last executing test programs: 18m4.391533263s ago: executing program 2 (id=752): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x41) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) 18m0.203078131s ago: executing program 2 (id=755): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c80)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) r5 = fsmount(r1, 0x1, 0x2) fchdir(r5) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) close(0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) 17m57.87328615s ago: executing program 2 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x6, 0x3, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) 17m56.583374094s ago: executing program 2 (id=761): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000e40)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x800, 0x0, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @local, {[@lsrr={0x83, 0x3, 0x6a}]}}}}}) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x7fffffff, 0xfffffffd, 0x68, 0x2, 0x800, 0x10000, 0x3ff, 0x400}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80022000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020000}, 0x24008000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e6062, &(0x7f0000000000)={[{@gid}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20060810}, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002c40), 0x800, 0x0) read$FUSE(r9, &(0x7f0000002f40)={0x2020}, 0x2020) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/142) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x13, 0xe, 0x4f, &(0x7f00000004c0)="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"}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 17m53.771778456s ago: executing program 2 (id=771): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 17m50.48314745s ago: executing program 2 (id=779): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) 17m34.305687845s ago: executing program 32 (id=779): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) 17m17.675520442s ago: executing program 3 (id=856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) 17m17.033345699s ago: executing program 3 (id=857): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000400)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m16.889465512s ago: executing program 3 (id=859): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x1000000007}) 17m16.743535296s ago: executing program 3 (id=860): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m16.480745673s ago: executing program 3 (id=861): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17m16.317212897s ago: executing program 3 (id=862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m1.203175225s ago: executing program 33 (id=862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.545439028s ago: executing program 5 (id=5444): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffd24, r3}) 2.44859062s ago: executing program 5 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x8}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x54, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) 2.323276253s ago: executing program 5 (id=5448): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102400000070502"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) poll(&(0x7f0000000240)=[{r0, 0x2a1}], 0x1, 0x3) 1.369066977s ago: executing program 0 (id=5458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88faa027b", @random="23c53622533e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.059584224s ago: executing program 0 (id=5459): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)="00000088fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010010020000000000000000000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000008000"/153, 0x99) 992.965696ms ago: executing program 4 (id=5460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x8, 0x0, &(0x7f0000000200)="01"}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, 0x0) 943.030637ms ago: executing program 5 (id=5461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000120), 0x0) 867.611199ms ago: executing program 4 (id=5462): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffd24, r3}) 867.415079ms ago: executing program 1 (id=5463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1) 862.328109ms ago: executing program 5 (id=5464): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xbc58}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7fe0, 0x8, 0x61d, 0x3}, {0x1, 0x2, 0x6, 0x101, 0x6d0, 0xffffffff}, 0x2003, 0x33, 0xe01}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 809.89501ms ago: executing program 4 (id=5465): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000240)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @broadcast, @from_mac=@device_b}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x6c}}, @void, @val={0x3c, 0x4, {0x1, 0x3, 0x1, 0xf3}}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0xe920, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x7ff, 0x8}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x4}}, @void}, 0x5c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 603.633115ms ago: executing program 1 (id=5466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='255\x00', 0x4) 534.017917ms ago: executing program 1 (id=5467): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x6, @local}, 0x48, {0x2, 0x4ea1, @multicast1}, 'bridge_slave_1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 417.11701ms ago: executing program 1 (id=5468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x1) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) 397.24691ms ago: executing program 5 (id=5469): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102400000070502"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) poll(&(0x7f0000000240)=[{r0, 0x2a1}], 0x1, 0x3) 267.543144ms ago: executing program 1 (id=5470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x8, 0x0, &(0x7f0000000200)="01"}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x8, 0x0, &(0x7f0000000200)="01"}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0}]}) 225.352015ms ago: executing program 0 (id=5471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write(r0, &(0x7f0000000120)='0-', 0x2) 193.611475ms ago: executing program 1 (id=5472): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020410e4d4140000102030109026e000301004002080b"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000500)=""/4096, 0x1000) 108.155798ms ago: executing program 4 (id=5473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000120), 0x0) 107.887178ms ago: executing program 0 (id=5474): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffd24, r2}) 39.563329ms ago: executing program 4 (id=5475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) 39.346159ms ago: executing program 0 (id=5476): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x6, @local}, 0x48, {0x2, 0x4ea1, @multicast1}, 'bridge_slave_1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 22.95141ms ago: executing program 0 (id=5477): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xbc58}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7fe0, 0x8, 0x61d, 0x3}, {0x1, 0x2, 0x6, 0x101, 0x6d0, 0xffffffff}, 0x2003, 0x33, 0xe01}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=5478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100\x00', 0x3) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) kernel console output (not intermixed with test programs): R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 1368.108184][ C1] R13: ffff888027acec00 R14: ffff888058565408 R15: 1ffff92000698f40 [ 1368.116177][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1368.121044][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 1368.126082][ C1] kcov_task_exit+0xb0/0x140 [ 1368.130679][ C1] do_exit+0x292/0x2530 [ 1368.134854][ C1] ? put_task_struct+0xc0/0xc0 [ 1368.139647][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1368.145645][ C1] ? get_signal+0x100e/0x1390 [ 1368.150330][ C1] ? lock_chain_count+0x20/0x20 [ 1368.155199][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1368.160242][ C1] do_group_exit+0x22d/0x2f0 [ 1368.164847][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.170054][ C1] get_signal+0x12a6/0x1390 [ 1368.174574][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1368.180148][ C1] ? __x64_sys_wait4+0x1b8/0x240 [ 1368.185090][ C1] ? get_sigframe_size+0x20/0x20 [ 1368.190054][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1368.195528][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1368.200827][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1368.206387][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1368.211858][ C1] do_syscall_64+0x61/0xb0 [ 1368.216280][ C1] ? clear_bhb_loop+0x40/0x90 [ 1368.220964][ C1] ? clear_bhb_loop+0x40/0x90 [ 1368.225654][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.231548][ C1] RIP: 0033:0x7fddadd59017 [ 1368.235967][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1368.255577][ C1] RSP: 002b:00007fff77cb0400 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1368.263998][ C1] RAX: fffffffffffffe00 RBX: 000055556091a500 RCX: 00007fddadd59017 [ 1368.271972][ C1] RDX: 0000000040000000 RSI: 00007fff77cb045c RDI: ffffffffffffffff [ 1368.279945][ C1] RBP: 00007fff77cb045c R08: 0000000000000000 R09: 0000000000000000 [ 1368.287915][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1368.295888][ C1] R13: 0000000000000003 R14: 00007fff77cb06b8 R15: 0000000000000000 [ 1368.303874][ C1] [ 1368.306901][ C0] CPU: 0 PID: 18101 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1368.314533][T14313] page_pool_release_retry() stalled pool shutdown 1 inflight 911 sec [ 1368.322597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1368.322614][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1368.339858][ C0] Call Trace: [ 1368.343148][ C0] [ 1368.346003][ C0] dump_stack_lvl+0x18c/0x250 [ 1368.350710][ C0] ? show_regs_print_info+0x20/0x20 [ 1368.355928][ C0] ? load_image+0x420/0x420 [ 1368.360453][ C0] should_fail_ex+0x394/0x4c0 [ 1368.365144][ C0] should_failslab+0x9/0x20 [ 1368.369661][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1368.373297][T23339] FAULT_INJECTION: forcing a failure. [ 1368.373297][T23339] name failslab, interval 1, probability 10, space 0, times 49 [ 1368.374683][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1368.388239][ T5755] FAULT_INJECTION: forcing a failure. [ 1368.388239][ T5755] name failslab, interval 1, probability 10, space 0, times 49 [ 1368.392856][ C0] ? kmalloc_reserve+0x95/0x240 [ 1368.410508][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1368.415723][ C0] ? __alloc_skb+0x103/0x2c0 [ 1368.420318][ C0] __alloc_skb+0x103/0x2c0 [ 1368.423790][ T3434] FAULT_INJECTION: forcing a failure. [ 1368.423790][ T3434] name failslab, interval 1, probability 10, space 0, times 49 [ 1368.424732][ C0] aoecmd_cfg+0x2c5/0xa50 [ 1368.424763][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 1368.446610][ C0] ? ktcomplete+0x2a0/0x2a0 [ 1368.451136][ C0] call_timer_fn+0x189/0x540 [ 1368.455739][ C0] ? skbfree+0x340/0x340 [ 1368.459988][ C0] ? call_timer_fn+0xd2/0x540 [ 1368.464665][ C0] ? __run_timers+0x810/0x810 [ 1368.469354][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1368.474561][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.479763][ C0] ? skbfree+0x340/0x340 [ 1368.484010][ C0] __run_timers+0x570/0x810 [ 1368.488529][ C0] ? detach_timer+0x2b0/0x2b0 [ 1368.493216][ C0] ? lock_chain_count+0x20/0x20 [ 1368.498077][ C0] run_timer_softirq+0x67/0xf0 [ 1368.502845][ C0] handle_softirqs+0x27d/0x820 [ 1368.507607][ C0] ? read_tsc+0x9/0x20 [ 1368.511678][ C0] ? ktime_get+0x24b/0x280 [ 1368.516100][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1368.521801][ C0] ? do_softirq+0x1a0/0x1a0 [ 1368.526322][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1368.531579][ C0] __irq_exit_rcu+0xd3/0x190 [ 1368.536194][ C0] ? irq_exit_rcu+0x20/0x20 [ 1368.540707][ C0] irq_exit_rcu+0x9/0x20 [ 1368.544953][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1368.550683][ C0] [ 1368.553614][ C0] [ 1368.556552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1368.562544][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1368.568445][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1368.588056][ C0] RSP: 0018:ffffc9000351f898 EFLAGS: 00000293 [ 1368.594126][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88807b549e00 [ 1368.602098][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1368.610066][ C0] RBP: ffffc9000351f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1368.618036][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1368.626011][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006a3f18 [ 1368.633993][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1368.639383][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1368.644758][ C0] dump_stack_lvl+0x165/0x250 [ 1368.649457][ C0] ? show_regs_print_info+0x20/0x20 [ 1368.654674][ C0] ? load_image+0x420/0x420 [ 1368.659191][ C0] ? mark_lock+0x94/0x320 [ 1368.663544][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1368.669534][ C0] should_fail_ex+0x394/0x4c0 [ 1368.674223][ C0] should_failslab+0x9/0x20 [ 1368.678738][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1368.683775][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1368.688981][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1368.694625][ C0] ? __alloc_skb+0x103/0x2c0 [ 1368.699219][ C0] __alloc_skb+0x103/0x2c0 [ 1368.703645][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1368.709289][ C0] ? process_scheduled_works+0x975/0x1600 [ 1368.715016][ C0] process_scheduled_works+0xa60/0x1600 [ 1368.720588][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1368.726058][ C0] ? assign_work+0x3cc/0x5d0 [ 1368.730657][ C0] worker_thread+0xa5e/0xfe0 [ 1368.733350][ C1] FAULT_INJECTION: forcing a failure. [ 1368.733350][ C1] name failslab, interval 1, probability 10, space 0, times 49 [ 1368.735248][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1368.753887][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1368.758747][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1368.763698][ C0] kthread+0x2fa/0x390 [ 1368.767798][ C0] ? pr_cont_work+0x550/0x550 [ 1368.772482][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1368.777094][ C0] ret_from_fork+0x48/0x80 [ 1368.781571][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1368.786199][ C0] ret_from_fork_asm+0x11/0x20 [ 1368.790990][ C0] [ 1368.794015][ C1] CPU: 1 PID: 3434 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1368.794045][ C0] aoe: skb alloc failure [ 1368.801560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1368.805867][ C0] FAULT_INJECTION: forcing a failure. [ 1368.805867][ C0] name failslab, interval 1, probability 10, space 0, times 48 [ 1368.815818][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1368.815847][ C1] Call Trace: [ 1368.838627][ C1] [ 1368.841473][ C1] dump_stack_lvl+0x18c/0x250 [ 1368.846159][ C1] ? show_regs_print_info+0x20/0x20 [ 1368.851385][ C1] ? load_image+0x420/0x420 [ 1368.855902][ C1] ? verify_lock_unused+0x140/0x140 [ 1368.861115][ C1] should_fail_ex+0x394/0x4c0 [ 1368.865804][ C1] should_failslab+0x9/0x20 [ 1368.870315][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1368.875370][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1368.880576][ C1] ? __alloc_skb+0x103/0x2c0 [ 1368.885173][ C1] __alloc_skb+0x103/0x2c0 [ 1368.889592][ C1] wg_packet_send_keepalive+0x65/0x2b0 [ 1368.895062][ C1] call_timer_fn+0x189/0x540 [ 1368.899655][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1368.905727][ C1] ? call_timer_fn+0xd2/0x540 [ 1368.910404][ C1] ? __run_timers+0x810/0x810 [ 1368.915093][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1368.920301][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.925507][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1368.931781][ C1] __run_timers+0x570/0x810 [ 1368.936317][ C1] ? detach_timer+0x2b0/0x2b0 [ 1368.941009][ C1] ? lock_chain_count+0x20/0x20 [ 1368.945877][ C1] run_timer_softirq+0x67/0xf0 [ 1368.950652][ C1] handle_softirqs+0x27d/0x820 [ 1368.955421][ C1] ? read_tsc+0x9/0x20 [ 1368.959494][ C1] ? ktime_get+0x24b/0x280 [ 1368.963917][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1368.968710][ C1] ? do_softirq+0x1a0/0x1a0 [ 1368.973236][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1368.978456][ C1] __irq_exit_rcu+0xd3/0x190 [ 1368.983061][ C1] ? irq_exit_rcu+0x20/0x20 [ 1368.987586][ C1] irq_exit_rcu+0x9/0x20 [ 1368.991839][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1368.997489][ C1] [ 1369.000428][ C1] [ 1369.003365][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1369.010852][ C1] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1369.016767][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1369.036375][ C1] RSP: 0018:ffffc9000ccd7898 EFLAGS: 00000293 [ 1369.042450][ C1] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88802d715a00 [ 1369.050509][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1369.058482][ C1] RBP: ffffc9000ccd79a0 R08: 0000000000000003 R09: 0000000000000004 [ 1369.066453][ C1] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1369.074423][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200199af18 [ 1369.082401][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1369.087791][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1369.093166][ C1] dump_stack_lvl+0x165/0x250 [ 1369.097854][ C1] ? show_regs_print_info+0x20/0x20 [ 1369.103056][ C1] ? load_image+0x420/0x420 [ 1369.107574][ C1] ? mark_lock+0x94/0x320 [ 1369.111909][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1369.117900][ C1] should_fail_ex+0x394/0x4c0 [ 1369.122589][ C1] should_failslab+0x9/0x20 [ 1369.127106][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1369.132146][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1369.137350][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1369.142985][ C1] ? __alloc_skb+0x103/0x2c0 [ 1369.147583][ C1] __alloc_skb+0x103/0x2c0 [ 1369.152005][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1369.157651][ C1] ? process_scheduled_works+0x975/0x1600 [ 1369.163379][ C1] process_scheduled_works+0xa60/0x1600 [ 1369.168951][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1369.174420][ C1] ? assign_work+0x3cc/0x5d0 [ 1369.179020][ C1] worker_thread+0xa5e/0xfe0 [ 1369.183628][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1369.188489][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1369.193434][ C1] kthread+0x2fa/0x390 [ 1369.197529][ C1] ? pr_cont_work+0x550/0x550 [ 1369.202218][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1369.206811][ C1] ret_from_fork+0x48/0x80 [ 1369.211232][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1369.215822][ C1] ret_from_fork_asm+0x11/0x20 [ 1369.220608][ C1] [ 1369.223629][ C0] CPU: 0 PID: 18101 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1369.231279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1369.241332][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1369.248100][ C0] Call Trace: [ 1369.251378][ C0] [ 1369.254222][ C0] dump_stack_lvl+0x18c/0x250 [ 1369.258903][ C0] ? show_regs_print_info+0x20/0x20 [ 1369.264103][ C0] ? load_image+0x420/0x420 [ 1369.268625][ C0] should_fail_ex+0x394/0x4c0 [ 1369.273312][ C0] should_failslab+0x9/0x20 [ 1369.277821][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1369.282852][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1369.288317][ C0] ? kmalloc_reserve+0x95/0x240 [ 1369.293167][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1369.298377][ C0] ? __alloc_skb+0x103/0x2c0 [ 1369.302978][ C0] __alloc_skb+0x103/0x2c0 [ 1369.307399][ C0] aoecmd_cfg+0x2c5/0xa50 [ 1369.311736][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 1369.316242][ C0] ? ktcomplete+0x2a0/0x2a0 [ 1369.320769][ C0] call_timer_fn+0x189/0x540 [ 1369.325359][ C0] ? skbfree+0x340/0x340 [ 1369.329602][ C0] ? call_timer_fn+0xd2/0x540 [ 1369.334278][ C0] ? __run_timers+0x810/0x810 [ 1369.338958][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1369.344165][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1369.349364][ C0] ? skbfree+0x340/0x340 [ 1369.354045][ C0] __run_timers+0x570/0x810 [ 1369.358570][ C0] ? detach_timer+0x2b0/0x2b0 [ 1369.363256][ C0] ? lock_chain_count+0x20/0x20 [ 1369.368115][ C0] run_timer_softirq+0x67/0xf0 [ 1369.372884][ C0] handle_softirqs+0x27d/0x820 [ 1369.377650][ C0] ? read_tsc+0x9/0x20 [ 1369.381728][ C0] ? ktime_get+0x24b/0x280 [ 1369.386154][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1369.390926][ C0] ? do_softirq+0x1a0/0x1a0 [ 1369.395434][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1369.400637][ C0] __irq_exit_rcu+0xd3/0x190 [ 1369.405227][ C0] ? irq_exit_rcu+0x20/0x20 [ 1369.409738][ C0] irq_exit_rcu+0x9/0x20 [ 1369.413977][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1369.419619][ C0] [ 1369.422553][ C0] [ 1369.425484][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1369.431468][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1369.437393][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1369.457283][ C0] RSP: 0018:ffffc9000351f898 EFLAGS: 00000293 [ 1369.463352][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88807b549e00 [ 1369.471323][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1369.479291][ C0] RBP: ffffc9000351f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1369.487259][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1369.495233][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006a3f18 [ 1369.503216][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1369.508638][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1369.514015][ C0] dump_stack_lvl+0x165/0x250 [ 1369.518699][ C0] ? show_regs_print_info+0x20/0x20 [ 1369.523898][ C0] ? load_image+0x420/0x420 [ 1369.528407][ C0] ? mark_lock+0x94/0x320 [ 1369.532743][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1369.538732][ C0] should_fail_ex+0x394/0x4c0 [ 1369.543417][ C0] should_failslab+0x9/0x20 [ 1369.547925][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1369.552963][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1369.558167][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1369.563800][ C0] ? __alloc_skb+0x103/0x2c0 [ 1369.568400][ C0] __alloc_skb+0x103/0x2c0 [ 1369.572818][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1369.578460][ C0] ? process_scheduled_works+0x975/0x1600 [ 1369.584187][ C0] process_scheduled_works+0xa60/0x1600 [ 1369.589757][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1369.595246][ C0] ? assign_work+0x3cc/0x5d0 [ 1369.599843][ C0] worker_thread+0xa5e/0xfe0 [ 1369.604446][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1369.610352][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1369.615207][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1369.620152][ C0] kthread+0x2fa/0x390 [ 1369.624218][ C0] ? pr_cont_work+0x550/0x550 [ 1369.628900][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1369.633490][ C0] ret_from_fork+0x48/0x80 [ 1369.637913][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1369.642503][ C0] ret_from_fork_asm+0x11/0x20 [ 1369.647289][ C0] [ 1369.650304][ T3434] CPU: 1 PID: 3434 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1369.650338][ C0] aoe: skb alloc failure [ 1369.657848][ T3434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1369.657861][ T3434] Workqueue: events_unbound nsim_dev_trap_report_work [ 1369.662150][ C0] aoe: skb alloc failure [ 1369.672122][ T3434] Call Trace: [ 1369.672131][ T3434] [ 1369.672140][ T3434] dump_stack_lvl+0x18c/0x250 [ 1369.679147][ C0] aoe: skb alloc failure [ 1369.683120][ T3434] ? show_regs_print_info+0x20/0x20 [ 1369.686557][ C0] aoe: skb alloc failure [ 1369.689301][ T3434] ? load_image+0x420/0x420 [ 1369.694184][ C0] FAULT_INJECTION: forcing a failure. [ 1369.694184][ C0] name failslab, interval 1, probability 10, space 0, times 43 [ 1369.698199][ T3434] ? mark_lock+0x94/0x320 [ 1369.729203][ T3434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1369.735193][ T3434] should_fail_ex+0x394/0x4c0 [ 1369.739879][ T3434] should_failslab+0x9/0x20 [ 1369.744389][ T3434] slab_pre_alloc_hook+0x59/0x300 [ 1369.749424][ T3434] kmem_cache_alloc_node+0x5e/0x310 [ 1369.754629][ T3434] ? slab_free_freelist_hook+0x130/0x1a0 [ 1369.760262][ T3434] ? __alloc_skb+0x103/0x2c0 [ 1369.764857][ T3434] __alloc_skb+0x103/0x2c0 [ 1369.769275][ T3434] nsim_dev_trap_report_work+0x253/0xa90 [ 1369.774919][ T3434] ? process_scheduled_works+0x975/0x1600 [ 1369.780650][ T3434] process_scheduled_works+0xa60/0x1600 [ 1369.786227][ T3434] ? worker_attach_to_pool+0x370/0x370 [ 1369.791692][ T3434] ? assign_work+0x3cc/0x5d0 [ 1369.796288][ T3434] worker_thread+0xa5e/0xfe0 [ 1369.800921][ T3434] ? _raw_spin_unlock+0x40/0x40 [ 1369.805796][ T3434] ? __kthread_parkme+0x71/0x1c0 [ 1369.810756][ T3434] kthread+0x2fa/0x390 [ 1369.814841][ T3434] ? pr_cont_work+0x550/0x550 [ 1369.819540][ T3434] ? kthread_blkcg+0xd0/0xd0 [ 1369.824134][ T3434] ret_from_fork+0x48/0x80 [ 1369.828560][ T3434] ? kthread_blkcg+0xd0/0xd0 [ 1369.833156][ T3434] ret_from_fork_asm+0x11/0x20 [ 1369.837943][ T3434] [ 1369.840963][ C0] CPU: 0 PID: 18101 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1369.841195][ T3434] FAULT_INJECTION: forcing a failure. [ 1369.841195][ T3434] name failslab, interval 1, probability 10, space 0, times 42 [ 1369.848600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1369.848619][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1369.848646][ C0] Call Trace: [ 1369.848657][ C0] [ 1369.884346][ C0] dump_stack_lvl+0x18c/0x250 [ 1369.889043][ C0] ? show_regs_print_info+0x20/0x20 [ 1369.894247][ C0] ? load_image+0x420/0x420 [ 1369.898776][ C0] should_fail_ex+0x394/0x4c0 [ 1369.903468][ C0] should_failslab+0x9/0x20 [ 1369.907981][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1369.913015][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1369.918484][ C0] ? kmalloc_reserve+0x95/0x240 [ 1369.923343][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1369.928552][ C0] ? __alloc_skb+0x103/0x2c0 [ 1369.933146][ C0] __alloc_skb+0x103/0x2c0 [ 1369.937567][ C0] aoecmd_cfg+0x2c5/0xa50 [ 1369.941904][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 1369.946413][ C0] ? ktcomplete+0x2a0/0x2a0 [ 1369.950937][ C0] call_timer_fn+0x189/0x540 [ 1369.955531][ C0] ? skbfree+0x340/0x340 [ 1369.959774][ C0] ? call_timer_fn+0xd2/0x540 [ 1369.964453][ C0] ? __run_timers+0x810/0x810 [ 1369.969136][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1369.974344][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1369.979544][ C0] ? skbfree+0x340/0x340 [ 1369.983793][ C0] __run_timers+0x570/0x810 [ 1369.988334][ C0] ? detach_timer+0x2b0/0x2b0 [ 1369.993018][ C0] ? lock_chain_count+0x20/0x20 [ 1369.997876][ C0] run_timer_softirq+0x67/0xf0 [ 1370.002643][ C0] handle_softirqs+0x27d/0x820 [ 1370.007409][ C0] ? read_tsc+0x9/0x20 [ 1370.011479][ C0] ? ktime_get+0x24b/0x280 [ 1370.015902][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1370.020670][ C0] ? do_softirq+0x1a0/0x1a0 [ 1370.025180][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1370.030385][ C0] __irq_exit_rcu+0xd3/0x190 [ 1370.034977][ C0] ? irq_exit_rcu+0x20/0x20 [ 1370.039489][ C0] irq_exit_rcu+0x9/0x20 [ 1370.043733][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1370.049375][ C0] [ 1370.052305][ C0] [ 1370.055239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1370.061222][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1370.067120][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1370.086725][ C0] RSP: 0018:ffffc9000351f898 EFLAGS: 00000293 [ 1370.092792][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88807b549e00 [ 1370.100766][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1370.108741][ C0] RBP: ffffc9000351f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1370.116713][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1370.124706][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006a3f18 [ 1370.132693][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1370.138088][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1370.143466][ C0] dump_stack_lvl+0x165/0x250 [ 1370.148152][ C0] ? show_regs_print_info+0x20/0x20 [ 1370.153352][ C0] ? load_image+0x420/0x420 [ 1370.157873][ C0] ? mark_lock+0x94/0x320 [ 1370.162212][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1370.168208][ C0] should_fail_ex+0x394/0x4c0 [ 1370.172898][ C0] should_failslab+0x9/0x20 [ 1370.177412][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1370.182448][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1370.187652][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1370.193283][ C0] ? __alloc_skb+0x103/0x2c0 [ 1370.197874][ C0] __alloc_skb+0x103/0x2c0 [ 1370.202291][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1370.207935][ C0] ? process_scheduled_works+0x975/0x1600 [ 1370.213664][ C0] process_scheduled_works+0xa60/0x1600 [ 1370.219239][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1370.224704][ C0] ? assign_work+0x3cc/0x5d0 [ 1370.229301][ C0] worker_thread+0xa5e/0xfe0 [ 1370.233900][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1370.239799][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1370.244654][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1370.249598][ C0] kthread+0x2fa/0x390 [ 1370.253671][ C0] ? pr_cont_work+0x550/0x550 [ 1370.258353][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1370.262949][ C0] ret_from_fork+0x48/0x80 [ 1370.267367][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1370.271960][ C0] ret_from_fork_asm+0x11/0x20 [ 1370.276738][ C0] [ 1370.279755][ T3434] CPU: 1 PID: 3434 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1370.279789][ C0] aoe: skb alloc failure [ 1370.287300][ T3434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1370.287313][ T3434] Workqueue: events_unbound nsim_dev_trap_report_work [ 1370.291605][ C0] aoe: skb alloc failure [ 1370.301576][ T3434] Call Trace: [ 1370.301587][ T3434] [ 1370.301595][ T3434] dump_stack_lvl+0x18c/0x250 [ 1370.308593][ C0] aoe: skb alloc failure [ 1370.312563][ T3434] ? show_regs_print_info+0x20/0x20 [ 1370.317085][ C0] FAULT_INJECTION: forcing a failure. [ 1370.317085][ C0] name failslab, interval 1, probability 10, space 0, times 39 [ 1370.318744][ T3434] ? load_image+0x420/0x420 [ 1370.350699][ T3434] ? mark_lock+0x94/0x320 [ 1370.355044][ T3434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1370.361033][ T3434] should_fail_ex+0x394/0x4c0 [ 1370.365721][ T3434] should_failslab+0x9/0x20 [ 1370.370230][ T3434] slab_pre_alloc_hook+0x59/0x300 [ 1370.375267][ T3434] kmem_cache_alloc_node+0x5e/0x310 [ 1370.380474][ T3434] ? slab_free_freelist_hook+0x130/0x1a0 [ 1370.386104][ T3434] ? __alloc_skb+0x103/0x2c0 [ 1370.390700][ T3434] __alloc_skb+0x103/0x2c0 [ 1370.395119][ T3434] nsim_dev_trap_report_work+0x253/0xa90 [ 1370.400767][ T3434] ? process_scheduled_works+0x975/0x1600 [ 1370.406495][ T3434] process_scheduled_works+0xa60/0x1600 [ 1370.412069][ T3434] ? worker_attach_to_pool+0x370/0x370 [ 1370.417539][ T3434] ? assign_work+0x3cc/0x5d0 [ 1370.422162][ T3434] worker_thread+0xa5e/0xfe0 [ 1370.426776][ T3434] ? _raw_spin_unlock+0x40/0x40 [ 1370.431633][ T3434] ? __kthread_parkme+0x71/0x1c0 [ 1370.436666][ T3434] kthread+0x2fa/0x390 [ 1370.441253][ T3434] ? pr_cont_work+0x550/0x550 [ 1370.445935][ T3434] ? kthread_blkcg+0xd0/0xd0 [ 1370.450616][ T3434] ret_from_fork+0x48/0x80 [ 1370.455033][ T3434] ? kthread_blkcg+0xd0/0xd0 [ 1370.459621][ T3434] ret_from_fork_asm+0x11/0x20 [ 1370.464405][ T3434] [ 1370.467431][ C0] CPU: 0 PID: 18101 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1370.467703][ C1] FAULT_INJECTION: forcing a failure. [ 1370.467703][ C1] name failslab, interval 1, probability 10, space 0, times 39 [ 1370.475073][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1370.475089][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1370.475117][ C0] Call Trace: [ 1370.507938][ C0] [ 1370.510784][ C0] dump_stack_lvl+0x18c/0x250 [ 1370.515472][ C0] ? show_regs_print_info+0x20/0x20 [ 1370.520673][ C0] ? load_image+0x420/0x420 [ 1370.525185][ C0] ? mark_lock+0x94/0x320 [ 1370.529525][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1370.535516][ C0] should_fail_ex+0x394/0x4c0 [ 1370.540207][ C0] should_failslab+0x9/0x20 [ 1370.544719][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1370.549752][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1370.555129][ C0] kmem_cache_alloc+0x5a/0x2c0 [ 1370.559900][ C0] ? skb_clone+0x1eb/0x370 [ 1370.564323][ C0] skb_clone+0x1eb/0x370 [ 1370.568569][ C0] hsr_forward_skb+0xefd/0x20b0 [ 1370.573446][ C0] ? hsr_forward_skb+0xb1/0x20b0 [ 1370.578398][ C0] ? prp_fill_frame_info+0x760/0x760 [ 1370.583696][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1370.588737][ C0] ? __skb_pad+0x3f3/0x5f0 [ 1370.593157][ C0] send_hsr_supervision_frame+0x5fb/0xb90 [ 1370.598898][ C0] hsr_announce+0x198/0x350 [ 1370.603411][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1370.608792][ C0] ? hsr_announce+0x84/0x350 [ 1370.613393][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1370.618441][ C0] call_timer_fn+0x189/0x540 [ 1370.623031][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1370.628323][ C0] ? call_timer_fn+0xd2/0x540 [ 1370.633005][ C0] ? __run_timers+0x810/0x810 [ 1370.637693][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1370.642900][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1370.648102][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1370.653133][ C0] __run_timers+0x570/0x810 [ 1370.657666][ C0] ? detach_timer+0x2b0/0x2b0 [ 1370.662372][ C0] ? lock_chain_count+0x20/0x20 [ 1370.667234][ C0] run_timer_softirq+0x67/0xf0 [ 1370.672002][ C0] handle_softirqs+0x27d/0x820 [ 1370.676768][ C0] ? read_tsc+0x9/0x20 [ 1370.680837][ C0] ? ktime_get+0x24b/0x280 [ 1370.685258][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1370.690025][ C0] ? do_softirq+0x1a0/0x1a0 [ 1370.694534][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1370.699741][ C0] __irq_exit_rcu+0xd3/0x190 [ 1370.704331][ C0] ? irq_exit_rcu+0x20/0x20 [ 1370.708846][ C0] irq_exit_rcu+0x9/0x20 [ 1370.713088][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1370.718731][ C0] [ 1370.721661][ C0] [ 1370.724609][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1370.730594][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1370.736516][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1370.756121][ C0] RSP: 0018:ffffc9000351f898 EFLAGS: 00000293 [ 1370.762363][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88807b549e00 [ 1370.770334][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1370.778307][ C0] RBP: ffffc9000351f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1370.786283][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1370.794258][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006a3f18 [ 1370.802234][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1370.807625][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1370.813001][ C0] dump_stack_lvl+0x165/0x250 [ 1370.817683][ C0] ? show_regs_print_info+0x20/0x20 [ 1370.822885][ C0] ? load_image+0x420/0x420 [ 1370.827397][ C0] ? mark_lock+0x94/0x320 [ 1370.831737][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1370.837725][ C0] should_fail_ex+0x394/0x4c0 [ 1370.842422][ C0] should_failslab+0x9/0x20 [ 1370.846933][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1370.851971][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1370.857176][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1370.862810][ C0] ? __alloc_skb+0x103/0x2c0 [ 1370.867406][ C0] __alloc_skb+0x103/0x2c0 [ 1370.871834][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1370.877479][ C0] ? process_scheduled_works+0x975/0x1600 [ 1370.883208][ C0] process_scheduled_works+0xa60/0x1600 [ 1370.888792][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1370.894262][ C0] ? assign_work+0x3cc/0x5d0 [ 1370.898867][ C0] worker_thread+0xa5e/0xfe0 [ 1370.905005][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1370.910925][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1370.915789][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1370.920740][ C0] kthread+0x2fa/0x390 [ 1370.924821][ C0] ? pr_cont_work+0x550/0x550 [ 1370.929514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1370.934128][ C0] ret_from_fork+0x48/0x80 [ 1370.938561][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1370.943153][ C0] ret_from_fork_asm+0x11/0x20 [ 1370.947948][ C0] [ 1370.950972][ C1] CPU: 1 PID: 3434 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1370.958535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1370.968679][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1370.975450][ C1] Call Trace: [ 1370.978728][ C1] [ 1370.981574][ C1] dump_stack_lvl+0x18c/0x250 [ 1370.986255][ C1] ? lock_chain_count+0x20/0x20 [ 1370.991105][ C1] ? show_regs_print_info+0x20/0x20 [ 1370.996304][ C1] ? load_image+0x420/0x420 [ 1371.000811][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1371.006190][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1371.011560][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1371.016413][ C1] should_fail_ex+0x394/0x4c0 [ 1371.021102][ C1] should_failslab+0x9/0x20 [ 1371.025611][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1371.030667][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1371.035871][ C1] ? __alloc_skb+0x103/0x2c0 [ 1371.040469][ C1] __alloc_skb+0x103/0x2c0 [ 1371.044893][ C1] __pskb_copy_fclone+0xac/0x1000 [ 1371.049929][ C1] tipc_udp_send_msg+0x25a/0x3e0 [ 1371.054873][ C1] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 1371.060075][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 1371.065360][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 1371.070651][ C1] tipc_disc_timeout+0x5f7/0x750 [ 1371.075595][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1371.080841][ C1] call_timer_fn+0x189/0x540 [ 1371.085450][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1371.090756][ C1] ? call_timer_fn+0xd2/0x540 [ 1371.095439][ C1] ? __run_timers+0x810/0x810 [ 1371.100128][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1371.105336][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1371.110824][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1371.116037][ C1] __run_timers+0x570/0x810 [ 1371.120554][ C1] ? detach_timer+0x2b0/0x2b0 [ 1371.125237][ C1] ? lock_chain_count+0x20/0x20 [ 1371.130121][ C1] run_timer_softirq+0x67/0xf0 [ 1371.134889][ C1] handle_softirqs+0x27d/0x820 [ 1371.139674][ C1] ? read_tsc+0x9/0x20 [ 1371.143751][ C1] ? ktime_get+0x24b/0x280 [ 1371.148177][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1371.152942][ C1] ? do_softirq+0x1a0/0x1a0 [ 1371.157448][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1371.162653][ C1] __irq_exit_rcu+0xd3/0x190 [ 1371.167245][ C1] ? irq_exit_rcu+0x20/0x20 [ 1371.171751][ C1] irq_exit_rcu+0x9/0x20 [ 1371.175990][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1371.181624][ C1] [ 1371.184559][ C1] [ 1371.187488][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1371.193469][ C1] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 1371.198928][ C1] Code: e8 83 09 fb f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 6f 09 fb f6 eb 06 e8 68 09 fb f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1371.218544][ C1] RSP: 0018:ffffc9000ccd78a0 EFLAGS: 00000293 [ 1371.224622][ C1] RAX: ffffffff8a8c6b68 RBX: dffffc0000000000 RCX: ffff88802d715a00 [ 1371.232608][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.240587][ C1] RBP: ffffc9000ccd79a0 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 1371.248562][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: dffffc0000000004 [ 1371.256536][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200199af18 [ 1371.264516][ C1] ? dump_stack_lvl+0x208/0x250 [ 1371.269386][ C1] ? show_regs_print_info+0x20/0x20 [ 1371.274599][ C1] ? load_image+0x420/0x420 [ 1371.279111][ C1] ? mark_lock+0x94/0x320 [ 1371.283447][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1371.289433][ C1] should_fail_ex+0x394/0x4c0 [ 1371.294124][ C1] should_failslab+0x9/0x20 [ 1371.298636][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1371.303680][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1371.308887][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1371.314517][ C1] ? __alloc_skb+0x103/0x2c0 [ 1371.319111][ C1] __alloc_skb+0x103/0x2c0 [ 1371.323530][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1371.329173][ C1] ? process_scheduled_works+0x975/0x1600 [ 1371.334904][ C1] process_scheduled_works+0xa60/0x1600 [ 1371.340477][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1371.345945][ C1] ? assign_work+0x3cc/0x5d0 [ 1371.350546][ C1] worker_thread+0xa5e/0xfe0 [ 1371.355152][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1371.360011][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1371.364954][ C1] kthread+0x2fa/0x390 [ 1371.369021][ C1] ? pr_cont_work+0x550/0x550 [ 1371.373702][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1371.378291][ C1] ret_from_fork+0x48/0x80 [ 1371.382709][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1371.387301][ C1] ret_from_fork_asm+0x11/0x20 [ 1371.392084][ C1] [ 1371.395102][T18101] CPU: 0 PID: 18101 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1371.395435][ C1] FAULT_INJECTION: forcing a failure. [ 1371.395435][ C1] name failslab, interval 1, probability 10, space 0, times 37 [ 1371.402740][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1371.402755][T18101] Workqueue: events_unbound nsim_dev_trap_report_work [ 1371.432291][T18101] Call Trace: [ 1371.435572][T18101] [ 1371.438508][T18101] dump_stack_lvl+0x18c/0x250 [ 1371.443197][T18101] ? show_regs_print_info+0x20/0x20 [ 1371.448399][T18101] ? load_image+0x420/0x420 [ 1371.452912][T18101] ? mark_lock+0x94/0x320 [ 1371.457250][T18101] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1371.463244][T18101] should_fail_ex+0x394/0x4c0 [ 1371.467939][T18101] should_failslab+0x9/0x20 [ 1371.472447][T18101] slab_pre_alloc_hook+0x59/0x300 [ 1371.477488][T18101] kmem_cache_alloc_node+0x5e/0x310 [ 1371.482698][T18101] ? slab_free_freelist_hook+0x130/0x1a0 [ 1371.488330][T18101] ? __alloc_skb+0x103/0x2c0 [ 1371.492926][T18101] __alloc_skb+0x103/0x2c0 [ 1371.497350][T18101] nsim_dev_trap_report_work+0x253/0xa90 [ 1371.502998][T18101] ? process_scheduled_works+0x975/0x1600 [ 1371.508726][T18101] process_scheduled_works+0xa60/0x1600 [ 1371.514301][T18101] ? worker_attach_to_pool+0x370/0x370 [ 1371.519771][T18101] ? assign_work+0x3cc/0x5d0 [ 1371.524373][T18101] worker_thread+0xa5e/0xfe0 [ 1371.528975][T18101] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1371.534880][T18101] ? _raw_spin_unlock+0x40/0x40 [ 1371.539735][T18101] ? __kthread_parkme+0x71/0x1c0 [ 1371.544690][T18101] kthread+0x2fa/0x390 [ 1371.548762][T18101] ? pr_cont_work+0x550/0x550 [ 1371.553443][T18101] ? kthread_blkcg+0xd0/0xd0 [ 1371.558036][T18101] ret_from_fork+0x48/0x80 [ 1371.562454][T18101] ? kthread_blkcg+0xd0/0xd0 [ 1371.567045][T18101] ret_from_fork_asm+0x11/0x20 [ 1371.571826][T18101] [ 1371.574848][ C1] CPU: 1 PID: 3434 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1371.578496][ C0] FAULT_INJECTION: forcing a failure. [ 1371.578496][ C0] name failslab, interval 1, probability 10, space 0, times 30 [ 1371.582397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1371.605231][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1371.612004][ C1] Call Trace: [ 1371.615282][ C1] [ 1371.618127][ C1] dump_stack_lvl+0x18c/0x250 [ 1371.622819][ C1] ? show_regs_print_info+0x20/0x20 [ 1371.628022][ C1] ? load_image+0x420/0x420 [ 1371.632542][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1371.638619][ C1] ? verify_lock_unused+0x140/0x140 [ 1371.643825][ C1] ? lock_chain_count+0x20/0x20 [ 1371.649130][ C1] should_fail_ex+0x394/0x4c0 [ 1371.653828][ C1] should_failslab+0x9/0x20 [ 1371.660632][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1371.665685][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1371.670901][ C1] ? __alloc_skb+0x103/0x2c0 [ 1371.675503][ C1] __alloc_skb+0x103/0x2c0 [ 1371.679925][ C1] wg_packet_send_keepalive+0x65/0x2b0 [ 1371.685392][ C1] call_timer_fn+0x189/0x540 [ 1371.689987][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1371.696055][ C1] ? call_timer_fn+0xd2/0x540 [ 1371.700732][ C1] ? __run_timers+0x810/0x810 [ 1371.705508][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1371.710717][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1371.715919][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1371.721991][ C1] __run_timers+0x570/0x810 [ 1371.726511][ C1] ? detach_timer+0x2b0/0x2b0 [ 1371.731195][ C1] ? lock_chain_count+0x20/0x20 [ 1371.736053][ C1] run_timer_softirq+0x67/0xf0 [ 1371.740836][ C1] handle_softirqs+0x27d/0x820 [ 1371.745617][ C1] ? read_tsc+0x9/0x20 [ 1371.749700][ C1] ? ktime_get+0x24b/0x280 [ 1371.754136][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1371.758919][ C1] ? do_softirq+0x1a0/0x1a0 [ 1371.763435][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1371.768652][ C1] __irq_exit_rcu+0xd3/0x190 [ 1371.773248][ C1] ? irq_exit_rcu+0x20/0x20 [ 1371.777760][ C1] irq_exit_rcu+0x9/0x20 [ 1371.782008][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1371.787658][ C1] [ 1371.790588][ C1] [ 1371.793520][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1371.799509][ C1] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 1371.804976][ C1] Code: e8 83 09 fb f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 6f 09 fb f6 eb 06 e8 68 09 fb f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1371.824591][ C1] RSP: 0018:ffffc9000ccd78a0 EFLAGS: 00000293 [ 1371.830669][ C1] RAX: ffffffff8a8c6b68 RBX: dffffc0000000000 RCX: ffff88802d715a00 [ 1371.838730][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.846709][ C1] RBP: ffffc9000ccd79a0 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 1371.854684][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: dffffc0000000004 [ 1371.862666][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200199af18 [ 1371.870660][ C1] ? dump_stack_lvl+0x208/0x250 [ 1371.875546][ C1] ? show_regs_print_info+0x20/0x20 [ 1371.880751][ C1] ? load_image+0x420/0x420 [ 1371.885263][ C1] ? mark_lock+0x94/0x320 [ 1371.889676][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1371.895667][ C1] should_fail_ex+0x394/0x4c0 [ 1371.900358][ C1] should_failslab+0x9/0x20 [ 1371.904870][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1371.909926][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1371.915132][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1371.920770][ C1] ? __alloc_skb+0x103/0x2c0 [ 1371.925369][ C1] __alloc_skb+0x103/0x2c0 [ 1371.929792][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1371.935439][ C1] ? process_scheduled_works+0x975/0x1600 [ 1371.941172][ C1] process_scheduled_works+0xa60/0x1600 [ 1371.946748][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1371.952219][ C1] ? assign_work+0x3cc/0x5d0 [ 1371.956820][ C1] worker_thread+0xa5e/0xfe0 [ 1371.961429][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1371.966291][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1371.971257][ C1] kthread+0x2fa/0x390 [ 1371.975347][ C1] ? pr_cont_work+0x550/0x550 [ 1371.980042][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1371.984643][ C1] ret_from_fork+0x48/0x80 [ 1371.989076][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1371.993675][ C1] ret_from_fork_asm+0x11/0x20 [ 1371.998468][ C1] [ 1372.001491][ C0] CPU: 0 PID: 20345 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1372.002177][ C1] FAULT_INJECTION: forcing a failure. [ 1372.002177][ C1] name failslab, interval 1, probability 10, space 0, times 27 [ 1372.009035][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1372.009050][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1372.009075][ C0] Call Trace: [ 1372.009085][ C0] [ 1372.044030][ C0] dump_stack_lvl+0x18c/0x250 [ 1372.048722][ C0] ? show_regs_print_info+0x20/0x20 [ 1372.053933][ C0] ? load_image+0x420/0x420 [ 1372.058447][ C0] ? mark_lock+0x94/0x320 [ 1372.062789][ C0] ? mark_lock+0x94/0x320 [ 1372.067127][ C0] should_fail_ex+0x394/0x4c0 [ 1372.071826][ C0] should_failslab+0x9/0x20 [ 1372.076346][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1372.081389][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1372.086595][ C0] ? __alloc_skb+0x103/0x2c0 [ 1372.091190][ C0] __alloc_skb+0x103/0x2c0 [ 1372.095619][ C0] alloc_skb_with_frags+0xcd/0x7a0 [ 1372.100740][ C0] ? mark_lock+0x94/0x320 [ 1372.105168][ C0] ? __lock_acquire+0x1262/0x7d80 [ 1372.110198][ C0] sock_alloc_send_pskb+0x883/0x9a0 [ 1372.115439][ C0] ? sock_kzfree_s+0x50/0x50 [ 1372.120040][ C0] ? verify_lock_unused+0x140/0x140 [ 1372.125257][ C0] __ip6_append_data+0x2b18/0x3d40 [ 1372.130407][ C0] ? __in6_dev_get+0xd0/0xd0 [ 1372.135014][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1372.139183][ C0] ? ip6_setup_cork+0xff0/0xff0 [ 1372.144045][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1372.149079][ C0] ip6_append_data+0x1b0/0x350 [ 1372.153886][ C0] ? __in6_dev_get+0xd0/0xd0 [ 1372.158486][ C0] icmp6_send+0x1384/0x1b60 [ 1372.163002][ C0] ? icmp6_send+0x236/0x1b60 [ 1372.167709][ C0] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 1372.173641][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 1372.179107][ C0] ? deref_stack_reg+0x1ab/0x230 [ 1372.184059][ C0] nf_send_unreach6+0x54f/0xb50 [ 1372.188928][ C0] ? nf_bridge_get_physindev+0x120/0x120 [ 1372.194602][ C0] ? mark_lock+0x94/0x320 [ 1372.198942][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.204927][ C0] ? stack_trace_save+0x100/0x100 [ 1372.209958][ C0] ? lock_chain_count+0x20/0x20 [ 1372.214816][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1372.220193][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1372.225400][ C0] nft_reject_inet_eval+0x43c/0x680 [ 1372.230616][ C0] nft_do_chain+0x44b/0x1620 [ 1372.235215][ C0] ? ip6t_do_table+0x13c4/0x1570 [ 1372.240169][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1372.246096][ C0] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 1372.251474][ C0] nft_do_chain_inet+0x29b/0x380 [ 1372.256417][ C0] ? nft_do_chain_arp+0x110/0x110 [ 1372.261452][ C0] ? nf_nat_ipv6_in+0x1ec/0x2c0 [ 1372.266315][ C0] ? nf_xfrm_me_harder+0x600/0x600 [ 1372.271440][ C0] ? ipv6_defrag+0xab/0x3a0 [ 1372.278055][ C0] ? nft_do_chain_arp+0x110/0x110 [ 1372.283094][ C0] nf_hook_slow+0xbd/0x200 [ 1372.287529][ C0] NF_HOOK+0x21d/0x3b0 [ 1372.291608][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 1372.296730][ C0] ? NF_HOOK+0x9f/0x3b0 [ 1372.300894][ C0] ? ip6_rcv_core+0x1700/0x1700 [ 1372.305758][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 1372.310884][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 1372.316179][ C0] __netif_receive_skb+0xcc/0x290 [ 1372.321212][ C0] ? process_backlog+0x2cf/0x710 [ 1372.326166][ C0] process_backlog+0x380/0x710 [ 1372.330951][ C0] ? trigger_rx_softirq+0x60/0x60 [ 1372.335977][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.341965][ C0] ? lock_chain_count+0x20/0x20 [ 1372.346828][ C0] __napi_poll+0xbb/0x460 [ 1372.351259][ C0] net_rx_action+0x65f/0xcc0 [ 1372.355868][ C0] ? net_tx_action+0x950/0x950 [ 1372.360635][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.366622][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1372.371910][ C0] ? lock_chain_count+0x20/0x20 [ 1372.376774][ C0] handle_softirqs+0x27d/0x820 [ 1372.381673][ C0] ? do_softirq+0xfa/0x1a0 [ 1372.386095][ C0] ? do_softirq+0x1a0/0x1a0 [ 1372.390600][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1c0 [ 1372.396496][ C0] do_softirq+0xfa/0x1a0 [ 1372.400740][ C0] [ 1372.403671][ C0] [ 1372.406604][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1372.411989][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1372.417976][ C0] ? rcu_is_watching+0x15/0xb0 [ 1372.422748][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1372.427950][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1372.432808][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 1372.437840][ C0] wg_socket_send_skb_to_peer+0x16b/0x1c0 [ 1372.443572][ C0] wg_packet_tx_worker+0x1c8/0x7d0 [ 1372.448684][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1372.453893][ C0] ? process_scheduled_works+0x975/0x1600 [ 1372.459619][ C0] process_scheduled_works+0xa60/0x1600 [ 1372.465196][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1372.470673][ C0] ? assign_work+0x3cc/0x5d0 [ 1372.475277][ C0] worker_thread+0xa5e/0xfe0 [ 1372.479883][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1372.484741][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1372.489687][ C0] kthread+0x2fa/0x390 [ 1372.493757][ C0] ? pr_cont_work+0x550/0x550 [ 1372.498441][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1372.503130][ C0] ret_from_fork+0x48/0x80 [ 1372.507552][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1372.512143][ C0] ret_from_fork_asm+0x11/0x20 [ 1372.516930][ C0] [ 1372.519949][ C1] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1372.520953][ T174] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1372.527586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1372.527603][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1372.527632][ C1] Call Trace: [ 1372.555237][ C1] [ 1372.558082][ C1] dump_stack_lvl+0x18c/0x250 [ 1372.562762][ C1] ? show_regs_print_info+0x20/0x20 [ 1372.567959][ C1] ? load_image+0x420/0x420 [ 1372.572474][ C1] should_fail_ex+0x394/0x4c0 [ 1372.577156][ C1] should_failslab+0x9/0x20 [ 1372.581662][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1372.586690][ C1] ? find_exception+0x175/0xa30 [ 1372.591555][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 1372.596318][ C1] ? dst_alloc+0x105/0x170 [ 1372.600736][ C1] dst_alloc+0x105/0x170 [ 1372.604980][ C1] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 1372.611052][ C1] ? ip_route_output_key_hash+0x13d/0x330 [ 1372.616774][ C1] ip_route_output_key_hash+0x1f3/0x330 [ 1372.622334][ C1] ? l3mdev_master_ifindex+0x18/0x160 [ 1372.627712][ C1] ? ip_route_input_rcu+0x3120/0x3120 [ 1372.633083][ C1] ? make_kuid+0x1db/0x680 [ 1372.637499][ C1] ? __put_user_ns+0x50/0x50 [ 1372.642086][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1372.648323][ C1] ? l3mdev_master_ifindex+0x18/0x160 [ 1372.653707][ C1] ? l3mdev_master_ifindex+0x18/0x160 [ 1372.659073][ C1] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 1372.664794][ C1] icmp_route_lookup+0x43a/0xb00 [ 1372.669733][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 1372.674491][ C1] ? __asan_memset+0x22/0x40 [ 1372.679092][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1372.684465][ C1] ? do_raw_spin_trylock+0xb2/0x190 [ 1372.689661][ C1] ? do_raw_spin_lock+0x2b0/0x2b0 [ 1372.694688][ C1] ? ip_options_build+0x510/0x510 [ 1372.699721][ C1] ? __icmp_send+0x217/0x1430 [ 1372.704414][ C1] __icmp_send+0xf30/0x1430 [ 1372.708915][ C1] ? __icmp_send+0x217/0x1430 [ 1372.713601][ C1] ? icmp_out_count+0x90/0x90 [ 1372.718285][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1372.723320][ C1] ? mark_lock+0x94/0x320 [ 1372.727653][ C1] nf_send_unreach+0x574/0xac0 [ 1372.732424][ C1] ? nf_bridge_get_physindev+0x120/0x120 [ 1372.738058][ C1] ? mark_lock+0x94/0x320 [ 1372.742389][ C1] ? __lock_acquire+0x1262/0x7d80 [ 1372.747419][ C1] nft_reject_inet_eval+0x4b7/0x680 [ 1372.752624][ C1] nft_do_chain+0x44b/0x1620 [ 1372.757227][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1372.763137][ C1] ? nf_conntrack_in+0x18f/0x15b0 [ 1372.768179][ C1] nft_do_chain_inet+0x29b/0x380 [ 1372.773115][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1372.778135][ C1] ? ipt_do_table+0x2c5/0x15c0 [ 1372.782905][ C1] ? nf_nat_ipv4_pre_routing+0x22b/0x390 [ 1372.788540][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1372.793556][ C1] nf_hook_slow+0xbd/0x200 [ 1372.797973][ C1] NF_HOOK+0x21d/0x3b0 [ 1372.802036][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1372.806620][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1372.810789][ C1] ? ip_local_deliver+0x180/0x180 [ 1372.815828][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1372.820427][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1372.826063][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1372.831701][ C1] __netif_receive_skb+0xcc/0x290 [ 1372.836735][ C1] ? process_backlog+0x2cf/0x710 [ 1372.841674][ C1] process_backlog+0x380/0x710 [ 1372.846453][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1372.851473][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.857452][ C1] ? __rwlock_init+0x150/0x150 [ 1372.862217][ C1] ? lock_chain_count+0x20/0x20 [ 1372.867067][ C1] __napi_poll+0xbb/0x460 [ 1372.871396][ C1] net_rx_action+0x65f/0xcc0 [ 1372.875995][ C1] ? net_tx_action+0x950/0x950 [ 1372.880755][ C1] ? detach_timer+0x2b0/0x2b0 [ 1372.885426][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.891403][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1372.896684][ C1] ? lock_chain_count+0x20/0x20 [ 1372.901538][ C1] handle_softirqs+0x27d/0x820 [ 1372.906325][ C1] ? do_softirq+0xfa/0x1a0 [ 1372.910738][ C1] ? do_softirq+0x1a0/0x1a0 [ 1372.915255][ C1] ? nsim_dev_trap_report_work+0x71b/0xa90 [ 1372.921072][ C1] do_softirq+0xfa/0x1a0 [ 1372.925318][ C1] [ 1372.928244][ C1] [ 1372.931169][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1372.936545][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1372.942530][ C1] ? rcu_is_watching+0x15/0xb0 [ 1372.947303][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 1372.952503][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1372.957364][ C1] ? nsim_dev_trap_report_work+0x71b/0xa90 [ 1372.963179][ C1] nsim_dev_trap_report_work+0x71b/0xa90 [ 1372.968826][ C1] ? process_scheduled_works+0x975/0x1600 [ 1372.974549][ C1] process_scheduled_works+0xa60/0x1600 [ 1372.980203][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1372.985668][ C1] ? assign_work+0x3cc/0x5d0 [ 1372.990262][ C1] worker_thread+0xa5e/0xfe0 [ 1372.994860][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1372.999734][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1373.004702][ C1] kthread+0x2fa/0x390 [ 1373.008781][ C1] ? pr_cont_work+0x550/0x550 [ 1373.013466][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1373.018079][ C1] ret_from_fork+0x48/0x80 [ 1373.022502][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1373.027120][ C1] ret_from_fork_asm+0x11/0x20 [ 1373.031904][ C1] [ 1373.034960][T23338] CPU: 0 PID: 23338 Comm: syz.0.5477 Not tainted syzkaller #0 [ 1373.036604][T13359] FAULT_INJECTION: forcing a failure. [ 1373.036604][T13359] name failslab, interval 1, probability 10, space 0, times 24 [ 1373.042427][T23338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1373.042441][T23338] Call Trace: [ 1373.068589][T23338] [ 1373.071526][T23338] dump_stack_lvl+0x18c/0x250 [ 1373.076213][T23338] ? show_regs_print_info+0x20/0x20 [ 1373.081412][T23338] ? load_image+0x420/0x420 [ 1373.085928][T23338] ? __might_sleep+0xe0/0xe0 [ 1373.090525][T23338] ? __lock_acquire+0x7d80/0x7d80 [ 1373.095554][T23338] ? percpu_ref_put+0x12/0x100 [ 1373.100320][T23338] should_fail_ex+0x394/0x4c0 [ 1373.105008][T23338] should_failslab+0x9/0x20 [ 1373.109522][T23338] slab_pre_alloc_hook+0x59/0x300 [ 1373.114558][T23338] kmem_cache_alloc+0x5a/0x2c0 [ 1373.119337][T23338] ? vm_area_dup+0x61/0x270 [ 1373.123938][T23338] vm_area_dup+0x61/0x270 [ 1373.128289][T23338] __split_vma+0x1a8/0xc20 [ 1373.132737][T23338] ? mmap_write_unlock+0x160/0x160 [ 1373.137871][T23338] ? split_vma+0x8f/0x110 [ 1373.142206][T23338] mprotect_fixup+0xa3b/0xcd0 [ 1373.146920][T23338] ? change_protection+0x31e0/0x31e0 [ 1373.152234][T23338] ? apparmor_file_mprotect+0xfe/0x120 [ 1373.157711][T23338] ? bpf_lsm_file_mprotect+0x9/0x10 [ 1373.162916][T23338] do_mprotect_pkey+0x7c3/0xcc0 [ 1373.167782][T23338] ? prot_none_test+0x10/0x10 [ 1373.172482][T23338] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1373.178494][T23338] __x64_sys_mprotect+0x80/0x90 [ 1373.183366][T23338] do_syscall_64+0x55/0xb0 [ 1373.187787][T23338] ? clear_bhb_loop+0x40/0x90 [ 1373.192464][T23338] ? clear_bhb_loop+0x40/0x90 [ 1373.197151][T23338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.204458][T23338] RIP: 0033:0x7f3071b9dc97 [ 1373.208881][T23338] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.228515][T23338] RSP: 002b:00007ffe7b152268 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1373.236931][T23338] RAX: ffffffffffffffda RBX: 00007f30729a96c0 RCX: 00007f3071b9dc97 [ 1373.243332][ C1] FAULT_INJECTION: forcing a failure. [ 1373.243332][ C1] name failslab, interval 1, probability 10, space 0, times 22 [ 1373.244901][T23338] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f307298a000 [ 1373.244919][T23338] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1373.244931][T23338] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe7b1523c0 [ 1373.244943][T23338] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1373.244974][T23338] [ 1373.292828][ C1] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1373.300501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1373.304509][ T6795] FAULT_INJECTION: forcing a failure. [ 1373.304509][ T6795] name failslab, interval 1, probability 10, space 0, times 22 [ 1373.310562][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1373.310596][ C1] Call Trace: [ 1373.333794][ C1] [ 1373.336638][ C1] dump_stack_lvl+0x18c/0x250 [ 1373.341328][ C1] ? show_regs_print_info+0x20/0x20 [ 1373.346534][ C1] ? load_image+0x420/0x420 [ 1373.351057][ C1] ? skb_crc32c_csum_help+0x510/0x510 [ 1373.356439][ C1] should_fail_ex+0x394/0x4c0 [ 1373.361126][ C1] should_failslab+0x9/0x20 [ 1373.365635][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1373.370667][ C1] ? skb_csum_hwoffload_help+0x18b/0x9e0 [ 1373.376310][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 1373.381082][ C1] ? skb_clone+0x1eb/0x370 [ 1373.385507][ C1] skb_clone+0x1eb/0x370 [ 1373.389755][ C1] ? dev_queue_xmit_nit+0x227/0xba0 [ 1373.394966][ C1] dev_queue_xmit_nit+0x23f/0xba0 [ 1373.400017][ C1] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1373.405165][ C1] dev_hard_start_xmit+0x150/0x790 [ 1373.410389][ C1] sch_direct_xmit+0x251/0x4a0 [ 1373.415162][ C1] ? do_raw_spin_lock+0x2b0/0x2b0 [ 1373.420196][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 1373.426193][ C1] __dev_queue_xmit+0x162a/0x3630 [ 1373.431225][ C1] ? verify_lock_unused+0x140/0x140 [ 1373.436435][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 1373.441570][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 1373.446887][ C1] ? mark_lock+0x94/0x320 [ 1373.451224][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1373.457206][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1373.462242][ C1] ? lock_chain_count+0x20/0x20 [ 1373.467108][ C1] ? ip_finish_output2+0xb6d/0x1260 [ 1373.472318][ C1] ? ip_finish_output2+0x45a/0x1260 [ 1373.477523][ C1] ip_finish_output2+0xd4f/0x1260 [ 1373.482551][ C1] ? ip_finish_output2+0x45a/0x1260 [ 1373.487759][ C1] ? ip_fragment+0x210/0x210 [ 1373.492358][ C1] ? ip_skb_dst_mtu+0x586/0x9c0 [ 1373.497217][ C1] ? ip_finish_output+0x3ec/0x4c0 [ 1373.502261][ C1] ip_output+0x2a5/0x3a0 [ 1373.506519][ C1] ? ip_output+0x5a/0x3a0 [ 1373.510862][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 1373.515801][ C1] __ip_queue_xmit+0x1056/0x1960 [ 1373.520749][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 1373.525692][ C1] __tcp_transmit_skb+0x1dd6/0x3470 [ 1373.530940][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 1373.535813][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 1373.540675][ C1] tcp_delack_timer_handler+0x307/0x4c0 [ 1373.546238][ C1] tcp_delack_timer+0x191/0x2f0 [ 1373.551107][ C1] call_timer_fn+0x189/0x540 [ 1373.555700][ C1] ? tcp_write_timer+0x280/0x280 [ 1373.560648][ C1] ? call_timer_fn+0xd2/0x540 [ 1373.565328][ C1] ? __run_timers+0x810/0x810 [ 1373.570109][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1373.575329][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1373.580535][ C1] ? tcp_write_timer+0x280/0x280 [ 1373.585486][ C1] __run_timers+0x570/0x810 [ 1373.590009][ C1] ? detach_timer+0x2b0/0x2b0 [ 1373.594697][ C1] ? lock_chain_count+0x20/0x20 [ 1373.599564][ C1] run_timer_softirq+0x67/0xf0 [ 1373.604335][ C1] handle_softirqs+0x27d/0x820 [ 1373.609108][ C1] ? read_tsc+0x9/0x20 [ 1373.613186][ C1] ? ktime_get+0x24b/0x280 [ 1373.617616][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1373.622393][ C1] ? do_softirq+0x1a0/0x1a0 [ 1373.626902][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1373.632110][ C1] __irq_exit_rcu+0xd3/0x190 [ 1373.636709][ C1] ? irq_exit_rcu+0x20/0x20 [ 1373.641224][ C1] irq_exit_rcu+0x9/0x20 [ 1373.645469][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1373.651108][ C1] [ 1373.654040][ C1] [ 1373.656971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1373.662953][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 1373.668506][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 9c 56 a4 8c 4c 89 e6 eb 0a 48 c7 c7 66 e5 85 8c 48 89 de e8 75 5f a1 08 31 ed eb d4 cc 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 ff ea ff ff 66 2e 0f 1f 84 [ 1373.688113][ C1] RSP: 0018:ffffc9000454f890 EFLAGS: 00000293 [ 1373.694191][ C1] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff8880319a1e00 [ 1373.702170][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1373.710150][ C1] RBP: ffffc9000454f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1373.718127][ C1] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1373.726099][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920008a9f18 [ 1373.734078][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1373.739469][ C1] __printk_cpu_sync_wait+0x1c/0x40 [ 1373.744678][ C1] dump_stack_lvl+0x165/0x250 [ 1373.749363][ C1] ? show_regs_print_info+0x20/0x20 [ 1373.754562][ C1] ? load_image+0x420/0x420 [ 1373.759079][ C1] ? mark_lock+0x94/0x320 [ 1373.763422][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1373.769432][ C1] should_fail_ex+0x394/0x4c0 [ 1373.774147][ C1] should_failslab+0x9/0x20 [ 1373.778674][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1373.783724][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1373.788937][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1373.794576][ C1] ? __alloc_skb+0x103/0x2c0 [ 1373.799184][ C1] __alloc_skb+0x103/0x2c0 [ 1373.803616][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1373.809275][ C1] ? process_scheduled_works+0x975/0x1600 [ 1373.815010][ C1] process_scheduled_works+0xa60/0x1600 [ 1373.820590][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1373.826065][ C1] ? assign_work+0x3cc/0x5d0 [ 1373.830668][ C1] worker_thread+0xa5e/0xfe0 [ 1373.835282][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1373.840140][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1373.845094][ C1] kthread+0x2fa/0x390 [ 1373.849163][ C1] ? pr_cont_work+0x550/0x550 [ 1373.853854][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1373.858455][ C1] ret_from_fork+0x48/0x80 [ 1373.862879][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1373.867473][ C1] ret_from_fork_asm+0x11/0x20 [ 1373.872264][ C1] [ 1373.875286][ T6795] CPU: 0 PID: 6795 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1373.875579][ C1] FAULT_INJECTION: forcing a failure. [ 1373.875579][ C1] name failslab, interval 1, probability 10, space 0, times 21 [ 1373.882921][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1373.882941][ T6795] Workqueue: events_unbound nsim_dev_trap_report_work [ 1373.912489][ T6795] Call Trace: [ 1373.915772][ T6795] [ 1373.918703][ T6795] dump_stack_lvl+0x18c/0x250 [ 1373.923391][ T6795] ? show_regs_print_info+0x20/0x20 [ 1373.928593][ T6795] ? load_image+0x420/0x420 [ 1373.933105][ T6795] ? mark_lock+0x94/0x320 [ 1373.937443][ T6795] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1373.943431][ T6795] should_fail_ex+0x394/0x4c0 [ 1373.948121][ T6795] should_failslab+0x9/0x20 [ 1373.952630][ T6795] slab_pre_alloc_hook+0x59/0x300 [ 1373.957675][ T6795] kmem_cache_alloc_node+0x5e/0x310 [ 1373.963229][ T6795] ? slab_free_freelist_hook+0x130/0x1a0 [ 1373.968863][ T6795] ? __alloc_skb+0x103/0x2c0 [ 1373.973549][ T6795] __alloc_skb+0x103/0x2c0 [ 1373.977976][ T6795] nsim_dev_trap_report_work+0x253/0xa90 [ 1373.983626][ T6795] ? process_scheduled_works+0x975/0x1600 [ 1373.989357][ T6795] process_scheduled_works+0xa60/0x1600 [ 1373.994939][ T6795] ? worker_attach_to_pool+0x370/0x370 [ 1374.000409][ T6795] ? assign_work+0x3cc/0x5d0 [ 1374.005012][ T6795] worker_thread+0xa5e/0xfe0 [ 1374.009616][ T6795] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1374.015530][ T6795] ? _raw_spin_unlock+0x40/0x40 [ 1374.020383][ T6795] ? __kthread_parkme+0x71/0x1c0 [ 1374.025346][ T6795] kthread+0x2fa/0x390 [ 1374.029429][ T6795] ? pr_cont_work+0x550/0x550 [ 1374.034114][ T6795] ? kthread_blkcg+0xd0/0xd0 [ 1374.038708][ T6795] ret_from_fork+0x48/0x80 [ 1374.043129][ T6795] ? kthread_blkcg+0xd0/0xd0 [ 1374.047725][ T6795] ret_from_fork_asm+0x11/0x20 [ 1374.052507][ T6795] [ 1374.055530][ C1] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1374.063194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1374.063914][ T5433] FAULT_INJECTION: forcing a failure. [ 1374.063914][ T5433] name failslab, interval 1, probability 10, space 0, times 19 [ 1374.073244][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1374.073275][ C1] Call Trace: [ 1374.073285][ C1] [ 1374.073294][ C1] dump_stack_lvl+0x18c/0x250 [ 1374.073319][ C1] ? show_regs_print_info+0x20/0x20 [ 1374.073340][ C1] ? load_image+0x420/0x420 [ 1374.086522][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1801 jiffies old. [ 1374.092830][ C1] ? mark_lock+0x94/0x320 [ 1374.127372][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1374.133394][ C1] should_fail_ex+0x394/0x4c0 [ 1374.133479][ T11] FAULT_INJECTION: forcing a failure. [ 1374.133479][ T11] name failslab, interval 1, probability 10, space 0, times 19 [ 1374.138088][ C1] should_failslab+0x9/0x20 [ 1374.138118][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1374.160786][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1374.166168][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 1374.170938][ C1] ? skb_clone+0x1eb/0x370 [ 1374.175363][ C1] skb_clone+0x1eb/0x370 [ 1374.179609][ C1] hsr_forward_skb+0xefd/0x20b0 [ 1374.184476][ C1] ? hsr_forward_skb+0xb1/0x20b0 [ 1374.189424][ C1] ? prp_fill_frame_info+0x760/0x760 [ 1374.194714][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 1374.199758][ C1] ? __skb_pad+0x3f3/0x5f0 [ 1374.204182][ C1] send_hsr_supervision_frame+0x5fb/0xb90 [ 1374.209920][ C1] hsr_announce+0x198/0x350 [ 1374.214432][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1374.219805][ C1] ? hsr_announce+0x84/0x350 [ 1374.224404][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1374.229441][ C1] call_timer_fn+0x189/0x540 [ 1374.234037][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1374.239092][ C1] ? call_timer_fn+0xd2/0x540 [ 1374.243786][ C1] ? __run_timers+0x810/0x810 [ 1374.248481][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1374.253691][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1374.258898][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1374.263936][ C1] __run_timers+0x570/0x810 [ 1374.268461][ C1] ? detach_timer+0x2b0/0x2b0 [ 1374.273144][ C1] ? lock_chain_count+0x20/0x20 [ 1374.278006][ C1] run_timer_softirq+0x67/0xf0 [ 1374.282775][ C1] handle_softirqs+0x27d/0x820 [ 1374.287538][ C1] ? read_tsc+0x9/0x20 [ 1374.291609][ C1] ? ktime_get+0x24b/0x280 [ 1374.296030][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1374.300798][ C1] ? do_softirq+0x1a0/0x1a0 [ 1374.305310][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1374.310538][ C1] __irq_exit_rcu+0xd3/0x190 [ 1374.315145][ C1] ? irq_exit_rcu+0x20/0x20 [ 1374.319749][ C1] irq_exit_rcu+0x9/0x20 [ 1374.323997][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1374.329648][ C1] [ 1374.332583][ C1] [ 1374.335516][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1374.341503][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 1374.347064][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 9c 56 a4 8c 4c 89 e6 eb 0a 48 c7 c7 66 e5 85 8c 48 89 de e8 75 5f a1 08 31 ed eb d4 cc 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 ff ea ff ff 66 2e 0f 1f 84 [ 1374.366677][ C1] RSP: 0018:ffffc9000454f890 EFLAGS: 00000293 [ 1374.372751][ C1] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff8880319a1e00 [ 1374.380725][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1374.388700][ C1] RBP: ffffc9000454f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1374.396672][ C1] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1374.404653][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920008a9f18 [ 1374.412642][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1374.418039][ C1] __printk_cpu_sync_wait+0x1c/0x40 [ 1374.423243][ C1] dump_stack_lvl+0x165/0x250 [ 1374.427926][ C1] ? show_regs_print_info+0x20/0x20 [ 1374.433154][ C1] ? load_image+0x420/0x420 [ 1374.437676][ C1] ? mark_lock+0x94/0x320 [ 1374.442011][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1374.447999][ C1] should_fail_ex+0x394/0x4c0 [ 1374.452687][ C1] should_failslab+0x9/0x20 [ 1374.457292][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1374.463479][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1374.468805][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1374.474442][ C1] ? __alloc_skb+0x103/0x2c0 [ 1374.479043][ C1] __alloc_skb+0x103/0x2c0 [ 1374.483467][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1374.489121][ C1] ? process_scheduled_works+0x975/0x1600 [ 1374.494855][ C1] process_scheduled_works+0xa60/0x1600 [ 1374.500431][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1374.505901][ C1] ? assign_work+0x3cc/0x5d0 [ 1374.510505][ C1] worker_thread+0xa5e/0xfe0 [ 1374.515113][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1374.519965][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1374.524911][ C1] kthread+0x2fa/0x390 [ 1374.528976][ C1] ? pr_cont_work+0x550/0x550 [ 1374.533656][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1374.538241][ C1] ret_from_fork+0x48/0x80 [ 1374.542662][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1374.547251][ C1] ret_from_fork_asm+0x11/0x20 [ 1374.552033][ C1] [ 1374.555051][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1374.555356][ C1] FAULT_INJECTION: forcing a failure. [ 1374.555356][ C1] name failslab, interval 1, probability 10, space 0, times 18 [ 1374.562423][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1374.562438][ T11] Workqueue: events_unbound nsim_dev_trap_report_work [ 1374.591968][ T11] Call Trace: [ 1374.595251][ T11] [ 1374.598180][ T11] dump_stack_lvl+0x18c/0x250 [ 1374.602867][ T11] ? show_regs_print_info+0x20/0x20 [ 1374.608067][ T11] ? load_image+0x420/0x420 [ 1374.612575][ T11] ? mark_lock+0x94/0x320 [ 1374.616915][ T11] should_fail_ex+0x394/0x4c0 [ 1374.621602][ T11] should_failslab+0x9/0x20 [ 1374.626108][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1374.631144][ T11] kmem_cache_alloc_node+0x5e/0x310 [ 1374.636435][ T11] ? __alloc_skb+0x103/0x2c0 [ 1374.641032][ T11] __alloc_skb+0x103/0x2c0 [ 1374.645453][ T11] nsim_dev_trap_report_work+0x253/0xa90 [ 1374.651102][ T11] ? process_scheduled_works+0x975/0x1600 [ 1374.656835][ T11] process_scheduled_works+0xa60/0x1600 [ 1374.662407][ T11] ? worker_attach_to_pool+0x370/0x370 [ 1374.667873][ T11] ? assign_work+0x3cc/0x5d0 [ 1374.672472][ T11] worker_thread+0xa5e/0xfe0 [ 1374.677095][ T11] kthread+0x2fa/0x390 [ 1374.681164][ T11] ? pr_cont_work+0x550/0x550 [ 1374.685843][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1374.690433][ T11] ret_from_fork+0x48/0x80 [ 1374.694852][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1374.699459][ T11] ret_from_fork_asm+0x11/0x20 [ 1374.704241][ T11] [ 1374.707260][ C1] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1374.707672][ C0] FAULT_INJECTION: forcing a failure. [ 1374.707672][ C0] name failslab, interval 1, probability 10, space 0, times 17 [ 1374.714896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1374.714910][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1374.744547][ C1] Call Trace: [ 1374.747828][ C1] [ 1374.750672][ C1] dump_stack_lvl+0x18c/0x250 [ 1374.755358][ C1] ? lock_chain_count+0x20/0x20 [ 1374.760214][ C1] ? show_regs_print_info+0x20/0x20 [ 1374.765417][ C1] ? load_image+0x420/0x420 [ 1374.769932][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1374.775314][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1374.780685][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1374.785542][ C1] should_fail_ex+0x394/0x4c0 [ 1374.790235][ C1] should_failslab+0x9/0x20 [ 1374.794765][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1374.799827][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1374.805055][ C1] ? __alloc_skb+0x103/0x2c0 [ 1374.809659][ C1] __alloc_skb+0x103/0x2c0 [ 1374.814085][ C1] __pskb_copy_fclone+0xac/0x1000 [ 1374.819127][ C1] tipc_udp_send_msg+0x25a/0x3e0 [ 1374.824077][ C1] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 1374.829289][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 1374.834576][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 1374.839876][ C1] tipc_disc_timeout+0x5f7/0x750 [ 1374.844825][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1374.850046][ C1] call_timer_fn+0x189/0x540 [ 1374.854649][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1374.859852][ C1] ? call_timer_fn+0xd2/0x540 [ 1374.864530][ C1] ? __run_timers+0x810/0x810 [ 1374.869215][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1374.874418][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1374.879622][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1374.884828][ C1] __run_timers+0x570/0x810 [ 1374.889753][ C1] ? detach_timer+0x2b0/0x2b0 [ 1374.894712][ C1] ? lock_chain_count+0x20/0x20 [ 1374.899584][ C1] run_timer_softirq+0x67/0xf0 [ 1374.904357][ C1] handle_softirqs+0x27d/0x820 [ 1374.909148][ C1] ? read_tsc+0x9/0x20 [ 1374.913224][ C1] ? ktime_get+0x24b/0x280 [ 1374.917650][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1374.922422][ C1] ? do_softirq+0x1a0/0x1a0 [ 1374.926932][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1374.932142][ C1] __irq_exit_rcu+0xd3/0x190 [ 1374.936738][ C1] ? irq_exit_rcu+0x20/0x20 [ 1374.941262][ C1] irq_exit_rcu+0x9/0x20 [ 1374.945510][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1374.951163][ C1] [ 1374.954097][ C1] [ 1374.957034][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1374.963022][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 1374.968578][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 9c 56 a4 8c 4c 89 e6 eb 0a 48 c7 c7 66 e5 85 8c 48 89 de e8 75 5f a1 08 31 ed eb d4 cc 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 ff ea ff ff 66 2e 0f 1f 84 [ 1374.988185][ C1] RSP: 0018:ffffc9000454f890 EFLAGS: 00000293 [ 1374.994255][ C1] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff8880319a1e00 [ 1375.002228][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1375.010204][ C1] RBP: ffffc9000454f9a0 R08: 0000000000000003 R09: 0000000000000004 [ 1375.018174][ C1] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1375.026150][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920008a9f18 [ 1375.034140][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1375.039536][ C1] __printk_cpu_sync_wait+0x1c/0x40 [ 1375.044742][ C1] dump_stack_lvl+0x165/0x250 [ 1375.049424][ C1] ? show_regs_print_info+0x20/0x20 [ 1375.054624][ C1] ? load_image+0x420/0x420 [ 1375.059135][ C1] ? mark_lock+0x94/0x320 [ 1375.063474][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1375.069463][ C1] should_fail_ex+0x394/0x4c0 [ 1375.074151][ C1] should_failslab+0x9/0x20 [ 1375.078662][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1375.083701][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1375.088930][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1375.094565][ C1] ? __alloc_skb+0x103/0x2c0 [ 1375.099162][ C1] __alloc_skb+0x103/0x2c0 [ 1375.103585][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1375.109230][ C1] ? process_scheduled_works+0x975/0x1600 [ 1375.114973][ C1] process_scheduled_works+0xa60/0x1600 [ 1375.120565][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1375.126061][ C1] ? assign_work+0x3cc/0x5d0 [ 1375.130674][ C1] worker_thread+0xa5e/0xfe0 [ 1375.135285][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1375.140152][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1375.145107][ C1] kthread+0x2fa/0x390 [ 1375.149180][ C1] ? pr_cont_work+0x550/0x550 [ 1375.153880][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1375.158484][ C1] ret_from_fork+0x48/0x80 [ 1375.162915][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1375.167514][ C1] ret_from_fork_asm+0x11/0x20 [ 1375.172306][ C1] [ 1375.175334][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1375.182721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1375.192799][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1375.199578][ C0] Call Trace: [ 1375.202861][ C0] [ 1375.205708][ C0] dump_stack_lvl+0x18c/0x250 [ 1375.210392][ C0] ? show_regs_print_info+0x20/0x20 [ 1375.215598][ C0] ? load_image+0x420/0x420 [ 1375.220118][ C0] ? mark_lock+0x94/0x320 [ 1375.224457][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1375.230450][ C0] should_fail_ex+0x394/0x4c0 [ 1375.235137][ C0] should_failslab+0x9/0x20 [ 1375.239654][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1375.244688][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1375.250067][ C0] kmem_cache_alloc+0x5a/0x2c0 [ 1375.254840][ C0] ? skb_clone+0x1eb/0x370 [ 1375.259265][ C0] skb_clone+0x1eb/0x370 [ 1375.263520][ C0] hsr_forward_skb+0xefd/0x20b0 [ 1375.268387][ C0] ? hsr_forward_skb+0xb1/0x20b0 [ 1375.273339][ C0] ? prp_fill_frame_info+0x760/0x760 [ 1375.278631][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1375.283671][ C0] ? __skb_pad+0x3f3/0x5f0 [ 1375.288093][ C0] send_hsr_supervision_frame+0x5fb/0xb90 [ 1375.293832][ C0] hsr_announce+0x198/0x350 [ 1375.298341][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1375.303715][ C0] ? hsr_announce+0x84/0x350 [ 1375.308318][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1375.313360][ C0] call_timer_fn+0x189/0x540 [ 1375.317954][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1375.322983][ C0] ? call_timer_fn+0xd2/0x540 [ 1375.327664][ C0] ? __run_timers+0x810/0x810 [ 1375.332348][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1375.337556][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1375.342758][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1375.347793][ C0] __run_timers+0x570/0x810 [ 1375.352318][ C0] ? detach_timer+0x2b0/0x2b0 [ 1375.357012][ C0] run_timer_softirq+0x67/0xf0 [ 1375.361777][ C0] handle_softirqs+0x27d/0x820 [ 1375.366544][ C0] ? read_tsc+0x9/0x20 [ 1375.370615][ C0] ? ktime_get+0x24b/0x280 [ 1375.375036][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1375.379844][ C0] ? do_softirq+0x1a0/0x1a0 [ 1375.384356][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1375.389562][ C0] __irq_exit_rcu+0xd3/0x190 [ 1375.394156][ C0] ? irq_exit_rcu+0x20/0x20 [ 1375.398670][ C0] irq_exit_rcu+0x9/0x20 [ 1375.402916][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1375.408556][ C0] [ 1375.411484][ C0] [ 1375.414416][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1375.420397][ C0] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 1375.425861][ C0] Code: e8 83 09 fb f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 6f 09 fb f6 eb 06 e8 68 09 fb f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1375.445479][ C0] RSP: 0018:ffffc900001078a0 EFLAGS: 00000293 [ 1375.451550][ C0] RAX: ffffffff8a8c6b68 RBX: dffffc0000000000 RCX: ffff88801b65bc00 [ 1375.459523][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.467516][ C0] RBP: ffffc900001079a0 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 1375.475492][ C0] R10: dffffc0000000000 R11: fffffbfff223d6be R12: dffffc0000000004 [ 1375.483471][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000020f18 [ 1375.491538][ C0] ? dump_stack_lvl+0x208/0x250 [ 1375.496411][ C0] ? show_regs_print_info+0x20/0x20 [ 1375.501616][ C0] ? load_image+0x420/0x420 [ 1375.506131][ C0] ? mark_lock+0x94/0x320 [ 1375.510478][ C0] should_fail_ex+0x394/0x4c0 [ 1375.515171][ C0] should_failslab+0x9/0x20 [ 1375.519680][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1375.524719][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1375.529934][ C0] ? __alloc_skb+0x103/0x2c0 [ 1375.534536][ C0] __alloc_skb+0x103/0x2c0 [ 1375.538956][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1375.544602][ C0] ? process_scheduled_works+0x975/0x1600 [ 1375.550327][ C0] process_scheduled_works+0xa60/0x1600 [ 1375.555910][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1375.561382][ C0] ? assign_work+0x3cc/0x5d0 [ 1375.566004][ C0] worker_thread+0xa5e/0xfe0 [ 1375.570623][ C0] kthread+0x2fa/0x390 [ 1375.574691][ C0] ? pr_cont_work+0x550/0x550 [ 1375.579372][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1375.583961][ C0] ret_from_fork+0x48/0x80 [ 1375.588377][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1375.592966][ C0] ret_from_fork_asm+0x11/0x20 [ 1375.597758][ C0] [ 1375.600777][T13359] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1375.601058][ C0] FAULT_INJECTION: forcing a failure. [ 1375.601058][ C0] name failslab, interval 1, probability 10, space 0, times 11 [ 1375.608415][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1375.608429][T13359] Workqueue: events_unbound nsim_dev_trap_report_work [ 1375.608455][T13359] Call Trace: [ 1375.641256][T13359] [ 1375.644191][T13359] dump_stack_lvl+0x18c/0x250 [ 1375.648903][T13359] ? show_regs_print_info+0x20/0x20 [ 1375.654107][T13359] ? load_image+0x420/0x420 [ 1375.658619][T13359] ? mark_lock+0x94/0x320 [ 1375.662957][T13359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1375.668946][T13359] should_fail_ex+0x394/0x4c0 [ 1375.673721][T13359] should_failslab+0x9/0x20 [ 1375.678229][T13359] slab_pre_alloc_hook+0x59/0x300 [ 1375.683263][T13359] kmem_cache_alloc_node+0x5e/0x310 [ 1375.688465][T13359] ? slab_free_freelist_hook+0x130/0x1a0 [ 1375.694098][T13359] ? __alloc_skb+0x103/0x2c0 [ 1375.698699][T13359] __alloc_skb+0x103/0x2c0 [ 1375.703120][T13359] nsim_dev_trap_report_work+0x253/0xa90 [ 1375.708766][T13359] ? process_scheduled_works+0x975/0x1600 [ 1375.714498][T13359] process_scheduled_works+0xa60/0x1600 [ 1375.720076][T13359] ? worker_attach_to_pool+0x370/0x370 [ 1375.725547][T13359] ? assign_work+0x3cc/0x5d0 [ 1375.730162][T13359] worker_thread+0xa5e/0xfe0 [ 1375.734769][T13359] ? _raw_spin_unlock+0x40/0x40 [ 1375.739627][T13359] ? __kthread_parkme+0x71/0x1c0 [ 1375.744577][T13359] kthread+0x2fa/0x390 [ 1375.748647][T13359] ? pr_cont_work+0x550/0x550 [ 1375.753327][T13359] ? kthread_blkcg+0xd0/0xd0 [ 1375.757918][T13359] ret_from_fork+0x48/0x80 [ 1375.762337][T13359] ? kthread_blkcg+0xd0/0xd0 [ 1375.766929][T13359] ret_from_fork_asm+0x11/0x20 [ 1375.771713][T13359] [ 1375.774742][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1375.774943][ C1] FAULT_INJECTION: forcing a failure. [ 1375.774943][ C1] name failslab, interval 1, probability 10, space 0, times 11 [ 1375.782114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1375.804914][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1375.811689][ C0] Call Trace: [ 1375.814973][ C0] [ 1375.817818][ C0] dump_stack_lvl+0x18c/0x250 [ 1375.822504][ C0] ? show_regs_print_info+0x20/0x20 [ 1375.827706][ C0] ? load_image+0x420/0x420 [ 1375.832214][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1375.838118][ C0] ? verify_lock_unused+0x140/0x140 [ 1375.843332][ C0] should_fail_ex+0x394/0x4c0 [ 1375.848020][ C0] should_failslab+0x9/0x20 [ 1375.852531][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1375.857568][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1375.862776][ C0] ? __alloc_skb+0x103/0x2c0 [ 1375.867374][ C0] __alloc_skb+0x103/0x2c0 [ 1375.871797][ C0] wg_packet_send_keepalive+0x65/0x2b0 [ 1375.877265][ C0] call_timer_fn+0x189/0x540 [ 1375.881865][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1375.887933][ C0] ? call_timer_fn+0xd2/0x540 [ 1375.892707][ C0] ? __run_timers+0x810/0x810 [ 1375.898117][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1375.903332][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1375.908541][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 1375.914618][ C0] __run_timers+0x570/0x810 [ 1375.919146][ C0] ? detach_timer+0x2b0/0x2b0 [ 1375.923842][ C0] run_timer_softirq+0x67/0xf0 [ 1375.928611][ C0] handle_softirqs+0x27d/0x820 [ 1375.933376][ C0] ? read_tsc+0x9/0x20 [ 1375.937450][ C0] ? ktime_get+0x24b/0x280 [ 1375.941872][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1375.946689][ C0] ? do_softirq+0x1a0/0x1a0 [ 1375.951225][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1375.956443][ C0] __irq_exit_rcu+0xd3/0x190 [ 1375.961043][ C0] ? irq_exit_rcu+0x20/0x20 [ 1375.965557][ C0] irq_exit_rcu+0x9/0x20 [ 1375.969803][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1375.975446][ C0] [ 1375.978379][ C0] [ 1375.981315][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1375.987467][ C0] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 1375.994182][ C0] Code: e8 83 09 fb f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 6f 09 fb f6 eb 06 e8 68 09 fb f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1376.014765][ C0] RSP: 0018:ffffc900001078a0 EFLAGS: 00000293 [ 1376.020843][ C0] RAX: ffffffff8a8c6b68 RBX: dffffc0000000000 RCX: ffff88801b65bc00 [ 1376.028819][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.036808][ C0] RBP: ffffc900001079a0 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 1376.044780][ C0] R10: dffffc0000000000 R11: fffffbfff223d6be R12: dffffc0000000004 [ 1376.052753][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000020f18 [ 1376.060740][ C0] ? dump_stack_lvl+0x208/0x250 [ 1376.065613][ C0] ? show_regs_print_info+0x20/0x20 [ 1376.070849][ C0] ? load_image+0x420/0x420 [ 1376.075384][ C0] ? mark_lock+0x94/0x320 [ 1376.079740][ C0] should_fail_ex+0x394/0x4c0 [ 1376.084432][ C0] should_failslab+0x9/0x20 [ 1376.088948][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1376.093990][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1376.099199][ C0] ? __alloc_skb+0x103/0x2c0 [ 1376.103798][ C0] __alloc_skb+0x103/0x2c0 [ 1376.108221][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1376.113869][ C0] ? process_scheduled_works+0x975/0x1600 [ 1376.119598][ C0] process_scheduled_works+0xa60/0x1600 [ 1376.125173][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1376.130642][ C0] ? assign_work+0x3cc/0x5d0 [ 1376.135239][ C0] worker_thread+0xa5e/0xfe0 [ 1376.139858][ C0] kthread+0x2fa/0x390 [ 1376.143929][ C0] ? pr_cont_work+0x550/0x550 [ 1376.148613][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1376.153205][ C0] ret_from_fork+0x48/0x80 [ 1376.157630][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1376.162218][ C0] ret_from_fork_asm+0x11/0x20 [ 1376.166998][ C0] [ 1376.170019][ C1] CPU: 1 PID: 13359 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1376.170751][ T11] FAULT_INJECTION: forcing a failure. [ 1376.170751][ T11] name failslab, interval 1, probability 10, space 0, times 8 [ 1376.177736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1376.177751][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1376.177776][ C1] Call Trace: [ 1376.177784][ C1] [ 1376.177793][ C1] dump_stack_lvl+0x18c/0x250 [ 1376.177817][ C1] ? lock_chain_count+0x20/0x20 [ 1376.177841][ C1] ? show_regs_print_info+0x20/0x20 [ 1376.177870][ C1] ? load_image+0x420/0x420 [ 1376.177897][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1376.177923][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1376.177944][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1376.248238][ C1] should_fail_ex+0x394/0x4c0 [ 1376.252929][ C1] should_failslab+0x9/0x20 [ 1376.257438][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1376.262475][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1376.267679][ C1] ? __alloc_skb+0x103/0x2c0 [ 1376.272273][ C1] __alloc_skb+0x103/0x2c0 [ 1376.276697][ C1] __pskb_copy_fclone+0xac/0x1000 [ 1376.281730][ C1] tipc_udp_send_msg+0x25a/0x3e0 [ 1376.286676][ C1] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 1376.291874][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 1376.297156][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 1376.302445][ C1] tipc_disc_timeout+0x5f7/0x750 [ 1376.307387][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1376.312602][ C1] call_timer_fn+0x189/0x540 [ 1376.317194][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1376.322414][ C1] ? call_timer_fn+0xd2/0x540 [ 1376.327104][ C1] ? __run_timers+0x810/0x810 [ 1376.331789][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.336997][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1376.342197][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 1376.347402][ C1] __run_timers+0x570/0x810 [ 1376.351917][ C1] ? detach_timer+0x2b0/0x2b0 [ 1376.356600][ C1] ? lock_chain_count+0x20/0x20 [ 1376.361459][ C1] run_timer_softirq+0x67/0xf0 [ 1376.366223][ C1] handle_softirqs+0x27d/0x820 [ 1376.370987][ C1] ? read_tsc+0x9/0x20 [ 1376.375054][ C1] ? ktime_get+0x24b/0x280 [ 1376.379470][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1376.384237][ C1] ? do_softirq+0x1a0/0x1a0 [ 1376.388742][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1376.393944][ C1] __irq_exit_rcu+0xd3/0x190 [ 1376.398533][ C1] ? irq_exit_rcu+0x20/0x20 [ 1376.403044][ C1] irq_exit_rcu+0x9/0x20 [ 1376.407369][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1376.413012][ C1] [ 1376.415940][ C1] [ 1376.418871][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1376.424855][ C1] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 1376.430315][ C1] Code: e8 83 09 fb f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 6f 09 fb f6 eb 06 e8 68 09 fb f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1376.449918][ C1] RSP: 0018:ffffc9000454f8a0 EFLAGS: 00000293 [ 1376.455987][ C1] RAX: ffffffff8a8c6b68 RBX: dffffc0000000000 RCX: ffff8880319a1e00 [ 1376.463956][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.471926][ C1] RBP: ffffc9000454f9a0 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 1376.479894][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: dffffc0000000004 [ 1376.487862][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920008a9f18 [ 1376.495842][ C1] ? dump_stack_lvl+0x208/0x250 [ 1376.500703][ C1] ? show_regs_print_info+0x20/0x20 [ 1376.505900][ C1] ? load_image+0x420/0x420 [ 1376.510409][ C1] ? mark_lock+0x94/0x320 [ 1376.514741][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1376.520725][ C1] should_fail_ex+0x394/0x4c0 [ 1376.525415][ C1] should_failslab+0x9/0x20 [ 1376.529920][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1376.534958][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1376.540167][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1376.545796][ C1] ? __alloc_skb+0x103/0x2c0 [ 1376.550390][ C1] __alloc_skb+0x103/0x2c0 [ 1376.554810][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 1376.560464][ C1] ? process_scheduled_works+0x975/0x1600 [ 1376.566186][ C1] process_scheduled_works+0xa60/0x1600 [ 1376.571755][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1376.577219][ C1] ? assign_work+0x3cc/0x5d0 [ 1376.581820][ C1] worker_thread+0xa5e/0xfe0 [ 1376.586421][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1376.591277][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1376.596219][ C1] kthread+0x2fa/0x390 [ 1376.600289][ C1] ? pr_cont_work+0x550/0x550 [ 1376.604970][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1376.609557][ C1] ret_from_fork+0x48/0x80 [ 1376.613979][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1376.618569][ C1] ret_from_fork_asm+0x11/0x20 [ 1376.623348][ C1] [ 1376.626364][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1376.627249][ C1] FAULT_INJECTION: forcing a failure. [ 1376.627249][ C1] name failslab, interval 1, probability 10, space 0, times 5 [ 1376.633740][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1376.633754][ T11] Workqueue: events_unbound nsim_dev_trap_report_work [ 1376.633778][ T11] Call Trace: [ 1376.633786][ T11] [ 1376.669435][ T11] dump_stack_lvl+0x18c/0x250 [ 1376.674124][ T11] ? show_regs_print_info+0x20/0x20 [ 1376.679326][ T11] ? load_image+0x420/0x420 [ 1376.683835][ T11] ? mark_lock+0x94/0x320 [ 1376.688176][ T11] should_fail_ex+0x394/0x4c0 [ 1376.692867][ T11] should_failslab+0x9/0x20 [ 1376.697376][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1376.702410][ T11] kmem_cache_alloc_node+0x5e/0x310 [ 1376.707814][ T11] ? __alloc_skb+0x103/0x2c0 [ 1376.712436][ T11] __alloc_skb+0x103/0x2c0 [ 1376.716890][ T11] nsim_dev_trap_report_work+0x253/0xa90 [ 1376.722559][ T11] ? process_scheduled_works+0x975/0x1600 [ 1376.728298][ T11] process_scheduled_works+0xa60/0x1600 [ 1376.733883][ T11] ? worker_attach_to_pool+0x370/0x370 [ 1376.739361][ T11] ? assign_work+0x3cc/0x5d0 [ 1376.743962][ T11] worker_thread+0xa5e/0xfe0 [ 1376.748584][ T11] kthread+0x2fa/0x390 [ 1376.752654][ T11] ? pr_cont_work+0x550/0x550 [ 1376.757338][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1376.761942][ T11] ret_from_fork+0x48/0x80 [ 1376.766362][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1376.770952][ T11] ret_from_fork_asm+0x11/0x20 [ 1376.775758][ T11] [ 1376.778803][ C1] CPU: 1 PID: 18230 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1376.779017][ T11] FAULT_INJECTION: forcing a failure. [ 1376.779017][ T11] name failslab, interval 1, probability 10, space 0, times 4 [ 1376.786349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1376.786363][ C1] Workqueue: events_power_efficient hash_ipportnet4_gc [ 1376.815944][ C1] Call Trace: [ 1376.819233][ C1] [ 1376.822080][ C1] dump_stack_lvl+0x18c/0x250 [ 1376.826768][ C1] ? show_regs_print_info+0x20/0x20 [ 1376.831976][ C1] ? load_image+0x420/0x420 [ 1376.836491][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1376.841550][ C1] should_fail_ex+0x394/0x4c0 [ 1376.846256][ C1] should_failslab+0x9/0x20 [ 1376.850773][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1376.855822][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1376.861040][ C1] ? __alloc_skb+0x103/0x2c0 [ 1376.865638][ C1] __alloc_skb+0x103/0x2c0 [ 1376.870072][ C1] alloc_skb_with_frags+0xcd/0x7a0 [ 1376.875204][ C1] ? ret_from_fork_asm+0x10/0x20 [ 1376.880158][ C1] sock_alloc_send_pskb+0x883/0x9a0 [ 1376.885367][ C1] ? stack_trace_save+0x100/0x100 [ 1376.890412][ C1] ? sock_kzfree_s+0x50/0x50 [ 1376.895011][ C1] ? __stack_depot_save+0x1f/0x660 [ 1376.900125][ C1] ? get_random_u8+0x16c/0x980 [ 1376.904897][ C1] ? get_random_u8+0x516/0x980 [ 1376.909674][ C1] ? kasan_set_track+0x5f/0x70 [ 1376.914441][ C1] ? kasan_set_track+0x4e/0x70 [ 1376.919212][ C1] __ip_append_data+0x2a08/0x3bf0 [ 1376.924245][ C1] ? nft_do_chain+0x44b/0x1620 [ 1376.929012][ C1] ? nft_do_chain_inet+0x29b/0x380 [ 1376.934124][ C1] ? nf_hook_slow+0xbd/0x200 [ 1376.938728][ C1] ? kthread+0x2fa/0x390 [ 1376.942985][ C1] ? ip_route_input+0x510/0x510 [ 1376.947854][ C1] ? ip_setup_cork+0x840/0x840 [ 1376.952623][ C1] ? ip_setup_cork+0x527/0x840 [ 1376.957399][ C1] ip_append_data+0x10d/0x180 [ 1376.962084][ C1] ? ip_route_input+0x510/0x510 [ 1376.966939][ C1] icmp_push_reply+0x87/0x410 [ 1376.971624][ C1] ? rcu_is_watching+0x15/0xb0 [ 1376.976407][ C1] __icmp_send+0x1100/0x1430 [ 1376.981009][ C1] ? __icmp_send+0x217/0x1430 [ 1376.985703][ C1] ? icmp_out_count+0x90/0x90 [ 1376.990392][ C1] ? __lock_acquire+0x1262/0x7d80 [ 1376.995432][ C1] ? mark_lock+0x94/0x320 [ 1376.999830][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1377.004884][ C1] nf_send_unreach+0x574/0xac0 [ 1377.009674][ C1] ? nf_bridge_get_physindev+0x120/0x120 [ 1377.015316][ C1] ? verify_lock_unused+0x140/0x140 [ 1377.020522][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1377.026166][ C1] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1377.032340][ C1] nft_reject_inet_eval+0x4b7/0x680 [ 1377.037559][ C1] nft_do_chain+0x44b/0x1620 [ 1377.042167][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1377.048070][ C1] ? nf_conntrack_in+0x18f/0x15b0 [ 1377.053122][ C1] nft_do_chain_inet+0x29b/0x380 [ 1377.058062][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1377.063085][ C1] ? ipt_do_table+0x2c5/0x15c0 [ 1377.067865][ C1] ? nf_nat_ipv4_pre_routing+0x22b/0x390 [ 1377.073512][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1377.073858][ C0] FAULT_INJECTION: forcing a failure. [ 1377.073858][ C0] name failslab, interval 1, probability 10, space 0, times 4 [ 1377.078530][ C1] nf_hook_slow+0xbd/0x200 [ 1377.078563][ C1] NF_HOOK+0x21d/0x3b0 [ 1377.101036][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1377.105822][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1377.109987][ C1] ? ip_local_deliver+0x180/0x180 [ 1377.115018][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1377.119614][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1377.125251][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1377.130887][ C1] __netif_receive_skb+0xcc/0x290 [ 1377.135928][ C1] ? process_backlog+0x2cf/0x710 [ 1377.140871][ C1] process_backlog+0x380/0x710 [ 1377.145666][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1377.150802][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1377.156790][ C1] ? __rwlock_init+0x150/0x150 [ 1377.161562][ C1] ? lock_chain_count+0x20/0x20 [ 1377.166424][ C1] __napi_poll+0xbb/0x460 [ 1377.170761][ C1] net_rx_action+0x65f/0xcc0 [ 1377.175375][ C1] ? net_tx_action+0x950/0x950 [ 1377.180406][ C1] ? detach_timer+0x2b0/0x2b0 [ 1377.185084][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1377.191068][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1377.196357][ C1] ? lock_chain_count+0x20/0x20 [ 1377.201218][ C1] handle_softirqs+0x27d/0x820 [ 1377.205993][ C1] ? do_softirq+0xfa/0x1a0 [ 1377.210416][ C1] ? do_softirq+0x1a0/0x1a0 [ 1377.214927][ C1] ? hash_ipportnet4_gc+0x227/0x5c0 [ 1377.220129][ C1] do_softirq+0xfa/0x1a0 [ 1377.224373][ C1] [ 1377.227300][ C1] [ 1377.230230][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1377.235611][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1377.241598][ C1] ? rcu_is_watching+0x15/0xb0 [ 1377.246372][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 1377.251572][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1377.256428][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1377.261633][ C1] ? hash_ipportnet4_gc+0x227/0x5c0 [ 1377.266845][ C1] hash_ipportnet4_gc+0x227/0x5c0 [ 1377.271881][ C1] ? process_scheduled_works+0x975/0x1600 [ 1377.277608][ C1] process_scheduled_works+0xa60/0x1600 [ 1377.283184][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1377.288657][ C1] ? assign_work+0x3cc/0x5d0 [ 1377.293261][ C1] worker_thread+0xa5e/0xfe0 [ 1377.297869][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1377.302731][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1377.307684][ C1] kthread+0x2fa/0x390 [ 1377.311751][ C1] ? pr_cont_work+0x550/0x550 [ 1377.316435][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1377.321027][ C1] ret_from_fork+0x48/0x80 [ 1377.325452][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1377.330063][ C1] ret_from_fork_asm+0x11/0x20 [ 1377.334847][ C1] [ 1377.337863][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1377.338438][ C1] FAULT_INJECTION: forcing a failure. [ 1377.338438][ C1] name failslab, interval 1, probability 10, space 0, times 3 [ 1377.345232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1377.345246][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1377.345272][ C0] Call Trace: [ 1377.377998][ C0] [ 1377.380843][ C0] dump_stack_lvl+0x18c/0x250 [ 1377.385523][ C0] ? verify_lock_unused+0x140/0x140 [ 1377.390724][ C0] ? show_regs_print_info+0x20/0x20 [ 1377.395922][ C0] ? load_image+0x420/0x420 [ 1377.400440][ C0] should_fail_ex+0x394/0x4c0 [ 1377.405128][ C0] should_failslab+0x9/0x20 [ 1377.409645][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1377.414684][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1377.419888][ C0] ? __alloc_skb+0x103/0x2c0 [ 1377.424479][ C0] __alloc_skb+0x103/0x2c0 [ 1377.428902][ C0] ndisc_alloc_skb+0xa6/0x450 [ 1377.433585][ C0] ndisc_send_rs+0x27d/0x690 [ 1377.438180][ C0] ? ipv6_get_lladdr+0x2b/0x3e0 [ 1377.443040][ C0] addrconf_rs_timer+0x36b/0x640 [ 1377.447986][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.454063][ C0] call_timer_fn+0x189/0x540 [ 1377.458652][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.464727][ C0] ? call_timer_fn+0xd2/0x540 [ 1377.469404][ C0] ? __run_timers+0x810/0x810 [ 1377.474088][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.479307][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1377.484515][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.490610][ C0] __run_timers+0x570/0x810 [ 1377.495137][ C0] ? detach_timer+0x2b0/0x2b0 [ 1377.499823][ C0] ? lock_chain_count+0x20/0x20 [ 1377.504682][ C0] run_timer_softirq+0x67/0xf0 [ 1377.509444][ C0] handle_softirqs+0x27d/0x820 [ 1377.514214][ C0] ? read_tsc+0x9/0x20 [ 1377.518285][ C0] ? ktime_get+0x24b/0x280 [ 1377.522707][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1377.527474][ C0] ? do_softirq+0x1a0/0x1a0 [ 1377.531989][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1377.537192][ C0] __irq_exit_rcu+0xd3/0x190 [ 1377.541784][ C0] ? irq_exit_rcu+0x20/0x20 [ 1377.546304][ C0] irq_exit_rcu+0x9/0x20 [ 1377.550543][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1377.556183][ C0] [ 1377.559114][ C0] [ 1377.562046][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1377.568029][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1377.573933][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1377.593540][ C0] RSP: 0018:ffffc90000107898 EFLAGS: 00000293 [ 1377.599609][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88801b65bc00 [ 1377.607584][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1377.615551][ C0] RBP: ffffc900001079a0 R08: 0000000000000003 R09: 0000000000000004 [ 1377.623521][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1377.631493][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000020f18 [ 1377.639468][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1377.644857][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1377.650235][ C0] dump_stack_lvl+0x165/0x250 [ 1377.654930][ C0] ? show_regs_print_info+0x20/0x20 [ 1377.660132][ C0] ? load_image+0x420/0x420 [ 1377.664650][ C0] ? mark_lock+0x94/0x320 [ 1377.668997][ C0] should_fail_ex+0x394/0x4c0 [ 1377.673688][ C0] should_failslab+0x9/0x20 [ 1377.678201][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1377.683337][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1377.688544][ C0] ? __alloc_skb+0x103/0x2c0 [ 1377.693142][ C0] __alloc_skb+0x103/0x2c0 [ 1377.697564][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1377.703213][ C0] ? process_scheduled_works+0x975/0x1600 [ 1377.708942][ C0] process_scheduled_works+0xa60/0x1600 [ 1377.714516][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1377.719987][ C0] ? assign_work+0x3cc/0x5d0 [ 1377.724586][ C0] worker_thread+0xa5e/0xfe0 [ 1377.729213][ C0] kthread+0x2fa/0x390 [ 1377.733280][ C0] ? pr_cont_work+0x550/0x550 [ 1377.737961][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1377.742554][ C0] ret_from_fork+0x48/0x80 [ 1377.746974][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1377.751563][ C0] ret_from_fork_asm+0x11/0x20 [ 1377.756345][ C0] [ 1377.759368][ C1] CPU: 1 PID: 18230 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1377.760053][ C0] FAULT_INJECTION: forcing a failure. [ 1377.760053][ C0] name failslab, interval 1, probability 10, space 0, times 2 [ 1377.766910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1377.766925][ C1] Workqueue: events_power_efficient hash_ipportnet4_gc [ 1377.796482][ C1] Call Trace: [ 1377.799763][ C1] [ 1377.802606][ C1] dump_stack_lvl+0x18c/0x250 [ 1377.807296][ C1] ? verify_lock_unused+0x140/0x140 [ 1377.812499][ C1] ? show_regs_print_info+0x20/0x20 [ 1377.817698][ C1] ? load_image+0x420/0x420 [ 1377.822220][ C1] should_fail_ex+0x394/0x4c0 [ 1377.826910][ C1] should_failslab+0x9/0x20 [ 1377.831423][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1377.836461][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 1377.841668][ C1] ? __alloc_skb+0x103/0x2c0 [ 1377.846262][ C1] __alloc_skb+0x103/0x2c0 [ 1377.850682][ C1] ndisc_alloc_skb+0xa6/0x450 [ 1377.855364][ C1] ndisc_send_rs+0x27d/0x690 [ 1377.859967][ C1] ? ipv6_get_lladdr+0x2b/0x3e0 [ 1377.864827][ C1] addrconf_rs_timer+0x36b/0x640 [ 1377.869770][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.875851][ C1] call_timer_fn+0x189/0x540 [ 1377.880442][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.886509][ C1] ? call_timer_fn+0xd2/0x540 [ 1377.891189][ C1] ? __run_timers+0x810/0x810 [ 1377.895874][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.901084][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1377.906301][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1377.912376][ C1] __run_timers+0x570/0x810 [ 1377.916880][ C1] ? __rwlock_init+0x150/0x150 [ 1377.921663][ C1] ? detach_timer+0x2b0/0x2b0 [ 1377.926345][ C1] ? lock_chain_count+0x20/0x20 [ 1377.931198][ C1] ? try_to_wake_up+0x6c3/0x10e0 [ 1377.936141][ C1] run_timer_softirq+0x67/0xf0 [ 1377.940907][ C1] handle_softirqs+0x27d/0x820 [ 1377.945678][ C1] ? do_softirq+0xfa/0x1a0 [ 1377.950100][ C1] ? do_softirq+0x1a0/0x1a0 [ 1377.954613][ C1] ? hash_ipportnet4_gc+0x237/0x5c0 [ 1377.959816][ C1] do_softirq+0xfa/0x1a0 [ 1377.964061][ C1] [ 1377.966992][ C1] [ 1377.969920][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1377.975298][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1377.981287][ C1] ? rcu_is_watching+0x15/0xb0 [ 1377.986061][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 1377.991262][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1377.996116][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1378.001324][ C1] ? hash_ipportnet4_gc+0x237/0x5c0 [ 1378.006528][ C1] hash_ipportnet4_gc+0x237/0x5c0 [ 1378.011562][ C1] ? process_scheduled_works+0x975/0x1600 [ 1378.017296][ C1] process_scheduled_works+0xa60/0x1600 [ 1378.022872][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1378.028343][ C1] ? assign_work+0x3cc/0x5d0 [ 1378.032946][ C1] worker_thread+0xa5e/0xfe0 [ 1378.037555][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1378.042419][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1378.047367][ C1] kthread+0x2fa/0x390 [ 1378.051437][ C1] ? pr_cont_work+0x550/0x550 [ 1378.056122][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1378.060713][ C1] ret_from_fork+0x48/0x80 [ 1378.065133][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1378.069727][ C1] ret_from_fork_asm+0x11/0x20 [ 1378.074511][ C1] [ 1378.077528][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1378.079318][ C1] FAULT_INJECTION: forcing a failure. [ 1378.079318][ C1] name failslab, interval 1, probability 10, space 0, times 1 [ 1378.084913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.084929][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1378.084955][ C0] Call Trace: [ 1378.084963][ C0] [ 1378.120523][ C0] dump_stack_lvl+0x18c/0x250 [ 1378.125211][ C0] ? show_regs_print_info+0x20/0x20 [ 1378.130416][ C0] ? load_image+0x420/0x420 [ 1378.134930][ C0] ? mark_lock+0x94/0x320 [ 1378.139374][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1378.146088][ C0] should_fail_ex+0x394/0x4c0 [ 1378.150787][ C0] should_failslab+0x9/0x20 [ 1378.155300][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1378.160334][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1378.165717][ C0] kmem_cache_alloc+0x5a/0x2c0 [ 1378.170492][ C0] ? skb_clone+0x1eb/0x370 [ 1378.174922][ C0] skb_clone+0x1eb/0x370 [ 1378.179172][ C0] hsr_forward_skb+0xefd/0x20b0 [ 1378.184045][ C0] ? hsr_forward_skb+0xb1/0x20b0 [ 1378.189003][ C0] ? prp_fill_frame_info+0x760/0x760 [ 1378.194301][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1378.199344][ C0] ? __skb_pad+0x3f3/0x5f0 [ 1378.203766][ C0] send_hsr_supervision_frame+0x5fb/0xb90 [ 1378.209504][ C0] hsr_announce+0x198/0x350 [ 1378.214018][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1378.219398][ C0] ? hsr_announce+0x84/0x350 [ 1378.223996][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1378.229043][ C0] call_timer_fn+0x189/0x540 [ 1378.233643][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1378.238672][ C0] ? call_timer_fn+0xd2/0x540 [ 1378.243349][ C0] ? __run_timers+0x810/0x810 [ 1378.248034][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.253247][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1378.258449][ C0] ? hsr_dev_finalize+0x800/0x800 [ 1378.263483][ C0] __run_timers+0x570/0x810 [ 1378.268003][ C0] ? detach_timer+0x2b0/0x2b0 [ 1378.272690][ C0] ? lock_chain_count+0x20/0x20 [ 1378.277554][ C0] run_timer_softirq+0x67/0xf0 [ 1378.282318][ C0] handle_softirqs+0x27d/0x820 [ 1378.287081][ C0] ? read_tsc+0x9/0x20 [ 1378.291154][ C0] ? ktime_get+0x24b/0x280 [ 1378.295578][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1378.300345][ C0] ? do_softirq+0x1a0/0x1a0 [ 1378.304853][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1378.310066][ C0] __irq_exit_rcu+0xd3/0x190 [ 1378.314659][ C0] ? irq_exit_rcu+0x20/0x20 [ 1378.319177][ C0] irq_exit_rcu+0x9/0x20 [ 1378.323430][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1378.329078][ C0] [ 1378.332006][ C0] [ 1378.334945][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1378.340925][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1378.346826][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 bc b2 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 87 34 1b 00 f3 90 <48> c7 c7 00 d8 00 8d be 04 00 00 00 e8 b4 b3 73 00 8b 05 9e 97 94 [ 1378.366436][ C0] RSP: 0018:ffffc90000107898 EFLAGS: 00000293 [ 1378.372505][ C0] RAX: ffffffff816c406c RBX: 0000000000000200 RCX: ffff88801b65bc00 [ 1378.380476][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 1378.388445][ C0] RBP: ffffc900001079a0 R08: 0000000000000003 R09: 0000000000000004 [ 1378.396416][ C0] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 1378.404389][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000020f18 [ 1378.412365][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1378.417841][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1378.423218][ C0] dump_stack_lvl+0x165/0x250 [ 1378.427899][ C0] ? show_regs_print_info+0x20/0x20 [ 1378.433097][ C0] ? load_image+0x420/0x420 [ 1378.437613][ C0] ? mark_lock+0x94/0x320 [ 1378.441957][ C0] should_fail_ex+0x394/0x4c0 [ 1378.446647][ C0] should_failslab+0x9/0x20 [ 1378.451158][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1378.456197][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 1378.461406][ C0] ? __alloc_skb+0x103/0x2c0 [ 1378.466000][ C0] __alloc_skb+0x103/0x2c0 [ 1378.470425][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 1378.476072][ C0] ? process_scheduled_works+0x975/0x1600 [ 1378.481803][ C0] process_scheduled_works+0xa60/0x1600 [ 1378.487378][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1378.492848][ C0] ? assign_work+0x3cc/0x5d0 [ 1378.497452][ C0] worker_thread+0xa5e/0xfe0 [ 1378.502077][ C0] kthread+0x2fa/0x390 [ 1378.506149][ C0] ? pr_cont_work+0x550/0x550 [ 1378.510833][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1378.515424][ C0] ret_from_fork+0x48/0x80 [ 1378.519842][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1378.524431][ C0] ret_from_fork_asm+0x11/0x20 [ 1378.529217][ C0] [ 1378.532233][ C1] CPU: 1 PID: 18230 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1378.539796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.549850][ C1] Workqueue: events_power_efficient hash_ipportnet4_gc [ 1378.556709][ C1] Call Trace: [ 1378.559992][ C1] [ 1378.562831][ C1] dump_stack_lvl+0x18c/0x250 [ 1378.567517][ C1] ? show_regs_print_info+0x20/0x20 [ 1378.572715][ C1] ? load_image+0x420/0x420 [ 1378.577222][ C1] ? mark_lock+0x94/0x320 [ 1378.581557][ C1] ? __lock_acquire+0x1262/0x7d80 [ 1378.586589][ C1] should_fail_ex+0x394/0x4c0 [ 1378.591272][ C1] should_failslab+0x9/0x20 [ 1378.595781][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1378.600814][ C1] ? ret_from_fork+0x48/0x80 [ 1378.605413][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 1378.610181][ C1] ? build_skb+0x29/0x250 [ 1378.614515][ C1] build_skb+0x29/0x250 [ 1378.618670][ C1] page_to_skb+0x10e/0x8a0 [ 1378.623092][ C1] receive_buf+0x314/0x3660 [ 1378.627612][ C1] ? virtnet_poll_tx+0x530/0x530 [ 1378.632544][ C1] ? do_raw_spin_trylock+0xb2/0x190 [ 1378.637755][ C1] virtnet_poll+0x69e/0x1300 [ 1378.642350][ C1] ? refill_work+0x220/0x220 [ 1378.646943][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1378.652142][ C1] ? virtqueue_poll+0x16d/0x210 [ 1378.656994][ C1] ? rcu_is_watching+0x15/0xb0 [ 1378.661770][ C1] __napi_poll+0xbb/0x460 [ 1378.666552][ C1] net_rx_action+0x65f/0xcc0 [ 1378.671252][ C1] ? net_tx_action+0x950/0x950 [ 1378.676023][ C1] ? detach_timer+0x2b0/0x2b0 [ 1378.680721][ C1] handle_softirqs+0x27d/0x820 [ 1378.685509][ C1] ? do_softirq+0xfa/0x1a0 [ 1378.689930][ C1] ? do_softirq+0x1a0/0x1a0 [ 1378.694435][ C1] ? hash_ipportnet4_gc+0x237/0x5c0 [ 1378.699637][ C1] do_softirq+0xfa/0x1a0 [ 1378.703890][ C1] [ 1378.706816][ C1] [ 1378.709741][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1378.715117][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1378.721102][ C1] ? rcu_is_watching+0x15/0xb0 [ 1378.725882][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 1378.731080][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1378.735931][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1378.741134][ C1] ? hash_ipportnet4_gc+0x237/0x5c0 [ 1378.746336][ C1] hash_ipportnet4_gc+0x237/0x5c0 [ 1378.751365][ C1] ? process_scheduled_works+0x975/0x1600 [ 1378.757085][ C1] process_scheduled_works+0xa60/0x1600 [ 1378.762676][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1378.768159][ C1] ? assign_work+0x3cc/0x5d0 [ 1378.772768][ C1] worker_thread+0xa5e/0xfe0 [ 1378.777378][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1378.782242][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1378.787188][ C1] kthread+0x2fa/0x390 [ 1378.791258][ C1] ? pr_cont_work+0x550/0x550 [ 1378.795941][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1378.800527][ C1] ret_from_fork+0x48/0x80 [ 1378.804946][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1378.809539][ C1] ret_from_fork_asm+0x11/0x20 [ 1378.814317][ C1] [ 1378.817330][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1378.824725][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.834795][ T11] Workqueue: events_unbound nsim_dev_trap_report_work [ 1378.841582][ T11] Call Trace: [ 1378.844867][ T11] [ 1378.847807][ T11] dump_stack_lvl+0x18c/0x250 [ 1378.852509][ T11] ? show_regs_print_info+0x20/0x20 [ 1378.857719][ T11] ? load_image+0x420/0x420 [ 1378.862237][ T11] ? mark_lock+0x94/0x320 [ 1378.866596][ T11] should_fail_ex+0x394/0x4c0 [ 1378.871296][ T11] should_failslab+0x9/0x20 [ 1378.875816][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1378.880859][ T11] kmem_cache_alloc_node+0x5e/0x310 [ 1378.886073][ T11] ? __alloc_skb+0x103/0x2c0 [ 1378.890677][ T11] __alloc_skb+0x103/0x2c0 [ 1378.895104][ T11] nsim_dev_trap_report_work+0x253/0xa90 [ 1378.900764][ T11] ? process_scheduled_works+0x975/0x1600 [ 1378.906502][ T11] process_scheduled_works+0xa60/0x1600 [ 1378.912091][ T11] ? worker_attach_to_pool+0x370/0x370 [ 1378.917569][ T11] ? assign_work+0x3cc/0x5d0 [ 1378.922176][ T11] worker_thread+0xa5e/0xfe0 [ 1378.926802][ T11] kthread+0x2fa/0x390 [ 1378.930876][ T11] ? pr_cont_work+0x550/0x550 [ 1378.935561][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1378.940158][ T11] ret_from_fork+0x48/0x80 [ 1378.944584][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1378.949185][ T11] ret_from_fork_asm+0x11/0x20 [ 1378.953976][ T11] [ 1378.957320][ T174] usb 6-1: device descriptor read/64, error -32 [ 1378.966096][T23328] CPU: 0 PID: 23328 Comm: syz.1.5472 Not tainted syzkaller #0 [ 1378.973576][T23328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.983636][T23328] Call Trace: [ 1378.986917][T23328] [ 1378.989854][T23328] dump_stack_lvl+0x18c/0x250 [ 1378.994549][T23328] ? show_regs_print_info+0x20/0x20 [ 1378.999760][T23328] ? load_image+0x420/0x420 [ 1379.004279][T23328] ? __might_sleep+0xe0/0xe0 [ 1379.008883][T23328] ? __lock_acquire+0x7d80/0x7d80 [ 1379.013912][T23328] ? exit_to_user_mode_prepare+0xee/0x180 [ 1379.019655][T23328] ? do_syscall_64+0x61/0xb0 [ 1379.024267][T23328] should_fail_ex+0x394/0x4c0 [ 1379.028973][T23328] should_failslab+0x9/0x20 [ 1379.033491][T23328] slab_pre_alloc_hook+0x59/0x300 [ 1379.038536][T23328] ? kobject_get_path+0xc3/0x2c0 [ 1379.043488][T23328] ? kobject_get_path+0xc3/0x2c0 [ 1379.048439][T23328] __kmem_cache_alloc_node+0x53/0x250 [ 1379.053838][T23328] ? kobject_get_path+0xc3/0x2c0 [ 1379.058793][T23328] __kmalloc+0xa7/0x240 [ 1379.062980][T23328] kobject_get_path+0xc3/0x2c0 [ 1379.067767][T23328] kobject_uevent_env+0x291/0x890 [ 1379.072818][T23328] __kobject_del+0xd1/0x2e0 [ 1379.077427][T23328] kobject_put+0x233/0x450 [ 1379.081887][T23328] bus_remove_driver+0x240/0x2f0 [ 1379.086879][T23328] usb_gadget_unregister_driver+0x4e/0x70 [ 1379.092614][T23328] raw_release+0xda/0x260 [ 1379.097029][T23328] ? raw_open+0x520/0x520 [ 1379.101371][T23328] __fput+0x221/0x940 [ 1379.105378][T23328] task_work_run+0x1d4/0x260 [ 1379.109986][T23328] ? task_work_cancel+0x220/0x220 [ 1379.115061][T23328] do_exit+0x986/0x2530 [ 1379.119242][T23328] ? put_task_struct+0xc0/0xc0 [ 1379.124022][T23328] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1379.130014][T23328] ? get_signal+0x100e/0x1390 [ 1379.134712][T23328] ? lock_chain_count+0x20/0x20 [ 1379.139571][T23328] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1379.144616][T23328] do_group_exit+0x22d/0x2f0 [ 1379.149219][T23328] ? lockdep_hardirqs_on+0x98/0x150 [ 1379.154444][T23328] get_signal+0x12a6/0x1390 [ 1379.158996][T23328] arch_do_signal_or_restart+0xc2/0x7b0 [ 1379.164569][T23328] ? get_sigframe_size+0x20/0x20 [ 1379.169676][T23328] ? exit_to_user_mode_loop+0x3b/0x110 [ 1379.175166][T23328] exit_to_user_mode_loop+0x70/0x110 [ 1379.180467][T23328] exit_to_user_mode_prepare+0xee/0x180 [ 1379.186027][T23328] syscall_exit_to_user_mode+0x1a/0x50 [ 1379.191497][T23328] do_syscall_64+0x61/0xb0 [ 1379.195948][T23328] ? clear_bhb_loop+0x40/0x90 [ 1379.200635][T23328] ? clear_bhb_loop+0x40/0x90 [ 1379.205325][T23328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.211313][T23328] RIP: 0033:0x7ffb8bb9db2b [ 1379.215735][T23328] Code: Unable to access opcode bytes at 0x7ffb8bb9db01. [ 1379.222812][T23328] RSP: 002b:00007ffb8c9b3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.231236][T23328] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007ffb8bb9db2b [ 1379.239215][T23328] RDX: 00007ffb8c9b4fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 1379.247188][T23328] RBP: 00007ffb8c9b4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1379.255206][T23328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1379.263190][T23328] R13: 0000000800000000 R14: 0000000000000003 R15: 00007ffb8bc526c7 [ 1379.271192][T23328] [ 1379.281921][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1379.283568][ T5433] CPU: 1 PID: 5433 Comm: dhcpcd Not tainted syzkaller #0 [ 1379.288269][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1379.295176][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1379.295190][ T5433] Call Trace: [ 1379.295199][ T5433] [ 1379.295208][ T5433] dump_stack_lvl+0x18c/0x250 [ 1379.313485][ T174] usb usb6-port1: attempt power cycle [ 1379.314924][ T5433] ? show_regs_print_info+0x20/0x20 [ 1379.333072][ T5433] ? load_image+0x420/0x420 [ 1379.337586][ T5433] ? __might_sleep+0xe0/0xe0 [ 1379.342181][ T5433] ? __lock_acquire+0x7d80/0x7d80 [ 1379.347208][ T5433] should_fail_ex+0x394/0x4c0 [ 1379.351888][ T5433] should_failslab+0x9/0x20 [ 1379.356390][ T5433] slab_pre_alloc_hook+0x59/0x300 [ 1379.361511][ T5433] kmem_cache_alloc_node+0x5e/0x310 [ 1379.366709][ T5433] ? __alloc_skb+0x103/0x2c0 [ 1379.371297][ T5433] __alloc_skb+0x103/0x2c0 [ 1379.375710][ T5433] alloc_skb_with_frags+0xcd/0x7a0 [ 1379.380838][ T5433] ? aa_label_sk_perm+0x4d4/0x660 [ 1379.385866][ T5433] sock_alloc_send_pskb+0x883/0x9a0 [ 1379.391082][ T5433] ? sock_kzfree_s+0x50/0x50 [ 1379.395667][ T5433] ? do_raw_spin_lock+0x11f/0x2b0 [ 1379.400689][ T5433] ? __rwlock_init+0x150/0x150 [ 1379.405455][ T5433] ? do_raw_spin_unlock+0x121/0x230 [ 1379.410650][ T5433] unix_dgram_sendmsg+0x5a9/0x16e0 [ 1379.415766][ T5433] ? aa_af_perm+0x330/0x330 [ 1379.420271][ T5433] ? unix_dgram_poll+0x680/0x680 [ 1379.425200][ T5433] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1379.431615][ T5433] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1379.437159][ T5433] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1379.442440][ T5433] ? security_socket_sendmsg+0x80/0xa0 [ 1379.447893][ T5433] __sys_sendto+0x4a9/0x6b0 [ 1379.452397][ T5433] ? __ia32_sys_getpeername+0x90/0x90 [ 1379.457780][ T5433] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1379.463757][ T5433] ? lock_chain_count+0x20/0x20 [ 1379.468607][ T5433] __x64_sys_sendto+0xde/0xf0 [ 1379.473284][ T5433] do_syscall_64+0x55/0xb0 [ 1379.477695][ T5433] ? clear_bhb_loop+0x40/0x90 [ 1379.482366][ T5433] ? clear_bhb_loop+0x40/0x90 [ 1379.487046][ T5433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.492934][ T5433] RIP: 0033:0x7fb0a8d0e407 [ 1379.497345][ T5433] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1379.517382][ T5433] RSP: 002b:00007ffda371fb90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1379.525802][ T5433] RAX: ffffffffffffffda RBX: 00007fb0a8c84740 RCX: 00007fb0a8d0e407 [ 1379.533773][ T5433] RDX: 000000000000004b RSI: 00007ffda371fcd0 RDI: 0000000000000003 [ 1379.541739][ T5433] RBP: 00007ffda3720100 R08: 0000000000000000 R09: 0000000000000000 [ 1379.549704][ T5433] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffda3720550 [ 1379.557669][ T5433] R13: 00007ffda371fcd0 R14: 0000000000000029 R15: 00007ffda371fcd0 [ 1379.565643][ T5433] [ 1379.569323][ T5138] CPU: 1 PID: 5138 Comm: udevd Not tainted syzkaller #0 [ 1379.576287][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1379.586362][ T5138] Call Trace: [ 1379.589653][ T5138] [ 1379.592595][ T5138] dump_stack_lvl+0x18c/0x250 [ 1379.597290][ T5138] ? show_regs_print_info+0x20/0x20 [ 1379.602505][ T5138] ? load_image+0x420/0x420 [ 1379.607031][ T5138] ? __lock_acquire+0x7d80/0x7d80 [ 1379.612066][ T5138] ? __might_fault+0xaa/0x120 [ 1379.616766][ T5138] should_fail_ex+0x394/0x4c0 [ 1379.621467][ T5138] should_failslab+0x9/0x20 [ 1379.625990][ T5138] slab_pre_alloc_hook+0x59/0x300 [ 1379.631040][ T5138] kmem_cache_alloc+0x5a/0x2c0 [ 1379.635820][ T5138] ? getname_flags+0xbb/0x500 [ 1379.640528][ T5138] getname_flags+0xbb/0x500 [ 1379.645053][ T5138] vfs_fstatat+0x111/0x1b0 [ 1379.649483][ T5138] __x64_sys_newfstatat+0x149/0x1f0 [ 1379.654703][ T5138] ? __ia32_sys_newlstat+0x1e0/0x1e0 [ 1379.660025][ T5138] ? lockdep_hardirqs_on+0x98/0x150 [ 1379.665248][ T5138] do_syscall_64+0x55/0xb0 [ 1379.669672][ T5138] ? clear_bhb_loop+0x40/0x90 [ 1379.674361][ T5138] ? clear_bhb_loop+0x40/0x90 [ 1379.679054][ T5138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.684963][ T5138] RIP: 0033:0x7f7b1c311b0a [ 1379.689387][ T5138] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1379.709094][ T5138] RSP: 002b:00007fff023f2ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1379.717532][ T5138] RAX: ffffffffffffffda RBX: 00005602f7535418 RCX: 00007f7b1c311b0a [ 1379.725515][ T5138] RDX: 00007fff023f2bb0 RSI: 00005602f7523ef3 RDI: 00000000ffffff9c [ 1379.733497][ T5138] RBP: 000056032240b148 R08: 0006579d04044350 R09: 0000000000745a2b [ 1379.741480][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.749469][ T5138] R13: 00007fff023f2bb0 R14: 0000000000000000 R15: 0006579d04044350 [ 1379.757470][ T5138] [ 1379.762255][ T5755] CPU: 1 PID: 5755 Comm: syz-executor Not tainted syzkaller #0 [ 1379.769821][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1379.779867][ T5755] Call Trace: [ 1379.783142][ T5755] [ 1379.786067][ T5755] dump_stack_lvl+0x18c/0x250 [ 1379.790745][ T5755] ? show_regs_print_info+0x20/0x20 [ 1379.795940][ T5755] ? load_image+0x420/0x420 [ 1379.800441][ T5755] ? __might_sleep+0xe0/0xe0 [ 1379.805029][ T5755] ? __lock_acquire+0x7d80/0x7d80 [ 1379.810054][ T5755] should_fail_ex+0x394/0x4c0 [ 1379.814734][ T5755] should_failslab+0x9/0x20 [ 1379.819236][ T5755] slab_pre_alloc_hook+0x59/0x300 [ 1379.824264][ T5755] kmem_cache_alloc+0x5a/0x2c0 [ 1379.829023][ T5755] ? security_file_alloc+0x34/0x120 [ 1379.834221][ T5755] security_file_alloc+0x34/0x120 [ 1379.839246][ T5755] init_file+0x94/0x1f0 [ 1379.843398][ T5755] alloc_empty_file+0xb7/0x1d0 [ 1379.848177][ T5755] alloc_file+0x5b/0x600 [ 1379.852435][ T5755] alloc_file_clone+0x2a/0xb0 [ 1379.857117][ T5755] create_pipe_files+0x424/0x700 [ 1379.862066][ T5755] __do_pipe_flags+0x4c/0x2c0 [ 1379.866750][ T5755] do_pipe2+0xab/0x190 [ 1379.870827][ T5755] ? _compound_head+0x120/0x120 [ 1379.875684][ T5755] ? lock_chain_count+0x20/0x20 [ 1379.880536][ T5755] ? syscall_enter_from_user_mode+0x25/0x80 [ 1379.886431][ T5755] __x64_sys_pipe2+0x5a/0x70 [ 1379.891022][ T5755] do_syscall_64+0x55/0xb0 [ 1379.895433][ T5755] ? clear_bhb_loop+0x40/0x90 [ 1379.900104][ T5755] ? clear_bhb_loop+0x40/0x90 [ 1379.904776][ T5755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.910674][ T5755] RIP: 0033:0x7f70ced9cec9 [ 1379.915088][ T5755] Code: 38 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 eb aa e8 ea 34 00 00 66 2e 0f 1f 84 00 00 00 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff [ 1379.934690][ T5755] RSP: 002b:00007ffcc6d135c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1379.943100][ T5755] RAX: ffffffffffffffda RBX: 0000555593109f20 RCX: 00007f70ced9cec9 [ 1379.951065][ T5755] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00007ffcc6d135d8 [ 1379.959031][ T5755] RBP: 000055559317c838 R08: 0000000000000000 R09: 0000000000000000 [ 1379.967004][ T5755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc6d13780 [ 1379.974985][ T5755] R13: 000055559317c838 R14: 000055559310d5c0 R15: 0000000000000004 [ 1379.982989][ T5755] [ 1379.995168][T23339] CPU: 0 PID: 23339 Comm: syz.0.5477 Not tainted syzkaller #0 [ 1380.002681][T23339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1380.012827][T23339] Call Trace: [ 1380.016136][T23339] [ 1380.019092][T23339] dump_stack_lvl+0x18c/0x250 [ 1380.023805][T23339] ? show_regs_print_info+0x20/0x20 [ 1380.029029][T23339] ? load_image+0x420/0x420 [ 1380.033561][T23339] ? __might_sleep+0xe0/0xe0 [ 1380.038175][T23339] ? __lock_acquire+0x7d80/0x7d80 [ 1380.043220][T23339] should_fail_ex+0x394/0x4c0 [ 1380.047925][T23339] should_failslab+0x9/0x20 [ 1380.052452][T23339] slab_pre_alloc_hook+0x59/0x300 [ 1380.057502][T23339] ? call_usermodehelper_setup+0x8e/0x260 [ 1380.063248][T23339] __kmem_cache_alloc_node+0x53/0x250 [ 1380.068656][T23339] ? call_usermodehelper_setup+0x8e/0x260 [ 1380.074434][T23339] kmalloc_trace+0x2a/0xe0 [ 1380.078890][T23339] call_usermodehelper_setup+0x8e/0x260 [ 1380.084459][T23339] ? __request_module+0x600/0x600 [ 1380.089515][T23339] __request_module+0x3bb/0x600 [ 1380.094498][T23339] ? module_enforce_rwx_sections+0x150/0x150 [ 1380.101569][T23339] ? module_enforce_rwx_sections+0x150/0x150 [ 1380.107612][T23339] ? apparmor_capable+0x137/0x1a0 [ 1380.112677][T23339] ? dev_load+0x21/0x1f0 SYZFAIL: pipe failed (errno 12: Cannot allocate memory) [ 1380.117035][T23339] dev_ioctl+0x79f/0x1140 [ 1380.121395][T23339] sock_do_ioctl+0x239/0x310 [ 1380.126018][T23339] ? sock_show_fdinfo+0xb0/0xb0 [ 1380.130918][T23339] sock_ioctl+0x5be/0x7e0 [ 1380.135283][T23339] ? sock_poll+0x3e0/0x3e0 [ 1380.139734][T23339] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1380.144689][T23339] ? security_file_ioctl+0x80/0xa0 [ 1380.149821][T23339] ? sock_poll+0x3e0/0x3e0 [ 1380.154261][T23339] __se_sys_ioctl+0xfd/0x170 [ 1380.158893][T23339] do_syscall_64+0x55/0xb0 [ 1380.163333][T23339] ? clear_bhb_loop+0x40/0x90 [ 1380.168030][T23339] ? clear_bhb_loop+0x40/0x90 [ 1380.172727][T23339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.178640][T23339] RIP: 0033:0x7f3071b9de99 [ 1380.183078][T23339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.202704][T23339] RSP: 002b:00007f30729ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.211143][T23339] RAX: ffffffffffffffda RBX: 00007f3071e25fa0 RCX: 00007f3071b9de99 [ 1380.219134][T23339] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000003 [ 1380.227126][T23339] RBP: 00007f3071c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1380.235117][T23339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.243102][T23339] R13: 00007f3071e26038 R14: 00007f3071e25fa0 R15: 00007ffe7b1522c8 [ 1380.251106][T23339] [ 1380.716793][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.873148][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.973041][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.051033][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.223559][ T11] tipc: Left network mode [ 1382.209610][ T11] hsr_slave_0: left promiscuous mode [ 1382.218482][ T11] hsr_slave_1: left promiscuous mode [ 1382.226851][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.236779][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.247998][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.257838][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.270145][ T11] bridge_slave_1: left allmulticast mode [ 1382.277727][ T11] bridge_slave_1: left promiscuous mode [ 1382.286739][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.298748][ T11] bridge_slave_0: left allmulticast mode [ 1382.308474][ T11] bridge_slave_0: left promiscuous mode [ 1382.315428][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.357912][ T11] veth1_macvtap: left promiscuous mode [ 1382.365302][ T11] veth0_macvtap: left promiscuous mode [ 1382.371142][ T11] veth1_vlan: left promiscuous mode [ 1382.382846][ T11] veth0_vlan: left promiscuous mode [ 1382.998976][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1383.044234][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1383.086820][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.129359][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.450386][ T11] bond0 (unregistering): Released all slaves [ 1383.849835][ T11] IPVS: stop unused estimator thread 0... [ 1384.319193][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.405869][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.480576][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.555060][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.737003][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.828095][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.938980][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.016705][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.173031][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.262395][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.343050][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.420898][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.586632][ T11] tipc: Left network mode [ 1385.605847][ T11] tipc: Disabling bearer [ 1385.612632][ T11] tipc: Disabling bearer [ 1385.634390][ T11] tipc: Left network mode [ 1385.639804][ T11] tipc: Left network mode [ 1387.414948][ T11] hsr_slave_0: left promiscuous mode [ 1387.422641][ T11] hsr_slave_1: left promiscuous mode [ 1387.435646][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.443057][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.453165][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.462773][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.471732][ T11] bridge_slave_1: left allmulticast mode [ 1387.479556][ T11] bridge_slave_1: left promiscuous mode [ 1387.485391][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.497361][ T11] bridge_slave_0: left allmulticast mode [ 1387.503027][ T11] bridge_slave_0: left promiscuous mode [ 1387.509145][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.529926][ T11] hsr_slave_0: left promiscuous mode [ 1387.540245][ T11] hsr_slave_1: left promiscuous mode [ 1387.548533][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.558509][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.569029][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.577741][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.585617][ T11] bridge_slave_1: left allmulticast mode [ 1387.591291][ T11] bridge_slave_1: left promiscuous mode [ 1387.600130][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.612889][ T11] bridge_slave_0: left allmulticast mode [ 1387.624231][ T11] bridge_slave_0: left promiscuous mode [ 1387.629966][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.656844][ T11] hsr_slave_0: left promiscuous mode [ 1387.662942][ T11] hsr_slave_1: left promiscuous mode [ 1387.670175][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.679839][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.690877][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.701923][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.710929][ T11] bridge_slave_1: left allmulticast mode [ 1387.720080][ T11] bridge_slave_1: left promiscuous mode [ 1387.726966][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.738246][ T11] bridge_slave_0: left allmulticast mode [ 1387.746783][ T11] bridge_slave_0: left promiscuous mode [ 1387.752519][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.843328][ T11] veth1_macvtap: left promiscuous mode [ 1387.848910][ T11] veth0_macvtap: left promiscuous mode [ 1387.857253][ T11] veth1_vlan: left promiscuous mode [ 1387.862521][ T11] veth0_vlan: left promiscuous mode [ 1387.870020][ T11] veth1_macvtap: left promiscuous mode [ 1387.875834][ T11] veth0_macvtap: left promiscuous mode [ 1387.881397][ T11] veth1_vlan: left promiscuous mode [ 1387.886668][ T11] veth0_vlan: left promiscuous mode [ 1387.893046][ T11] veth1_macvtap: left promiscuous mode [ 1387.898909][ T11] veth0_macvtap: left promiscuous mode [ 1387.904628][ T11] veth1_vlan: left promiscuous mode [ 1387.909915][ T11] veth0_vlan: left promiscuous mode [ 1388.570168][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1388.614927][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1388.659570][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.700042][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.014720][ T11] bond0 (unregistering): Released all slaves [ 1389.559486][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1389.601488][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1389.650341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.699922][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.015360][ T11] bond0 (unregistering): Released all slaves