [ 813.078316][ T7411] do_mlock+0x3f0/0x7f0 [ 813.078339][ T7411] ? __pfx_do_mlock+0x10/0x10 [ 813.078358][ T7411] ? __x64_sys_futex+0x34f/0x4d0 [ 813.078377][ T7411] ? __x64_sys_futex+0x358/0x4d0 [ 813.078398][ T7411] ? xfd_validate_state+0x129/0x190 [ 813.078425][ T7411] __x64_sys_mlock+0x59/0x80 [ 813.078446][ T7411] do_syscall_64+0x106/0xf80 [ 813.078464][ T7411] ? clear_bhb_loop+0x40/0x90 [ 813.078483][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.078499][ T7411] RIP: 0033:0x7ff8fdf9c799 [ 813.078513][ T7411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.078530][ T7411] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 813.078545][ T7411] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 813.078556][ T7411] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 813.078565][ T7411] RBP: 00007ff8fe032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 813.078575][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.078585][ T7411] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 813.078606][ T7411] [ 813.940081][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15401'. [ 814.219605][ T7427] syz.1.15405 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 814.293551][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.1.15405 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 814.293581][ T7427] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 814.293588][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.293597][ T7427] Call Trace: [ 814.293603][ T7427] [ 814.293609][ T7427] dump_stack_lvl+0x100/0x190 [ 814.293637][ T7427] dump_header+0xfb/0x606 [ 814.293655][ T7427] oom_kill_process.cold+0xd/0x330 [ 814.293673][ T7427] out_of_memory+0x340/0x14f0 [ 814.293700][ T7427] ? __pfx_out_of_memory+0x10/0x10 [ 814.293727][ T7427] mem_cgroup_out_of_memory+0xc6/0x130 [ 814.293748][ T7427] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 814.293767][ T7427] ? find_held_lock+0x2b/0x80 [ 814.293785][ T7427] ? do_raw_spin_unlock+0x145/0x1e0 [ 814.293807][ T7427] ? _raw_spin_unlock+0x28/0x50 [ 814.293826][ T7427] try_charge_memcg+0x652/0xc90 [ 814.293846][ T7427] ? __pfx_try_charge_memcg+0x10/0x10 [ 814.293860][ T7427] ? rcu_read_unlock+0x17/0x60 [ 814.293875][ T7427] ? rcu_read_unlock+0x17/0x60 [ 814.293895][ T7427] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 814.293919][ T7427] __memcg_kmem_charge_page+0xd0/0x530 [ 814.293938][ T7427] __alloc_frozen_pages_noprof+0x328/0x2ba0 [ 814.293982][ T7427] ? __lock_acquire+0x4a5/0x2630 [ 814.294000][ T7427] ? arch_stack_walk+0xa6/0xf0 [ 814.294025][ T7427] ? do_raw_spin_lock+0x128/0x260 [ 814.294046][ T7427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 814.294071][ T7427] ? mark_held_locks+0x40/0x70 [ 814.294099][ T7427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 814.294124][ T7427] ? policy_nodemask+0xed/0x4f0 [ 814.294142][ T7427] alloc_pages_mpol+0x1fb/0x550 [ 814.294159][ T7427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 814.294181][ T7427] ? _raw_spin_unlock+0x28/0x50 [ 814.294196][ T7427] ? __free_frozen_pages+0x884/0x10d0 [ 814.294217][ T7427] alloc_pages_noprof+0x131/0x390 [ 814.294234][ T7427] pte_alloc_one+0x1e/0x3e0 [ 814.294252][ T7427] __pte_alloc+0x6d/0x3f0 [ 814.294268][ T7427] ? __pfx___pte_alloc+0x10/0x10 [ 814.294284][ T7427] ? __mem_cgroup_charge+0xd2/0x1e0 [ 814.294304][ T7427] do_anonymous_page+0x13cc/0x1fb0 [ 814.294326][ T7427] ? do_huge_pmd_anonymous_page+0x7ee/0x1a60 [ 814.294353][ T7427] __handle_mm_fault+0x1d42/0x2b60 [ 814.294379][ T7427] ? __pfx___handle_mm_fault+0x10/0x10 [ 814.294398][ T7427] ? folio_mark_accessed+0xf3/0x1040 [ 814.294423][ T7427] ? __pfx_folio_mark_accessed+0x10/0x10 [ 814.294446][ T7427] ? find_held_lock+0x2b/0x80 [ 814.294472][ T7427] handle_mm_fault+0x36d/0xa20 [ 814.294497][ T7427] __get_user_pages+0xf9c/0x34d0 [ 814.294522][ T7427] ? __pfx___get_user_pages+0x10/0x10 [ 814.294544][ T7427] populate_vma_page_range+0x267/0x3f0 [ 814.294563][ T7427] ? __pfx_populate_vma_page_range+0x10/0x10 [ 814.294581][ T7427] ? __pfx_find_vma_intersection+0x10/0x10 [ 814.294598][ T7427] ? do_mmap+0x93f/0x12f0 [ 814.294616][ T7427] __mm_populate+0x107/0x3a0 [ 814.294634][ T7427] ? __pfx___mm_populate+0x10/0x10 [ 814.294653][ T7427] ? up_write+0x290/0x4f0 [ 814.294677][ T7427] vm_mmap_pgoff+0x37f/0x470 [ 814.294696][ T7427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 814.294722][ T7427] ksys_mmap_pgoff+0xe1/0x650 [ 814.294738][ T7427] ? kcov_ioctl+0x16a/0x720 [ 814.294759][ T7427] ? kfree+0x2ec/0x6b0 [ 814.294777][ T7427] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 814.294791][ T7427] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 814.294813][ T7427] __x64_sys_mmap+0x125/0x190 [ 814.294838][ T7427] do_syscall_64+0x106/0xf80 [ 814.294855][ T7427] ? clear_bhb_loop+0x40/0x90 [ 814.294873][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.294889][ T7427] RIP: 0033:0x7ff8fdf9c799 [ 814.294903][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.294917][ T7427] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 814.294932][ T7427] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 814.294942][ T7427] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 814.294951][ T7427] RBP: 00007ff8fe032bd9 R08: 0000000000000005 R09: 0000000000008000 [ 814.294960][ T7427] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 814.294969][ T7427] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 814.294989][ T7427] [ 815.108503][ T7436] netlink: 'syz.3.15411': attribute type 1 has an invalid length. [ 815.720701][ T7427] memory: usage 2956kB, limit 3072kB, failcnt 119254 [ 815.756932][ T7427] memory+swap: usage 3996kB, limit 9007199254740988kB, failcnt 0 [ 815.791751][ T7427] kmem: usage 1736kB, limit 9007199254740988kB, failcnt 0 [ 815.833605][ T7427] Memory cgroup stats for /syz1: [ 815.833712][ T7427] cache 0 [ 815.869817][ T7427] rss 1220608 [ 815.887330][ T7427] rss_huge 0 [ 815.899485][ T7427] shmem 0 [ 815.912404][ T7427] mapped_file 0 [ 815.930339][ T7427] dirty 0 [ 815.948122][ T7427] writeback 0 [ 815.965167][ T7427] workingset_refault_anon 4783 [ 816.011625][ T7427] workingset_refault_file 26030 [ 816.059706][ T7427] swap 1056768 [ 816.063120][ T7427] swapcached 436228096 [ 816.101558][ T7427] pgpgin 343804 [ 816.121764][ T7427] pgpgout 366437 [ 816.147888][ T7427] pgfault 425958 [ 816.151455][ T7427] pgmajfault 2702 [ 816.214534][ T7427] inactive_anon 45056 [ 816.236213][ T7427] active_anon 1212416 [ 816.240342][ T7427] inactive_file 0 [ 816.277630][ T7427] active_file 0 [ 816.303725][ T7427] unevictable 0 [ 816.307205][ T7427] hierarchical_memory_limit 3145728 [ 816.335524][ T7485] openvswitch: netlink: IP tunnel TTL not specified. [ 816.353630][ T7427] hierarchical_memsw_limit 9223372036854771712 [ 816.384305][ T7427] total_cache 0 [ 816.387784][ T7427] total_rss 1220608 [ 816.391575][ T7427] total_rss_huge 0 [ 816.437029][ T7427] total_shmem 0 [ 816.440556][ T7427] total_mapped_file 0 [ 816.467309][ T7427] total_dirty 0 [ 816.470821][ T7427] total_writeback 0 [ 816.494464][ T7427] total_workingset_refault_anon 4783 [ 816.521037][ T7427] total_workingset_refault_file 26030 [ 816.545767][ T7427] total_swap 1056768 [ 816.561833][ T7427] total_swapcached 436228096 [ 816.595723][ T7427] total_pgpgin 343804 [ 816.599730][ T7427] total_pgpgout 366437 [ 816.629985][ T7427] total_pgfault 425958 [ 816.645556][ T7427] total_pgmajfault 2702 [ 816.663462][ T7427] total_inactive_anon 45056 [ 816.693118][ T7427] total_active_anon 1212416 [ 816.697645][ T7427] total_inactive_file 0 [ 816.734947][ T7427] total_active_file 0 [ 816.754660][ T7427] total_unevictable 0 [ 816.758729][ T7427] anon_cost 253 [ 816.787785][ T7427] file_cost 0 [ 816.802176][ T7427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15405,pid=7426,uid=0 [ 816.877746][ T7427] Memory cgroup out of memory: Killed process 7426 (syz.1.15405) total-vm:106324kB, anon-rss:2444kB, file-rss:21456kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 818.002861][ T7547] sd 0:0:1:0: PR command failed: 1026 [ 818.036713][ T7547] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 818.044221][ T7547] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 818.155641][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15465'. [ 818.226528][ T7558] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.15466'. [ 818.681112][ T7578] FAULT_INJECTION: forcing a failure. [ 818.681112][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 818.751849][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.2.15476 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 818.751880][ T7578] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 818.751888][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.751898][ T7578] Call Trace: [ 818.751903][ T7578] [ 818.751910][ T7578] dump_stack_lvl+0x100/0x190 [ 818.751939][ T7578] should_fail_ex.cold+0x5/0xa [ 818.751958][ T7578] should_failslab+0xc2/0x120 [ 818.751974][ T7578] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 818.751996][ T7578] ? security_file_alloc+0x34/0x2c0 [ 818.752012][ T7578] ? trace_kmem_cache_alloc+0xf3/0x120 [ 818.752031][ T7578] security_file_alloc+0x34/0x2c0 [ 818.752047][ T7578] init_file+0x95/0x480 [ 818.752066][ T7578] alloc_empty_file_noaccount+0x3d/0xd0 [ 818.752088][ T7578] alloc_file_pseudo_noaccount+0x13a/0x230 [ 818.752109][ T7578] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 818.752131][ T7578] ? iput+0x3a/0x40 [ 818.752150][ T7578] bdev_file_open_by_dev+0x13a/0x210 [ 818.752250][ T7578] blkdev_bszset+0x170/0x240 [ 818.752292][ T7578] ? __pfx_blkdev_bszset+0x10/0x10 [ 818.752311][ T7578] ? find_held_lock+0x2b/0x80 [ 818.752327][ T7578] ? __fget_files+0x215/0x3d0 [ 818.752340][ T7578] ? hook_file_ioctl_common+0x146/0x410 [ 818.752399][ T7578] blkdev_ioctl+0x513/0x6f0 [ 818.752418][ T7578] ? __pfx_blkdev_ioctl+0x10/0x10 [ 818.752441][ T7578] ? __pfx_blkdev_ioctl+0x10/0x10 [ 818.752461][ T7578] __x64_sys_ioctl+0x18e/0x210 [ 818.752484][ T7578] do_syscall_64+0x106/0xf80 [ 818.752502][ T7578] ? clear_bhb_loop+0x40/0x90 [ 818.752530][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.752547][ T7578] RIP: 0033:0x7fe32b39c799 [ 818.752562][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.752585][ T7578] RSP: 002b:00007fe32c319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.752601][ T7578] RAX: ffffffffffffffda RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 818.752614][ T7578] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000003 [ 818.752625][ T7578] RBP: 00007fe32b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 818.752634][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.752644][ T7578] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 818.752665][ T7578] [ 820.525616][ T7663] bridge0: port 5(dummy0) entered blocking state [ 820.550417][ T7663] bridge0: port 5(dummy0) entered disabled state [ 820.565736][ T7663] dummy0: entered allmulticast mode [ 820.575320][ T7663] dummy0: entered promiscuous mode [ 820.580989][ T7663] bridge0: port 5(dummy0) entered blocking state [ 820.587501][ T7663] bridge0: port 5(dummy0) entered forwarding state [ 820.690311][ T7662] syz.1.15511 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 820.713092][ T7667] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 820.736521][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.1.15511 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 820.736551][ T7662] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 820.736558][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.736567][ T7662] Call Trace: [ 820.736573][ T7662] [ 820.736579][ T7662] dump_stack_lvl+0x100/0x190 [ 820.736606][ T7662] dump_header+0xfb/0x606 [ 820.736624][ T7662] oom_kill_process.cold+0xd/0x330 [ 820.736642][ T7662] out_of_memory+0x340/0x14f0 [ 820.736669][ T7662] ? __pfx_out_of_memory+0x10/0x10 [ 820.736696][ T7662] mem_cgroup_out_of_memory+0xc6/0x130 [ 820.736716][ T7662] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 820.736735][ T7662] ? find_held_lock+0x2b/0x80 [ 820.736754][ T7662] ? do_raw_spin_unlock+0x145/0x1e0 [ 820.736776][ T7662] ? _raw_spin_unlock+0x28/0x50 [ 820.736794][ T7662] try_charge_memcg+0x652/0xc90 [ 820.736814][ T7662] ? __pfx_try_charge_memcg+0x10/0x10 [ 820.736830][ T7662] ? find_held_lock+0x2b/0x80 [ 820.736844][ T7662] ? rcu_read_unlock+0x17/0x60 [ 820.736859][ T7662] ? rcu_read_unlock+0x17/0x60 [ 820.736881][ T7662] charge_memcg+0xa6/0x280 [ 820.736897][ T7662] __mem_cgroup_charge+0x2b/0x1e0 [ 820.736916][ T7662] do_anonymous_page+0xb62/0x1fb0 [ 820.736944][ T7662] __handle_mm_fault+0x1d42/0x2b60 [ 820.736969][ T7662] ? __pfx___handle_mm_fault+0x10/0x10 [ 820.736990][ T7662] ? pte_offset_map_lock+0x174/0x320 [ 820.737006][ T7662] ? find_held_lock+0x2b/0x80 [ 820.737026][ T7662] ? follow_page_pte+0x5b3/0x1400 [ 820.737047][ T7662] handle_mm_fault+0x36d/0xa20 [ 820.737074][ T7662] __get_user_pages+0xf9c/0x34d0 [ 820.737099][ T7662] ? __pfx___get_user_pages+0x10/0x10 [ 820.737121][ T7662] populate_vma_page_range+0x267/0x3f0 [ 820.737140][ T7662] ? __pfx_populate_vma_page_range+0x10/0x10 [ 820.737158][ T7662] ? __pfx_find_vma_intersection+0x10/0x10 [ 820.737175][ T7662] ? do_mmap+0x93f/0x12f0 [ 820.737193][ T7662] __mm_populate+0x107/0x3a0 [ 820.737212][ T7662] ? __pfx___mm_populate+0x10/0x10 [ 820.737231][ T7662] ? up_write+0x290/0x4f0 [ 820.737254][ T7662] vm_mmap_pgoff+0x37f/0x470 [ 820.737274][ T7662] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 820.737292][ T7662] ? do_futex+0x192/0x350 [ 820.737316][ T7662] ? __pfx_do_futex+0x10/0x10 [ 820.737336][ T7662] ? fd_install+0x223/0x580 [ 820.737353][ T7662] ksys_mmap_pgoff+0xe1/0x650 [ 820.737369][ T7662] ? __x64_sys_futex+0x34f/0x4d0 [ 820.737386][ T7662] ? __x64_sys_futex+0x358/0x4d0 [ 820.737406][ T7662] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 820.737422][ T7662] ? xfd_validate_state+0x129/0x190 [ 820.737447][ T7662] __x64_sys_mmap+0x125/0x190 [ 820.737471][ T7662] do_syscall_64+0x106/0xf80 [ 820.737489][ T7662] ? clear_bhb_loop+0x40/0x90 [ 820.737508][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.737524][ T7662] RIP: 0033:0x7ff8fdf9c799 [ 820.737537][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.737552][ T7662] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 820.737567][ T7662] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 820.737577][ T7662] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 820.737586][ T7662] RBP: 00007ff8fe032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 820.737596][ T7662] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 820.737605][ T7662] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 820.737625][ T7662] [ 821.103297][ T7662] memory: usage 3072kB, limit 3072kB, failcnt 120293 [ 821.110598][ T7662] memory+swap: usage 3380kB, limit 9007199254740988kB, failcnt 0 [ 821.118413][ T7662] kmem: usage 1756kB, limit 9007199254740988kB, failcnt 0 [ 821.125928][ T7662] Memory cgroup stats for /syz1: [ 821.126042][ T7662] cache 0 [ 821.133915][ T7662] rss 1347584 [ 821.137177][ T7662] rss_huge 0 [ 821.140376][ T7662] shmem 0 [ 821.143298][ T7662] mapped_file 0 [ 821.146735][ T7662] dirty 0 [ 821.150721][ T7662] writeback 0 [ 821.153995][ T7662] workingset_refault_anon 4850 [ 821.158767][ T7662] workingset_refault_file 26030 [ 821.163593][ T7662] swap 315392 [ 821.166851][ T7662] swapcached 439521280 [ 821.170929][ T7662] pgpgin 345694 [ 821.174366][ T7662] pgpgout 368305 [ 821.177885][ T7662] pgfault 428807 [ 821.181524][ T7662] pgmajfault 2717 [ 821.185136][ T7662] inactive_anon 0 [ 821.189144][ T7662] active_anon 1347584 [ 821.193130][ T7662] inactive_file 0 [ 821.196743][ T7662] active_file 0 [ 821.200233][ T7662] unevictable 0 [ 821.203678][ T7662] hierarchical_memory_limit 3145728 [ 821.208882][ T7662] hierarchical_memsw_limit 9223372036854771712 [ 821.215325][ T7662] total_cache 0 [ 821.218937][ T7662] total_rss 1347584 [ 821.222730][ T7662] total_rss_huge 0 [ 821.226428][ T7662] total_shmem 0 [ 821.229936][ T7662] total_mapped_file 0 [ 821.233916][ T7662] total_dirty 0 [ 821.237361][ T7662] total_writeback 0 [ 821.241206][ T7662] total_workingset_refault_anon 4850 [ 821.246474][ T7662] total_workingset_refault_file 26030 [ 821.252900][ T7662] total_swap 315392 [ 821.256693][ T7662] total_swapcached 439521280 [ 821.261315][ T7662] total_pgpgin 345694 [ 821.265342][ T7662] total_pgpgout 368305 [ 821.269638][ T7662] total_pgfault 428807 [ 821.273696][ T7662] total_pgmajfault 2717 [ 821.277972][ T7662] total_inactive_anon 0 [ 821.282280][ T7662] total_active_anon 1347584 [ 821.286762][ T7662] total_inactive_file 0 [ 821.290940][ T7662] total_active_file 0 [ 821.294934][ T7662] total_unevictable 0 [ 821.298935][ T7662] anon_cost 6 [ 821.302207][ T7662] file_cost 0 [ 821.305472][ T7662] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15511,pid=7661,uid=0 [ 821.320653][ T7662] Memory cgroup out of memory: Killed process 7661 (syz.1.15511) total-vm:106324kB, anon-rss:2548kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 821.601731][ T7683] random: crng reseeded on system resumption [ 821.737000][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15524'. [ 822.204719][ T30] audit: type=1800 audit(4294967312.610:51): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15533" name="lu_gp_id" dev="configfs" ino=116842 res=0 errno=0 [ 822.402561][ T7714] syz.1.15533 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 822.458696][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.1.15533 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 822.458726][ T7714] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 822.458733][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.458746][ T7714] Call Trace: [ 822.458754][ T7714] [ 822.458763][ T7714] dump_stack_lvl+0x100/0x190 [ 822.458854][ T7714] dump_header+0xfb/0x606 [ 822.458873][ T7714] oom_kill_process.cold+0xd/0x330 [ 822.458892][ T7714] out_of_memory+0x340/0x14f0 [ 822.458918][ T7714] ? __pfx_out_of_memory+0x10/0x10 [ 822.458945][ T7714] mem_cgroup_out_of_memory+0xc6/0x130 [ 822.458967][ T7714] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 822.458986][ T7714] ? find_held_lock+0x2b/0x80 [ 822.459005][ T7714] ? do_raw_spin_unlock+0x145/0x1e0 [ 822.459027][ T7714] ? _raw_spin_unlock+0x28/0x50 [ 822.459045][ T7714] try_charge_memcg+0x652/0xc90 [ 822.459066][ T7714] ? __pfx_try_charge_memcg+0x10/0x10 [ 822.459082][ T7714] ? find_held_lock+0x2b/0x80 [ 822.459095][ T7714] ? rcu_read_unlock+0x17/0x60 [ 822.459111][ T7714] ? rcu_read_unlock+0x17/0x60 [ 822.459133][ T7714] charge_memcg+0xa6/0x280 [ 822.459149][ T7714] __mem_cgroup_charge+0x2b/0x1e0 [ 822.459179][ T7714] do_anonymous_page+0xb62/0x1fb0 [ 822.459207][ T7714] __handle_mm_fault+0x1d42/0x2b60 [ 822.459233][ T7714] ? __pfx___handle_mm_fault+0x10/0x10 [ 822.459254][ T7714] ? pte_offset_map_lock+0x174/0x320 [ 822.459270][ T7714] ? find_held_lock+0x2b/0x80 [ 822.459291][ T7714] ? follow_page_pte+0x5b3/0x1400 [ 822.459312][ T7714] handle_mm_fault+0x36d/0xa20 [ 822.459336][ T7714] __get_user_pages+0xf9c/0x34d0 [ 822.459361][ T7714] ? __pfx___get_user_pages+0x10/0x10 [ 822.459383][ T7714] populate_vma_page_range+0x267/0x3f0 [ 822.459403][ T7714] ? __pfx_populate_vma_page_range+0x10/0x10 [ 822.459420][ T7714] ? __pfx_find_vma_intersection+0x10/0x10 [ 822.459438][ T7714] ? do_mmap+0x93f/0x12f0 [ 822.459456][ T7714] __mm_populate+0x107/0x3a0 [ 822.459475][ T7714] ? __pfx___mm_populate+0x10/0x10 [ 822.459494][ T7714] ? up_write+0x290/0x4f0 [ 822.459518][ T7714] vm_mmap_pgoff+0x37f/0x470 [ 822.459538][ T7714] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 822.459556][ T7714] ? do_futex+0x192/0x350 [ 822.459576][ T7714] ? __pfx_do_futex+0x10/0x10 [ 822.459593][ T7714] ? __pfx_do_sys_openat2+0x10/0x10 [ 822.459620][ T7714] ksys_mmap_pgoff+0xe1/0x650 [ 822.459636][ T7714] ? __x64_sys_futex+0x34f/0x4d0 [ 822.459654][ T7714] ? __x64_sys_futex+0x358/0x4d0 [ 822.459677][ T7714] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 822.459693][ T7714] ? xfd_validate_state+0x129/0x190 [ 822.459721][ T7714] __x64_sys_mmap+0x125/0x190 [ 822.459750][ T7714] do_syscall_64+0x106/0xf80 [ 822.459768][ T7714] ? clear_bhb_loop+0x40/0x90 [ 822.459787][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.459803][ T7714] RIP: 0033:0x7ff8fdf9c799 [ 822.459819][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.459835][ T7714] RSP: 002b:00007ff8fee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 822.459850][ T7714] RAX: ffffffffffffffda RBX: 00007ff8fe215fa0 RCX: 00007ff8fdf9c799 [ 822.459860][ T7714] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 822.459870][ T7714] RBP: 00007ff8fe032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 822.459879][ T7714] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 822.459888][ T7714] R13: 00007ff8fe216038 R14: 00007ff8fe215fa0 R15: 00007ffcfa4897a8 [ 822.459908][ T7714] [ 822.461100][ T7714] memory: usage 3072kB, limit 3072kB, failcnt 120388 [ 823.399037][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15541'. [ 823.455680][ T7714] memory+swap: usage 3360kB, limit 9007199254740988kB, failcnt 0 [ 823.484271][ T7714] kmem: usage 1776kB, limit 9007199254740988kB, failcnt 0 [ 823.513159][ T7714] Memory cgroup stats for /syz1: [ 823.513272][ T7714] cache 0 [ 823.545995][ T7714] rss 1302528 [ 823.557093][ T7714] rss_huge 0 [ 823.569441][ T7714] shmem 0 [ 823.578770][ T7714] mapped_file 0 [ 823.594569][ T7714] dirty 0 [ 823.606211][ T7714] writeback 0 [ 823.619790][ T7714] workingset_refault_anon 4869 [ 823.634562][ T7714] workingset_refault_file 26030 [ 823.654546][ T7714] swap 294912 [ 823.684784][ T7714] swapcached 439840768 [ 823.705175][ T7714] pgpgin 346246 [ 823.708656][ T7714] pgpgout 368868 [ 823.737006][ T7714] pgfault 429812 [ 823.772760][ T7714] pgmajfault 2723 [ 823.786740][ T7714] inactive_anon 0 [ 823.790438][ T7714] active_anon 1302528 [ 823.836193][ T7714] inactive_file 0 [ 823.856313][ T7714] active_file 0 [ 823.859787][ T7714] unevictable 0 [ 823.914746][ T7714] hierarchical_memory_limit 3145728 [ 823.919989][ T7714] hierarchical_memsw_limit 9223372036854771712 [ 824.004384][ T7714] total_cache 0 [ 824.007969][ T7714] total_rss 1302528 [ 824.011764][ T7714] total_rss_huge 0 [ 824.064802][ T7714] total_shmem 0 [ 824.068296][ T7714] total_mapped_file 0 [ 824.072259][ T7714] total_dirty 0 [ 824.106476][ T7714] total_writeback 0 [ 824.110304][ T7714] total_workingset_refault_anon 4869 [ 824.144036][ T7714] total_workingset_refault_file 26030 [ 824.149432][ T7714] total_swap 294912 [ 824.172280][ T7714] total_swapcached 439840768 [ 824.187687][ T7714] total_pgpgin 346246 [ 824.222055][ T7714] total_pgpgout 368868 [ 824.232170][ T7714] total_pgfault 429812 [ 824.268008][ T7714] total_pgmajfault 2723 [ 824.278104][ T7714] total_inactive_anon 0 [ 824.297638][ T7714] total_active_anon 1302528 [ 824.322046][ T7714] total_inactive_file 0 [ 824.339503][ T7714] total_active_file 0 [ 824.356059][ T7714] total_unevictable 0 [ 824.372231][ T7714] anon_cost 16 [ 824.375630][ T7714] file_cost 0 [ 824.394490][ T7714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15533,pid=7713,uid=0 [ 824.434239][ T7714] Memory cgroup out of memory: Killed process 7713 (syz.1.15533) total-vm:106324kB, anon-rss:2500kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 824.766220][T25211] Bluetooth: hci0: Malformed Event: 0x13 [ 825.641862][ T7846] netlink: 21 bytes leftover after parsing attributes in process `syz.0.15580'. [ 828.868960][ T7980] netlink: 29 bytes leftover after parsing attributes in process `syz.3.15641'. [ 829.075504][ T7988] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 829.104434][ T7988] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 829.547329][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15655'. [ 829.736174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.749339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.762339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.775497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.788017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.800970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.813432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.826414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.051935][ C0] net_ratelimit: 6325 callbacks suppressed [ 834.051953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.070306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.083203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.095717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.108661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.121104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.134015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.146531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.159470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.171980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.035614][ C0] net_ratelimit: 7668 callbacks suppressed [ 839.035632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.054126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.067249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.079709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.092623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.105254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.118166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.130603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.143727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.156181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.019774][ C0] net_ratelimit: 7694 callbacks suppressed [ 844.019792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.038187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.051116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.063572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.076562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.089157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.102048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.114488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.127433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.139883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.003811][ C0] net_ratelimit: 7814 callbacks suppressed [ 849.003828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.022092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.034947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.047384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.060323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.072741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.085593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.097986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.111004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.123475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.987690][ C0] net_ratelimit: 7858 callbacks suppressed [ 853.987708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.006067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.018963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.031494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.044465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.057135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.070031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.082495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.095519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.107993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.971843][ C0] net_ratelimit: 7741 callbacks suppressed [ 858.971862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.990768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.003224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.016307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.028805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.041796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.054359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.067226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.079651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.092560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.956412][ C0] net_ratelimit: 7711 callbacks suppressed [ 863.956430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.974818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.987706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.000116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.013611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.026190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.039113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.051535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.064527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.076998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.672077][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.688201][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.940355][ C0] net_ratelimit: 7750 callbacks suppressed [ 868.940372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.958637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.971493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.983969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.997000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.009471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.022356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.034893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.048163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.060617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.924269][ C0] net_ratelimit: 7837 callbacks suppressed [ 873.924286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.943071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.955538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.968520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.980980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.994006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.006507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.019363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.031898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.044934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.908246][ C0] net_ratelimit: 7732 callbacks suppressed [ 878.908264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.927107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.939586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.952482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.964919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.977792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.990217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.003200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.015910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.028948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.892815][ C0] net_ratelimit: 7669 callbacks suppressed [ 883.892832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.911085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.924103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.936534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.949412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.961850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.975081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.987602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.000625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.013068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.876502][ C0] net_ratelimit: 7671 callbacks suppressed [ 888.876526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.895964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.908424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.921324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.933937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.947043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.959507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.972624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.985143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.998040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.860876][ C0] net_ratelimit: 7651 callbacks suppressed [ 893.860894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.879222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.892339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.904765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.917643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.930143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.943076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.955695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.968578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.981023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.844830][ C0] net_ratelimit: 7748 callbacks suppressed [ 898.844848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.863235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.876125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.888547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.901547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.913976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.926919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.940134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.953060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.965539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.828623][ C0] net_ratelimit: 7849 callbacks suppressed [ 903.828649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.847597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.860166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.872600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.885072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.897958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.910387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.922816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.935264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.948453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.812721][ C0] net_ratelimit: 9297 callbacks suppressed [ 908.812738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.831064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.843991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.856450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.868924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.881332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.894183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.906646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.919063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.931505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.796766][ C0] net_ratelimit: 9453 callbacks suppressed [ 913.796784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.815125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.827692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.840608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.853055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.865471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.878021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.890883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.903565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.916216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.781576][ C0] net_ratelimit: 9541 callbacks suppressed [ 918.781594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.799887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.812495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.824955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.837813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.850323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.862812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.875291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.888216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.900739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.764990][ C0] net_ratelimit: 9539 callbacks suppressed [ 923.765008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.783338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.795796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.808816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.821278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.833821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.846269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.859156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.871592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.884073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.800051][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.817730][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.748951][ C0] net_ratelimit: 9356 callbacks suppressed [ 928.748969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.767661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.780070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.792775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.805214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.818135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.830585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.843139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.855177][ C0] sched: DL replenish lagged too much [ 928.861086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.874393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.733001][ C0] net_ratelimit: 9334 callbacks suppressed [ 933.733020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.751990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.764484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.777392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.789843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.802725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.815198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.827633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.840134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.853205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.190558][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 934.197519][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7776/1:b..l [ 934.206006][ C0] rcu: (detected by 0, t=10502 jiffies, g=218813, q=1244 ncpus=1) [ 934.213909][ C0] task:syz.2.15546 state:R running task stack:22896 pid:7776 tgid:7776 ppid:6320 task_flags:0x40064c flags:0x00080001 [ 934.228526][ C0] Call Trace: [ 934.231807][ C0] [ 934.234731][ C0] __schedule+0xfee/0x6120 [ 934.239166][ C0] ? lock_acquire+0x1cf/0x380 [ 934.243836][ C0] ? __pfx___schedule+0x10/0x10 [ 934.248669][ C0] ? __lock_acquire+0x4a5/0x2630 [ 934.253596][ C0] ? rcu_is_watching+0x12/0xc0 [ 934.258612][ C0] preempt_schedule_irq+0x50/0x90 [ 934.263623][ C0] irqentry_exit+0x17b/0x670 [ 934.268201][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 934.274173][ C0] RIP: 0010:__orc_find+0x86/0xf0 [ 934.279107][ C0] Code: f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 <48> 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 [ 934.298789][ C0] RSP: 0018:ffffc9000ceb6f00 EFLAGS: 00000246 [ 934.304856][ C0] RAX: ffffffff91894f5e RBX: ffffffff90fd3ec0 RCX: dffffc0000000000 [ 934.312832][ C0] RDX: fffffffff192c3e0 RSI: 0000000000000000 RDI: ffffffff90fd3eb8 [ 934.320800][ C0] RBP: ffffffff90fd3eb8 R08: ffffffff91894f7c R09: 0000000000000007 [ 934.328764][ C0] R10: 0000000000000200 R11: 0000000000019002 R12: ffffffff90fd3ec8 [ 934.337001][ C0] R13: ffffffff829002e4 R14: ffffffff90fd3eb8 R15: ffffffff90fd3eb8 [ 934.344993][ C0] ? iput+0x34/0x40 [ 934.348835][ C0] ? iput+0x34/0x40 [ 934.352658][ C0] unwind_next_frame+0x2ec/0x1ea0 [ 934.357691][ C0] ? iput+0x35/0x40 [ 934.361671][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 934.367831][ C0] arch_stack_walk+0x94/0xf0 [ 934.372450][ C0] ? iput+0x35/0x40 [ 934.376266][ C0] stack_trace_save+0x8e/0xc0 [ 934.380952][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 934.386344][ C0] ? __lock_acquire+0x4a5/0x2630 [ 934.391532][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.397333][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 934.402558][ C0] save_stack+0x162/0x1e0 [ 934.406898][ C0] ? __pfx_save_stack+0x10/0x10 [ 934.411744][ C0] ? free_unref_folios+0xaea/0x1790 [ 934.416935][ C0] ? folios_put_refs+0x53c/0x840 [ 934.421935][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 934.427040][ C0] ? shmem_evict_inode+0x39e/0xbd0 [ 934.432140][ C0] ? evict+0x3c2/0xad0 [ 934.436199][ C0] ? iput.part.0+0x605/0xf50 [ 934.440771][ C0] ? iput+0x35/0x40 [ 934.444576][ C0] ? page_ext_put+0x3e/0xd0 [ 934.449072][ C0] __reset_page_owner+0x84/0x190 [ 934.454002][ C0] free_unref_folios+0xaea/0x1790 [ 934.459034][ C0] ? rcu_is_watching+0x12/0xc0 [ 934.463810][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.469625][ C0] folios_put_refs+0x53c/0x840 [ 934.474383][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 934.479660][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 934.485973][ C0] shmem_undo_range+0x5e5/0x1570 [ 934.490911][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 934.496305][ C0] ? __lock_acquire+0x4a5/0x2630 [ 934.501264][ C0] ? find_held_lock+0x2b/0x80 [ 934.505925][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 934.511285][ C0] shmem_evict_inode+0x39e/0xbd0 [ 934.516247][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 934.521983][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 934.527446][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 934.533514][ C0] ? find_held_lock+0x2b/0x80 [ 934.538183][ C0] ? evict+0x37e/0xad0 [ 934.542242][ C0] ? evict+0x37e/0xad0 [ 934.546308][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 934.551756][ C0] evict+0x3c2/0xad0 [ 934.555639][ C0] ? find_held_lock+0x2b/0x80 [ 934.560299][ C0] ? __pfx_evict+0x10/0x10 [ 934.564705][ C0] ? iput.part.0+0x5fd/0xf50 [ 934.569287][ C0] iput.part.0+0x605/0xf50 [ 934.573687][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 934.578963][ C0] iput+0x35/0x40 [ 934.582590][ C0] dentry_unlink_inode+0x2a1/0x490 [ 934.587685][ C0] __dentry_kill+0x1d0/0x600 [ 934.592263][ C0] finish_dput+0x76/0x480 [ 934.596579][ C0] dput.part.0+0x456/0x570 [ 934.600979][ C0] dput+0x1f/0x30 [ 934.604610][ C0] __fput+0x519/0xb40 [ 934.608576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.613772][ C0] task_work_run+0x150/0x240 [ 934.618349][ C0] ? __pfx_task_work_run+0x10/0x10 [ 934.623445][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 934.628652][ C0] do_exit+0x8b8/0x2b60 [ 934.632813][ C0] ? __pfx_do_exit+0x10/0x10 [ 934.637388][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 934.643377][ C0] do_group_exit+0xd5/0x2a0 [ 934.647877][ C0] get_signal+0x1ec7/0x21e0 [ 934.652380][ C0] ? __pfx_get_signal+0x10/0x10 [ 934.657219][ C0] arch_do_signal_or_restart+0x91/0x770 [ 934.662752][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 934.668894][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 934.674223][ C0] irqentry_exit+0x1f8/0x670 [ 934.678807][ C0] asm_exc_page_fault+0x26/0x30 [ 934.683644][ C0] RIP: 0033:0x7fe32b39c7a1 [ 934.688040][ C0] RSP: 002b:0000000000005feb EFLAGS: 00010217 [ 934.694090][ C0] RAX: 0000000000000000 RBX: 00007fe32b615fa0 RCX: 00007fe32b39c799 [ 934.702059][ C0] RDX: 0000000000000000 RSI: 0000000000005feb RDI: 0000000000000002 [ 934.710013][ C0] RBP: 00007fe32b432bd9 R08: 0002000000000003 R09: 0000000000000000 [ 934.717970][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.725930][ C0] R13: 00007fe32b616038 R14: 00007fe32b615fa0 R15: 00007fffea32d788 [ 934.733894][ C0] [ 934.736907][ C0] rcu: rcu_preempt kthread starved for 2695 jiffies! g218813 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 934.748114][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 934.758074][ C0] rcu: RCU grace-period kthread stack dump: [ 934.763947][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 934.777422][ C0] Call Trace: [ 934.780686][ C0] [ 934.783601][ C0] __schedule+0xfee/0x6120 [ 934.788013][ C0] ? __lock_acquire+0x4a5/0x2630 [ 934.792947][ C0] ? __pfx___schedule+0x10/0x10 [ 934.797781][ C0] ? find_held_lock+0x2b/0x80 [ 934.802455][ C0] ? schedule+0x2bf/0x390 [ 934.806823][ C0] schedule+0xdd/0x390 [ 934.810979][ C0] schedule_timeout+0x127/0x280 [ 934.815833][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 934.821212][ C0] ? __pfx_process_timeout+0x10/0x10 [ 934.826497][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.832293][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 934.837743][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 934.842502][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 934.847779][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 934.852704][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 934.857905][ C0] ? rcu_is_watching+0x12/0xc0 [ 934.862661][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.868456][ C0] rcu_gp_kthread+0x179/0x230 [ 934.873120][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 934.878308][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.884206][ C0] ? __kthread_parkme+0x18c/0x230 [ 934.889273][ C0] ? kthread+0x13a/0x450 [ 934.893528][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 934.898716][ C0] kthread+0x370/0x450 [ 934.902780][ C0] ? __pfx_kthread+0x10/0x10 [ 934.907359][ C0] ret_from_fork+0x754/0xd80 [ 934.911979][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 934.917096][ C0] ? __switch_to+0x7b4/0x1120 [ 934.921772][ C0] ? __pfx_kthread+0x10/0x10 [ 934.926371][ C0] ret_from_fork_asm+0x1a/0x30 [ 934.931154][ C0] [ 934.934178][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 934.940513][ C0] CPU: 0 UID: 0 PID: 3405 Comm: kworker/R-bat_e Tainted: G U I L syzkaller #0 PREEMPT(full) [ 934.951884][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 934.959292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.969356][ C0] Workqueue: bat_events batadv_dat_purge [ 934.975292][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 934.980674][ C0] Code: 3a ff ff ff 48 89 df e8 1e e5 86 00 eb 81 e8 47 e5 86 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 d3 7b 20 12 e8 7e 40 a0 09 48 c7 c3 a8 [ 935.000280][ C0] RSP: 0018:ffffc90000006cc8 EFLAGS: 00000202 [ 935.006428][ C0] RAX: 0000000000000001 RBX: ffffc900000075a8 RCX: ffffffff9216d201 [ 935.014403][ C0] RDX: ffffc900000075b0 RSI: ffffc90000007578 RDI: ffffc90000006d50 [ 935.022362][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 935.030321][ C0] R10: 0000000000000200 R11: 0000000000095b14 R12: ffffc90000006d90 [ 935.038277][ C0] R13: ffffc90000006d40 R14: ffffc900000075a8 R15: ffffc90000006d74 [ 935.046234][ C0] FS: 0000000000000000(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 935.055152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.061720][ C0] CR2: 00007fb558e4e162 CR3: 0000000037b22000 CR4: 00000000003526f0 [ 935.069696][ C0] Call Trace: [ 935.072964][ C0] [ 935.075790][ C0] unwind_next_frame+0x745/0x1ea0 [ 935.080808][ C0] ? br_handle_frame_finish+0xff0/0x1f60 [ 935.086523][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 935.092688][ C0] arch_stack_walk+0x94/0xf0 [ 935.097274][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 935.102427][ C0] stack_trace_save+0x8e/0xc0 [ 935.107160][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 935.112544][ C0] ? lock_acquire+0x1cf/0x380 [ 935.117383][ C0] ? lock_acquire+0x1cf/0x380 [ 935.122048][ C0] kasan_save_stack+0x30/0x50 [ 935.126733][ C0] ? kasan_save_stack+0x30/0x50 [ 935.131591][ C0] ? kasan_save_track+0x14/0x30 [ 935.136448][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 935.141453][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 935.147075][ C0] ? skb_ext_add+0xfa/0x810 [ 935.151658][ C0] ? br_nf_forward_ip.part.0+0x28/0x820 [ 935.157188][ C0] ? br_nf_forward+0xfe5/0x19f0 [ 935.162022][ C0] ? nf_hook_slow+0xbf/0x220 [ 935.166683][ C0] ? __br_forward+0x2f6/0x970 [ 935.171344][ C0] ? maybe_deliver+0xf0/0x180 [ 935.176016][ C0] ? br_flood+0x193/0x650 [ 935.180451][ C0] ? br_handle_frame_finish+0xff0/0x1f60 [ 935.186132][ C0] kasan_save_track+0x14/0x30 [ 935.190833][ C0] __kasan_slab_alloc+0x89/0x90 [ 935.195672][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 935.201147][ C0] ? skb_ext_add+0xfa/0x810 [ 935.205645][ C0] skb_ext_add+0xfa/0x810 [ 935.209963][ C0] ? lock_acquire+0x1cf/0x380 [ 935.214635][ C0] ? find_held_lock+0x2b/0x80 [ 935.219293][ C0] ? net_generic+0xea/0x2a0 [ 935.223787][ C0] br_nf_forward_ip.part.0+0x28/0x820 [ 935.229149][ C0] br_nf_forward+0xfe5/0x19f0 [ 935.233814][ C0] nf_hook_slow+0xbf/0x220 [ 935.238239][ C0] __br_forward+0x2f6/0x970 [ 935.242727][ C0] ? __pfx___br_forward+0x10/0x10 [ 935.247735][ C0] ? __asan_memcpy+0x3c/0x60 [ 935.252318][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 935.257775][ C0] ? __skb_clone+0x570/0x760 [ 935.262356][ C0] maybe_deliver+0xf0/0x180 [ 935.266866][ C0] br_flood+0x193/0x650 [ 935.271011][ C0] br_handle_frame_finish+0xff0/0x1f60 [ 935.276464][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.282365][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 935.287666][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 935.292601][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 935.297701][ C0] ? nf_hook_slow+0x167/0x220 [ 935.302390][ C0] br_nf_hook_thresh+0x30d/0x420 [ 935.307333][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.313225][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 935.318674][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.324567][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 935.329861][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.335779][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.341668][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 935.347662][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.353659][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 935.359106][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 935.364991][ C0] ? lock_acquire+0x1cf/0x380 [ 935.369789][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 935.376299][ C0] ? net_generic+0xea/0x2a0 [ 935.380802][ C0] br_nf_pre_routing+0x93b/0x1510 [ 935.385842][ C0] br_handle_frame+0xcdd/0x1520 [ 935.390689][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 935.395983][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.401968][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 935.407242][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 935.413907][ C0] ? mark_held_locks+0x40/0x70 [ 935.418689][ C0] ? kmem_cache_free+0x124/0x6a0 [ 935.423619][ C0] ? skb_release_data+0x7a0/0x9d0 [ 935.428632][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 935.435726][ C0] ? kfree_skbmem+0x19f/0x210 [ 935.440399][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 935.445590][ C0] ? ip6_mc_input+0x51a/0xf50 [ 935.450292][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 935.455352][ C0] ? __lock_acquire+0x4a5/0x2630 [ 935.460320][ C0] ? process_backlog+0x32a/0x1580 [ 935.465330][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 935.471147][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 935.477552][ C0] ? lock_acquire+0x1cf/0x380 [ 935.482220][ C0] ? process_backlog+0x32a/0x1580 [ 935.487308][ C0] ? process_backlog+0x32a/0x1580 [ 935.492325][ C0] __netif_receive_skb+0x1f/0x120 [ 935.497343][ C0] process_backlog+0x37a/0x1580 [ 935.502213][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 935.507608][ C0] net_rx_action+0xa40/0xf20 [ 935.512214][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 935.517403][ C0] ? find_held_lock+0x2b/0x80 [ 935.522078][ C0] ? try_to_wake_up+0x154/0x1a80 [ 935.526999][ C0] ? try_to_wake_up+0x154/0x1a80 [ 935.531962][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 935.537234][ C0] ? sched_clock+0x38/0x60 [ 935.541641][ C0] ? sched_clock_cpu+0x6c/0x570 [ 935.546487][ C0] ? mark_held_locks+0x40/0x70 [ 935.551246][ C0] handle_softirqs+0x1eb/0x9e0 [ 935.556034][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 935.561325][ C0] ? irqtime_account_irq+0x176/0x2d0 [ 935.566724][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 935.572554][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 935.578184][ C0] do_softirq+0xac/0xe0 [ 935.582326][ C0] [ 935.585263][ C0] [ 935.588177][ C0] __local_bh_enable_ip+0xf8/0x120 [ 935.593274][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 935.598902][ C0] batadv_dat_purge+0x4b/0xa0 [ 935.603585][ C0] process_one_work+0x9d7/0x1920 [ 935.608708][ C0] ? __pfx_process_one_work+0x10/0x10 [ 935.614129][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 935.619518][ C0] rescuer_thread+0x902/0x1490 [ 935.624286][ C0] ? rescuer_thread+0x23d/0x1490 [ 935.629212][ C0] ? rescuer_thread+0x118/0x1490 [ 935.634138][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 935.639330][ C0] ? __kthread_parkme+0x18c/0x230 [ 935.644361][ C0] ? kthread+0x13a/0x450 [ 935.648604][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 935.653817][ C0] kthread+0x370/0x450 [ 935.657876][ C0] ? __pfx_kthread+0x10/0x10 [ 935.662456][ C0] ret_from_fork+0x754/0xd80 [ 935.667037][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.672135][ C0] ? __switch_to+0x7b4/0x1120 [ 935.676809][ C0] ? __pfx_kthread+0x10/0x10 [ 935.681387][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.686147][ C0] [ 938.717378][ C0] net_ratelimit: 6093 callbacks suppressed [ 938.717396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.735966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.749013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.761554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.774076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.786600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.799641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.812175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.824783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.837428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.701209][ C0] net_ratelimit: 8744 callbacks suppressed [ 943.701227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.719547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.732107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.744592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.757673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.770119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.782579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.795509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.808473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.821158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)