last executing test programs: 1m12.547736743s ago: executing program 1 (id=11349): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0xe, 0x0, 0x0) 1m12.259929891s ago: executing program 1 (id=11352): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) 1m12.078853227s ago: executing program 1 (id=11353): mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x1, 0xffffffffffffffff, 0x0) 1m11.941925526s ago: executing program 1 (id=11354): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) madvise$auto(0x108000, 0x2, 0xa) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 1m11.792597199s ago: executing program 1 (id=11357): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) 1m11.431193275s ago: executing program 1 (id=11361): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mprotect$auto(0x200000000000, 0x806121, 0xc) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, 0x0, 0x2a09) 1m10.962032862s ago: executing program 32 (id=11361): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mprotect$auto(0x200000000000, 0x806121, 0xc) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, 0x0, 0x2a09) 9.178903718s ago: executing program 0 (id=12091): unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.570087013s ago: executing program 0 (id=12115): r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x28, 0x2, '/proc/sys/net/gore/rps_defaur\xc4B+\x96\x06\xc3\xa3'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) 3.015152756s ago: executing program 3 (id=12125): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2}) timerfd_settime$auto(0xffffffffffffffff, 0x8, &(0x7f0000000000)={{0x80000000, 0x6}, {0x7fffffff, 0x60fa}}, 0x0) 2.669101049s ago: executing program 3 (id=12126): setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003) ioperm$auto(0x7, 0x6, 0x80) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) 1.921796015s ago: executing program 0 (id=12131): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r0, 0x3, 0x81, @uprobe_multi={0x84, 0x1ff, 0x3d7e, 0x0, 0x1f, 0x4}}, 0x92) 1.917306591s ago: executing program 3 (id=12132): setresgid$auto(0x0, 0x800000a0, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) 1.495274537s ago: executing program 3 (id=12137): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x7) lseek$auto(0x3, 0x8, 0x3) 1.458585068s ago: executing program 4 (id=12138): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd70005641e3a81394531d08000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) 1.375877878s ago: executing program 0 (id=12139): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) io_uring_setup$auto(0xa, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) 1.323498798s ago: executing program 2 (id=12140): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.239994186s ago: executing program 4 (id=12141): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') 1.212449866s ago: executing program 3 (id=12142): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x11, 0x0, &(0x7f0000000000)=0x28000000) 1.202946135s ago: executing program 2 (id=12143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf257a00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) 1.080388659s ago: executing program 4 (id=12144): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'geneve1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1.061719478s ago: executing program 2 (id=12145): socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x2fe) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) 942.285941ms ago: executing program 4 (id=12146): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 939.212324ms ago: executing program 2 (id=12147): socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1021, 0x3) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) 871.37467ms ago: executing program 3 (id=12148): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x5, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x4, 0x8, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x4}, 0x47) 791.820959ms ago: executing program 2 (id=12149): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) 776.88535ms ago: executing program 4 (id=12150): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/max_map_count\x00', 0x80202, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x400000000008) mprotect$auto(0x200000807000, 0x806124, 0x8) 634.017484ms ago: executing program 4 (id=12151): bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_fd, 0x41b5c1ff}, 0x92) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 609.331511ms ago: executing program 2 (id=12152): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x200000000000011, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r0, 0x107, 0x17, 0x0, 0x4) 604.999209ms ago: executing program 0 (id=12153): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 0 (id=12154): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) kernel console output (not intermixed with test programs): 843] total_pgmajfault 1502 [ 632.289724][T30843] total_inactive_anon 0 [ 632.293856][T30843] total_active_anon 1683456 [ 632.343090][T30843] total_inactive_file 0 [ 632.366330][T30843] total_active_file 0 [ 632.370654][T30843] total_unevictable 0 [ 632.409618][T30843] anon_cost 23 [ 632.427038][T30843] file_cost 0 [ 632.439759][T30843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.11530,pid=30842,uid=0 [ 632.543122][T30843] Memory cgroup out of memory: Killed process 30842 (syz.3.11530) total-vm:108180kB, anon-rss:2676kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 633.416811][T30953] netlink: 'syz.4.11583': attribute type 1 has an invalid length. [ 633.705178][T30987] netlink: 29 bytes leftover after parsing attributes in process `syz.0.11587'. [ 634.205936][T30990] syz.0.11590 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 634.292637][T30990] CPU: 0 UID: 0 PID: 30990 Comm: syz.0.11590 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 634.292665][T30990] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 634.292672][T30990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.292680][T30990] Call Trace: [ 634.292686][T30990] [ 634.292692][T30990] dump_stack_lvl+0x16c/0x1f0 [ 634.292717][T30990] dump_header+0x101/0x960 [ 634.292735][T30990] oom_kill_process+0x176/0x910 [ 634.292752][T30990] out_of_memory+0x350/0x1700 [ 634.292767][T30990] ? __lock_acquire+0x436/0x2890 [ 634.292783][T30990] ? __pfx_out_of_memory+0x10/0x10 [ 634.292804][T30990] mem_cgroup_out_of_memory+0x118/0x130 [ 634.292821][T30990] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 634.292841][T30990] ? do_raw_spin_unlock+0x172/0x230 [ 634.292867][T30990] try_charge_memcg+0x695/0xd30 [ 634.292893][T30990] ? __pfx_try_charge_memcg+0x10/0x10 [ 634.292917][T30990] ? find_held_lock+0x2b/0x80 [ 634.292938][T30990] charge_memcg+0x8a/0x230 [ 634.292958][T30990] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 634.292975][T30990] __read_swap_cache_async+0x397/0x500 [ 634.292995][T30990] ? __pfx___read_swap_cache_async+0x10/0x10 [ 634.293011][T30990] ? finish_task_switch.isra.0+0x202/0xbd0 [ 634.293031][T30990] ? rcu_is_watching+0x12/0xc0 [ 634.293050][T30990] ? finish_task_switch.isra.0+0x207/0xbd0 [ 634.293067][T30990] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.293091][T30990] swap_cluster_readahead+0x528/0x770 [ 634.293109][T30990] ? __schedule+0x114c/0x6150 [ 634.293129][T30990] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 634.293147][T30990] ? __lock_acquire+0x436/0x2890 [ 634.293168][T30990] ? get_vma_policy+0x242/0x3c0 [ 634.293183][T30990] swapin_readahead+0x160/0x1220 [ 634.293207][T30990] ? __pfx_swapin_readahead+0x10/0x10 [ 634.293224][T30990] ? find_held_lock+0x2b/0x80 [ 634.293240][T30990] ? swap_cache_get_folio+0x267/0x8e0 [ 634.293255][T30990] ? swap_cache_get_folio+0x267/0x8e0 [ 634.293269][T30990] ? swap_cache_get_folio+0x267/0x8e0 [ 634.293286][T30990] ? swap_cache_get_folio+0x267/0x8e0 [ 634.293301][T30990] ? swap_cache_get_folio+0x293/0x8e0 [ 634.293318][T30990] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 634.293333][T30990] ? __pfx_get_swap_device+0x10/0x10 [ 634.293351][T30990] ? rcu_read_unlock+0x2d/0xb0 [ 634.293371][T30990] ? do_swap_page+0x962/0x64a0 [ 634.293384][T30990] do_swap_page+0x962/0x64a0 [ 634.293400][T30990] ? __lock_acquire+0x436/0x2890 [ 634.293418][T30990] ? __pfx_do_swap_page+0x10/0x10 [ 634.293434][T30990] ? __pfx_default_wake_function+0x10/0x10 [ 634.293457][T30990] ? rcu_is_watching+0x12/0xc0 [ 634.293475][T30990] ? ___pte_offset_map+0x175/0x380 [ 634.293497][T30990] __handle_mm_fault+0x19cb/0x2bb0 [ 634.293514][T30990] ? reacquire_held_locks+0xcd/0x1f0 [ 634.293528][T30990] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.293545][T30990] ? lock_vma_under_rcu+0x176/0x580 [ 634.293565][T30990] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 634.293588][T30990] handle_mm_fault+0x3fe/0xad0 [ 634.293606][T30990] do_user_addr_fault+0x60c/0x1370 [ 634.293624][T30990] ? rcu_is_watching+0x12/0xc0 [ 634.293644][T30990] exc_page_fault+0x64/0xc0 [ 634.293664][T30990] asm_exc_page_fault+0x26/0x30 [ 634.293677][T30990] RIP: 0033:0x7f4912e64cf2 [ 634.293690][T30990] Code: ff 48 89 df 49 89 c4 e8 6c d9 fe ff 4c 89 e6 4c 89 e2 4c 89 e1 48 c1 ee 08 49 89 c0 4c 89 e0 48 c1 ea 10 0f b6 fc 48 c1 e8 20 <48> 0f af 05 8e 09 eb 00 0f b6 d2 48 c1 e9 18 0f b6 c9 4c 01 c0 81 [ 634.293704][T30990] RSP: 002b:00007ffd7f45e890 EFLAGS: 00010246 [ 634.293715][T30990] RAX: 0000000000000000 RBX: 00007ffd7f45e958 RCX: 0000000000000008 [ 634.293724][T30990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.293732][T30990] RBP: 00007ffd7f45ea30 R08: 0000000000000000 R09: 0000000000000000 [ 634.293740][T30990] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 634.293748][T30990] R13: 00007ffd7f45ea38 R14: 0000000000001c92 R15: 0000000000000003 [ 634.293767][T30990] [ 634.293773][T30990] memory: usage 3072kB, limit 3072kB, failcnt 37836 [ 635.691378][T30990] memory+swap: usage 3684kB, limit 9007199254740988kB, failcnt 0 [ 635.725573][T30990] kmem: usage 2160kB, limit 9007199254740988kB, failcnt 0 [ 635.759764][T30990] Memory cgroup stats for /syz0: [ 635.759864][T30990] cache 0 [ 635.807286][T30990] rss 933888 [ 635.830656][T30990] rss_huge 0 [ 635.854202][T30990] shmem 0 [ 635.862519][T30990] mapped_file 0 [ 635.885399][T30990] dirty 0 [ 635.895455][T30990] writeback 0 [ 635.919221][T30990] workingset_refault_anon 3245 [ 635.924006][T30990] workingset_refault_file 9373 [ 635.959446][T30990] swap 626688 [ 635.962928][T30990] swapcached 8192 [ 635.994237][T30990] pgpgin 207231 [ 636.009977][T30990] pgpgout 209560 [ 636.030088][T30990] pgfault 337104 [ 636.033656][T30990] pgmajfault 1438 [ 636.060295][T30990] inactive_anon 0 [ 636.063950][T30990] active_anon 933888 [ 636.095783][T30990] inactive_file 0 [ 636.119369][T30990] active_file 0 [ 636.133196][T30990] unevictable 0 [ 636.158421][T30990] hierarchical_memory_limit 3145728 [ 636.187557][T30990] hierarchical_memsw_limit 9223372036854771712 [ 636.193730][T30990] total_cache 0 [ 636.230136][T30990] total_rss 933888 [ 636.254148][T30990] total_rss_huge 0 [ 636.259283][T30990] total_shmem 0 [ 636.275769][T30990] total_mapped_file 0 [ 636.279774][T30990] total_dirty 0 [ 636.326717][T30990] total_writeback 0 [ 636.330546][T30990] total_workingset_refault_anon 3245 [ 636.376888][T30990] total_workingset_refault_file 9373 [ 636.382197][T30990] total_swap 626688 [ 636.412430][T30990] total_swapcached 8192 [ 636.439649][T30990] total_pgpgin 207231 [ 636.459020][T30990] total_pgpgout 209560 [ 636.478826][T30990] total_pgfault 337104 [ 636.482918][T30990] total_pgmajfault 1438 [ 636.519650][T30990] total_inactive_anon 0 [ 636.542872][T30990] total_active_anon 933888 [ 636.547308][T30990] total_inactive_file 0 [ 636.585321][T30990] total_active_file 0 [ 636.613504][T30990] total_unevictable 0 [ 636.617508][T30990] anon_cost 45 [ 636.655047][T30990] file_cost 0 [ 636.658353][T30990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11590,pid=30990,uid=0 [ 636.731573][T30990] Memory cgroup out of memory: Killed process 30990 (syz.0.11590) total-vm:108180kB, anon-rss:2036kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 636.752007][T31106] FAULT_INJECTION: forcing a failure. [ 636.752007][T31106] name failslab, interval 1, probability 0, space 0, times 0 [ 636.812201][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.4.11618 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 636.812230][T31106] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 636.812237][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.812246][T31106] Call Trace: [ 636.812251][T31106] [ 636.812258][T31106] dump_stack_lvl+0x16c/0x1f0 [ 636.812284][T31106] should_fail_ex+0x512/0x640 [ 636.812299][T31106] ? kmem_cache_alloc_noprof+0x62/0x770 [ 636.812318][T31106] should_failslab+0xc2/0x120 [ 636.812338][T31106] kmem_cache_alloc_noprof+0x83/0x770 [ 636.812354][T31106] ? prepare_creds+0x2c/0x940 [ 636.812373][T31106] ? prepare_creds+0x2c/0x940 [ 636.812386][T31106] prepare_creds+0x2c/0x940 [ 636.812402][T31106] __sys_setuid+0x9a/0x440 [ 636.812420][T31106] do_syscall_64+0xcd/0xf80 [ 636.812441][T31106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.812455][T31106] RIP: 0033:0x7f24e098f7c9 [ 636.812467][T31106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.812480][T31106] RSP: 002b:00007f24e18a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 636.812493][T31106] RAX: ffffffffffffffda RBX: 00007f24e0be5fa0 RCX: 00007f24e098f7c9 [ 636.812502][T31106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 636.812510][T31106] RBP: 00007f24e0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 636.812518][T31106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.812526][T31106] R13: 00007f24e0be6038 R14: 00007f24e0be5fa0 R15: 00007ffc7cb7a368 [ 636.812545][T31106] [ 637.060216][T31023] syz.3.11601 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 637.070255][T31023] CPU: 0 UID: 0 PID: 31023 Comm: syz.3.11601 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 637.070283][T31023] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 637.070290][T31023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.070299][T31023] Call Trace: [ 637.070306][T31023] [ 637.070313][T31023] dump_stack_lvl+0x16c/0x1f0 [ 637.070339][T31023] dump_header+0x101/0x960 [ 637.070357][T31023] oom_kill_process+0x176/0x910 [ 637.070375][T31023] out_of_memory+0x350/0x1700 [ 637.070390][T31023] ? __lock_acquire+0x436/0x2890 [ 637.070406][T31023] ? __pfx_out_of_memory+0x10/0x10 [ 637.070426][T31023] mem_cgroup_out_of_memory+0x118/0x130 [ 637.070444][T31023] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 637.070464][T31023] ? do_raw_spin_unlock+0x172/0x230 [ 637.070483][T31023] try_charge_memcg+0x695/0xd30 [ 637.070508][T31023] ? __pfx_try_charge_memcg+0x10/0x10 [ 637.070529][T31023] ? __print_lock_name+0x51/0xe0 [ 637.070548][T31023] ? rcu_read_unlock+0x17/0x60 [ 637.070565][T31023] charge_memcg+0x8a/0x230 [ 637.070586][T31023] __mem_cgroup_charge+0x2b/0x1e0 [ 637.070601][T31023] do_anonymous_page+0xca9/0x2190 [ 637.070624][T31023] __handle_mm_fault+0x1ecf/0x2bb0 [ 637.070644][T31023] ? __pfx___handle_mm_fault+0x10/0x10 [ 637.070660][T31023] ? __pte_offset_map_lock+0x174/0x310 [ 637.070680][T31023] ? find_held_lock+0x2b/0x80 [ 637.070703][T31023] ? follow_page_pte+0x5cf/0x1390 [ 637.070727][T31023] handle_mm_fault+0x3fe/0xad0 [ 637.070745][T31023] __get_user_pages+0x54e/0x3590 [ 637.070773][T31023] ? __pfx___get_user_pages+0x10/0x10 [ 637.070799][T31023] populate_vma_page_range+0x267/0x3f0 [ 637.070821][T31023] ? __pfx_populate_vma_page_range+0x10/0x10 [ 637.070841][T31023] ? __pfx_find_vma_intersection+0x10/0x10 [ 637.070862][T31023] ? do_mmap+0x69c/0x1210 [ 637.070894][T31023] __mm_populate+0x1d8/0x380 [ 637.070916][T31023] ? __pfx___mm_populate+0x10/0x10 [ 637.070938][T31023] ? up_write+0x282/0x4e0 [ 637.070954][T31023] vm_mmap_pgoff+0x37f/0x470 [ 637.070977][T31023] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 637.070995][T31023] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 637.071014][T31023] ? count_memcg_events+0x122/0x290 [ 637.071035][T31023] ? find_held_lock+0x2b/0x80 [ 637.071054][T31023] ksys_mmap_pgoff+0x7d/0x5c0 [ 637.071077][T31023] __x64_sys_mmap+0x125/0x190 [ 637.071094][T31023] do_syscall_64+0xcd/0xf80 [ 637.071116][T31023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.071130][T31023] RIP: 0033:0x7f867418f7c9 [ 637.071143][T31023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.071157][T31023] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 637.071170][T31023] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 637.071180][T31023] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 637.071188][T31023] RBP: 00007f8674213f91 R08: 0000000000000002 R09: 0000000000008000 [ 637.071197][T31023] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 637.071205][T31023] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 637.071225][T31023] [ 637.071231][T31023] memory: usage 3072kB, limit 3072kB, failcnt 50217 [ 638.104890][T31023] memory+swap: usage 4980kB, limit 9007199254740988kB, failcnt 0 [ 638.174386][T31023] kmem: usage 1400kB, limit 9007199254740988kB, failcnt 0 [ 638.218104][T31023] Memory cgroup stats for /syz3: [ 638.218214][T31023] cache 0 [ 638.280647][T31023] rss 1482752 [ 638.309618][T31023] rss_huge 0 [ 638.331273][T31023] shmem 0 [ 638.365072][T31023] mapped_file 0 [ 638.382347][T31023] dirty 0 [ 638.405763][T31023] writeback 0 [ 638.428511][T31023] workingset_refault_anon 2443 [ 638.463983][T31023] workingset_refault_file 13097 [ 638.495860][T31023] swap 2150400 [ 638.543149][T31023] swapcached 4096 [ 638.573359][T31023] pgpgin 299670 [ 638.577548][T31023] pgpgout 311748 [ 638.612879][T31023] pgfault 320416 [ 638.628995][T31023] pgmajfault 1551 [ 638.652416][T31023] inactive_anon 1404928 [ 638.682936][T31023] active_anon 77824 [ 638.696462][T31023] inactive_file 0 [ 638.730006][T31023] active_file 0 [ 638.746200][T31023] unevictable 0 [ 638.761568][T31023] hierarchical_memory_limit 3145728 [ 638.803339][T31023] hierarchical_memsw_limit 9223372036854771712 [ 638.840906][T31023] total_cache 0 [ 638.862242][T31023] total_rss 1482752 [ 638.884669][T31023] total_rss_huge 0 [ 638.902312][T31023] total_shmem 0 [ 638.930632][T31023] total_mapped_file 0 [ 638.940417][T31023] total_dirty 0 [ 638.948663][T31023] total_writeback 0 [ 638.974564][T31023] total_workingset_refault_anon 2443 [ 638.986670][T31023] total_workingset_refault_file 13097 [ 639.006089][T31023] total_swap 2150400 [ 639.014786][T31023] total_swapcached 4096 [ 639.024499][T31023] total_pgpgin 299670 [ 639.037908][T31023] total_pgpgout 311748 [ 639.052589][T31023] total_pgfault 320416 [ 639.067553][T31023] total_pgmajfault 1551 [ 639.094671][T31023] total_inactive_anon 1404928 [ 639.114512][T31023] total_active_anon 77824 [ 639.128609][T31023] total_inactive_file 0 [ 639.145822][T31023] total_active_file 0 [ 639.159884][T31023] total_unevictable 0 [ 639.173951][T31023] anon_cost 598 [ 639.185143][T31023] file_cost 0 [ 639.200435][T31023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.11601,pid=31018,uid=0 [ 639.249982][T31023] Memory cgroup out of memory: Killed process 31023 (syz.3.11601) total-vm:108180kB, anon-rss:2676kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 639.707662][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11647'. [ 641.340366][T31262] syz.3.11674 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 641.392417][T31262] CPU: 0 UID: 0 PID: 31262 Comm: syz.3.11674 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 641.392446][T31262] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 641.392453][T31262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.392462][T31262] Call Trace: [ 641.392467][T31262] [ 641.392474][T31262] dump_stack_lvl+0x16c/0x1f0 [ 641.392509][T31262] dump_header+0x101/0x960 [ 641.392528][T31262] oom_kill_process+0x176/0x910 [ 641.392545][T31262] out_of_memory+0x350/0x1700 [ 641.392561][T31262] ? __lock_acquire+0x436/0x2890 [ 641.392577][T31262] ? __pfx_out_of_memory+0x10/0x10 [ 641.392598][T31262] mem_cgroup_out_of_memory+0x118/0x130 [ 641.392615][T31262] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 641.392636][T31262] ? do_raw_spin_unlock+0x172/0x230 [ 641.392655][T31262] try_charge_memcg+0x695/0xd30 [ 641.392680][T31262] ? __pfx_try_charge_memcg+0x10/0x10 [ 641.392701][T31262] ? __print_lock_name+0x51/0xe0 [ 641.392719][T31262] ? rcu_read_unlock+0x17/0x60 [ 641.392737][T31262] charge_memcg+0x8a/0x230 [ 641.392758][T31262] __mem_cgroup_charge+0x2b/0x1e0 [ 641.392774][T31262] do_anonymous_page+0xca9/0x2190 [ 641.392796][T31262] __handle_mm_fault+0x1ecf/0x2bb0 [ 641.392816][T31262] ? __pfx___handle_mm_fault+0x10/0x10 [ 641.392832][T31262] ? __pte_offset_map_lock+0x174/0x310 [ 641.392853][T31262] ? find_held_lock+0x2b/0x80 [ 641.392876][T31262] ? follow_page_pte+0x5cf/0x1390 [ 641.392900][T31262] handle_mm_fault+0x3fe/0xad0 [ 641.392919][T31262] __get_user_pages+0x54e/0x3590 [ 641.392947][T31262] ? __pfx___get_user_pages+0x10/0x10 [ 641.392973][T31262] populate_vma_page_range+0x267/0x3f0 [ 641.392995][T31262] ? __pfx_populate_vma_page_range+0x10/0x10 [ 641.393015][T31262] ? __pfx_find_vma_intersection+0x10/0x10 [ 641.393036][T31262] ? do_mmap+0x69c/0x1210 [ 641.393057][T31262] __mm_populate+0x1d8/0x380 [ 641.393079][T31262] ? __pfx___mm_populate+0x10/0x10 [ 641.393101][T31262] ? up_write+0x282/0x4e0 [ 641.393118][T31262] vm_mmap_pgoff+0x37f/0x470 [ 641.393140][T31262] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 641.393159][T31262] ? find_held_lock+0x2b/0x80 [ 641.393179][T31262] ? __x64_sys_futex+0x1e0/0x4c0 [ 641.393194][T31262] ? __x64_sys_futex+0x1e9/0x4c0 [ 641.393212][T31262] ksys_mmap_pgoff+0x7d/0x5c0 [ 641.393230][T31262] ? xfd_validate_state+0x61/0x180 [ 641.393246][T31262] __x64_sys_mmap+0x125/0x190 [ 641.393263][T31262] do_syscall_64+0xcd/0xf80 [ 641.393285][T31262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.393300][T31262] RIP: 0033:0x7f867418f7c9 [ 641.393313][T31262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.393326][T31262] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.393340][T31262] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 641.393349][T31262] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 641.393358][T31262] RBP: 00007f8674213f91 R08: 0000000000000002 R09: 0000000000008000 [ 641.393366][T31262] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 641.393374][T31262] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 641.393394][T31262] [ 641.393400][T31262] memory: usage 3072kB, limit 3072kB, failcnt 50403 [ 641.829836][T31262] memory+swap: usage 3552kB, limit 9007199254740988kB, failcnt 0 [ 641.838725][T31262] kmem: usage 1472kB, limit 9007199254740988kB, failcnt 0 [ 641.848349][T31262] Memory cgroup stats for /syz3: [ 641.848445][T31262] cache 0 [ 641.857246][T31262] rss 1617920 [ 641.860590][T31262] rss_huge 0 [ 641.863771][T31262] shmem 0 [ 641.867327][T31262] mapped_file 0 [ 641.870850][T31262] dirty 0 [ 641.873775][T31262] writeback 0 [ 641.877647][T31262] workingset_refault_anon 2460 [ 641.882516][T31262] workingset_refault_file 13117 [ 641.889096][T31262] swap 491520 [ 641.892404][T31262] swapcached 0 [ 641.896286][T31262] pgpgin 300431 [ 641.899737][T31262] pgpgout 312476 [ 641.903273][T31262] pgfault 321737 [ 641.908840][T31262] pgmajfault 1558 [ 641.912472][T31262] inactive_anon 0 [ 641.917558][T31262] active_anon 1617920 [ 641.921612][T31262] inactive_file 0 [ 641.926559][T31262] active_file 0 [ 641.930012][T31262] unevictable 0 [ 641.933964][T31262] hierarchical_memory_limit 3145728 [ 641.941500][T31262] hierarchical_memsw_limit 9223372036854771712 [ 641.947887][T31262] total_cache 0 [ 641.951419][T31262] total_rss 1617920 [ 641.955572][T31262] total_rss_huge 0 [ 641.959383][T31262] total_shmem 0 [ 641.962835][T31262] total_mapped_file 0 [ 641.967293][T31262] total_dirty 0 [ 641.970822][T31262] total_writeback 0 [ 641.975101][T31262] total_workingset_refault_anon 2460 [ 641.980413][T31262] total_workingset_refault_file 13117 [ 641.987452][T31262] total_swap 491520 [ 641.991257][T31262] total_swapcached 0 [ 641.995581][T31262] total_pgpgin 300431 [ 641.999648][T31262] total_pgpgout 312476 [ 642.003709][T31262] total_pgfault 321737 [ 642.008860][T31262] total_pgmajfault 1558 [ 642.013148][T31262] total_inactive_anon 0 [ 642.018817][T31262] total_active_anon 1617920 [ 642.023427][T31262] total_inactive_file 0 [ 642.028970][T31262] total_active_file 0 [ 642.033031][T31262] total_unevictable 0 [ 642.037970][T31262] anon_cost 23 [ 642.041332][T31262] file_cost 0 [ 642.045071][T31262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.11674,pid=31256,uid=0 [ 642.060376][T31262] Memory cgroup out of memory: Killed process 31256 (syz.3.11674) total-vm:106132kB, anon-rss:2676kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 642.509461][T31318] netlink: 206 bytes leftover after parsing attributes in process `syz.4.11688'. [ 644.218739][T31377] syz.0.11716 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 644.254705][T31377] CPU: 0 UID: 0 PID: 31377 Comm: syz.0.11716 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 644.254733][T31377] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 644.254740][T31377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.254748][T31377] Call Trace: [ 644.254754][T31377] [ 644.254760][T31377] dump_stack_lvl+0x16c/0x1f0 [ 644.254787][T31377] dump_header+0x101/0x960 [ 644.254806][T31377] oom_kill_process+0x176/0x910 [ 644.254823][T31377] out_of_memory+0x350/0x1700 [ 644.254838][T31377] ? __lock_acquire+0x436/0x2890 [ 644.254855][T31377] ? __pfx_out_of_memory+0x10/0x10 [ 644.254879][T31377] mem_cgroup_out_of_memory+0x118/0x130 [ 644.254896][T31377] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 644.254917][T31377] ? do_raw_spin_unlock+0x172/0x230 [ 644.254935][T31377] try_charge_memcg+0x695/0xd30 [ 644.254960][T31377] ? __pfx_try_charge_memcg+0x10/0x10 [ 644.254981][T31377] ? __print_lock_name+0x51/0xe0 [ 644.255007][T31377] ? rcu_read_unlock+0x17/0x60 [ 644.255025][T31377] charge_memcg+0x8a/0x230 [ 644.255049][T31377] __mem_cgroup_charge+0x2b/0x1e0 [ 644.255064][T31377] do_anonymous_page+0xca9/0x2190 [ 644.255087][T31377] __handle_mm_fault+0x1ecf/0x2bb0 [ 644.255106][T31377] ? __pfx___handle_mm_fault+0x10/0x10 [ 644.255122][T31377] ? __pte_offset_map_lock+0x174/0x310 [ 644.255142][T31377] ? find_held_lock+0x2b/0x80 [ 644.255165][T31377] ? follow_page_pte+0x5cf/0x1390 [ 644.255188][T31377] handle_mm_fault+0x3fe/0xad0 [ 644.255206][T31377] __get_user_pages+0x54e/0x3590 [ 644.255234][T31377] ? __pfx___get_user_pages+0x10/0x10 [ 644.255260][T31377] populate_vma_page_range+0x267/0x3f0 [ 644.255281][T31377] ? __pfx_populate_vma_page_range+0x10/0x10 [ 644.255301][T31377] ? __pfx_find_vma_intersection+0x10/0x10 [ 644.255322][T31377] ? do_mmap+0x69c/0x1210 [ 644.255342][T31377] __mm_populate+0x1d8/0x380 [ 644.255364][T31377] ? __pfx___mm_populate+0x10/0x10 [ 644.255386][T31377] ? up_write+0x282/0x4e0 [ 644.255403][T31377] vm_mmap_pgoff+0x37f/0x470 [ 644.255425][T31377] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 644.255443][T31377] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 644.255462][T31377] ? count_memcg_events+0x122/0x290 [ 644.255483][T31377] ? find_held_lock+0x2b/0x80 [ 644.255502][T31377] ksys_mmap_pgoff+0x7d/0x5c0 [ 644.255524][T31377] __x64_sys_mmap+0x125/0x190 [ 644.255542][T31377] do_syscall_64+0xcd/0xf80 [ 644.255564][T31377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.255578][T31377] RIP: 0033:0x7f4912f8f7c9 [ 644.255591][T31377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.255604][T31377] RSP: 002b:00007f4913d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 644.255618][T31377] RAX: ffffffffffffffda RBX: 00007f49131e5fa0 RCX: 00007f4912f8f7c9 [ 644.255628][T31377] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 644.255636][T31377] RBP: 00007f4913013f91 R08: 0000000000000002 R09: 0000000000008000 [ 644.255645][T31377] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 644.255653][T31377] R13: 00007f49131e6038 R14: 00007f49131e5fa0 R15: 00007ffd7f45e728 [ 644.255673][T31377] [ 644.256827][T31377] memory: usage 3072kB, limit 3072kB, failcnt 39118 [ 645.069618][T31377] memory+swap: usage 4464kB, limit 9007199254740988kB, failcnt 0 [ 645.109745][T31377] kmem: usage 2176kB, limit 9007199254740988kB, failcnt 0 [ 645.116966][T31377] Memory cgroup stats for /syz0: [ 645.117069][T31377] cache 0 [ 645.190606][T31377] rss 917504 [ 645.200681][T31377] rss_huge 0 [ 645.203912][T31377] shmem 0 [ 645.242159][T31377] mapped_file 0 [ 645.257667][T31377] dirty 0 [ 645.260642][T31377] writeback 0 [ 645.313401][T31377] workingset_refault_anon 3329 [ 645.332994][T31377] workingset_refault_file 9373 [ 645.364205][T31377] swap 1425408 [ 645.396829][T31377] swapcached 8192 [ 645.400488][T31377] pgpgin 209695 [ 645.449990][T31377] pgpgout 212028 [ 645.453560][T31377] pgfault 341573 [ 645.478408][T31377] pgmajfault 1484 [ 645.482069][T31377] inactive_anon 0 [ 645.485680][T31377] active_anon 917504 [ 645.526651][T31377] inactive_file 0 [ 645.548525][T31377] active_file 0 [ 645.566372][T31377] unevictable 0 [ 645.569866][T31377] hierarchical_memory_limit 3145728 [ 645.613831][T31377] hierarchical_memsw_limit 9223372036854771712 [ 645.632463][T31377] total_cache 0 [ 645.660673][T31377] total_rss 917504 [ 645.670370][T31377] total_rss_huge 0 [ 645.695440][T31377] total_shmem 0 [ 645.698920][T31377] total_mapped_file 0 [ 645.702902][T31377] total_dirty 0 [ 645.756553][T31377] total_writeback 0 [ 645.774385][T31377] total_workingset_refault_anon 3329 [ 645.805147][T31377] total_workingset_refault_file 9373 [ 645.810452][T31377] total_swap 1425408 [ 645.841130][T31377] total_swapcached 8192 [ 645.864616][T31377] total_pgpgin 209695 [ 645.887279][T31377] total_pgpgout 212028 [ 645.904314][T31377] total_pgfault 341573 [ 645.908401][T31377] total_pgmajfault 1484 [ 645.912546][T31377] total_inactive_anon 0 [ 645.970733][T31377] total_active_anon 917504 [ 645.993859][T31377] total_inactive_file 0 [ 645.998076][T31377] total_active_file 0 [ 646.029231][T31377] total_unevictable 0 [ 646.033242][T31377] anon_cost 9 [ 646.054114][T31377] file_cost 0 [ 646.057439][T31377] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11716,pid=31375,uid=0 [ 646.136939][T31377] Memory cgroup out of memory: Killed process 31375 (syz.0.11716) total-vm:108180kB, anon-rss:2036kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 646.718936][T31467] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11747'. [ 647.248472][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11759'. [ 647.790968][T31552] bridge_slave_1: left allmulticast mode [ 647.813399][T31552] bridge_slave_1: left promiscuous mode [ 647.853385][T31552] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.018684][T31558] syz_tun: tun_chr_ioctl cmd 1074025681 [ 648.418686][T31582] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 648.893893][T31606] FAULT_INJECTION: forcing a failure. [ 648.893893][T31606] name failslab, interval 1, probability 0, space 0, times 0 [ 648.907109][T31606] CPU: 0 UID: 0 PID: 31606 Comm: syz.4.11780 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 648.907138][T31606] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 648.907145][T31606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.907155][T31606] Call Trace: [ 648.907160][T31606] [ 648.907166][T31606] dump_stack_lvl+0x16c/0x1f0 [ 648.907193][T31606] should_fail_ex+0x512/0x640 [ 648.907213][T31606] should_failslab+0xc2/0x120 [ 648.907235][T31606] __kmalloc_cache_noprof+0x80/0x800 [ 648.907251][T31606] ? report_access+0x100/0x550 [ 648.907272][T31606] ? report_access+0x100/0x550 [ 648.907288][T31606] report_access+0x100/0x550 [ 648.907307][T31606] yama_ptrace_access_check+0x589/0xd10 [ 648.907327][T31606] security_ptrace_access_check+0xb2/0x210 [ 648.907349][T31606] __ptrace_may_access+0x498/0x940 [ 648.907370][T31606] ptrace_attach+0x24f/0x6c0 [ 648.907389][T31606] __x64_sys_ptrace+0x25c/0x2a0 [ 648.907408][T31606] do_syscall_64+0xcd/0xf80 [ 648.907429][T31606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.907443][T31606] RIP: 0033:0x7f24e098f7c9 [ 648.907455][T31606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.907469][T31606] RSP: 002b:00007f24e18a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 648.907483][T31606] RAX: ffffffffffffffda RBX: 00007f24e0be5fa0 RCX: 00007f24e098f7c9 [ 648.907492][T31606] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 648.907500][T31606] RBP: 00007f24e0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.907508][T31606] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 648.907516][T31606] R13: 00007f24e0be6038 R14: 00007f24e0be5fa0 R15: 00007ffc7cb7a368 [ 648.907534][T31606] [ 649.383539][T31612] syz.0.11781 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 649.441194][T31612] CPU: 0 UID: 0 PID: 31612 Comm: syz.0.11781 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 649.441222][T31612] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 649.441229][T31612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.441238][T31612] Call Trace: [ 649.441243][T31612] [ 649.441249][T31612] dump_stack_lvl+0x16c/0x1f0 [ 649.441274][T31612] dump_header+0x101/0x960 [ 649.441293][T31612] oom_kill_process+0x176/0x910 [ 649.441310][T31612] out_of_memory+0x350/0x1700 [ 649.441325][T31612] ? __lock_acquire+0x436/0x2890 [ 649.441341][T31612] ? __pfx_out_of_memory+0x10/0x10 [ 649.441361][T31612] mem_cgroup_out_of_memory+0x118/0x130 [ 649.441378][T31612] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 649.441398][T31612] ? do_raw_spin_unlock+0x172/0x230 [ 649.441417][T31612] try_charge_memcg+0x695/0xd30 [ 649.441441][T31612] ? __pfx_try_charge_memcg+0x10/0x10 [ 649.441466][T31612] ? find_held_lock+0x2b/0x80 [ 649.441486][T31612] charge_memcg+0x8a/0x230 [ 649.441507][T31612] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 649.441524][T31612] __read_swap_cache_async+0x397/0x500 [ 649.441549][T31612] ? __pfx___read_swap_cache_async+0x10/0x10 [ 649.441566][T31612] ? finish_task_switch.isra.0+0x202/0xbd0 [ 649.441586][T31612] ? rcu_is_watching+0x12/0xc0 [ 649.441605][T31612] ? finish_task_switch.isra.0+0x207/0xbd0 [ 649.441623][T31612] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.441645][T31612] swap_cluster_readahead+0x432/0x770 [ 649.441666][T31612] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 649.441685][T31612] ? __lock_acquire+0x436/0x2890 [ 649.441706][T31612] ? get_vma_policy+0x242/0x3c0 [ 649.441721][T31612] swapin_readahead+0x160/0x1220 [ 649.441745][T31612] ? __pfx_swapin_readahead+0x10/0x10 [ 649.441762][T31612] ? find_held_lock+0x2b/0x80 [ 649.441777][T31612] ? swap_cache_get_folio+0x267/0x8e0 [ 649.441792][T31612] ? swap_cache_get_folio+0x267/0x8e0 [ 649.441807][T31612] ? swap_cache_get_folio+0x267/0x8e0 [ 649.441824][T31612] ? swap_cache_get_folio+0x267/0x8e0 [ 649.441839][T31612] ? swap_cache_get_folio+0x293/0x8e0 [ 649.441856][T31612] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 649.441870][T31612] ? __pfx_get_swap_device+0x10/0x10 [ 649.441889][T31612] ? rcu_read_unlock+0x2d/0xb0 [ 649.441908][T31612] ? do_swap_page+0x962/0x64a0 [ 649.441921][T31612] do_swap_page+0x962/0x64a0 [ 649.441937][T31612] ? __lock_acquire+0x436/0x2890 [ 649.441955][T31612] ? __pfx_do_swap_page+0x10/0x10 [ 649.441970][T31612] ? __pfx_default_wake_function+0x10/0x10 [ 649.441995][T31612] ? rcu_is_watching+0x12/0xc0 [ 649.442013][T31612] ? ___pte_offset_map+0x175/0x380 [ 649.442034][T31612] __handle_mm_fault+0x19cb/0x2bb0 [ 649.442052][T31612] ? reacquire_held_locks+0xcd/0x1f0 [ 649.442066][T31612] ? __pfx___handle_mm_fault+0x10/0x10 [ 649.442083][T31612] ? lock_vma_under_rcu+0x176/0x580 [ 649.442103][T31612] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 649.442127][T31612] handle_mm_fault+0x3fe/0xad0 [ 649.442145][T31612] do_user_addr_fault+0x60c/0x1370 [ 649.442163][T31612] ? rcu_is_watching+0x12/0xc0 [ 649.442183][T31612] exc_page_fault+0x64/0xc0 [ 649.442202][T31612] asm_exc_page_fault+0x26/0x30 [ 649.442216][T31612] RIP: 0033:0x7f4912e65472 [ 649.442228][T31612] Code: 24 f0 00 00 00 48 69 d2 e8 03 00 00 48 29 d1 ba 80 00 00 00 48 69 c9 40 42 0f 00 48 89 8c 24 f8 00 00 00 31 c9 e8 3e a3 12 00 <41> 8b 04 24 85 c0 0f 84 52 ff ff ff 4c 8b 6c 24 60 4c 8b 44 24 40 [ 649.442241][T31612] RSP: 002b:00007ffd7f45e890 EFLAGS: 00010286 [ 649.442253][T31612] RAX: ffffffffffffffff RBX: 000000000009f123 RCX: ffffffffffffffa8 [ 649.442262][T31612] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49131e5fac [ 649.442271][T31612] RBP: 0000000000000032 R08: 00007f4913d82000 R09: 000000027f45eb7f [ 649.442279][T31612] R10: 00007ffd7f45e980 R11: 0000000000000246 R12: 00007f49131e5fac [ 649.442288][T31612] R13: 00007ffd7f45e980 R14: 000000000009f155 R15: 00007ffd7f45e9a0 [ 649.442307][T31612] [ 649.442313][T31612] memory: usage 3072kB, limit 3072kB, failcnt 39266 [ 650.599126][T31612] memory+swap: usage 3512kB, limit 9007199254740988kB, failcnt 0 [ 650.629973][T31612] kmem: usage 2752kB, limit 9007199254740988kB, failcnt 0 [ 650.667261][T31612] Memory cgroup stats for /syz0: [ 650.667367][T31612] cache 0 [ 650.699295][T31612] rss 8192 [ 650.702375][T31612] rss_huge 0 [ 650.705582][T31612] shmem 0 [ 650.708503][T31612] mapped_file 0 [ 650.771172][T31612] dirty 0 [ 650.774137][T31612] writeback 8192 [ 650.777673][T31612] workingset_refault_anon 3371 [ 650.838493][T31612] workingset_refault_file 9373 [ 650.858430][T31612] swap 716800 [ 650.861790][T31612] swapcached 8192 [ 650.865406][T31612] pgpgin 210131 [ 650.916312][T31612] pgpgout 212686 [ 650.931001][T31612] pgfault 342951 [ 650.934689][T31612] pgmajfault 1514 [ 650.968749][T31612] inactive_anon 0 [ 650.983183][T31612] active_anon 0 [ 650.996811][T31612] inactive_file 0 [ 651.018924][T31612] active_file 0 [ 651.029742][T31612] unevictable 0 [ 651.033240][T31612] hierarchical_memory_limit 3145728 [ 651.076297][T31612] hierarchical_memsw_limit 9223372036854771712 [ 651.098439][T31612] total_cache 0 [ 651.101927][T31612] total_rss 8192 [ 651.105454][T31612] total_rss_huge 0 [ 651.151883][T31612] total_shmem 0 [ 651.177020][T31612] total_mapped_file 0 [ 651.181082][T31612] total_dirty 0 [ 651.184521][T31612] total_writeback 8192 [ 651.227475][T31612] total_workingset_refault_anon 3371 [ 651.251885][T31612] total_workingset_refault_file 9373 [ 651.279022][T31612] total_swap 716800 [ 651.282874][T31612] total_swapcached 8192 [ 651.324289][T31612] total_pgpgin 210131 [ 651.334507][T31612] total_pgpgout 212686 [ 651.362319][T31612] total_pgfault 342951 [ 651.376327][T31612] total_pgmajfault 1514 [ 651.395615][T31612] total_inactive_anon 0 [ 651.399901][T31612] total_active_anon 0 [ 651.403862][T31612] total_inactive_file 0 [ 651.456965][T31612] total_active_file 0 [ 651.480719][T31612] total_unevictable 0 [ 651.484723][T31612] anon_cost 31 [ 651.513103][T31612] file_cost 0 [ 651.519130][T31680] tc_dump_action: action bad kind [ 651.524278][T31612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11781,pid=31612,uid=0 [ 651.596472][T31612] Memory cgroup out of memory: Killed process 31612 (syz.0.11781) total-vm:104080kB, anon-rss:1268kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 652.541007][T31720] ptrace attach of "./syz-executor exec"[6136] was attempted by ""[31720] [ 653.308891][T31739] syz.0.11840 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 653.376282][T31739] CPU: 0 UID: 0 PID: 31739 Comm: syz.0.11840 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 653.376310][T31739] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 653.376317][T31739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.376326][T31739] Call Trace: [ 653.376331][T31739] [ 653.376338][T31739] dump_stack_lvl+0x16c/0x1f0 [ 653.376363][T31739] dump_header+0x101/0x960 [ 653.376382][T31739] oom_kill_process+0x176/0x910 [ 653.376399][T31739] out_of_memory+0x350/0x1700 [ 653.376415][T31739] ? __lock_acquire+0x436/0x2890 [ 653.376432][T31739] ? __pfx_out_of_memory+0x10/0x10 [ 653.376452][T31739] mem_cgroup_out_of_memory+0x118/0x130 [ 653.376470][T31739] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 653.376490][T31739] ? do_raw_spin_unlock+0x172/0x230 [ 653.376510][T31739] try_charge_memcg+0x695/0xd30 [ 653.376535][T31739] ? __pfx_try_charge_memcg+0x10/0x10 [ 653.376555][T31739] ? __print_lock_name+0x51/0xe0 [ 653.376574][T31739] ? rcu_read_unlock+0x17/0x60 [ 653.376592][T31739] charge_memcg+0x8a/0x230 [ 653.376612][T31739] __mem_cgroup_charge+0x2b/0x1e0 [ 653.376627][T31739] do_anonymous_page+0xca9/0x2190 [ 653.376650][T31739] __handle_mm_fault+0x1ecf/0x2bb0 [ 653.376670][T31739] ? __pfx___handle_mm_fault+0x10/0x10 [ 653.376685][T31739] ? __pte_offset_map_lock+0x174/0x310 [ 653.376705][T31739] ? find_held_lock+0x2b/0x80 [ 653.376728][T31739] ? follow_page_pte+0x5cf/0x1390 [ 653.376753][T31739] handle_mm_fault+0x3fe/0xad0 [ 653.376771][T31739] __get_user_pages+0x54e/0x3590 [ 653.376799][T31739] ? __pfx___get_user_pages+0x10/0x10 [ 653.376824][T31739] populate_vma_page_range+0x267/0x3f0 [ 653.376847][T31739] ? __pfx_populate_vma_page_range+0x10/0x10 [ 653.376867][T31739] ? __pfx_find_vma_intersection+0x10/0x10 [ 653.376888][T31739] ? do_mmap+0x69c/0x1210 [ 653.376908][T31739] __mm_populate+0x1d8/0x380 [ 653.376933][T31739] ? __pfx___mm_populate+0x10/0x10 [ 653.376955][T31739] ? up_write+0x282/0x4e0 [ 653.376972][T31739] vm_mmap_pgoff+0x37f/0x470 [ 653.376994][T31739] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 653.377012][T31739] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 653.377031][T31739] ? count_memcg_events+0x122/0x290 [ 653.377052][T31739] ? find_held_lock+0x2b/0x80 [ 653.377071][T31739] ksys_mmap_pgoff+0x7d/0x5c0 [ 653.377094][T31739] __x64_sys_mmap+0x125/0x190 [ 653.377112][T31739] do_syscall_64+0xcd/0xf80 [ 653.377141][T31739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.377155][T31739] RIP: 0033:0x7f4912f8f7c9 [ 653.377168][T31739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.377181][T31739] RSP: 002b:00007f4913d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 653.377195][T31739] RAX: ffffffffffffffda RBX: 00007f49131e5fa0 RCX: 00007f4912f8f7c9 [ 653.377204][T31739] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 653.377212][T31739] RBP: 00007f4913013f91 R08: 0000000000000002 R09: 0000000000008000 [ 653.377221][T31739] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 653.377229][T31739] R13: 00007f49131e6038 R14: 00007f49131e5fa0 R15: 00007ffd7f45e728 [ 653.377249][T31739] [ 653.377279][T31739] memory: usage 3072kB, limit 3072kB, failcnt 40129 [ 653.954403][T31709] kexec: Could not allocate control_code_buffer [ 654.047404][T31777] bridge0: port 3(dummy0) entered blocking state [ 654.057432][T31777] bridge0: port 3(dummy0) entered disabled state [ 654.067614][T31777] dummy0: entered allmulticast mode [ 654.078673][T31777] dummy0: entered promiscuous mode [ 654.088153][T31777] bridge0: port 3(dummy0) entered blocking state [ 654.094681][T31777] bridge0: port 3(dummy0) entered forwarding state [ 654.509065][T31739] memory+swap: usage 3632kB, limit 9007199254740988kB, failcnt 0 [ 654.544904][T31789] zswap: compressor not available [ 654.568500][T31739] kmem: usage 2164kB, limit 9007199254740988kB, failcnt 0 [ 654.598933][T31739] Memory cgroup stats for /syz0: [ 654.599042][T31739] cache 4096 [ 654.637689][T31739] rss 876544 [ 654.642229][T31739] rss_huge 0 [ 654.645428][T31739] shmem 4096 [ 654.670885][T31739] mapped_file 0 [ 654.680925][T31739] dirty 0 [ 654.683888][T31739] writeback 0 [ 654.718621][T31739] workingset_refault_anon 3499 [ 654.739549][T31739] workingset_refault_file 9597 [ 654.777870][T31739] swap 622592 [ 654.783849][T31739] swapcached 20480 [ 654.787575][T31739] pgpgin 211193 [ 654.810869][T31739] pgpgout 213535 [ 654.826816][T31739] pgfault 343837 [ 654.842589][T31739] pgmajfault 1633 [ 654.867227][T31739] inactive_anon 0 [ 654.881398][T31739] active_anon 880640 [ 654.885322][T31739] inactive_file 0 [ 654.911195][T31739] active_file 0 [ 654.914679][T31739] unevictable 0 [ 654.941407][T31739] hierarchical_memory_limit 3145728 [ 654.971366][T31739] hierarchical_memsw_limit 9223372036854771712 [ 654.998731][T31739] total_cache 4096 [ 655.012867][T31739] total_rss 876544 [ 655.030861][T31739] total_rss_huge 0 [ 655.046884][T31739] total_shmem 4096 [ 655.062482][T31739] total_mapped_file 0 [ 655.083806][T31739] total_dirty 0 [ 655.097889][T31739] total_writeback 0 [ 655.101716][T31739] total_workingset_refault_anon 3499 [ 655.144738][T31739] total_workingset_refault_file 9597 [ 655.165378][T31739] total_swap 622592 [ 655.190154][T31739] total_swapcached 20480 [ 655.210355][T31739] total_pgpgin 211193 [ 655.214357][T31739] total_pgpgout 213535 [ 655.250383][T31739] total_pgfault 343837 [ 655.254469][T31739] total_pgmajfault 1633 [ 655.291645][T31739] total_inactive_anon 0 [ 655.303548][T31739] total_active_anon 880640 [ 655.331773][T31739] total_inactive_file 0 [ 655.347617][T31739] total_active_file 0 [ 655.375102][T31739] total_unevictable 0 [ 655.379141][T31739] anon_cost 35 [ 655.382581][T31739] file_cost 0 [ 655.406270][T31739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11840,pid=31736,uid=0 [ 655.456597][T31739] Memory cgroup out of memory: Killed process 31736 (syz.0.11840) total-vm:108180kB, anon-rss:1908kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 656.664497][T31862] tipc: Started in network mode [ 656.682834][T31862] tipc: Node identity ee00, cluster identity 4711 [ 656.704888][T31862] tipc: Node number set to 60928 [ 657.863058][T31929] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11905'. [ 658.057552][T31940] bridge0: port 3(gretap0) entered blocking state [ 658.066288][T31940] bridge0: port 3(gretap0) entered disabled state [ 658.076030][T31940] gretap0: entered allmulticast mode [ 658.089674][T31940] gretap0: entered promiscuous mode [ 658.118834][T31940] bridge0: port 3(gretap0) entered blocking state [ 658.125431][T31940] bridge0: port 3(gretap0) entered forwarding state [ 659.932048][T32017] sctp: [Deprecated]: syz.3.11933 (pid 32017) Use of int in maxseg socket option. [ 659.932048][T32017] Use struct sctp_assoc_value instead [ 660.317438][T32030] syz.3.11937 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 660.345562][T32036] overlayfs: missing 'lowerdir' [ 660.377400][T32030] CPU: 0 UID: 0 PID: 32030 Comm: syz.3.11937 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 660.377426][T32030] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 660.377432][T32030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.377441][T32030] Call Trace: [ 660.377447][T32030] [ 660.377453][T32030] dump_stack_lvl+0x16c/0x1f0 [ 660.377478][T32030] dump_header+0x101/0x960 [ 660.377497][T32030] oom_kill_process+0x176/0x910 [ 660.377514][T32030] out_of_memory+0x350/0x1700 [ 660.377530][T32030] ? __lock_acquire+0x436/0x2890 [ 660.377546][T32030] ? __pfx_out_of_memory+0x10/0x10 [ 660.377567][T32030] mem_cgroup_out_of_memory+0x118/0x130 [ 660.377584][T32030] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 660.377604][T32030] ? do_raw_spin_unlock+0x172/0x230 [ 660.377624][T32030] try_charge_memcg+0x695/0xd30 [ 660.377648][T32030] ? __pfx_try_charge_memcg+0x10/0x10 [ 660.377668][T32030] ? __print_lock_name+0x51/0xe0 [ 660.377687][T32030] ? rcu_read_unlock+0x17/0x60 [ 660.377705][T32030] charge_memcg+0x8a/0x230 [ 660.377725][T32030] __mem_cgroup_charge+0x2b/0x1e0 [ 660.377740][T32030] do_anonymous_page+0xca9/0x2190 [ 660.377762][T32030] __handle_mm_fault+0x1ecf/0x2bb0 [ 660.377790][T32030] ? __pfx___handle_mm_fault+0x10/0x10 [ 660.377806][T32030] ? __pte_offset_map_lock+0x174/0x310 [ 660.377826][T32030] ? find_held_lock+0x2b/0x80 [ 660.377849][T32030] ? follow_page_pte+0x5cf/0x1390 [ 660.377874][T32030] handle_mm_fault+0x3fe/0xad0 [ 660.377892][T32030] __get_user_pages+0x54e/0x3590 [ 660.377920][T32030] ? __pfx___get_user_pages+0x10/0x10 [ 660.377946][T32030] populate_vma_page_range+0x267/0x3f0 [ 660.377968][T32030] ? __pfx_populate_vma_page_range+0x10/0x10 [ 660.377988][T32030] ? __pfx_find_vma_intersection+0x10/0x10 [ 660.378008][T32030] ? do_mmap+0x69c/0x1210 [ 660.378029][T32030] __mm_populate+0x1d8/0x380 [ 660.378051][T32030] ? __pfx___mm_populate+0x10/0x10 [ 660.378073][T32030] ? up_write+0x282/0x4e0 [ 660.378089][T32030] vm_mmap_pgoff+0x37f/0x470 [ 660.378111][T32030] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 660.378130][T32030] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 660.378148][T32030] ? count_memcg_events+0x122/0x290 [ 660.378170][T32030] ? find_held_lock+0x2b/0x80 [ 660.378189][T32030] ksys_mmap_pgoff+0x7d/0x5c0 [ 660.378212][T32030] __x64_sys_mmap+0x125/0x190 [ 660.378229][T32030] do_syscall_64+0xcd/0xf80 [ 660.378251][T32030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.378266][T32030] RIP: 0033:0x7f867418f7c9 [ 660.378278][T32030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.378293][T32030] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 660.378307][T32030] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 660.378317][T32030] RDX: 00000000000800df RSI: 0000000000400008 RDI: 0000000000000000 [ 660.378325][T32030] RBP: 00007f8674213f91 R08: fffffffffffffffe R09: 0000000000008000 [ 660.378334][T32030] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 660.378342][T32030] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 660.378362][T32030] [ 660.378368][T32030] memory: usage 3072kB, limit 3072kB, failcnt 53166 [ 661.186239][T32064] ovs_: entered promiscuous mode [ 661.347050][T32030] memory+swap: usage 3456kB, limit 9007199254740988kB, failcnt 0 [ 661.385554][T32030] kmem: usage 1624kB, limit 9007199254740988kB, failcnt 0 [ 661.424927][T32030] Memory cgroup stats for /syz3: [ 661.425026][T32030] cache 0 [ 661.432877][T32030] rss 1482752 [ 661.467386][T32030] rss_huge 0 [ 661.477489][T32030] shmem 0 [ 661.480451][T32030] mapped_file 0 [ 661.513238][T32030] dirty 0 [ 661.516210][T32030] writeback 0 [ 661.519476][T32030] workingset_refault_anon 2776 [ 661.566194][T32030] workingset_refault_file 14110 [ 661.583416][T32030] swap 393216 [ 661.586813][T32030] swapcached 0 [ 661.590165][T32030] pgpgin 307379 [ 661.632509][T32030] pgpgout 319944 [ 661.642632][T32030] pgfault 333328 [ 661.646208][T32030] pgmajfault 1784 [ 661.684198][T32030] inactive_anon 0 [ 661.688166][T32030] active_anon 1482752 [ 661.717214][T32030] inactive_file 0 [ 661.720960][T32030] active_file 0 [ 661.745561][T32030] unevictable 0 [ 661.771351][T32030] hierarchical_memory_limit 3145728 [ 661.792069][T32030] hierarchical_memsw_limit 9223372036854771712 [ 661.821348][T32030] total_cache 0 [ 661.824833][T32030] total_rss 1482752 [ 661.828622][T32030] total_rss_huge 0 [ 661.883860][T32030] total_shmem 0 [ 661.893932][T32030] total_mapped_file 0 [ 661.915155][T32030] total_dirty 0 [ 661.929371][T32030] total_writeback 0 [ 661.950961][T32030] total_workingset_refault_anon 2776 [ 661.983226][T32030] total_workingset_refault_file 14110 [ 661.988646][T32030] total_swap 393216 [ 662.019538][T32030] total_swapcached 0 [ 662.040244][T32030] total_pgpgin 307379 [ 662.044251][T32030] total_pgpgout 319944 [ 662.077565][T32030] total_pgfault 333328 [ 662.119257][T32030] total_pgmajfault 1784 [ 662.125115][T32030] total_inactive_anon 0 [ 662.129259][T32030] total_active_anon 1482752 [ 662.158515][T32030] total_inactive_file 0 [ 662.179786][T32030] total_active_file 0 [ 662.183787][T32030] total_unevictable 0 [ 662.213811][T32030] anon_cost 41 [ 662.233088][T32030] file_cost 0 [ 662.236420][T32030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.11937,pid=32028,uid=0 [ 662.315012][T32030] Memory cgroup out of memory: Killed process 32028 (syz.3.11937) total-vm:108180kB, anon-rss:2548kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 662.411797][T32128] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 662.634697][T32147] syz_tun: tun_chr_ioctl cmd 21731 [ 662.673743][T32147] FAULT_INJECTION: forcing a failure. [ 662.673743][T32147] name failslab, interval 1, probability 0, space 0, times 0 [ 662.727326][T32147] CPU: 0 UID: 0 PID: 32147 Comm: syz.3.11982 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 662.727355][T32147] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 662.727362][T32147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 662.727371][T32147] Call Trace: [ 662.727377][T32147] [ 662.727385][T32147] dump_stack_lvl+0x16c/0x1f0 [ 662.727411][T32147] should_fail_ex+0x512/0x640 [ 662.727427][T32147] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 662.727447][T32147] should_failslab+0xc2/0x120 [ 662.727469][T32147] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 662.727486][T32147] ? __d_alloc+0x35/0xa80 [ 662.727501][T32147] ? __d_alloc+0x35/0xa80 [ 662.727512][T32147] __d_alloc+0x35/0xa80 [ 662.727529][T32147] ? __ns_ref_active_get+0x96/0x1b0 [ 662.727553][T32147] path_from_stashed+0x427/0x750 [ 662.727574][T32147] ? netdev_info+0xe4/0x120 [ 662.727593][T32147] open_namespace+0x8c/0x250 [ 662.727612][T32147] ? __pfx_open_namespace+0x10/0x10 [ 662.727636][T32147] open_related_ns+0x41/0x70 [ 662.727656][T32147] __tun_chr_ioctl+0x1fae/0x4880 [ 662.727670][T32147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 662.727688][T32147] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 662.727704][T32147] ? hook_file_ioctl_common+0x144/0x410 [ 662.727725][T32147] ? __fget_files+0x20e/0x3c0 [ 662.727745][T32147] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 662.727759][T32147] __x64_sys_ioctl+0x18e/0x210 [ 662.727776][T32147] do_syscall_64+0xcd/0xf80 [ 662.727797][T32147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.727811][T32147] RIP: 0033:0x7f867418f7c9 [ 662.727824][T32147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.727837][T32147] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.727851][T32147] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 662.727860][T32147] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 662.727868][T32147] RBP: 00007f8674213f91 R08: 0000000000000000 R09: 0000000000000000 [ 662.727877][T32147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.727885][T32147] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 662.727904][T32147] [ 663.156931][T32159] syz.0.11985 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 663.166988][T32159] CPU: 0 UID: 0 PID: 32159 Comm: syz.0.11985 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 663.167014][T32159] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 663.167020][T32159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.167029][T32159] Call Trace: [ 663.167037][T32159] [ 663.167043][T32159] dump_stack_lvl+0x16c/0x1f0 [ 663.167069][T32159] dump_header+0x101/0x960 [ 663.167087][T32159] oom_kill_process+0x176/0x910 [ 663.167105][T32159] out_of_memory+0x350/0x1700 [ 663.167120][T32159] ? __lock_acquire+0x436/0x2890 [ 663.167137][T32159] ? __pfx_out_of_memory+0x10/0x10 [ 663.167157][T32159] mem_cgroup_out_of_memory+0x118/0x130 [ 663.167175][T32159] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 663.167195][T32159] ? do_raw_spin_unlock+0x172/0x230 [ 663.167214][T32159] try_charge_memcg+0x695/0xd30 [ 663.167240][T32159] ? __pfx_try_charge_memcg+0x10/0x10 [ 663.167282][T32159] ? __print_lock_name+0x51/0xe0 [ 663.167301][T32159] ? rcu_read_unlock+0x17/0x60 [ 663.167322][T32159] charge_memcg+0x8a/0x230 [ 663.167343][T32159] __mem_cgroup_charge+0x2b/0x1e0 [ 663.167358][T32159] do_anonymous_page+0xca9/0x2190 [ 663.167381][T32159] __handle_mm_fault+0x1ecf/0x2bb0 [ 663.167401][T32159] ? __pfx___handle_mm_fault+0x10/0x10 [ 663.167417][T32159] ? __pte_offset_map_lock+0x174/0x310 [ 663.167437][T32159] ? find_held_lock+0x2b/0x80 [ 663.167460][T32159] ? follow_page_pte+0x5cf/0x1390 [ 663.167484][T32159] handle_mm_fault+0x3fe/0xad0 [ 663.167502][T32159] __get_user_pages+0x54e/0x3590 [ 663.167530][T32159] ? __pfx___get_user_pages+0x10/0x10 [ 663.167556][T32159] populate_vma_page_range+0x267/0x3f0 [ 663.167578][T32159] ? __pfx_populate_vma_page_range+0x10/0x10 [ 663.167598][T32159] ? __pfx_find_vma_intersection+0x10/0x10 [ 663.167619][T32159] ? do_mmap+0x69c/0x1210 [ 663.167639][T32159] __mm_populate+0x1d8/0x380 [ 663.167661][T32159] ? __pfx___mm_populate+0x10/0x10 [ 663.167683][T32159] ? up_write+0x282/0x4e0 [ 663.167700][T32159] vm_mmap_pgoff+0x37f/0x470 [ 663.167722][T32159] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 663.167740][T32159] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 663.167758][T32159] ? count_memcg_events+0x122/0x290 [ 663.167779][T32159] ? find_held_lock+0x2b/0x80 [ 663.167799][T32159] ksys_mmap_pgoff+0x7d/0x5c0 [ 663.167822][T32159] __x64_sys_mmap+0x125/0x190 [ 663.167839][T32159] do_syscall_64+0xcd/0xf80 [ 663.167861][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.167877][T32159] RIP: 0033:0x7f4912f8f7c9 [ 663.167890][T32159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.167904][T32159] RSP: 002b:00007f4913d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 663.167917][T32159] RAX: ffffffffffffffda RBX: 00007f49131e5fa0 RCX: 00007f4912f8f7c9 [ 663.167927][T32159] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 663.167935][T32159] RBP: 00007f4913013f91 R08: 0000000000000002 R09: 0000000000008000 [ 663.167944][T32159] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 663.167953][T32159] R13: 00007f49131e6038 R14: 00007f49131e5fa0 R15: 00007ffd7f45e728 [ 663.167972][T32159] [ 663.167978][T32159] memory: usage 3072kB, limit 3072kB, failcnt 40808 [ 664.098510][T32159] memory+swap: usage 3440kB, limit 9007199254740988kB, failcnt 0 [ 664.136537][T32159] kmem: usage 2332kB, limit 9007199254740988kB, failcnt 0 [ 664.170944][T32159] Memory cgroup stats for /syz0: [ 664.171051][T32159] cache 0 [ 664.216275][T32159] rss 331776 [ 664.226342][T32159] rss_huge 0 [ 664.244924][T32159] shmem 0 [ 664.259168][T32159] mapped_file 0 [ 664.271698][T32159] dirty 0 [ 664.296455][T32159] writeback 0 [ 664.309279][T32159] workingset_refault_anon 3979 [ 664.314065][T32159] workingset_refault_file 10639 [ 664.351496][T32159] swap 634880 [ 664.367039][T32159] swapcached 12288 [ 664.388156][T32159] pgpgin 213804 [ 664.412967][T32159] pgpgout 216279 [ 664.416536][T32159] pgfault 348137 [ 664.438262][T32159] pgmajfault 1979 [ 664.441916][T32159] inactive_anon 16384 [ 664.477623][T32159] active_anon 315392 [ 664.493129][T32159] inactive_file 0 [ 664.510720][T32159] active_file 0 [ 664.510734][T32159] unevictable 0 [ 664.510740][T32159] hierarchical_memory_limit 3145728 [ 664.510747][T32159] hierarchical_memsw_limit 9223372036854771712 [ 664.510754][T32159] total_cache 0 [ 664.510759][T32159] total_rss 331776 [ 664.510765][T32159] total_rss_huge 0 [ 664.510771][T32159] total_shmem 0 [ 664.510777][T32159] total_mapped_file 0 [ 664.510783][T32159] total_dirty 0 [ 664.510788][T32159] total_writeback 0 [ 664.510794][T32159] total_workingset_refault_anon 3979 [ 664.510801][T32159] total_workingset_refault_file 10639 [ 664.510807][T32159] total_swap 634880 [ 664.510814][T32159] total_swapcached 12288 [ 664.510819][T32159] total_pgpgin 213804 [ 664.510826][T32159] total_pgpgout 216279 [ 664.510831][T32159] total_pgfault 348137 [ 664.510838][T32159] total_pgmajfault 1979 [ 664.510843][T32159] total_inactive_anon 16384 [ 664.510850][T32159] total_active_anon 315392 [ 664.510856][T32159] total_inactive_file 0 [ 664.510862][T32159] total_active_file 0 [ 664.510868][T32159] total_unevictable 0 [ 664.510874][T32159] anon_cost 47 [ 664.510880][T32159] file_cost 0 [ 664.510887][T32159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11985,pid=32158,uid=0 [ 664.510977][T32159] Memory cgroup out of memory: Killed process 32158 (syz.0.11985) total-vm:108180kB, anon-rss:1396kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 665.910274][T32256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12033'. [ 666.216405][T32267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12038'. [ 666.485726][T32275] netlink: 21 bytes leftover after parsing attributes in process `syz.3.12042'. [ 667.551055][T32311] erspan0: entered allmulticast mode [ 667.724660][ T6137] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 667.785205][ T6137] CPU: 0 UID: 0 PID: 6137 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 667.785232][ T6137] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 667.785239][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.785248][ T6137] Call Trace: [ 667.785253][ T6137] [ 667.785260][ T6137] dump_stack_lvl+0x16c/0x1f0 [ 667.785285][ T6137] dump_header+0x101/0x960 [ 667.785304][ T6137] oom_kill_process+0x176/0x910 [ 667.785321][ T6137] out_of_memory+0x350/0x1700 [ 667.785336][ T6137] ? __lock_acquire+0x436/0x2890 [ 667.785352][ T6137] ? __pfx_out_of_memory+0x10/0x10 [ 667.785373][ T6137] mem_cgroup_out_of_memory+0x118/0x130 [ 667.785390][ T6137] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 667.785410][ T6137] ? do_raw_spin_unlock+0x172/0x230 [ 667.785433][ T6137] try_charge_memcg+0x695/0xd30 [ 667.785458][ T6137] ? __pfx_try_charge_memcg+0x10/0x10 [ 667.785482][ T6137] ? find_held_lock+0x2b/0x80 [ 667.785503][ T6137] charge_memcg+0x8a/0x230 [ 667.785523][ T6137] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 667.785540][ T6137] __read_swap_cache_async+0x397/0x500 [ 667.785560][ T6137] ? __pfx___read_swap_cache_async+0x10/0x10 [ 667.785585][ T6137] swap_cluster_readahead+0x432/0x770 [ 667.785606][ T6137] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 667.785625][ T6137] ? trace_pelt_se_tp+0xed/0x130 [ 667.785639][ T6137] ? __update_load_avg_se+0x3fb/0x940 [ 667.785665][ T6137] ? get_vma_policy+0x242/0x3c0 [ 667.785679][ T6137] swapin_readahead+0x160/0x1220 [ 667.785702][ T6137] ? __pfx_swapin_readahead+0x10/0x10 [ 667.785719][ T6137] ? find_held_lock+0x2b/0x80 [ 667.785735][ T6137] ? swap_cache_get_folio+0x267/0x8e0 [ 667.785750][ T6137] ? swap_cache_get_folio+0x267/0x8e0 [ 667.785764][ T6137] ? swap_cache_get_folio+0x267/0x8e0 [ 667.785781][ T6137] ? swap_cache_get_folio+0x267/0x8e0 [ 667.785796][ T6137] ? swap_cache_get_folio+0x293/0x8e0 [ 667.785812][ T6137] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 667.785827][ T6137] ? __pfx_get_swap_device+0x10/0x10 [ 667.785845][ T6137] ? rcu_read_unlock+0x2d/0xb0 [ 667.785870][ T6137] ? do_swap_page+0x962/0x64a0 [ 667.785882][ T6137] do_swap_page+0x962/0x64a0 [ 667.785899][ T6137] ? __lock_acquire+0x436/0x2890 [ 667.785917][ T6137] ? __pfx_do_swap_page+0x10/0x10 [ 667.785933][ T6137] ? __pfx_default_wake_function+0x10/0x10 [ 667.785953][ T6137] ? rcu_is_watching+0x12/0xc0 [ 667.785971][ T6137] ? __free_object+0x286/0x410 [ 667.785993][ T6137] ? rcu_is_watching+0x12/0xc0 [ 667.786011][ T6137] ? ___pte_offset_map+0x175/0x380 [ 667.786033][ T6137] __handle_mm_fault+0x19cb/0x2bb0 [ 667.786051][ T6137] ? reacquire_held_locks+0xcd/0x1f0 [ 667.786064][ T6137] ? __pfx___handle_mm_fault+0x10/0x10 [ 667.786081][ T6137] ? lock_vma_under_rcu+0x176/0x580 [ 667.786102][ T6137] ? get_timespec64+0x136/0x1b0 [ 667.786121][ T6137] handle_mm_fault+0x3fe/0xad0 [ 667.786138][ T6137] do_user_addr_fault+0x60c/0x1370 [ 667.786158][ T6137] ? rcu_is_watching+0x12/0xc0 [ 667.786178][ T6137] exc_page_fault+0x64/0xc0 [ 667.786199][ T6137] asm_exc_page_fault+0x26/0x30 [ 667.786213][ T6137] RIP: 0033:0x7f4912fc2088 [ 667.786225][ T6137] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 667.786239][ T6137] RSP: 002b:00007ffd7f45ea40 EFLAGS: 00010293 [ 667.786251][ T6137] RAX: 0000000000000000 RBX: 0000000000001737 RCX: 00007f4912fc2085 [ 667.786261][ T6137] RDX: 00007ffd7f45ea80 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.786271][ T6137] RBP: 00007ffd7f45eaec R08: 0000000000000000 R09: 0000000000000000 [ 667.786282][ T6137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 667.786290][ T6137] R13: 00000000000927c0 R14: 00000000000a3995 R15: 00007ffd7f45eb40 [ 667.786310][ T6137] [ 667.788558][ T6137] memory: usage 3064kB, limit 3072kB, failcnt 41080 [ 668.450339][T32327] FAULT_INJECTION: forcing a failure. [ 668.450339][T32327] name failslab, interval 1, probability 0, space 0, times 0 [ 668.478560][T32327] CPU: 0 UID: 0 PID: 32327 Comm: syz.4.12066 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 668.478589][T32327] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 668.478597][T32327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.478605][T32327] Call Trace: [ 668.478611][T32327] [ 668.478617][T32327] dump_stack_lvl+0x16c/0x1f0 [ 668.478645][T32327] should_fail_ex+0x512/0x640 [ 668.478662][T32327] ? __kmalloc_noprof+0xca/0x910 [ 668.478680][T32327] should_failslab+0xc2/0x120 [ 668.478700][T32327] __kmalloc_noprof+0xeb/0x910 [ 668.478714][T32327] ? lsm_blob_alloc+0x68/0x90 [ 668.478737][T32327] ? lsm_blob_alloc+0x68/0x90 [ 668.478752][T32327] lsm_blob_alloc+0x68/0x90 [ 668.478777][T32327] security_prepare_creds+0x2f/0x270 [ 668.478798][T32327] prepare_creds+0x5d6/0x940 [ 668.478817][T32327] set_current_groups+0x15/0xd0 [ 668.478831][T32327] __do_sys_setgroups+0x3e0/0x4f0 [ 668.478848][T32327] do_syscall_64+0xcd/0xf80 [ 668.478869][T32327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.478884][T32327] RIP: 0033:0x7f24e098f7c9 [ 668.478897][T32327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.478910][T32327] RSP: 002b:00007f24e18a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 668.478924][T32327] RAX: ffffffffffffffda RBX: 00007f24e0be5fa0 RCX: 00007f24e098f7c9 [ 668.478933][T32327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 668.478942][T32327] RBP: 00007f24e0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.478950][T32327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.478958][T32327] R13: 00007f24e0be6038 R14: 00007f24e0be5fa0 R15: 00007ffc7cb7a368 [ 668.478978][T32327] [ 669.125558][ T6137] memory+swap: usage 6900kB, limit 9007199254740988kB, failcnt 0 [ 669.144292][ T6137] kmem: usage 2160kB, limit 9007199254740988kB, failcnt 0 [ 669.160388][ T6137] Memory cgroup stats for /syz0: [ 669.160708][ T6137] cache 0 [ 669.176209][T32346] FAULT_INJECTION: forcing a failure. [ 669.176209][T32346] name failslab, interval 1, probability 0, space 0, times 0 [ 669.190094][ T6137] rss 860160 [ 669.193706][ T6137] rss_huge 0 [ 669.196950][ T6137] shmem 0 [ 669.199946][ T6137] mapped_file 0 [ 669.207746][T32346] CPU: 0 UID: 0 PID: 32346 Comm: syz.4.12075 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 669.207773][T32346] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 669.207780][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.207789][T32346] Call Trace: [ 669.207795][T32346] [ 669.207801][T32346] dump_stack_lvl+0x16c/0x1f0 [ 669.207828][T32346] should_fail_ex+0x512/0x640 [ 669.207844][T32346] ? kmem_cache_alloc_noprof+0x62/0x770 [ 669.207863][T32346] should_failslab+0xc2/0x120 [ 669.207885][T32346] kmem_cache_alloc_noprof+0x83/0x770 [ 669.207900][T32346] ? net_alloc_generic+0x1e/0x70 [ 669.207918][T32346] ? copy_net_ns+0xe8/0x7c0 [ 669.207939][T32346] ? copy_net_ns+0xe8/0x7c0 [ 669.207956][T32346] copy_net_ns+0xe8/0x7c0 [ 669.207974][T32346] ? copy_cgroup_ns+0x71/0x980 [ 669.207990][T32346] create_new_namespaces+0x3ea/0xab0 [ 669.208013][T32346] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 669.208031][T32346] ksys_unshare+0x45b/0xa40 [ 669.208051][T32346] ? __pfx_ksys_unshare+0x10/0x10 [ 669.208071][T32346] ? xfd_validate_state+0x61/0x180 [ 669.208089][T32346] __x64_sys_unshare+0x31/0x40 [ 669.208101][T32346] do_syscall_64+0xcd/0xf80 [ 669.208121][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.208135][T32346] RIP: 0033:0x7f24e098f7c9 [ 669.208147][T32346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.208160][T32346] RSP: 002b:00007f24e18a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 669.208173][T32346] RAX: ffffffffffffffda RBX: 00007f24e0be5fa0 RCX: 00007f24e098f7c9 [ 669.208183][T32346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 669.208191][T32346] RBP: 00007f24e0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 669.208199][T32346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.208207][T32346] R13: 00007f24e0be6038 R14: 00007f24e0be5fa0 R15: 00007ffc7cb7a368 [ 669.208225][T32346] [ 669.210630][ T6137] dirty 0 [ 669.517795][ T6137] writeback 0 [ 669.521155][ T6137] workingset_refault_anon 4003 [ 669.526640][ T6137] workingset_refault_file 10639 [ 669.534889][ T6137] swap 3964928 [ 669.538368][ T6137] swapcached 32768 [ 669.544248][ T6137] pgpgin 215640 [ 669.547748][ T6137] pgpgout 217980 [ 669.551891][ T6137] pgfault 351594 [ 669.555479][ T6137] pgmajfault 1996 [ 669.559136][ T6137] inactive_anon 90112 [ 669.563551][ T6137] active_anon 798720 [ 669.567504][ T6137] inactive_file 0 [ 669.571507][ T6137] active_file 0 [ 669.575088][ T6137] unevictable 0 [ 669.578575][ T6137] hierarchical_memory_limit 3145728 [ 669.584209][ T6137] hierarchical_memsw_limit 9223372036854771712 [ 669.590507][ T6137] total_cache 0 [ 669.595221][ T6137] total_rss 860160 [ 669.598995][ T6137] total_rss_huge 0 [ 669.603073][ T6137] total_shmem 0 [ 669.606572][ T6137] total_mapped_file 0 [ 669.610571][ T6137] total_dirty 0 [ 669.620787][ T6137] total_writeback 0 [ 669.624602][ T6137] total_workingset_refault_anon 4003 [ 669.672376][ T6137] total_workingset_refault_file 10639 [ 669.677800][ T6137] total_swap 3964928 [ 669.712665][ T6137] total_swapcached 32768 [ 669.732324][ T6137] total_pgpgin 215640 [ 669.736322][ T6137] total_pgpgout 217980 [ 669.758366][ T6137] total_pgfault 351594 [ 669.784913][ T6137] total_pgmajfault 1996 [ 669.789121][ T6137] total_inactive_anon 90112 [ 669.809935][ T6137] total_active_anon 798720 [ 669.829416][ T6137] total_inactive_file 0 [ 669.841844][ T6137] total_active_file 0 [ 669.862501][ T6137] total_unevictable 0 [ 669.879492][ T6137] anon_cost 498 [ 669.883030][ T6137] file_cost 0 [ 669.886304][ T6137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12061,pid=32315,uid=0 [ 669.959349][ T6137] Memory cgroup out of memory: Killed process 32315 (syz.0.12061) total-vm:108180kB, anon-rss:2036kB, file-rss:21548kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 670.002158][T32319] syz.3.12062 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 670.033545][T32319] CPU: 0 UID: 0 PID: 32319 Comm: syz.3.12062 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 670.033584][T32319] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 670.033591][T32319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.033600][T32319] Call Trace: [ 670.033605][T32319] [ 670.033611][T32319] dump_stack_lvl+0x16c/0x1f0 [ 670.033636][T32319] dump_header+0x101/0x960 [ 670.033655][T32319] oom_kill_process+0x176/0x910 [ 670.033672][T32319] out_of_memory+0x350/0x1700 [ 670.033687][T32319] ? __lock_acquire+0x436/0x2890 [ 670.033703][T32319] ? __pfx_out_of_memory+0x10/0x10 [ 670.033723][T32319] mem_cgroup_out_of_memory+0x118/0x130 [ 670.033741][T32319] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 670.033761][T32319] ? do_raw_spin_unlock+0x172/0x230 [ 670.033780][T32319] try_charge_memcg+0x695/0xd30 [ 670.033805][T32319] ? __pfx_try_charge_memcg+0x10/0x10 [ 670.033826][T32319] ? __print_lock_name+0x51/0xe0 [ 670.033844][T32319] ? rcu_read_unlock+0x17/0x60 [ 670.033861][T32319] charge_memcg+0x8a/0x230 [ 670.033882][T32319] __mem_cgroup_charge+0x2b/0x1e0 [ 670.033897][T32319] do_anonymous_page+0xca9/0x2190 [ 670.033920][T32319] __handle_mm_fault+0x1ecf/0x2bb0 [ 670.033940][T32319] ? __pfx___handle_mm_fault+0x10/0x10 [ 670.033958][T32319] ? __pte_offset_map_lock+0x174/0x310 [ 670.033978][T32319] ? find_held_lock+0x2b/0x80 [ 670.034001][T32319] ? follow_page_pte+0x5cf/0x1390 [ 670.034025][T32319] handle_mm_fault+0x3fe/0xad0 [ 670.034043][T32319] __get_user_pages+0x54e/0x3590 [ 670.034071][T32319] ? __pfx___get_user_pages+0x10/0x10 [ 670.034097][T32319] populate_vma_page_range+0x267/0x3f0 [ 670.034119][T32319] ? __pfx_populate_vma_page_range+0x10/0x10 [ 670.034140][T32319] ? __pfx_find_vma_intersection+0x10/0x10 [ 670.034161][T32319] ? do_mmap+0x69c/0x1210 [ 670.034182][T32319] __mm_populate+0x1d8/0x380 [ 670.034204][T32319] ? __pfx___mm_populate+0x10/0x10 [ 670.034226][T32319] ? up_write+0x282/0x4e0 [ 670.034243][T32319] vm_mmap_pgoff+0x37f/0x470 [ 670.034265][T32319] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 670.034288][T32319] ? __x64_sys_futex+0x1e0/0x4c0 [ 670.034304][T32319] ? __x64_sys_futex+0x1e9/0x4c0 [ 670.034321][T32319] ksys_mmap_pgoff+0x7d/0x5c0 [ 670.034340][T32319] ? xfd_validate_state+0x61/0x180 [ 670.034356][T32319] __x64_sys_mmap+0x125/0x190 [ 670.034373][T32319] do_syscall_64+0xcd/0xf80 [ 670.034395][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.034409][T32319] RIP: 0033:0x7f867418f7c9 [ 670.034422][T32319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.034436][T32319] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 670.034450][T32319] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 670.034460][T32319] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 670.034468][T32319] RBP: 00007f8674213f91 R08: 0000000000000002 R09: 0000000000008000 [ 670.034477][T32319] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 670.034485][T32319] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 670.034505][T32319] [ 670.034530][T32319] memory: usage 3072kB, limit 3072kB, failcnt 54146 [ 670.875783][T32366] net_ratelimit: 336 callbacks suppressed [ 670.875799][T32366] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 670.888449][T32366] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.173407][T32319] memory+swap: usage 3860kB, limit 9007199254740988kB, failcnt 0 [ 671.221171][T32319] kmem: usage 1776kB, limit 9007199254740988kB, failcnt 0 [ 671.255176][T32319] Memory cgroup stats for /syz3: [ 671.255276][T32319] cache 0 [ 671.285564][T32319] rss 1105920 [ 671.300502][T32319] rss_huge 0 [ 671.322687][T32319] shmem 0 [ 671.332031][T32319] mapped_file 0 [ 671.352298][T32319] dirty 0 [ 671.359111][T32319] writeback 0 [ 671.381701][T32319] workingset_refault_anon 2923 [ 671.406390][T32319] workingset_refault_file 14110 [ 671.424565][T32319] swap 991232 [ 671.441311][T32319] swapcached 16384 [ 671.458137][T32319] pgpgin 309956 [ 671.483702][T32319] pgpgout 322614 [ 671.496658][T32319] pgfault 337676 [ 671.516953][T32319] pgmajfault 1890 [ 671.530652][T32319] inactive_anon 1101824 [ 671.550828][T32319] active_anon 8192 [ 671.577035][T32319] inactive_file 0 [ 671.600666][T32319] active_file 0 [ 671.608218][T32319] unevictable 0 [ 671.632254][T32319] hierarchical_memory_limit 3145728 [ 671.654200][T32319] hierarchical_memsw_limit 9223372036854771712 [ 671.681454][T32319] total_cache 0 [ 671.703575][T32319] total_rss 1105920 [ 671.722614][T32319] total_rss_huge 0 [ 671.737723][T32319] total_shmem 0 [ 671.755516][T32319] total_mapped_file 0 [ 671.772398][T32319] total_dirty 0 [ 671.800393][T32319] total_writeback 0 [ 671.807070][T32319] total_workingset_refault_anon 2923 [ 671.848952][T32319] total_workingset_refault_file 14110 [ 671.871962][T32319] total_swap 991232 [ 671.885668][T32319] total_swapcached 16384 [ 671.911860][T32319] total_pgpgin 309956 [ 671.931460][T32319] total_pgpgout 322614 [ 671.957410][T32319] total_pgfault 337676 [ 671.988311][T32319] total_pgmajfault 1890 [ 671.998770][T32319] total_inactive_anon 1101824 [ 672.020099][T32319] total_active_anon 8192 [ 672.037055][T32319] total_inactive_file 0 [ 672.058614][T32319] total_active_file 0 [ 672.086483][T32319] total_unevictable 0 [ 672.102641][T32319] anon_cost 535 [ 672.119656][T32319] file_cost 0 [ 672.133982][T32319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.12062,pid=32318,uid=0 [ 672.202733][T32319] Memory cgroup out of memory: Killed process 32319 (syz.3.12062) total-vm:106132kB, anon-rss:2292kB, file-rss:22396kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 672.411413][T32386] syz.0.12091 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 672.482846][T32386] CPU: 0 UID: 0 PID: 32386 Comm: syz.0.12091 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 672.482874][T32386] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 672.482882][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.482891][T32386] Call Trace: [ 672.482897][T32386] [ 672.482904][T32386] dump_stack_lvl+0x16c/0x1f0 [ 672.482929][T32386] dump_header+0x101/0x960 [ 672.482948][T32386] oom_kill_process+0x176/0x910 [ 672.482965][T32386] out_of_memory+0x350/0x1700 [ 672.482980][T32386] ? __lock_acquire+0x436/0x2890 [ 672.482996][T32386] ? __pfx_out_of_memory+0x10/0x10 [ 672.483016][T32386] mem_cgroup_out_of_memory+0x118/0x130 [ 672.483034][T32386] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 672.483054][T32386] ? do_raw_spin_unlock+0x172/0x230 [ 672.483073][T32386] try_charge_memcg+0x695/0xd30 [ 672.483097][T32386] ? __pfx_try_charge_memcg+0x10/0x10 [ 672.483122][T32386] ? find_held_lock+0x2b/0x80 [ 672.483143][T32386] charge_memcg+0x8a/0x230 [ 672.483163][T32386] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 672.483180][T32386] __read_swap_cache_async+0x397/0x500 [ 672.483199][T32386] ? __pfx___read_swap_cache_async+0x10/0x10 [ 672.483216][T32386] ? finish_task_switch.isra.0+0x202/0xbd0 [ 672.483236][T32386] ? rcu_is_watching+0x12/0xc0 [ 672.483255][T32386] ? finish_task_switch.isra.0+0x207/0xbd0 [ 672.483276][T32386] swap_cluster_readahead+0x432/0x770 [ 672.483297][T32386] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 672.483316][T32386] ? __lock_acquire+0x436/0x2890 [ 672.483337][T32386] ? get_vma_policy+0x242/0x3c0 [ 672.483358][T32386] swapin_readahead+0x160/0x1220 [ 672.483383][T32386] ? __pfx_swapin_readahead+0x10/0x10 [ 672.483400][T32386] ? find_held_lock+0x2b/0x80 [ 672.483416][T32386] ? swap_cache_get_folio+0x267/0x8e0 [ 672.483431][T32386] ? swap_cache_get_folio+0x267/0x8e0 [ 672.483446][T32386] ? swap_cache_get_folio+0x267/0x8e0 [ 672.483462][T32386] ? swap_cache_get_folio+0x267/0x8e0 [ 672.483478][T32386] ? swap_cache_get_folio+0x293/0x8e0 [ 672.483495][T32386] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 672.483510][T32386] ? __pfx_get_swap_device+0x10/0x10 [ 672.483529][T32386] ? rcu_read_unlock+0x2d/0xb0 [ 672.483548][T32386] ? do_swap_page+0x962/0x64a0 [ 672.483561][T32386] do_swap_page+0x962/0x64a0 [ 672.483577][T32386] ? __lock_acquire+0x436/0x2890 [ 672.483595][T32386] ? __pfx_do_swap_page+0x10/0x10 [ 672.483611][T32386] ? __pfx_default_wake_function+0x10/0x10 [ 672.483635][T32386] ? rcu_is_watching+0x12/0xc0 [ 672.483653][T32386] ? ___pte_offset_map+0x175/0x380 [ 672.483676][T32386] __handle_mm_fault+0x19cb/0x2bb0 [ 672.483694][T32386] ? reacquire_held_locks+0xcd/0x1f0 [ 672.483707][T32386] ? __pfx___handle_mm_fault+0x10/0x10 [ 672.483724][T32386] ? lock_vma_under_rcu+0x176/0x580 [ 672.483744][T32386] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 672.483768][T32386] handle_mm_fault+0x3fe/0xad0 [ 672.483786][T32386] do_user_addr_fault+0x60c/0x1370 [ 672.483805][T32386] ? rcu_is_watching+0x12/0xc0 [ 672.483825][T32386] exc_page_fault+0x64/0xc0 [ 672.483846][T32386] asm_exc_page_fault+0x26/0x30 [ 672.483860][T32386] RIP: 0033:0x7f4912e6f02b [ 672.483873][T32386] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 ff 0f 00 00 48 31 d5 <80> 3d 16 30 37 00 00 0f 84 a8 00 00 00 4c 89 f6 48 8b 0d f6 2f 37 [ 672.483886][T32386] RSP: 002b:00007ffd7f45e760 EFLAGS: 00010282 [ 672.483898][T32386] RAX: 0000000000014f60 RBX: 00007f4913d15720 RCX: 000000000000002b [ 672.483907][T32386] RDX: ffffffff8243efa4 RSI: ffffffff8243eb6d RDI: 0000000000000003 [ 672.483915][T32386] RBP: ffffffff8243e14a R08: 00007f49131e6218 R09: 00007f49131d2000 [ 672.483924][T32386] R10: 00007f49121fb008 R11: 0000000000000003 R12: 0000000000000003 [ 672.483932][T32386] R13: 000000000000002a R14: ffffffff8243efa4 R15: 000000000000002b [ 672.483941][T32386] ? file_close_fd_locked+0x1a4/0x2b0 [ 672.483962][T32386] ? dup_fd+0x14a/0xc70 [ 672.483983][T32386] ? file_close_fd_locked+0x1a4/0x2b0 [ 672.484001][T32386] ? dup_fd+0xb6d/0xc70 [ 672.484022][T32386] [ 672.484028][T32386] memory: usage 3072kB, limit 3072kB, failcnt 43290 [ 673.459341][T32386] memory+swap: usage 5632kB, limit 9007199254740988kB, failcnt 0 [ 673.477338][T32386] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 673.493972][T32386] Memory cgroup stats for /syz0: [ 673.494071][T32386] cache 0 [ 673.509923][T32386] rss 8192 [ 673.516370][T32386] rss_huge 0 [ 673.523206][T32386] shmem 0 [ 673.529459][T32386] mapped_file 0 [ 673.537551][T32386] dirty 0 [ 673.544933][T32386] writeback 4096 [ 673.552985][T32386] workingset_refault_anon 4144 [ 673.563821][T32386] workingset_refault_file 10639 [ 673.576190][T32386] swap 2621440 [ 673.582902][T32386] swapcached 12288 [ 673.591658][T32386] pgpgin 217569 [ 673.599493][T32386] pgpgout 220124 [ 673.606564][T32386] pgfault 353359 [ 673.614759][T32386] pgmajfault 2068 [ 673.622833][T32386] inactive_anon 0 [ 673.629797][T32386] active_anon 0 [ 673.637789][T32386] inactive_file 0 [ 673.644946][T32386] active_file 0 [ 673.654053][T32386] unevictable 0 [ 673.661989][T32386] hierarchical_memory_limit 3145728 [ 673.674280][T32386] hierarchical_memsw_limit 9223372036854771712 [ 673.687630][T32386] total_cache 0 [ 673.696271][T32386] total_rss 8192 [ 673.703385][T32386] total_rss_huge 0 [ 673.711523][T32386] total_shmem 0 [ 673.718356][T32386] total_mapped_file 0 [ 673.726862][T32386] total_dirty 0 [ 673.734879][T32386] total_writeback 4096 [ 673.743404][T32386] total_workingset_refault_anon 4144 [ 673.754204][T32386] total_workingset_refault_file 10639 [ 673.767040][T32386] total_swap 2621440 [ 673.782001][T32386] total_swapcached 12288 [ 673.791537][T32386] total_pgpgin 217569 [ 673.800108][T32386] total_pgpgout 220124 [ 673.808560][T32386] total_pgfault 353359 [ 673.816612][T32386] total_pgmajfault 2068 [ 673.826889][T32386] total_inactive_anon 0 [ 673.834462][T32386] total_active_anon 0 [ 673.842864][T32386] total_inactive_file 0 [ 673.851422][T32386] total_active_file 0 [ 673.859992][T32386] total_unevictable 0 [ 673.868359][T32386] anon_cost 23 [ 673.879711][T32386] file_cost 0 [ 673.886310][T32386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12091,pid=32386,uid=0 [ 673.919661][T32386] Memory cgroup out of memory: Killed process 32386 (syz.0.12091) total-vm:104344kB, anon-rss:1264kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 674.695526][T32379] syz.0.12089 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 674.777173][T32379] CPU: 0 UID: 0 PID: 32379 Comm: syz.0.12089 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 674.777207][T32379] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 674.777214][T32379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.777222][T32379] Call Trace: [ 674.777228][T32379] [ 674.777233][T32379] dump_stack_lvl+0x16c/0x1f0 [ 674.777259][T32379] dump_header+0x101/0x960 [ 674.777278][T32379] oom_kill_process+0x176/0x910 [ 674.777295][T32379] out_of_memory+0x350/0x1700 [ 674.777311][T32379] ? __lock_acquire+0x436/0x2890 [ 674.777328][T32379] ? __pfx_out_of_memory+0x10/0x10 [ 674.777348][T32379] mem_cgroup_out_of_memory+0x118/0x130 [ 674.777365][T32379] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 674.777386][T32379] ? do_raw_spin_unlock+0x172/0x230 [ 674.777405][T32379] try_charge_memcg+0x695/0xd30 [ 674.777430][T32379] ? __pfx_try_charge_memcg+0x10/0x10 [ 674.777450][T32379] ? __print_lock_name+0x51/0xe0 [ 674.777468][T32379] ? rcu_read_unlock+0x17/0x60 [ 674.777486][T32379] charge_memcg+0x8a/0x230 [ 674.777507][T32379] __mem_cgroup_charge+0x2b/0x1e0 [ 674.777522][T32379] shmem_alloc_and_add_folio+0x50c/0xc20 [ 674.777543][T32379] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 674.777561][T32379] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 674.777581][T32379] shmem_get_folio_gfp+0x67f/0x1610 [ 674.777601][T32379] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 674.777617][T32379] ? filemap_map_pages+0x12dd/0x1e00 [ 674.777636][T32379] shmem_fault+0x1fe/0xa00 [ 674.777653][T32379] ? __pfx_shmem_fault+0x10/0x10 [ 674.777671][T32379] ? __pfx_filemap_map_pages+0x10/0x10 [ 674.777692][T32379] ? __pfx_filemap_map_pages+0x10/0x10 [ 674.777706][T32379] __do_fault+0x10d/0x490 [ 674.777724][T32379] ? __pfx_filemap_map_pages+0x10/0x10 [ 674.777738][T32379] do_fault+0xae4/0x1ad0 [ 674.777757][T32379] ? __pfx_filemap_map_pages+0x10/0x10 [ 674.777775][T32379] __handle_mm_fault+0x1919/0x2bb0 [ 674.777795][T32379] ? __pfx___handle_mm_fault+0x10/0x10 [ 674.777811][T32379] ? __pte_offset_map_lock+0x174/0x310 [ 674.777831][T32379] ? find_held_lock+0x2b/0x80 [ 674.777853][T32379] ? follow_page_pte+0x5cf/0x1390 [ 674.777877][T32379] handle_mm_fault+0x3fe/0xad0 [ 674.777895][T32379] __get_user_pages+0x54e/0x3590 [ 674.777923][T32379] ? __pfx___get_user_pages+0x10/0x10 [ 674.777943][T32379] ? __kernel_write_iter+0x5a5/0xb10 [ 674.777967][T32379] get_dump_page+0x257/0x3d0 [ 674.777988][T32379] ? __pfx_get_dump_page+0x10/0x10 [ 674.778008][T32379] ? dump_user_range+0x756/0xb70 [ 674.778033][T32379] dump_user_range+0x195/0xb70 [ 674.778057][T32379] ? __pfx_dump_user_range+0x10/0x10 [ 674.778082][T32379] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 674.778101][T32379] ? __pfx_writenote+0x10/0x10 [ 674.778127][T32379] elf_core_dump+0x29c3/0x3c10 [ 674.778150][T32379] ? __pfx_elf_core_dump+0x10/0x10 [ 674.778161][T32379] ? kasan_save_stack+0x33/0x60 [ 674.778179][T32379] ? kasan_save_track+0x14/0x30 [ 674.778201][T32379] ? __kasan_kmalloc+0xaa/0xb0 [ 674.778216][T32379] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 674.778233][T32379] ? vfs_coredump+0x1dd9/0x55e0 [ 674.778251][T32379] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 674.778269][T32379] ? irqentry_exit+0x38a/0x8c0 [ 674.778288][T32379] ? asm_exc_page_fault+0x26/0x30 [ 674.778305][T32379] ? 0xffffffffff600000 [ 674.778350][T32379] ? vfs_coredump+0x2b85/0x55e0 [ 674.778368][T32379] vfs_coredump+0x2b85/0x55e0 [ 674.778395][T32379] ? __pfx_vfs_coredump+0x10/0x10 [ 674.778414][T32379] ? __lock_acquire+0x436/0x2890 [ 674.778431][T32379] ? __lock_acquire+0x436/0x2890 [ 674.778445][T32379] ? lock_acquire+0x179/0x330 [ 674.778462][T32379] ? lock_acquire+0x179/0x330 [ 674.778488][T32379] ? arch_stack_walk+0xa6/0x100 [ 674.778512][T32379] ? stack_trace_save+0x8e/0xc0 [ 674.778533][T32379] ? __pfx_stack_trace_save+0x10/0x10 [ 674.778553][T32379] ? stack_depot_save_flags+0x29/0x9b0 [ 674.778569][T32379] ? __lock_acquire+0x436/0x2890 [ 674.778584][T32379] ? kasan_save_stack+0x42/0x60 [ 674.778633][T32379] ? proc_coredump_connector+0x2d1/0x4f0 [ 674.778655][T32379] ? __pfx_proc_coredump_connector+0x10/0x10 [ 674.778680][T32379] ? rcu_is_watching+0x12/0xc0 [ 674.778702][T32379] get_signal+0x22e1/0x26d0 [ 674.778728][T32379] ? __pfx_get_signal+0x10/0x10 [ 674.778746][T32379] ? find_held_lock+0x2b/0x80 [ 674.778762][T32379] ? fixup_vdso_exception+0x34b/0x400 [ 674.778788][T32379] arch_do_signal_or_restart+0x8f/0x7a0 [ 674.778808][T32379] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.778834][T32379] ? do_user_addr_fault+0xa62/0x1370 [ 674.778854][T32379] irqentry_exit+0x38a/0x8c0 [ 674.778876][T32379] asm_exc_page_fault+0x26/0x30 [ 674.778889][T32379] RIP: 0033:0x0 [ 674.778899][T32379] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 674.778905][T32379] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 674.778917][T32379] RAX: 0000000000000000 RBX: 00007f49131e5fa0 RCX: 00007f4912f8f7c9 [ 674.778926][T32379] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 674.778935][T32379] RBP: 00007f4913013f91 R08: 0000000000000002 R09: 0000000000000000 [ 674.778943][T32379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.778951][T32379] R13: 00007f49131e6038 R14: 00007f49131e5fa0 R15: 00007ffd7f45e728 [ 674.778971][T32379] [ 675.337856][T32379] memory: usage 3072kB, limit 3072kB, failcnt 43944 [ 675.344639][T32379] memory+swap: usage 5792kB, limit 9007199254740988kB, failcnt 0 [ 675.352446][T32379] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 675.359631][T32379] Memory cgroup stats for /syz0: [ 675.359846][T32379] cache 0 [ 675.367845][T32379] rss 8192 [ 675.370919][T32379] rss_huge 0 [ 675.374149][T32379] shmem 0 [ 675.377111][T32379] mapped_file 0 [ 675.380598][T32379] dirty 0 [ 675.383704][T32379] writeback 4096 [ 675.387368][T32379] workingset_refault_anon 4169 [ 675.392386][T32379] workingset_refault_file 10639 [ 675.397539][T32379] swap 2785280 [ 675.401607][T32379] swapcached 12288 [ 675.405654][T32379] pgpgin 217671 [ 675.409152][T32379] pgpgout 220226 [ 675.412746][T32379] pgfault 353429 [ 675.416328][T32379] pgmajfault 2078 [ 675.420319][T32379] inactive_anon 4096 [ 675.424508][T32379] active_anon 4096 [ 675.428254][T32379] inactive_file 0 [ 675.431929][T32379] active_file 0 [ 675.435519][T32379] unevictable 0 [ 675.439104][T32379] hierarchical_memory_limit 3145728 [ 675.444442][T32379] hierarchical_memsw_limit 9223372036854771712 [ 675.450717][T32379] total_cache 0 [ 675.454225][T32379] total_rss 8192 [ 675.457808][T32379] total_rss_huge 0 [ 675.461606][T32379] total_shmem 0 [ 675.465094][T32379] total_mapped_file 0 [ 675.469196][T32379] total_dirty 0 [ 675.472734][T32379] total_writeback 4096 [ 675.476833][T32379] total_workingset_refault_anon 4169 [ 675.482187][T32379] total_workingset_refault_file 10639 [ 675.488843][T32379] total_swap 2785280 [ 675.502809][T32379] total_swapcached 12288 [ 675.507072][T32379] total_pgpgin 217671 [ 675.511179][T32379] total_pgpgout 220226 [ 675.515229][T32379] total_pgfault 353429 [ 675.519276][T32379] total_pgmajfault 2078 [ 675.524008][T32379] total_inactive_anon 4096 [ 675.528417][T32379] total_active_anon 4096 [ 675.532678][T32379] total_inactive_file 0 [ 675.536812][T32379] total_active_file 0 [ 675.540842][T32379] total_unevictable 0 [ 675.544852][T32379] anon_cost 18 [ 675.548207][T32379] file_cost 0 [ 675.551523][T32379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12089,pid=32379,uid=0 [ 675.566748][T32379] Memory cgroup out of memory: Killed process 32379 (syz.0.12089) total-vm:136980kB, anon-rss:1268kB, file-rss:22396kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 676.053339][ T6137] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 676.065213][ T6137] CPU: 0 UID: 0 PID: 6137 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 676.065242][ T6137] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 676.065248][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.065260][ T6137] Call Trace: [ 676.065267][ T6137] [ 676.065273][ T6137] dump_stack_lvl+0x16c/0x1f0 [ 676.065300][ T6137] dump_header+0x101/0x960 [ 676.065318][ T6137] oom_kill_process+0x176/0x910 [ 676.065336][ T6137] out_of_memory+0x350/0x1700 [ 676.065351][ T6137] ? __lock_acquire+0x436/0x2890 [ 676.065367][ T6137] ? __pfx_out_of_memory+0x10/0x10 [ 676.065388][ T6137] mem_cgroup_out_of_memory+0x118/0x130 [ 676.065405][ T6137] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 676.065425][ T6137] ? do_raw_spin_unlock+0x172/0x230 [ 676.065445][ T6137] try_charge_memcg+0x695/0xd30 [ 676.065470][ T6137] ? __pfx_try_charge_memcg+0x10/0x10 [ 676.065491][ T6137] ? rcu_read_unlock+0x1/0x60 [ 676.065506][ T6137] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 676.065526][ T6137] obj_cgroup_charge_account+0x336/0x670 [ 676.065550][ T6137] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 676.065577][ T6137] ? kasan_save_track+0x14/0x30 [ 676.065598][ T6137] kmem_cache_alloc_noprof+0x589/0x770 [ 676.065616][ T6137] ? kmem_cache_alloc_noprof+0x201/0x770 [ 676.065631][ T6137] ? anon_vma_fork+0xe6/0x620 [ 676.065649][ T6137] ? anon_vma_fork+0xe6/0x620 [ 676.065662][ T6137] anon_vma_fork+0xe6/0x620 [ 676.065675][ T6137] ? vm_area_dup+0x5a1/0x8d0 [ 676.065691][ T6137] dup_mmap+0x12d3/0x20e0 [ 676.065711][ T6137] ? __pfx_dup_mmap+0x10/0x10 [ 676.065745][ T6137] copy_process+0x3b9f/0x7430 [ 676.065766][ T6137] ? do_wp_page+0x1c04/0x5010 [ 676.065792][ T6137] ? __pfx_copy_process+0x10/0x10 [ 676.065812][ T6137] ? do_raw_spin_lock+0x12c/0x2b0 [ 676.065838][ T6137] kernel_clone+0xfc/0x910 [ 676.065859][ T6137] ? __pfx_kernel_clone+0x10/0x10 [ 676.065890][ T6137] __do_sys_clone+0xce/0x120 [ 676.065909][ T6137] ? __pfx___do_sys_clone+0x10/0x10 [ 676.065928][ T6137] ? count_memcg_events+0x122/0x290 [ 676.065956][ T6137] ? do_user_addr_fault+0x843/0x1370 [ 676.065978][ T6137] do_syscall_64+0xcd/0xf80 [ 676.065999][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.066014][ T6137] RIP: 0033:0x7f4912f85f13 [ 676.066026][ T6137] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 676.066047][ T6137] RSP: 002b:00007ffd7f45e9a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.066061][ T6137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4912f85f13 [ 676.066070][ T6137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 676.066079][ T6137] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 676.066087][ T6137] R10: 0000555578bc17d0 R11: 0000000000000246 R12: 0000000000000000 [ 676.066096][ T6137] R13: 0000555578bd4590 R14: 00000000000a493e R15: 00007ffd7f45eb40 [ 676.066116][ T6137] [ 676.066122][ T6137] memory: usage 3072kB, limit 3072kB, failcnt 44811 [ 676.803528][ T6137] memory+swap: usage 3648kB, limit 9007199254740988kB, failcnt 0 [ 676.811276][ T6137] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 676.865368][ T6137] Memory cgroup stats for /syz0: [ 676.865587][ T6137] cache 0 [ 676.902977][ T6137] rss 4096 [ 676.913166][ T6137] rss_huge 0 [ 676.925808][ T6137] shmem 0 [ 676.940155][ T6137] mapped_file 0 [ 676.958490][ T6137] dirty 0 [ 676.971633][ T6137] writeback 0 [ 676.979619][ T6137] workingset_refault_anon 4192 [ 676.994272][ T6137] workingset_refault_file 10639 [ 677.012559][ T6137] swap 589824 [ 677.015859][ T6137] swapcached 4096 [ 677.029876][ T6137] pgpgin 217694 [ 677.062661][ T6137] pgpgout 220251 [ 677.066230][ T6137] pgfault 353452 [ 677.069754][ T6137] pgmajfault 2088 [ 677.100690][ T6137] inactive_anon 0 [ 677.116807][ T6137] active_anon 4096 [ 677.155118][ T6137] inactive_file 0 [ 677.158795][ T6137] active_file 0 [ 677.168410][ T6137] unevictable 0 [ 677.178692][ T6137] hierarchical_memory_limit 3145728 [ 677.194680][ T6137] hierarchical_memsw_limit 9223372036854771712 [ 677.200850][ T6137] total_cache 0 [ 677.223237][ T6137] total_rss 4096 [ 677.236486][ T6137] total_rss_huge 0 [ 677.249016][ T6137] total_shmem 0 [ 677.263288][ T6137] total_mapped_file 0 [ 677.283650][ T6137] total_dirty 0 [ 677.291083][ T6137] total_writeback 0 [ 677.300111][ T6137] total_workingset_refault_anon 4192 [ 677.316392][ T6137] total_workingset_refault_file 10639 [ 677.343087][ T6137] total_swap 589824 [ 677.358086][ T6137] total_swapcached 4096 [ 677.374694][ T6137] total_pgpgin 217694 [ 677.387503][ T6137] total_pgpgout 220251 [ 677.405911][ T6137] total_pgfault 353452 [ 677.413733][ T6137] total_pgmajfault 2088 [ 677.435942][ T6137] total_inactive_anon 0 [ 677.445652][ T6137] total_active_anon 4096 [ 677.460358][ T6137] total_inactive_file 0 [ 677.473344][ T6137] total_active_file 0 [ 677.489441][ T6137] total_unevictable 0 [ 677.503363][ T6137] anon_cost 176 [ 677.515043][ T6137] file_cost 0 [ 677.524016][T32500] FAULT_INJECTION: forcing a failure. [ 677.524016][T32500] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 677.540962][ T6137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10101,pid=27078,uid=0 [ 677.569508][T32500] CPU: 0 UID: 0 PID: 32500 Comm: syz.3.12125 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 677.569537][T32500] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 677.569544][T32500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.569554][T32500] Call Trace: [ 677.569559][T32500] [ 677.569565][T32500] dump_stack_lvl+0x16c/0x1f0 [ 677.569591][T32500] should_fail_ex+0x512/0x640 [ 677.569611][T32500] _copy_from_user+0x2e/0xd0 [ 677.569626][T32500] get_itimerspec64+0x15b/0x2d0 [ 677.569648][T32500] ? __pfx_get_itimerspec64+0x10/0x10 [ 677.569668][T32500] ? _copy_from_user+0x59/0xd0 [ 677.569685][T32500] __x64_sys_timerfd_settime+0x15f/0x280 [ 677.569706][T32500] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 677.569732][T32500] do_syscall_64+0xcd/0xf80 [ 677.569752][T32500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.569766][T32500] RIP: 0033:0x7f867418f7c9 [ 677.569779][T32500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.569793][T32500] RSP: 002b:00007f8674f4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 677.569806][T32500] RAX: ffffffffffffffda RBX: 00007f86743e5fa0 RCX: 00007f867418f7c9 [ 677.569815][T32500] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 677.569824][T32500] RBP: 00007f8674213f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.569832][T32500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.569840][T32500] R13: 00007f86743e6038 R14: 00007f86743e5fa0 R15: 00007fff4087f808 [ 677.569858][T32500] [ 677.577257][ T6137] Memory cgroup out of memory: Killed process 27078 (syz.0.10101) total-vm:108176kB, anon-rss:1164kB, file-rss:20608kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 678.660292][T32523] bridge0: port 4(veth0_to_bridge) entered blocking state [ 678.704263][T32523] bridge0: port 4(veth0_to_bridge) entered disabled state [ 678.711632][T32523] veth0_to_bridge: entered allmulticast mode [ 678.759663][T32523] veth0_to_bridge: entered promiscuous mode [ 678.793868][T32523] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.837316][T32523] bridge0: port 4(veth0_to_bridge) entered blocking state [ 678.844618][T32523] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 679.122848][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12138'. [ 680.707263][T19084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.769879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.782331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.795447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.807962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.821109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.833454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.846627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.859066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.872156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.884498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.746583][ C0] net_ratelimit: 8520 callbacks suppressed [ 687.746600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.765669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.777934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.790356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.803484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.815882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.828271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.841400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.854289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.866620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.730587][ C0] net_ratelimit: 9040 callbacks suppressed [ 692.730605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.748721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.761728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.774020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.786269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.799234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.811466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.823702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.836660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.849026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.714781][ C0] net_ratelimit: 9428 callbacks suppressed [ 697.714798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.732909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.745900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.758219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 697.770602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.783579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.796616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.808971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 697.821332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.833601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.699599][ C0] net_ratelimit: 10312 callbacks suppressed [ 702.699616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.718142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 702.730499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.742845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.755915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.768266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 702.780563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.792952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.805980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.818370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 707.683032][ C0] net_ratelimit: 10171 callbacks suppressed [ 707.683048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 707.701535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.713815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.726848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.739170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 707.751676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.764048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.777085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.789562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 707.801906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.667275][ C0] net_ratelimit: 10229 callbacks suppressed [ 712.667295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.685652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 712.698144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.710405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.723495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.735863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 712.748268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.760761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.773751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.786045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 717.651065][ C0] net_ratelimit: 10066 callbacks suppressed [ 717.651084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.669293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 717.681571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.693904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.706881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.719201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 717.731484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.743952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.757023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.769411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 722.635214][ C0] net_ratelimit: 10258 callbacks suppressed [ 722.635232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.653499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 722.665967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.678370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.691561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.703896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 722.716191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.728521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.741712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.754233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 723.109183][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.619371][ C0] net_ratelimit: 10280 callbacks suppressed [ 727.619395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.637738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.650783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.663092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 727.675398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.687729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.700755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.713162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 727.725461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.737728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.414703][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 732.603422][ C0] net_ratelimit: 9915 callbacks suppressed [ 732.603439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.622379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.634678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 732.646971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.659231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.672180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.684492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 732.696780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.709195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.722166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.587484][ C0] net_ratelimit: 10125 callbacks suppressed [ 737.587504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.605785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.618881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.631318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 737.643647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.655961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.669165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.681514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 737.693829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.706262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.571641][ C0] net_ratelimit: 10194 callbacks suppressed [ 742.571659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.590025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.603133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.615453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 742.628007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.640355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.653412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.665751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 742.678084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.690373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.555912][ C0] net_ratelimit: 9590 callbacks suppressed [ 747.555929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.574308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 747.586694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.598924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.611572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.623841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.637010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.649252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 747.661563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.673836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.170676][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.540612][ C0] net_ratelimit: 9498 callbacks suppressed [ 752.540630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.558772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 752.571151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.583565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.596260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.608623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.620899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.634107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.646411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 752.658687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.523899][ C0] net_ratelimit: 10127 callbacks suppressed [ 757.523916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 757.542160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.554439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.567093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.579337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.592182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.605408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.617670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 757.629955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.642234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.491556][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.507784][ C0] net_ratelimit: 9813 callbacks suppressed [ 762.507801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.526287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.538533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.550823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.564022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.576371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 762.588740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.600987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.614328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.626767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.492302][ C0] net_ratelimit: 10022 callbacks suppressed [ 767.492318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.510676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.522934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.536111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.548386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 767.560687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.573017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.585641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.598085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.610366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.476200][ C0] net_ratelimit: 10354 callbacks suppressed [ 772.476218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 772.494582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.507011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.519713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.532111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.544452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.557680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.570031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 772.582427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.594705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.460497][ C0] net_ratelimit: 10189 callbacks suppressed [ 777.460514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.478856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 777.491225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 777.503571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.515881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.528617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.540930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.553251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.566764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.579109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 782.444277][ C0] net_ratelimit: 10621 callbacks suppressed [ 782.444295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.463794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.476246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 782.488636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 782.500969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.513262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.526084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.538349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.550638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.563891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.309162][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 785.316144][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6130/1:b..l P30045/1:b..l [ 785.325872][ C0] rcu: (detected by 0, t=10502 jiffies, g=140565, q=872 ncpus=1) [ 785.333664][ C0] task:syz-executor state:R running task stack:25800 pid:30045 tgid:30045 ppid:5820 task_flags:0x40010c flags:0x00080001 [ 785.348649][ C0] Call Trace: [ 785.351936][ C0] [ 785.354885][ C0] ? __schedule+0x10b9/0x6150 [ 785.359559][ C0] __schedule+0x1139/0x6150 [ 785.364163][ C0] ? __lock_acquire+0x436/0x2890 [ 785.369327][ C0] ? __pfx___schedule+0x10/0x10 [ 785.374184][ C0] preempt_schedule_irq+0x51/0x90 [ 785.379203][ C0] irqentry_exit+0x1d8/0x8c0 [ 785.383789][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 785.389759][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 785.394949][ C0] Code: bb 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 f2 61 ef 0e 0f 82 74 02 00 00 8b 35 6a 92 ef 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 09 bb 18 12 0f 85 ad 02 00 00 48 83 c4 [ 785.414717][ C0] RSP: 0018:ffffc9000bdd7860 EFLAGS: 00000206 [ 785.420771][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c94a0 RCX: 0000000068c1bacb [ 785.428863][ C0] RDX: 0000000000000000 RSI: ffffffff8daa4445 RDI: ffffffff8bf2b500 [ 785.436831][ C0] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 785.444789][ C0] R10: 0000000000000002 R11: ffff8880780666b0 R12: 0000000000000000 [ 785.452857][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.460832][ C0] ? is_module_text_address+0x148/0x220 [ 785.466392][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 785.472539][ C0] is_bpf_text_address+0x36/0x1a0 [ 785.477557][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 785.482746][ C0] kernel_text_address+0x8d/0x100 [ 785.487763][ C0] __kernel_text_address+0xd/0x40 [ 785.492780][ C0] unwind_get_return_address+0x59/0xa0 [ 785.498235][ C0] arch_stack_walk+0xa6/0x100 [ 785.502917][ C0] stack_trace_save+0x8e/0xc0 [ 785.507588][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 785.512957][ C0] ? __lock_acquire+0x436/0x2890 [ 785.517888][ C0] ? __lock_acquire+0x436/0x2890 [ 785.522820][ C0] save_stack+0x160/0x1f0 [ 785.527149][ C0] ? __pfx_save_stack+0x10/0x10 [ 785.531999][ C0] ? __free_frozen_pages+0x7df/0x1170 [ 785.537374][ C0] ? vfree+0x1fd/0xb50 [ 785.541432][ C0] ? kcov_close+0x34/0x60 [ 785.545748][ C0] ? __fput+0x402/0xb70 [ 785.549883][ C0] ? task_work_run+0x150/0x240 [ 785.554629][ C0] ? do_exit+0x87f/0x2bd0 [ 785.558940][ C0] ? do_group_exit+0xd3/0x2a0 [ 785.563600][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 785.568784][ C0] ? x64_sys_call+0x151c/0x1740 [ 785.573622][ C0] ? do_syscall_64+0xcd/0xf80 [ 785.578289][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.584344][ C0] ? page_ext_put+0x3e/0xd0 [ 785.588841][ C0] __reset_page_owner+0x84/0x1a0 [ 785.593792][ C0] __free_frozen_pages+0x7df/0x1170 [ 785.598982][ C0] ? ___free_pages+0xcd/0x220 [ 785.603646][ C0] vfree+0x1fd/0xb50 [ 785.607558][ C0] ? find_held_lock+0x2b/0x80 [ 785.612227][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.616986][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 785.622785][ C0] ? __pfx_kcov_close+0x10/0x10 [ 785.627639][ C0] kcov_close+0x34/0x60 [ 785.631781][ C0] __fput+0x402/0xb70 [ 785.635749][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 785.640938][ C0] task_work_run+0x150/0x240 [ 785.645518][ C0] ? __pfx_task_work_run+0x10/0x10 [ 785.650636][ C0] do_exit+0x87f/0x2bd0 [ 785.654777][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 785.659808][ C0] ? __pfx_do_exit+0x10/0x10 [ 785.664386][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.669142][ C0] do_group_exit+0xd3/0x2a0 [ 785.673634][ C0] __x64_sys_exit_group+0x3e/0x50 [ 785.678645][ C0] x64_sys_call+0x151c/0x1740 [ 785.683319][ C0] do_syscall_64+0xcd/0xf80 [ 785.687837][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.693722][ C0] RIP: 0033:0x7f24e098f7c9 [ 785.698138][ C0] RSP: 002b:00007ffc7cb7a8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 785.706553][ C0] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f24e098f7c9 [ 785.714523][ C0] RDX: 00007f24e098e240 RSI: 0000000000000004 RDI: 0000000000000043 [ 785.722480][ C0] RBP: 00007f24e0be67b8 R08: 00007ffc7cb78666 R09: 0000000000000008 [ 785.730436][ C0] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 785.738393][ C0] R13: 0000000000000003 R14: 00007ffc7cb7abb8 R15: 0000000000000000 [ 785.746373][ C0] [ 785.749379][ C0] task:syz-executor state:R running task stack:25800 pid:6130 tgid:6130 ppid:5820 task_flags:0x40010c flags:0x00080001 [ 785.762852][ C0] Call Trace: [ 785.766294][ C0] [ 785.769214][ C0] ? __schedule+0x10b9/0x6150 [ 785.773884][ C0] __schedule+0x1139/0x6150 [ 785.778378][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 785.783574][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 785.789676][ C0] ? __pfx___schedule+0x10/0x10 [ 785.794543][ C0] ? __queue_work+0x416/0x10e0 [ 785.799311][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 785.805466][ C0] preempt_schedule_notrace+0x62/0xe0 [ 785.810856][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 785.816781][ C0] rcu_is_watching+0x8e/0xc0 [ 785.821371][ C0] lock_acquire+0x2cd/0x330 [ 785.825869][ C0] ? __pfx_kcov_close+0x10/0x10 [ 785.830732][ C0] vfree+0x2ff/0xb50 [ 785.834620][ C0] ? vfree+0x2ee/0xb50 [ 785.838679][ C0] ? find_held_lock+0x2b/0x80 [ 785.843435][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.848205][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 785.854007][ C0] ? __pfx_kcov_close+0x10/0x10 [ 785.858859][ C0] kcov_close+0x34/0x60 [ 785.863015][ C0] __fput+0x402/0xb70 [ 785.866987][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 785.872275][ C0] task_work_run+0x150/0x240 [ 785.876946][ C0] ? __pfx_task_work_run+0x10/0x10 [ 785.882057][ C0] do_exit+0x87f/0x2bd0 [ 785.886205][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 785.891221][ C0] ? __pfx_do_exit+0x10/0x10 [ 785.895803][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.900566][ C0] do_group_exit+0xd3/0x2a0 [ 785.905060][ C0] __x64_sys_exit_group+0x3e/0x50 [ 785.910079][ C0] x64_sys_call+0x151c/0x1740 [ 785.914768][ C0] do_syscall_64+0xcd/0xf80 [ 785.919291][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.925171][ C0] RIP: 0033:0x7f4912f8f7c9 [ 785.929571][ C0] RSP: 002b:00007ffd7f45ec88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 785.938034][ C0] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f4912f8f7c9 [ 785.946002][ C0] RDX: 00007f4912f8e240 RSI: 0000000000000004 RDI: 0000000000000043 [ 785.954709][ C0] RBP: 00007f49131e67b8 R08: 00007ffd7f45ca26 R09: 0000000000000008 [ 785.962682][ C0] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 785.970730][ C0] R13: 0000000000000003 R14: 00007ffd7f45ef78 R15: 0000000000000000 [ 785.978701][ C0] [ 785.981710][ C0] rcu: rcu_preempt kthread starved for 1005 jiffies! g140565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 785.993152][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 786.003107][ C0] rcu: RCU grace-period kthread stack dump: [ 786.008980][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 786.022458][ C0] Call Trace: [ 786.025725][ C0] [ 786.028644][ C0] ? __schedule+0x10b9/0x6150 [ 786.033314][ C0] __schedule+0x1139/0x6150 [ 786.037809][ C0] ? __lock_acquire+0x436/0x2890 [ 786.042737][ C0] ? __mod_timer+0x8f2/0xd30 [ 786.047318][ C0] ? __pfx___schedule+0x10/0x10 [ 786.052156][ C0] ? find_held_lock+0x2b/0x80 [ 786.056845][ C0] ? schedule+0x2d7/0x3a0 [ 786.061165][ C0] schedule+0xe7/0x3a0 [ 786.065221][ C0] schedule_timeout+0x123/0x290 [ 786.070151][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 786.075512][ C0] ? __pfx_process_timeout+0x10/0x10 [ 786.080802][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 786.086597][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 786.092052][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 786.096812][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 786.102090][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.107369][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 786.112309][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 786.117154][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 786.122958][ C0] rcu_gp_kthread+0x26d/0x380 [ 786.127633][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 786.132905][ C0] ? rcu_is_watching+0x12/0xc0 [ 786.137665][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.142858][ C0] ? __kthread_parkme+0x19e/0x250 [ 786.147885][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 786.153112][ C0] kthread+0x3c5/0x780 [ 786.157167][ C0] ? __pfx_kthread+0x10/0x10 [ 786.161743][ C0] ? rcu_is_watching+0x12/0xc0 [ 786.167193][ C0] ? __pfx_kthread+0x10/0x10 [ 786.171775][ C0] ret_from_fork+0x983/0xb10 [ 786.176367][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 786.181469][ C0] ? __switch_to+0x7af/0x10d0 [ 786.186136][ C0] ? __pfx_kthread+0x10/0x10 [ 786.190801][ C0] ret_from_fork_asm+0x1a/0x30 [ 786.195570][ C0] [ 786.198578][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 786.204941][ C0] CPU: 0 UID: 0 PID: 19095 Comm: kworker/u10:8 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 786.216156][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 786.223558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.233689][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 786.240624][ C0] RIP: 0010:unwind_next_frame+0x2d7/0x20b0 [ 786.246425][ C0] Code: c2 01 48 3d 14 6d dc 91 0f 83 4d 08 00 00 41 89 d0 4f 8d 04 40 4f 8d 84 00 d4 cc 1a 91 49 81 f8 14 6d dc 91 0f 87 31 08 00 00 <29> ca 48 8d 3c bd 54 b7 99 90 4c 89 f9 48 89 c6 e8 14 f3 ff ff 48 [ 786.266020][ C0] RSP: 0018:ffffc90000006cb8 EFLAGS: 00000297 [ 786.272117][ C0] RAX: ffffffff91b1b70a RBX: 0000000000000002 RCX: 0000000000192709 [ 786.280166][ C0] RDX: 000000000019270a RSI: 00000000000a7975 RDI: 0000000000192709 [ 786.288135][ C0] RBP: ffffc90000006d70 R08: ffffffff91b1b710 R09: 00000000f501fefe [ 786.296194][ C0] R10: 0000000000000002 R11: 000000000008468a R12: ffffc90000006d78 [ 786.304211][ C0] R13: ffffc90000006d28 R14: ffffc90000006d5d R15: ffffffff89468a01 [ 786.312169][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 786.321082][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.327649][ C0] CR2: 0000559b8c86e608 CR3: 00000000252a4000 CR4: 00000000003526f0 [ 786.335606][ C0] Call Trace: [ 786.338877][ C0] [ 786.341704][ C0] ? process_backlog+0x4a2/0x1650 [ 786.346721][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 786.353095][ C0] arch_stack_walk+0x94/0x100 [ 786.357787][ C0] ? process_backlog+0x4a2/0x1650 [ 786.362825][ C0] stack_trace_save+0x8e/0xc0 [ 786.367533][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 786.372921][ C0] ? lock_acquire+0x179/0x330 [ 786.377588][ C0] kasan_save_stack+0x33/0x60 [ 786.382261][ C0] ? kasan_save_stack+0x33/0x60 [ 786.387112][ C0] ? kasan_save_track+0x14/0x30 [ 786.391955][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 786.396969][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 786.402703][ C0] ? skb_ext_add+0xf8/0x7b0 [ 786.407192][ C0] ? br_nf_forward_ip.part.0+0x28/0x810 [ 786.412730][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 786.417594][ C0] ? nf_hook_slow+0xbe/0x200 [ 786.422256][ C0] ? nf_hook+0x45e/0x780 [ 786.426486][ C0] ? __br_forward+0x1be/0x5b0 [ 786.431145][ C0] ? br_flood+0x39c/0x650 [ 786.435468][ C0] ? br_handle_frame_finish+0x1117/0x1f00 [ 786.441174][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 786.446274][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 786.452429][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 786.457986][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 786.463194][ C0] ? br_handle_frame+0xb28/0x14e0 [ 786.468296][ C0] ? __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 786.475167][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 786.481137][ C0] ? __netif_receive_skb+0x1d/0x160 [ 786.486325][ C0] ? process_backlog+0x4a2/0x1650 [ 786.491359][ C0] kasan_save_track+0x14/0x30 [ 786.496028][ C0] __kasan_slab_alloc+0x89/0x90 [ 786.501307][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 786.506781][ C0] ? skb_ext_add+0xf8/0x7b0 [ 786.511277][ C0] ? skb_ext_add+0xf8/0x7b0 [ 786.515764][ C0] skb_ext_add+0xf8/0x7b0 [ 786.520078][ C0] ? find_held_lock+0x2b/0x80 [ 786.524747][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 786.530147][ C0] br_nf_forward+0xf0f/0x1be0 [ 786.534834][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 786.539941][ C0] nf_hook_slow+0xbe/0x200 [ 786.544370][ C0] nf_hook+0x45e/0x780 [ 786.548435][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 786.553888][ C0] ? __pfx_nf_hook+0x10/0x10 [ 786.558554][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 786.564005][ C0] __br_forward+0x1be/0x5b0 [ 786.568498][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 786.573950][ C0] br_flood+0x39c/0x650 [ 786.578102][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 786.583646][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 786.589735][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 786.594577][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 786.599765][ C0] ? nf_hook_slow+0x132/0x200 [ 786.604523][ C0] br_nf_hook_thresh+0x307/0x410 [ 786.609454][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 786.615340][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 786.620791][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 786.626677][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 786.631862][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 786.637746][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 786.644091][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 786.650087][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 786.655978][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 786.661342][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 786.667227][ C0] ? lock_acquire+0x179/0x330 [ 786.671894][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 786.678390][ C0] ? net_generic+0xea/0x2a0 [ 786.682903][ C0] br_nf_pre_routing+0x860/0x15b0 [ 786.687934][ C0] br_handle_frame+0xb28/0x14e0 [ 786.692888][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 786.698183][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 786.704072][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 786.709351][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 786.716035][ C0] ? kmem_cache_free+0x2d8/0x770 [ 786.720971][ C0] ? find_held_lock+0x2b/0x80 [ 786.725640][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 786.730309][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 786.737428][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 786.742102][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 786.746765][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 786.751957][ C0] ? ip6_mc_input+0x515/0xf60 [ 786.756625][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 786.761640][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 786.766831][ C0] ? __lock_acquire+0x436/0x2890 [ 786.771763][ C0] ? process_backlog+0x450/0x1650 [ 786.776778][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 786.782574][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 786.789008][ C0] ? lock_acquire+0x179/0x330 [ 786.793693][ C0] ? process_backlog+0x450/0x1650 [ 786.798721][ C0] __netif_receive_skb+0x1d/0x160 [ 786.803751][ C0] process_backlog+0x4a2/0x1650 [ 786.808605][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 786.814413][ C0] net_rx_action+0x9f9/0xfa0 [ 786.819010][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 786.824124][ C0] ? mark_held_locks+0x49/0x80 [ 786.828895][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.834094][ C0] ? tmigr_handle_remote+0x132/0x380 [ 786.839391][ C0] ? run_timer_base+0x121/0x190 [ 786.844227][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 786.849413][ C0] handle_softirqs+0x219/0x950 [ 786.854172][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 786.859449][ C0] ? kernel_fpu_end+0x59/0x70 [ 786.864144][ C0] do_softirq+0xb2/0xf0 [ 786.868304][ C0] [ 786.871232][ C0] [ 786.874163][ C0] __local_bh_enable_ip+0x100/0x120 [ 786.879557][ C0] kernel_fpu_end+0x5e/0x70 [ 786.884101][ C0] blake2s_compress+0x77/0xe0 [ 786.888772][ C0] blake2s_final+0xc9/0x160 [ 786.893385][ C0] hmac.constprop.0+0x252/0x420 [ 786.898241][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 786.904221][ C0] ? __asan_memcpy+0x3c/0x60 [ 786.908816][ C0] ? __pfx_encode_point+0x10/0x10 [ 786.913910][ C0] kdf.constprop.0+0x122/0x280 [ 786.918684][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 786.923967][ C0] ? __pfx_curve25519+0x10/0x10 [ 786.928815][ C0] ? kdf.constprop.0+0x223/0x280 [ 786.933766][ C0] ? __pfx_mix_hash+0x10/0x10 [ 786.938450][ C0] mix_dh+0xd2/0x130 [ 786.942339][ C0] ? __pfx_mix_dh+0x10/0x10 [ 786.946843][ C0] wg_noise_handshake_create_initiation+0x337/0x610 [ 786.953429][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 786.960556][ C0] ? find_held_lock+0x2b/0x80 [ 786.965320][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 786.971374][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.976567][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 786.982791][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 786.989002][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 786.995541][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 787.002570][ C0] ? __lock_acquire+0x436/0x2890 [ 787.007516][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 787.013502][ C0] process_one_work+0x9ba/0x1b20 [ 787.018463][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 787.024611][ C0] ? __pfx_process_one_work+0x10/0x10 [ 787.029984][ C0] ? assign_work+0x1a0/0x250 [ 787.034598][ C0] worker_thread+0x6c8/0xf10 [ 787.039187][ C0] ? __kthread_parkme+0x19e/0x250 [ 787.044204][ C0] ? __pfx_worker_thread+0x10/0x10 [ 787.049387][ C0] kthread+0x3c5/0x780 [ 787.053460][ C0] ? __pfx_kthread+0x10/0x10 [ 787.058042][ C0] ? rcu_is_watching+0x12/0xc0 [ 787.062794][ C0] ? __pfx_kthread+0x10/0x10 [ 787.067374][ C0] ret_from_fork+0x983/0xb10 [ 787.071951][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 787.077049][ C0] ? __switch_to+0x7af/0x10d0 [ 787.081802][ C0] ? __pfx_kthread+0x10/0x10 [ 787.086385][ C0] ret_from_fork_asm+0x1a/0x30 [ 787.091149][ C0] [ 787.428645][ C0] net_ratelimit: 6447 callbacks suppressed [ 787.428661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.446768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 787.459112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 787.471395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.483676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.496428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.508965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.521324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.534609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.547301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 792.412369][ C0] net_ratelimit: 10547 callbacks suppressed [ 792.412386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.430660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.442957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.456218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.468527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 792.480908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:97:0f:94:3f:98, vlan:0) [ 792.493221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.505514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.518288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.530737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)