last executing test programs: 25.865828361s ago: executing program 4 (id=6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' B', 0x2}], 0x1}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x9) 24.846092896s ago: executing program 4 (id=8): syz_mount_image$fuse(&(0x7f0000000180), 0x0, 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r2, 0x0, 0x1, 0x3) 24.538193324s ago: executing program 4 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 23.220962916s ago: executing program 4 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 21.153150667s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 20.896383604s ago: executing program 3 (id=27): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x4e8, r3, 0x0, 0x100000000000000}, 0x38) 20.595863191s ago: executing program 1 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 20.360799507s ago: executing program 1 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 20.146299272s ago: executing program 2 (id=32): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0xfd, 0x1f8, &(0x7f0000000580)="$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") 19.988447886s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 19.01295306s ago: executing program 3 (id=35): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 18.968477911s ago: executing program 1 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1f, 0x5, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x10004, 0x9, 0x14, 0x80000001, 0x40000000000c8c, 0x8, 0x7ff, 0xfffffffffffffff8, 0x100000000, 0xd39a, 0x80, 0x20000000005, 0x800000003a72, 0x2, 0x9], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.827855075s ago: executing program 2 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x4002}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x224e, 0x0, @empty}, 0x1c) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01053e0014000600000000112233445566778899aabb86dd60fa050000651101fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22006590787dbad24e7d1473b84d6177f62cca9a56ffd996cd1dff847ae92664132f6fcb63ea347457c6ad1349c0c3daab09543f4163c7739216b07e07ec9353"], 0x7b) 18.478695063s ago: executing program 2 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 18.359848106s ago: executing program 0 (id=40): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x3, 0x7f, 0x100000, 0x80000000, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0x5], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.191587131s ago: executing program 1 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 17.996546315s ago: executing program 0 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 17.979531616s ago: executing program 1 (id=43): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 17.852965949s ago: executing program 0 (id=44): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) socket$inet6(0xa, 0x800000000000002, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 17.584523995s ago: executing program 4 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 17.40447628s ago: executing program 2 (id=46): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) shutdown(0xffffffffffffffff, 0x1) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880a342808c) 16.572861481s ago: executing program 4 (id=47): syz_emit_ethernet(0x6e, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x0, 0x4, 0x0, 0x1, 0x40}]}}}}}}}, 0x0) 16.364641766s ago: executing program 3 (id=48): syz_clone3(&(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000002800)=[0xffffffffffffffff], 0x1}, 0x58) 16.296495387s ago: executing program 0 (id=49): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x48, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 16.246011609s ago: executing program 2 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 16.19941282s ago: executing program 0 (id=51): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f00000010c0)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 16.148519211s ago: executing program 1 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 16.144127651s ago: executing program 3 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 15.818176349s ago: executing program 2 (id=54): fanotify_init(0x2, 0x40802) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x2003}) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) 15.817992759s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 0s ago: executing program 32 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) kernel console output (not intermixed with test programs): 874256][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde00499a8 [ 88.882254][ T3548] R13: 00007ffde0049560 R14: 0000000000000032 R15: 00007ffde0049560 [ 88.890266][ T3548] [ 88.895521][ T9] FAULT_INJECTION: forcing a failure. [ 88.895521][ T9] name failslab, interval 1, probability 1, space 0, times 989 [ 88.899891][ T3559] CPU: 0 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 88.915573][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.925667][ T3559] Call Trace: [ 88.928975][ T3559] [ 88.931938][ T3559] dump_stack_lvl+0x188/0x250 [ 88.936663][ T3559] ? show_regs_print_info+0x20/0x20 [ 88.940446][ T4188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.941902][ T3559] ? load_image+0x410/0x410 [ 88.953248][ T3559] ? prandom_u32+0x217/0x250 [ 88.957880][ T3559] should_fail+0x383/0x4b0 [ 88.962355][ T3559] should_failslab+0x5/0x20 [ 88.966911][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 88.968811][ T4188] FAULT_INJECTION: forcing a failure. [ 88.968811][ T4188] name failslab, interval 1, probability 1, space 0, times 988 [ 88.971884][ T3559] ? __alloc_file+0x25/0x240 [ 88.971910][ T3559] kmem_cache_alloc+0x3d/0x280 [ 88.971929][ T3559] ? mark_lock+0x94/0x320 [ 88.971952][ T3559] __alloc_file+0x25/0x240 [ 89.003095][ T3559] alloc_empty_file+0x90/0x180 [ 89.007896][ T3559] path_openat+0x11c/0x2fb0 [ 89.012434][ T3559] ? __lock_acquire+0x13dc/0x7b50 [ 89.017509][ T3559] ? stack_trace_snprint+0xe0/0xe0 [ 89.022663][ T3559] ? verify_lock_unused+0x140/0x140 [ 89.027949][ T3559] ? verify_lock_unused+0x140/0x140 [ 89.033193][ T3559] ? __kasan_slab_alloc+0xa9/0xc0 [ 89.038251][ T3559] ? __kasan_slab_alloc+0x92/0xc0 [ 89.040140][ T154] FAULT_INJECTION: forcing a failure. [ 89.040140][ T154] name failslab, interval 1, probability 1, space 0, times 987 [ 89.043306][ T3559] ? slab_post_alloc_hook+0x4c/0x380 [ 89.061386][ T3559] ? verify_lock_unused+0x140/0x140 [ 89.066622][ T3559] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.072730][ T3559] ? do_filp_open+0x400/0x400 [ 89.077463][ T3559] do_filp_open+0x1df/0x400 [ 89.081390][ T3073] FAULT_INJECTION: forcing a failure. [ 89.081390][ T3073] name failslab, interval 1, probability 1, space 0, times 985 [ 89.082022][ T3559] ? vfs_tmpfile+0x300/0x300 [ 89.099584][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 89.104471][ T3559] ? alloc_fd+0x59e/0x650 [ 89.108826][ T3559] do_sys_openat2+0x14b/0x500 [ 89.113520][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 89.118567][ T3559] ? do_sys_open+0xe0/0xe0 [ 89.123005][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.129009][ T3559] ? lock_chain_count+0x20/0x20 [ 89.133882][ T3559] __x64_sys_openat+0x135/0x160 [ 89.138768][ T3559] do_syscall_64+0x4c/0xa0 [ 89.143201][ T3559] ? clear_bhb_loop+0x30/0x80 [ 89.147998][ T3559] ? clear_bhb_loop+0x30/0x80 [ 89.152709][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.158716][ T3559] RIP: 0033:0x7f42e12ae407 [ 89.163159][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.182953][ T3559] RSP: 002b:00007ffd1d8cc070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 89.191401][ T3559] RAX: ffffffffffffffda RBX: 00007f42e11c0880 RCX: 00007f42e12ae407 [ 89.199404][ T3559] RDX: 0000000000080241 RSI: 00007ffd1d8cc4e0 RDI: ffffffffffffff9c [ 89.207407][ T3559] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 89.215415][ T3559] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005654d7e9bdfc [ 89.223424][ T3559] R13: 00005654d7e9bdfc R14: 0000000000000001 R15: 00007ffd1d8cc3d0 [ 89.231442][ T3559] [ 89.234480][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 89.242066][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.252162][ T4188] Call Trace: [ 89.255471][ T4188] [ 89.258432][ T4188] dump_stack_lvl+0x188/0x250 [ 89.263154][ T4188] ? show_regs_print_info+0x20/0x20 [ 89.268397][ T4188] ? load_image+0x410/0x410 [ 89.272949][ T4188] ? prandom_u32+0x217/0x250 [ 89.277582][ T4188] should_fail+0x383/0x4b0 [ 89.282042][ T4188] should_failslab+0x5/0x20 [ 89.286575][ T4188] slab_pre_alloc_hook+0x51/0xc0 [ 89.291551][ T4188] __kmalloc_node+0x6d/0x3a0 [ 89.296170][ T4188] ? __vmalloc_node_range+0x2dd/0x8b0 [ 89.301584][ T4188] __vmalloc_node_range+0x2dd/0x8b0 [ 89.306826][ T4188] ? alloc_counters+0xcc/0x740 [ 89.311622][ T4188] vzalloc+0x75/0x80 [ 89.315552][ T4188] ? alloc_counters+0xcc/0x740 [ 89.320354][ T4188] alloc_counters+0xcc/0x740 [ 89.324990][ T4188] ? compat_copy_entries_to_user+0x4b0/0x4b0 [ 89.331019][ T4188] do_ipt_get_ctl+0xa37/0x1110 [ 89.335831][ T4188] ? do_ipt_set_ctl+0xd70/0xd70 [ 89.340762][ T4188] ? nf_getsockopt+0x21b/0x280 [ 89.345559][ T4188] ? __lock_acquire+0x7b50/0x7b50 [ 89.350635][ T4188] ? __mutex_lock_common+0x435/0x2400 [ 89.356061][ T4188] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 89.361733][ T4188] ? mutex_unlock+0x10/0x10 [ 89.366279][ T4188] ? __might_fault+0xb7/0x110 [ 89.371003][ T4188] ? __lock_acquire+0x7b50/0x7b50 [ 89.376061][ T4188] ? __local_bh_enable_ip+0x136/0x1c0 [ 89.381473][ T4188] nf_getsockopt+0x25e/0x280 [ 89.386109][ T4188] ip_getsockopt+0x1219/0x1660 [ 89.390911][ T4188] ? ip_setsockopt+0x31e0/0x31e0 [ 89.395883][ T4188] ? do_ipt_set_ctl+0xc96/0xd70 [ 89.400771][ T4188] ? nf_setsockopt+0x218/0x280 [ 89.405567][ T4188] ? ipt_unregister_table_exit+0x220/0x220 [ 89.411425][ T4188] ? __lock_acquire+0x7b50/0x7b50 [ 89.416568][ T4188] ? __mutex_lock_common+0x435/0x2400 [ 89.421987][ T4188] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 89.424020][ C0] FAULT_INJECTION: forcing a failure. [ 89.424020][ C0] name failslab, interval 1, probability 1, space 0, times 984 [ 89.427663][ T4188] ? mutex_unlock+0x10/0x10 [ 89.444949][ T4188] ? mark_lock+0x94/0x320 [ 89.449305][ T4188] tcp_getsockopt+0x209/0x2530 [ 89.454099][ T4188] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 89.459755][ T4188] ? aa_label_sk_perm+0x3e6/0x540 [ 89.464814][ T4188] ? aa_sk_perm+0x910/0x910 [ 89.469363][ T4188] ? __might_sleep+0xf0/0xf0 [ 89.473973][ T4188] ? handle_mm_fault+0x2be3/0x4440 [ 89.479122][ T4188] ? aa_sk_perm+0x7dc/0x910 [ 89.483655][ T4188] ? aa_af_perm+0x340/0x340 [ 89.488187][ T4188] ? __lock_acquire+0x7b50/0x7b50 [ 89.493244][ T4188] ? aa_sock_opt_perm+0x74/0x100 [ 89.498215][ T4188] ? sock_common_getsockopt+0x29/0xa0 [ 89.503624][ T4188] ? sock_recv_errqueue+0x580/0x580 [ 89.508864][ T4188] __sys_getsockopt+0x1b0/0x230 [ 89.513756][ T4188] __x64_sys_getsockopt+0xb1/0xc0 [ 89.518809][ T4188] do_syscall_64+0x4c/0xa0 [ 89.523250][ T4188] ? clear_bhb_loop+0x30/0x80 [ 89.527950][ T4188] ? clear_bhb_loop+0x30/0x80 [ 89.532658][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.538574][ T4188] RIP: 0033:0x7fcb91bb666a [ 89.543020][ T4188] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 89.562669][ T4188] RSP: 002b:00007ffe3cd7b968 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 89.571245][ T4188] RAX: ffffffffffffffda RBX: 00007ffe3cd7b9f0 RCX: 00007fcb91bb666a [ 89.579249][ T4188] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 89.587244][ T4188] RBP: 0000000000000003 R08: 00007ffe3cd7b98c R09: 0000000000000000 [ 89.595242][ T4188] R10: 00007ffe3cd7b9f0 R11: 0000000000000202 R12: 00007fcb91e05680 [ 89.603244][ T4188] R13: 00007ffe3cd7b98c R14: 0000000000000000 R15: 00007fcb91e07180 [ 89.611251][ T4188] [ 89.614289][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 89.619601][ T3548] FAULT_INJECTION: forcing a failure. [ 89.619601][ T3548] name failslab, interval 1, probability 1, space 0, times 983 [ 89.634363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.644443][ C0] Call Trace: [ 89.647740][ C0] [ 89.650698][ C0] dump_stack_lvl+0x188/0x250 [ 89.655427][ C0] ? show_regs_print_info+0x20/0x20 [ 89.660653][ C0] ? load_image+0x410/0x410 [ 89.665179][ C0] ? prandom_u32+0x217/0x250 [ 89.669802][ C0] should_fail+0x383/0x4b0 [ 89.674250][ C0] should_failslab+0x5/0x20 [ 89.678774][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 89.683734][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 89.689122][ C0] ? __alloc_skb+0xf4/0x750 [ 89.693676][ C0] __alloc_skb+0xf4/0x750 [ 89.698058][ C0] ndisc_alloc_skb+0xa6/0x420 [ 89.702767][ C0] ndisc_send_rs+0x271/0x700 [ 89.707514][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 89.712504][ C0] addrconf_rs_timer+0x367/0x640 [ 89.717483][ C0] ? detach_timer+0x33/0x2b0 [ 89.722105][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 89.728204][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 89.734294][ C0] call_timer_fn+0x17b/0x540 [ 89.738917][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 89.745007][ C0] ? __run_timers+0x810/0x810 [ 89.749719][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 89.754952][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 89.760184][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 89.766291][ C0] __run_timers+0x56c/0x810 [ 89.770923][ C0] ? detach_timer+0x2b0/0x2b0 [ 89.775632][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.781639][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 89.786518][ C0] run_timer_softirq+0x63/0xf0 [ 89.791305][ C0] handle_softirqs+0x336/0x830 [ 89.796097][ C0] ? run_ksoftirqd+0xa4/0x100 [ 89.800796][ C0] ? do_softirq+0x210/0x210 [ 89.805322][ C0] ? run_ksoftirqd+0x81/0x100 [ 89.810023][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 89.815244][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 89.820553][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 89.825815][ C0] run_ksoftirqd+0xa4/0x100 [ 89.830430][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 89.835652][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 89.841045][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 89.846186][ C0] smpboot_thread_fn+0x520/0x990 [ 89.851165][ C0] kthread+0x42e/0x520 [ 89.855252][ C0] ? cpu_report_death+0x180/0x180 [ 89.860294][ C0] ? kthread_blkcg+0xd0/0xd0 [ 89.864917][ C0] ret_from_fork+0x1f/0x30 [ 89.869381][ C0] [ 89.872421][ T3073] CPU: 1 PID: 3073 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 89.880013][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.890112][ T3073] Workqueue: events_unbound cfg80211_wiphy_work [ 89.896401][ T3073] Call Trace: [ 89.899712][ T3073] [ 89.902682][ T3073] dump_stack_lvl+0x188/0x250 [ 89.906132][ T4421] FAULT_INJECTION: forcing a failure. [ 89.906132][ T4421] name failslab, interval 1, probability 1, space 0, times 982 [ 89.907405][ T3073] ? show_regs_print_info+0x20/0x20 [ 89.925387][ T3073] ? load_image+0x410/0x410 [ 89.927276][ T3521] FAULT_INJECTION: forcing a failure. [ 89.927276][ T3521] name failslab, interval 1, probability 1, space 0, times 982 [ 89.929948][ T3073] should_fail+0x383/0x4b0 [ 89.929979][ T3073] should_failslab+0x5/0x20 [ 89.951709][ T3073] slab_pre_alloc_hook+0x51/0xc0 [ 89.953930][ T13] cfg80211: failed to load regulatory.db [ 89.956685][ T3073] __kmalloc+0x6b/0x340 [ 89.966501][ T3073] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 89.972447][ T3073] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 89.978213][ T3073] ? cfg80211_wiphy_work+0x224/0x260 [ 89.983531][ T3073] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 89.989712][ T3073] ? verify_lock_unused+0x140/0x140 [ 89.994957][ T3073] ? kasan_set_track+0x62/0x70 [ 89.999763][ T3073] ? mutex_lock_io_nested+0x60/0x60 [ 90.004985][ T3073] ? ieee80211_iface_work+0x781/0xc50 [ 90.010385][ T3073] ? verify_lock_unused+0x140/0x140 [ 90.015620][ T3073] ? ieee80211_queue_delayed_work+0x150/0x150 [ 90.021734][ T3073] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 90.027853][ T3073] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.033883][ T3073] ? __rwlock_init+0x140/0x140 [ 90.038691][ T3073] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 90.044441][ T3073] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.050357][ T3073] ? lockdep_hardirqs_on+0x94/0x140 [ 90.055583][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.061504][ T3073] ? _raw_spin_unlock+0x40/0x40 [ 90.066393][ T3073] ? kcov_remote_start+0x6a/0x490 [ 90.071456][ T3073] ? kcov_remote_start+0xfa/0x490 [ 90.076522][ T3073] ieee80211_iface_work+0x714/0xc50 [ 90.081754][ T3073] ? _raw_spin_unlock_irq+0x1f/0x40 [ 90.086993][ T3073] cfg80211_wiphy_work+0x224/0x260 [ 90.092140][ T3073] process_one_work+0x867/0xff0 [ 90.097029][ T3073] ? worker_detach_from_pool+0x240/0x240 [ 90.102685][ T3073] ? lockdep_hardirqs_off+0x70/0x100 [ 90.108000][ T3073] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.113048][ T3073] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.118627][ T3073] ? wq_worker_running+0x97/0x170 [ 90.123692][ T3073] worker_thread+0xad7/0x12a0 [ 90.128428][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.134376][ T3073] kthread+0x42e/0x520 [ 90.138489][ T3073] ? rcu_lock_release+0x20/0x20 [ 90.143363][ T3073] ? kthread_blkcg+0xd0/0xd0 [ 90.147980][ T3073] ret_from_fork+0x1f/0x30 [ 90.152445][ T3073] [ 90.158853][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 90.166206][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.176289][ T9] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 90.184167][ T9] Call Trace: [ 90.187463][ T9] [ 90.190414][ T9] dump_stack_lvl+0x188/0x250 [ 90.195123][ T9] ? __kasan_slab_alloc+0x92/0xc0 [ 90.200175][ T9] ? kmem_cache_alloc+0x15d/0x280 [ 90.205223][ T9] ? show_regs_print_info+0x20/0x20 [ 90.210442][ T9] ? load_image+0x410/0x410 [ 90.214970][ T9] ? prandom_u32+0x217/0x250 [ 90.219627][ T9] should_fail+0x383/0x4b0 [ 90.224070][ T9] ? batadv_skb_head_push+0x162/0x1f0 [ 90.229476][ T9] should_failslab+0x5/0x20 [ 90.234016][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 90.238984][ T9] ? batadv_skb_head_push+0x162/0x1f0 [ 90.244382][ T9] __kmalloc_node_track_caller+0x68/0x3a0 [ 90.250124][ T9] ? batadv_skb_head_push+0x162/0x1f0 [ 90.255530][ T9] ? batadv_skb_head_push+0x162/0x1f0 [ 90.260944][ T9] pskb_expand_head+0x128/0x1100 [ 90.265925][ T9] ? __copy_skb_header+0x3ba/0x4f0 [ 90.271064][ T9] batadv_skb_head_push+0x162/0x1f0 [ 90.276304][ T9] batadv_send_skb_packet+0xf7/0x580 [ 90.281622][ T9] batadv_iv_send_outstanding_bat_ogm_packet+0x657/0x800 [ 90.288687][ T9] process_one_work+0x867/0xff0 [ 90.293587][ T9] ? worker_detach_from_pool+0x240/0x240 [ 90.299262][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 90.304594][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.309655][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.315231][ T9] ? wq_worker_running+0x97/0x170 [ 90.320283][ T9] worker_thread+0xad7/0x12a0 [ 90.325004][ T9] kthread+0x42e/0x520 [ 90.329088][ T9] ? rcu_lock_release+0x20/0x20 [ 90.333963][ T9] ? kthread_blkcg+0xd0/0xd0 [ 90.338588][ T9] ret_from_fork+0x1f/0x30 [ 90.343051][ T9] [ 90.346097][ T3521] CPU: 0 PID: 3521 Comm: jbd2/sda1-8 Not tainted syzkaller #0 [ 90.353594][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.363681][ T3521] Call Trace: [ 90.366986][ T3521] [ 90.369941][ T3521] dump_stack_lvl+0x188/0x250 [ 90.374670][ T3521] ? show_regs_print_info+0x20/0x20 [ 90.379910][ T3521] ? load_image+0x410/0x410 [ 90.384447][ T3521] ? prandom_u32+0x217/0x250 [ 90.389158][ T3521] should_fail+0x383/0x4b0 [ 90.393599][ T3521] should_failslab+0x5/0x20 [ 90.398130][ T3521] slab_pre_alloc_hook+0x51/0xc0 [ 90.403091][ T3521] ? mempool_alloc+0x19d/0x510 [ 90.407882][ T3521] kmem_cache_alloc+0x3d/0x280 [ 90.412679][ T3521] ? mempool_free+0x320/0x320 [ 90.417395][ T3521] mempool_alloc+0x19d/0x510 [ 90.422022][ T3521] ? submit_bio_noacct+0x75c/0x800 [ 90.427167][ T3521] ? mempool_resize+0x860/0x860 [ 90.432070][ T3521] bio_alloc_bioset+0x121/0x870 [ 90.436955][ T3521] ? submit_bio+0x2c6/0x550 [ 90.441497][ T3521] submit_bh_wbc+0x1c0/0x670 [ 90.446119][ T3521] submit_bh+0x23/0x30 [ 90.450222][ T3521] jbd2_journal_commit_transaction+0x252c/0x5c30 [ 90.456626][ T3521] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 90.463424][ T3521] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 90.468917][ T3521] ? lockdep_hardirqs_off+0x70/0x100 [ 90.474245][ T3521] ? _raw_spin_unlock+0x40/0x40 [ 90.479134][ T3521] ? __timer_delete_sync+0x1f5/0x290 [ 90.484449][ T3521] ? __lock_acquire+0x7b50/0x7b50 [ 90.489497][ T3521] ? timer_delete_sync+0x20/0x20 [ 90.494459][ T4327] FAULT_INJECTION: forcing a failure. [ 90.494459][ T4327] name failslab, interval 1, probability 1, space 0, times 981 [ 90.494460][ T3521] ? do_raw_read_unlock+0x70/0x70 [ 90.512271][ T3521] ? prepare_to_wait+0x1a8/0x1f0 [ 90.517240][ T3521] kjournald2+0x45a/0x900 [ 90.521758][ T3521] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 90.526991][ T3521] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.532922][ T3521] ? init_wait_entry+0xd0/0xd0 [ 90.537714][ T3521] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.543634][ T3521] ? __kthread_parkme+0x14e/0x1b0 [ 90.548684][ T3521] kthread+0x42e/0x520 [ 90.552778][ T3521] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 90.557995][ T3521] ? kthread_blkcg+0xd0/0xd0 [ 90.562605][ T3521] ret_from_fork+0x1f/0x30 [ 90.567055][ T3521] [ 90.570097][ T4327] CPU: 1 PID: 4327 Comm: kworker/1:8 Not tainted syzkaller #0 [ 90.577602][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.587728][ T4327] Workqueue: events nsim_dev_trap_report_work [ 90.593845][ T4327] Call Trace: [ 90.597149][ T4327] [ 90.600100][ T4327] dump_stack_lvl+0x188/0x250 [ 90.604814][ T4327] ? show_regs_print_info+0x20/0x20 [ 90.610053][ T4327] ? load_image+0x410/0x410 [ 90.614593][ T4327] ? prandom_u32+0x217/0x250 [ 90.619223][ T4327] should_fail+0x383/0x4b0 [ 90.623676][ T4327] should_failslab+0x5/0x20 [ 90.628203][ T4327] slab_pre_alloc_hook+0x51/0xc0 [ 90.633210][ T4327] kmem_cache_alloc_node+0x47/0x2c0 [ 90.638451][ T4327] ? __alloc_skb+0xf4/0x750 [ 90.643002][ T4327] __alloc_skb+0xf4/0x750 [ 90.647382][ T4327] nsim_dev_trap_report_work+0x25c/0xab0 [ 90.653060][ T4327] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.658985][ T4327] process_one_work+0x867/0xff0 [ 90.663881][ T4327] ? worker_detach_from_pool+0x240/0x240 [ 90.669542][ T4327] ? lockdep_hardirqs_off+0x70/0x100 [ 90.674870][ T4327] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.679930][ T4327] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.685585][ T4327] ? wq_worker_running+0x97/0x170 [ 90.690637][ T4327] worker_thread+0xad7/0x12a0 [ 90.695362][ T4327] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.701304][ T4327] kthread+0x42e/0x520 [ 90.705408][ T4327] ? rcu_lock_release+0x20/0x20 [ 90.710290][ T4327] ? kthread_blkcg+0xd0/0xd0 [ 90.714905][ T4327] ret_from_fork+0x1f/0x30 [ 90.719352][ T4327] [ 90.728052][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 90.735570][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.745658][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 90.751936][ T154] Call Trace: [ 90.755238][ T154] [ 90.758186][ T154] dump_stack_lvl+0x188/0x250 [ 90.762901][ T154] ? show_regs_print_info+0x20/0x20 [ 90.768221][ T154] ? load_image+0x410/0x410 [ 90.772780][ T154] should_fail+0x383/0x4b0 [ 90.777236][ T154] should_failslab+0x5/0x20 [ 90.781768][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 90.785952][ T3559] FAULT_INJECTION: forcing a failure. [ 90.785952][ T3559] name failslab, interval 1, probability 1, space 0, times 979 [ 90.786745][ T154] __kmalloc+0x6b/0x340 [ 90.803784][ T154] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 90.809712][ T154] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 90.815488][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 90.820549][ T154] ? ieee80211_queue_delayed_work+0x150/0x150 [ 90.826791][ T154] ieee80211_bss_info_update+0x74d/0xa80 [ 90.832480][ T154] ? ieee80211_rx_bss_put+0x60/0x60 [ 90.837738][ T154] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 90.843584][ T154] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 90.849795][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 90.855549][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.861489][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 90.866727][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.872692][ T154] ? _raw_spin_unlock+0x40/0x40 [ 90.877568][ T154] ? kcov_remote_start+0x6a/0x490 [ 90.882625][ T154] ? kcov_remote_start+0xfa/0x490 [ 90.887673][ T154] ieee80211_iface_work+0x714/0xc50 [ 90.892902][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 90.898135][ T154] cfg80211_wiphy_work+0x224/0x260 [ 90.903372][ T154] process_one_work+0x867/0xff0 [ 90.908274][ T154] ? worker_detach_from_pool+0x240/0x240 [ 90.913937][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 90.919259][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 90.924313][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 90.929888][ T154] ? wq_worker_running+0x97/0x170 [ 90.934971][ T154] worker_thread+0xad7/0x12a0 [ 90.939695][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.945638][ T154] kthread+0x42e/0x520 [ 90.949738][ T154] ? rcu_lock_release+0x20/0x20 [ 90.954617][ T154] ? kthread_blkcg+0xd0/0xd0 [ 90.959241][ T154] ret_from_fork+0x1f/0x30 [ 90.963701][ T154] [ 90.966739][ T4421] CPU: 0 PID: 4421 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 90.974324][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.984411][ T4421] Workqueue: events_unbound cfg80211_wiphy_work [ 90.990690][ T4421] Call Trace: [ 90.993995][ T4421] [ 90.996943][ T4421] dump_stack_lvl+0x188/0x250 [ 91.001652][ T4421] ? show_regs_print_info+0x20/0x20 [ 91.006877][ T4421] ? load_image+0x410/0x410 [ 91.011412][ T4421] should_fail+0x383/0x4b0 [ 91.015859][ T4421] should_failslab+0x5/0x20 [ 91.020381][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 91.025343][ T4421] __kmalloc+0x6b/0x340 [ 91.029534][ T4421] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 91.035894][ T4421] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 91.042086][ T4421] ? verify_lock_unused+0x140/0x140 [ 91.047315][ T4421] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 91.053421][ T4421] ? __lock_acquire+0x7b50/0x7b50 [ 91.058483][ T4421] ieee80211_bss_info_update+0x6ba/0xa80 [ 91.064146][ T4421] ? ieee80211_rx_bss_put+0x60/0x60 [ 91.069382][ T4421] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 91.075221][ T4421] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 91.081418][ T4421] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 91.087161][ T4421] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 91.093082][ T4421] ? lockdep_hardirqs_on+0x94/0x140 [ 91.098433][ T4421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.104367][ T4421] ? _raw_spin_unlock+0x40/0x40 [ 91.109257][ T4421] ? kcov_remote_start+0x6a/0x490 [ 91.114340][ T4421] ? kcov_remote_start+0xfa/0x490 [ 91.119390][ T4421] ieee80211_iface_work+0x714/0xc50 [ 91.124627][ T4421] ? _raw_spin_unlock_irq+0x1f/0x40 [ 91.129870][ T4421] cfg80211_wiphy_work+0x224/0x260 [ 91.135013][ T4421] process_one_work+0x867/0xff0 [ 91.139906][ T4421] ? worker_detach_from_pool+0x240/0x240 [ 91.145596][ T4421] ? lockdep_hardirqs_off+0x70/0x100 [ 91.150922][ T4421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 91.155969][ T4421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 91.161539][ T4421] ? wq_worker_running+0x97/0x170 [ 91.166614][ T4421] worker_thread+0xad7/0x12a0 [ 91.171338][ T4421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.177269][ T4421] kthread+0x42e/0x520 [ 91.181365][ T4421] ? rcu_lock_release+0x20/0x20 [ 91.186255][ T4421] ? kthread_blkcg+0xd0/0xd0 [ 91.189382][ C1] FAULT_INJECTION: forcing a failure. [ 91.189382][ C1] name failslab, interval 1, probability 1, space 0, times 978 [ 91.190877][ T4421] ret_from_fork+0x1f/0x30 [ 91.190918][ T4421] [ 91.211128][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 91.218443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.228523][ C1] Workqueue: bat_events batadv_tt_purge [ 91.234115][ C1] Call Trace: [ 91.237418][ C1] [ 91.240286][ C1] dump_stack_lvl+0x188/0x250 [ 91.244992][ C1] ? show_regs_print_info+0x20/0x20 [ 91.250218][ C1] ? load_image+0x410/0x410 [ 91.254758][ C1] ? prandom_u32+0x217/0x250 [ 91.259388][ C1] should_fail+0x383/0x4b0 [ 91.263849][ C1] should_failslab+0x5/0x20 [ 91.268382][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 91.273352][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 91.279094][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 91.280164][ T4199] FAULT_INJECTION: forcing a failure. [ 91.280164][ T4199] name failslab, interval 1, probability 1, space 0, times 978 [ 91.284315][ C1] ? __alloc_skb+0xf4/0x750 [ 91.284358][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 91.284381][ C1] __alloc_skb+0x22c/0x750 [ 91.284417][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 91.284439][ C1] ? __alloc_skb+0x750/0x750 [ 91.321100][ C1] ? mark_lock+0x94/0x320 [ 91.325486][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 91.330978][ C1] ? verify_lock_unused+0x140/0x140 [ 91.336207][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 91.342212][ C1] ? verify_lock_unused+0x140/0x140 [ 91.347445][ C1] ? verify_lock_unused+0x140/0x140 [ 91.352709][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 91.358589][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 91.364107][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 91.369695][ C1] __iterate_interfaces+0x225/0x4c0 [ 91.374926][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 91.381201][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 91.387468][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 91.394515][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 91.399746][ C1] ? hw_scan_work+0xef0/0xef0 [ 91.404456][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 91.409711][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 91.414858][ C1] hrtimer_run_softirq+0x176/0x240 [ 91.419999][ C1] handle_softirqs+0x336/0x830 [ 91.424796][ C1] ? do_softirq+0x142/0x210 [ 91.429326][ C1] ? do_softirq+0x210/0x210 [ 91.433861][ C1] do_softirq+0x142/0x210 [ 91.438219][ C1] [ 91.441177][ C1] [ 91.444126][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 91.449523][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 91.455532][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 91.460840][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 91.466156][ C1] ? batadv_tt_purge+0x4b1/0xa10 [ 91.471127][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 91.476381][ C1] ? _local_bh_enable+0xa0/0xa0 [ 91.481258][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 91.486485][ C1] ? batadv_tt_purge+0x4b1/0xa10 [ 91.491693][ C1] batadv_tt_purge+0x4b1/0xa10 [ 91.496507][ C1] process_one_work+0x867/0xff0 [ 91.501402][ C1] ? worker_detach_from_pool+0x240/0x240 [ 91.507056][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 91.512456][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 91.517515][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 91.523082][ C1] ? wq_worker_running+0x97/0x170 [ 91.528137][ C1] worker_thread+0xad7/0x12a0 [ 91.532870][ C1] kthread+0x42e/0x520 [ 91.537046][ C1] ? rcu_lock_release+0x20/0x20 [ 91.541922][ C1] ? kthread_blkcg+0xd0/0xd0 [ 91.546544][ C1] ret_from_fork+0x1f/0x30 [ 91.551022][ C1] [ 91.555077][ T3548] CPU: 1 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 91.562066][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.572151][ T3548] Call Trace: [ 91.575458][ T3548] [ 91.578410][ T3548] dump_stack_lvl+0x188/0x250 [ 91.583128][ T3548] ? show_regs_print_info+0x20/0x20 [ 91.588375][ T3548] ? load_image+0x410/0x410 [ 91.592919][ T3548] ? prandom_u32+0x217/0x250 [ 91.597558][ T3548] should_fail+0x383/0x4b0 [ 91.602023][ T3548] should_failslab+0x5/0x20 [ 91.606550][ T3548] slab_pre_alloc_hook+0x51/0xc0 [ 91.611527][ T3548] __kmalloc_node_track_caller+0x68/0x3a0 [ 91.617296][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 91.622619][ T3548] ? __alloc_skb+0xf4/0x750 [ 91.627145][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 91.632464][ T3548] __alloc_skb+0x22c/0x750 [ 91.636907][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 91.642057][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 91.647307][ T3548] ? sock_kzfree_s+0x50/0x50 [ 91.652015][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 91.657068][ T3548] ? __rwlock_init+0x140/0x140 [ 91.661853][ T3548] ? mark_lock+0x94/0x320 [ 91.666208][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 91.671557][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 91.676983][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 91.681975][ T3548] ? aa_af_perm+0x340/0x340 [ 91.686517][ T3548] ? unix_dgram_poll+0x680/0x680 [ 91.691485][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 91.698122][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 91.703720][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 91.709051][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 91.714560][ T3548] __sys_sendto+0x46d/0x620 [ 91.719106][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 91.724534][ T3548] ? lock_chain_count+0x20/0x20 [ 91.729431][ T3548] __x64_sys_sendto+0xda/0xf0 [ 91.734149][ T3548] do_syscall_64+0x4c/0xa0 [ 91.738773][ T3548] ? clear_bhb_loop+0x30/0x80 [ 91.743495][ T3548] ? clear_bhb_loop+0x30/0x80 [ 91.748215][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.754318][ T3548] RIP: 0033:0x7f14158ab407 [ 91.758763][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 91.778402][ T3548] RSP: 002b:00007ffde0049420 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 91.786851][ T3548] RAX: ffffffffffffffda RBX: 00007f141575bc80 RCX: 00007f14158ab407 [ 91.794855][ T3548] RDX: 000000000000004d RSI: 00007ffde0049560 RDI: 0000000000000003 [ 91.802854][ T3548] RBP: 00007ffde0049990 R08: 0000000000000000 R09: 0000000000000000 [ 91.810854][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde00499a8 [ 91.818850][ T3548] R13: 00007ffde0049560 R14: 0000000000000032 R15: 00007ffde0049560 [ 91.826863][ T3548] [ 91.829915][ T3559] CPU: 0 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 91.836902][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.847011][ T3559] Call Trace: [ 91.850327][ T3559] [ 91.853293][ T3559] dump_stack_lvl+0x188/0x250 [ 91.858018][ T3559] ? show_regs_print_info+0x20/0x20 [ 91.863259][ T3559] ? load_image+0x410/0x410 [ 91.867801][ T3559] ? prandom_u32+0x217/0x250 [ 91.872437][ T3559] should_fail+0x383/0x4b0 [ 91.876897][ T3559] should_failslab+0x5/0x20 [ 91.881437][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 91.886414][ T3559] __kmalloc+0x6b/0x340 [ 91.890596][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 91.896364][ T3559] tomoyo_realpath_from_path+0xed/0x5e0 [ 91.901949][ T3559] ? kasan_set_free_info+0x1f/0x40 [ 91.907099][ T3559] ? slab_free_freelist_hook+0xec/0x170 [ 91.912700][ T3559] tomoyo_path_perm+0x23f/0x5d0 [ 91.917307][ T4232] FAULT_INJECTION: forcing a failure. [ 91.917307][ T4232] name failslab, interval 1, probability 1, space 0, times 976 [ 91.917646][ T3559] ? tomoyo_path_permission+0x3a0/0x3a0 [ 91.935991][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 91.941224][ T3559] ? rcu_is_watching+0x11/0xa0 [ 91.946014][ T3559] security_inode_getattr+0xcf/0x120 [ 91.951329][ T3559] vfs_getattr+0x26/0x3a0 [ 91.955688][ T3559] ? user_path_at_empty+0x13e/0x190 [ 91.961002][ T3559] vfs_statx+0x146/0x4c0 [ 91.965288][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 91.970336][ T3559] ? vfs_fstatat+0x40/0x40 [ 91.974793][ T3559] __x64_sys_newfstatat+0x15f/0x200 [ 91.980035][ T3559] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 91.985356][ T3559] ? lock_chain_count+0x20/0x20 [ 91.990252][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 91.995565][ T3559] do_syscall_64+0x4c/0xa0 [ 92.000006][ T3559] ? clear_bhb_loop+0x30/0x80 [ 92.004707][ T3559] ? clear_bhb_loop+0x30/0x80 [ 92.009409][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.015324][ T3559] RIP: 0033:0x7f42e1318b0a [ 92.019760][ T3559] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 92.039508][ T3559] RSP: 002b:00007ffd1d8cc0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 92.048033][ T3559] RAX: ffffffffffffffda RBX: 00005654d7ead400 RCX: 00007f42e1318b0a [ 92.056111][ T3559] RDX: 00007ffd1d8cc100 RSI: 00005654d7e9b296 RDI: 00000000ffffff9c [ 92.064111][ T3559] RBP: 00005654dd0c7148 R08: 000000000568865c R09: 002b5a77d6a081e6 [ 92.072103][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.080108][ T3559] R13: 00007ffd1d8cc100 R14: 0000000000000000 R15: 0000000000000000 [ 92.088264][ T3559] [ 92.091306][ T4232] CPU: 1 PID: 4232 Comm: kworker/1:4 Not tainted syzkaller #0 [ 92.098812][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.108897][ T4232] Workqueue: events nsim_dev_trap_report_work [ 92.115011][ T4232] Call Trace: [ 92.118321][ T4232] [ 92.121284][ T4232] dump_stack_lvl+0x188/0x250 [ 92.125996][ T4232] ? show_regs_print_info+0x20/0x20 [ 92.131227][ T4232] ? load_image+0x410/0x410 [ 92.135859][ T4232] ? prandom_u32+0x217/0x250 [ 92.140495][ T4232] should_fail+0x383/0x4b0 [ 92.144943][ T4232] should_failslab+0x5/0x20 [ 92.149512][ T4232] slab_pre_alloc_hook+0x51/0xc0 [ 92.154474][ T4232] __kmalloc_node_track_caller+0x68/0x3a0 [ 92.160226][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 92.166062][ T4232] ? __alloc_skb+0xf4/0x750 [ 92.170628][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 92.176472][ T4232] __alloc_skb+0x22c/0x750 [ 92.180928][ T4232] nsim_dev_trap_report_work+0x25c/0xab0 [ 92.186602][ T4232] process_one_work+0x867/0xff0 [ 92.191515][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 92.197180][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 92.202502][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.207565][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 92.213140][ T4232] ? wq_worker_running+0x97/0x170 [ 92.218200][ T4232] worker_thread+0xad7/0x12a0 [ 92.222923][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.228947][ T4232] kthread+0x42e/0x520 [ 92.233046][ T4232] ? rcu_lock_release+0x20/0x20 [ 92.238301][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 92.243007][ T4232] ret_from_fork+0x1f/0x30 [ 92.247465][ T4232] [ 92.251127][ C0] FAULT_INJECTION: forcing a failure. [ 92.251127][ C0] name failslab, interval 1, probability 1, space 0, times 974 [ 92.264300][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 92.271469][ T3073] FAULT_INJECTION: forcing a failure. [ 92.271469][ T3073] name failslab, interval 1, probability 1, space 0, times 973 [ 92.271627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.294481][ C0] Call Trace: [ 92.297794][ C0] [ 92.300756][ C0] dump_stack_lvl+0x188/0x250 [ 92.305480][ C0] ? show_regs_print_info+0x20/0x20 [ 92.310706][ C0] ? load_image+0x410/0x410 [ 92.315295][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.321330][ C0] ? prandom_u32+0x217/0x250 [ 92.325961][ C0] should_fail+0x383/0x4b0 [ 92.330410][ C0] should_failslab+0x5/0x20 [ 92.334948][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 92.339925][ C0] ? skb_clone+0x1bd/0x350 [ 92.344374][ C0] kmem_cache_alloc+0x3d/0x280 [ 92.349159][ C0] ? hsr_register_frame_out+0x256/0x390 [ 92.354740][ C0] skb_clone+0x1bd/0x350 [ 92.359023][ C0] hsr_forward_skb+0xc02/0x16b0 [ 92.363917][ C0] ? prp_fill_frame_info+0x660/0x660 [ 92.369242][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 92.374300][ C0] ? __rwlock_init+0x140/0x140 [ 92.379090][ C0] ? __skb_pad+0x3fa/0x610 [ 92.383536][ C0] send_hsr_supervision_frame+0x5f7/0xb90 [ 92.389317][ C0] hsr_announce+0x168/0x310 [ 92.393853][ C0] ? hsr_dev_finalize+0x870/0x870 [ 92.398918][ C0] ? hsr_dev_finalize+0x870/0x870 [ 92.403973][ C0] call_timer_fn+0x17b/0x540 [ 92.408596][ C0] ? hsr_dev_finalize+0x870/0x870 [ 92.413645][ C0] ? __run_timers+0x810/0x810 [ 92.418261][ C1] FAULT_INJECTION: forcing a failure. [ 92.418261][ C1] name failslab, interval 1, probability 1, space 0, times 971 [ 92.418371][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 92.436343][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 92.441573][ C0] ? hsr_dev_finalize+0x870/0x870 [ 92.446622][ C0] __run_timers+0x56c/0x810 [ 92.451253][ C0] ? detach_timer+0x2b0/0x2b0 [ 92.455957][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.461964][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 92.466847][ C0] run_timer_softirq+0x63/0xf0 [ 92.471640][ C0] handle_softirqs+0x336/0x830 [ 92.476432][ C0] ? run_ksoftirqd+0xa4/0x100 [ 92.481133][ C0] ? do_softirq+0x210/0x210 [ 92.485663][ C0] ? run_ksoftirqd+0x81/0x100 [ 92.490363][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 92.495582][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 92.500889][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 92.506111][ C0] run_ksoftirqd+0xa4/0x100 [ 92.510643][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 92.515864][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 92.521271][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 92.526407][ C0] smpboot_thread_fn+0x520/0x990 [ 92.531378][ C0] kthread+0x42e/0x520 [ 92.535464][ C0] ? cpu_report_death+0x180/0x180 [ 92.540514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 92.545175][ C0] ret_from_fork+0x1f/0x30 [ 92.549629][ C0] [ 92.552679][ C1] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 92.560279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.570744][ C1] Call Trace: [ 92.573162][ T7] FAULT_INJECTION: forcing a failure. [ 92.573162][ T7] name failslab, interval 1, probability 1, space 0, times 970 [ 92.574064][ C1] [ 92.589712][ C1] dump_stack_lvl+0x188/0x250 [ 92.594428][ C1] ? show_regs_print_info+0x20/0x20 [ 92.599660][ C1] ? load_image+0x410/0x410 [ 92.604199][ C1] ? prandom_u32+0x217/0x250 [ 92.608820][ C1] should_fail+0x383/0x4b0 [ 92.613284][ C1] should_failslab+0x5/0x20 [ 92.617835][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 92.622844][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 92.628591][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 92.633818][ C1] ? __alloc_skb+0xf4/0x750 [ 92.638378][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 92.643631][ C1] __alloc_skb+0x22c/0x750 [ 92.648091][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 92.653153][ C1] ? __alloc_skb+0x750/0x750 [ 92.657766][ C1] ? mark_lock+0x94/0x320 [ 92.662123][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 92.667615][ C1] ? verify_lock_unused+0x140/0x140 [ 92.672845][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 92.678850][ C1] ? verify_lock_unused+0x140/0x140 [ 92.684076][ C1] ? verify_lock_unused+0x140/0x140 [ 92.689297][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 92.695222][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 92.700733][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 92.706328][ C1] __iterate_interfaces+0x225/0x4c0 [ 92.711561][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 92.717833][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 92.724104][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 92.731160][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 92.736386][ C1] ? hw_scan_work+0xef0/0xef0 [ 92.741085][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 92.746323][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 92.751476][ C1] hrtimer_run_softirq+0x176/0x240 [ 92.756617][ C1] handle_softirqs+0x336/0x830 [ 92.761411][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 92.766287][ C1] ? do_softirq+0x210/0x210 [ 92.770812][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 92.775960][ C1] __irq_exit_rcu+0x13b/0x230 [ 92.780657][ C1] ? irq_exit_rcu+0x20/0x20 [ 92.785189][ C1] irq_exit_rcu+0x5/0x20 [ 92.789451][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 92.795109][ C1] [ 92.798057][ C1] [ 92.801005][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 92.807007][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 92.812579][ C1] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 92.832204][ C1] RSP: 0018:ffffc90002ebfa10 EFLAGS: 00000202 [ 92.838297][ C1] RAX: ffffffff81b67c01 RBX: 1ffffd400039bb21 RCX: ffffffff81b67d04 [ 92.846289][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001cdd900 [ 92.854281][ C1] RBP: 0000000000000000 R08: ffffea0001cdd907 R09: 1ffffd400039bb20 [ 92.862273][ C1] R10: dffffc0000000000 R11: fffff9400039bb21 R12: 0000000000080000 [ 92.870273][ C1] R13: 00fff00000080014 R14: dffffc0000000000 R15: ffffea0001cdd900 [ 92.878275][ C1] ? free_swap_cache+0x61/0x2c0 [ 92.883152][ C1] ? free_swap_cache+0x164/0x2c0 [ 92.888119][ C1] free_swap_cache+0x164/0x2c0 [ 92.892910][ C1] free_pages_and_swap_cache+0x5c/0x90 [ 92.898397][ C1] tlb_finish_mmu+0x1b4/0x370 [ 92.903099][ C1] exit_mmap+0x3d0/0x640 [ 92.907367][ C1] ? vm_brk+0x20/0x20 [ 92.911388][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 92.916618][ C1] __mmput+0x115/0x390 [ 92.920715][ C1] exit_mm+0x632/0x7b0 [ 92.924802][ C1] ? perf_pmu_migrate_context+0xb70/0xb70 [ 92.930547][ C1] ? acct_collect+0x547/0x710 [ 92.935253][ C1] ? do_exit+0x2110/0x2110 [ 92.939703][ C1] ? taskstats_exit+0x451/0xae0 [ 92.944589][ C1] do_exit+0x5b8/0x2110 [ 92.948769][ C1] ? put_task_struct+0x80/0x80 [ 92.953564][ C1] ? lock_chain_count+0x20/0x20 [ 92.958475][ C1] do_group_exit+0x12c/0x2f0 [ 92.963096][ C1] __x64_sys_exit_group+0x3b/0x40 [ 92.968147][ C1] do_syscall_64+0x4c/0xa0 [ 92.972619][ C1] ? clear_bhb_loop+0x30/0x80 [ 92.977319][ C1] ? clear_bhb_loop+0x30/0x80 [ 92.982020][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.987975][ C1] RIP: 0033:0x7fcb91bb4e99 [ 92.992412][ C1] Code: Unable to access opcode bytes at RIP 0x7fcb91bb4e6f. [ 92.999884][ C1] RSP: 002b:00007ffe3cd7b858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 93.008338][ C1] RAX: ffffffffffffffda RBX: 00007fcb91c4ae56 RCX: 00007fcb91bb4e99 [ 93.016362][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 93.024361][ C1] RBP: 00007fcb91c1fcf0 R08: 0000000000000000 R09: 00007ffe3cd7b98c [ 93.032355][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 93.040353][ C1] R13: 00007ffe3cd7b98c R14: 0000000000000000 R15: 00007fcb91e07180 [ 93.048365][ C1] [ 93.051410][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 93.058654][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.069018][ T7] Workqueue: events nsim_dev_trap_report_work [ 93.075137][ T7] Call Trace: [ 93.078440][ T7] [ 93.081392][ T7] dump_stack_lvl+0x188/0x250 [ 93.086105][ T7] ? show_regs_print_info+0x20/0x20 [ 93.091328][ T7] ? load_image+0x410/0x410 [ 93.095851][ T7] ? prandom_u32+0x217/0x250 [ 93.100475][ T7] should_fail+0x383/0x4b0 [ 93.104927][ T7] should_failslab+0x5/0x20 [ 93.109467][ T7] slab_pre_alloc_hook+0x51/0xc0 [ 93.114533][ T7] __kmalloc_node_track_caller+0x68/0x3a0 [ 93.120287][ T7] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 93.126120][ T7] ? __alloc_skb+0xf4/0x750 [ 93.130653][ T7] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 93.136498][ T7] __alloc_skb+0x22c/0x750 [ 93.140958][ T7] nsim_dev_trap_report_work+0x25c/0xab0 [ 93.146626][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.152558][ T7] process_one_work+0x867/0xff0 [ 93.157472][ T7] ? worker_detach_from_pool+0x240/0x240 [ 93.163142][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 93.168464][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.173513][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.179141][ T7] ? wq_worker_running+0x97/0x170 [ 93.185081][ T7] worker_thread+0xad7/0x12a0 [ 93.190014][ T7] kthread+0x42e/0x520 [ 93.194123][ T7] ? rcu_lock_release+0x20/0x20 [ 93.199009][ T7] ? kthread_blkcg+0xd0/0xd0 [ 93.203642][ T7] ret_from_fork+0x1f/0x30 [ 93.208118][ T7] [ 93.211179][ T3073] CPU: 1 PID: 3073 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 93.211437][ T7] FAULT_INJECTION: forcing a failure. [ 93.211437][ T7] name failslab, interval 1, probability 1, space 0, times 968 [ 93.218761][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.241608][ T3073] Workqueue: events_unbound cfg80211_wiphy_work [ 93.247892][ T3073] Call Trace: [ 93.251199][ T3073] [ 93.254158][ T3073] dump_stack_lvl+0x188/0x250 [ 93.258863][ T3073] ? show_regs_print_info+0x20/0x20 [ 93.264088][ T3073] ? load_image+0x410/0x410 [ 93.268631][ T3073] should_fail+0x383/0x4b0 [ 93.273085][ T3073] should_failslab+0x5/0x20 [ 93.277616][ T3073] slab_pre_alloc_hook+0x51/0xc0 [ 93.282714][ T3073] __kmalloc+0x6b/0x340 [ 93.286890][ T3073] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 93.292812][ T3073] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 93.298585][ T3073] ? __lock_acquire+0x7b50/0x7b50 [ 93.303641][ T3073] ? ieee80211_queue_delayed_work+0x150/0x150 [ 93.309750][ T3073] ieee80211_bss_info_update+0x74d/0xa80 [ 93.315425][ T3073] ? ieee80211_rx_bss_put+0x60/0x60 [ 93.320658][ T3073] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 93.326499][ T3073] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 93.332702][ T3073] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 93.338451][ T3073] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.344375][ T3073] ? lockdep_hardirqs_on+0x94/0x140 [ 93.349598][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.355513][ T3073] ? _raw_spin_unlock+0x40/0x40 [ 93.360479][ T3073] ? kcov_remote_start+0x6a/0x490 [ 93.365539][ T3073] ? kcov_remote_start+0xfa/0x490 [ 93.370596][ T3073] ieee80211_iface_work+0x714/0xc50 [ 93.375827][ T3073] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.381056][ T3073] cfg80211_wiphy_work+0x224/0x260 [ 93.386198][ T3073] process_one_work+0x867/0xff0 [ 93.391085][ T3073] ? worker_detach_from_pool+0x240/0x240 [ 93.396745][ T3073] ? lockdep_hardirqs_off+0x70/0x100 [ 93.402057][ T3073] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.407113][ T3073] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.412684][ T3073] ? wq_worker_running+0x97/0x170 [ 93.417735][ T3073] worker_thread+0xad7/0x12a0 [ 93.422451][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.428377][ T3073] kthread+0x42e/0x520 [ 93.432467][ T3073] ? rcu_lock_release+0x20/0x20 [ 93.437344][ T3073] ? kthread_blkcg+0xd0/0xd0 [ 93.441959][ T3073] ret_from_fork+0x1f/0x30 [ 93.446418][ T3073] [ 93.449455][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 93.456701][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.466809][ T7] Workqueue: events nsim_dev_trap_report_work [ 93.472936][ T7] Call Trace: [ 93.476253][ T7] [ 93.479211][ T7] dump_stack_lvl+0x188/0x250 [ 93.483936][ T7] ? show_regs_print_info+0x20/0x20 [ 93.489169][ T7] ? load_image+0x410/0x410 [ 93.493709][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.499740][ T7] ? prandom_u32+0x217/0x250 [ 93.504380][ T7] should_fail+0x383/0x4b0 [ 93.508832][ T7] should_failslab+0x5/0x20 [ 93.511669][ T3548] FAULT_INJECTION: forcing a failure. [ 93.511669][ T3548] name failslab, interval 1, probability 1, space 0, times 967 [ 93.513367][ T7] slab_pre_alloc_hook+0x51/0xc0 [ 93.531102][ T7] kmem_cache_alloc_node+0x47/0x2c0 [ 93.536322][ T7] ? __alloc_skb+0xf4/0x750 [ 93.540857][ T7] __alloc_skb+0xf4/0x750 [ 93.544363][ C1] FAULT_INJECTION: forcing a failure. [ 93.544363][ C1] name failslab, interval 1, probability 1, space 0, times 967 [ 93.545230][ T7] nsim_dev_trap_report_work+0x25c/0xab0 [ 93.563746][ T7] process_one_work+0x867/0xff0 [ 93.568666][ T7] ? worker_detach_from_pool+0x240/0x240 [ 93.574321][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 93.579652][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.584700][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.590275][ T7] ? wq_worker_running+0x97/0x170 [ 93.595321][ T7] worker_thread+0xad7/0x12a0 [ 93.600705][ T7] kthread+0x42e/0x520 [ 93.605251][ T7] ? rcu_lock_release+0x20/0x20 [ 93.610148][ T7] ? kthread_blkcg+0xd0/0xd0 [ 93.614797][ T7] ret_from_fork+0x1f/0x30 [ 93.619256][ T7] [ 93.622294][ C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 93.629791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.639873][ C1] Workqueue: bat_events batadv_nc_worker [ 93.645530][ C1] Call Trace: [ 93.648826][ C1] [ 93.651689][ C1] dump_stack_lvl+0x188/0x250 [ 93.656393][ C1] ? show_regs_print_info+0x20/0x20 [ 93.661609][ C1] ? load_image+0x410/0x410 [ 93.666131][ C1] ? __lock_acquire+0x1305/0x7b50 [ 93.671182][ C1] ? prandom_u32+0x217/0x250 [ 93.675807][ C1] should_fail+0x383/0x4b0 [ 93.680251][ C1] should_failslab+0x5/0x20 [ 93.684774][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 93.689736][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 93.694954][ C1] ? __alloc_skb+0xf4/0x750 [ 93.699488][ C1] __alloc_skb+0xf4/0x750 [ 93.703841][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 93.708894][ C1] ? __alloc_skb+0x750/0x750 [ 93.713506][ C1] ? mark_lock+0x94/0x320 [ 93.717867][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 93.723813][ C1] ? verify_lock_unused+0x140/0x140 [ 93.729064][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 93.735097][ C1] ? verify_lock_unused+0x140/0x140 [ 93.740326][ C1] ? verify_lock_unused+0x140/0x140 [ 93.745548][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 93.751400][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 93.756895][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 93.762525][ C1] __iterate_interfaces+0x225/0x4c0 [ 93.767752][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 93.774027][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 93.780293][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 93.787347][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 93.792570][ C1] ? hw_scan_work+0xef0/0xef0 [ 93.797275][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 93.802512][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 93.807696][ C1] hrtimer_run_softirq+0x176/0x240 [ 93.809805][ T3559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.812841][ C1] handle_softirqs+0x336/0x830 [ 93.824317][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 93.829205][ C1] ? do_softirq+0x210/0x210 [ 93.831039][ T3559] FAULT_INJECTION: forcing a failure. [ 93.831039][ T3559] name failslab, interval 1, probability 1, space 0, times 965 [ 93.833732][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 93.851626][ C1] __irq_exit_rcu+0x13b/0x230 [ 93.856345][ C1] ? irq_exit_rcu+0x20/0x20 [ 93.860892][ C1] irq_exit_rcu+0x5/0x20 [ 93.865174][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 93.870832][ C1] [ 93.873894][ C1] [ 93.876856][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.882857][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 93.888196][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 93.907958][ C1] RSP: 0018:ffffc90002007aa0 EFLAGS: 00000206 [ 93.914054][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5cd4b109603ec900 [ 93.922053][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 93.930221][ C1] RBP: ffffc90002007bc0 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 93.938219][ C1] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 93.946233][ C1] R13: 1ffff92000400f60 R14: 0000000000000246 R15: dffffc0000000000 [ 93.954278][ C1] ? rcu_lock_release+0x5/0x20 [ 93.959067][ C1] ? read_lock_is_recursive+0x10/0x10 [ 93.964469][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 93.969526][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.975533][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 93.980585][ C1] rcu_lock_acquire+0x2a/0x30 [ 93.985296][ C1] ? rcu_lock_acquire+0x5/0x30 [ 93.990090][ C1] batadv_nc_worker+0xc9/0x5c0 [ 93.994885][ C1] process_one_work+0x867/0xff0 [ 93.999775][ C1] ? worker_detach_from_pool+0x240/0x240 [ 94.005429][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 94.010742][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.015785][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.021400][ C1] ? wq_worker_running+0x97/0x170 [ 94.026451][ C1] worker_thread+0xad7/0x12a0 [ 94.031163][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.037183][ C1] kthread+0x42e/0x520 [ 94.041305][ C1] ? rcu_lock_release+0x20/0x20 [ 94.046183][ C1] ? kthread_blkcg+0xd0/0xd0 [ 94.050807][ C1] ret_from_fork+0x1f/0x30 [ 94.055260][ C1] [ 94.058294][ T3559] CPU: 0 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 94.065290][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.075386][ T3559] Call Trace: [ 94.078702][ T3559] [ 94.081652][ T3559] dump_stack_lvl+0x188/0x250 [ 94.086365][ T3559] ? show_regs_print_info+0x20/0x20 [ 94.091592][ T3559] ? load_image+0x410/0x410 [ 94.096125][ T3559] ? prandom_u32+0x217/0x250 [ 94.100753][ T3559] should_fail+0x383/0x4b0 [ 94.105208][ T3559] should_failslab+0x5/0x20 [ 94.109756][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 94.114719][ T3559] __kmalloc+0x6b/0x340 [ 94.118895][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 94.124641][ T3559] tomoyo_realpath_from_path+0xed/0x5e0 [ 94.130218][ T3559] ? kasan_set_free_info+0x1f/0x40 [ 94.135699][ T3559] ? slab_free_freelist_hook+0xec/0x170 [ 94.141293][ T3559] tomoyo_path_perm+0x23f/0x5d0 [ 94.146184][ T3559] ? tomoyo_path_permission+0x3a0/0x3a0 [ 94.151788][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 94.157039][ T3559] ? rcu_is_watching+0x11/0xa0 [ 94.161837][ T3559] security_inode_getattr+0xcf/0x120 [ 94.167154][ T3559] vfs_getattr+0x26/0x3a0 [ 94.171516][ T3559] ? user_path_at_empty+0x13e/0x190 [ 94.176465][ T4232] FAULT_INJECTION: forcing a failure. [ 94.176465][ T4232] name failslab, interval 1, probability 1, space 0, times 964 [ 94.176751][ T3559] vfs_statx+0x146/0x4c0 [ 94.193817][ T3559] ? vfs_fstatat+0x40/0x40 [ 94.198272][ T3559] __x64_sys_newfstatat+0x15f/0x200 [ 94.203500][ T3559] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 94.208823][ T3559] ? lock_chain_count+0x20/0x20 [ 94.213707][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 94.218936][ T3559] do_syscall_64+0x4c/0xa0 [ 94.223372][ T3559] ? clear_bhb_loop+0x30/0x80 [ 94.228079][ T3559] ? clear_bhb_loop+0x30/0x80 [ 94.232777][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.238697][ T3559] RIP: 0033:0x7f42e1318b0a [ 94.243137][ T3559] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 94.262763][ T3559] RSP: 002b:00007ffd1d8cc0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 94.271203][ T3559] RAX: ffffffffffffffda RBX: 00005654d7ead418 RCX: 00007f42e1318b0a [ 94.279232][ T3559] RDX: 00007ffd1d8cc100 RSI: 00005654d7e9bef3 RDI: 00000000ffffff9c [ 94.287229][ T3559] RBP: 00005654dd0c7148 R08: 000657bb556eb654 R09: 002b5a77d6a081e6 [ 94.295257][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.303246][ T3559] R13: 00007ffd1d8cc100 R14: 0000000000000000 R15: 000657bb556eb654 [ 94.311257][ T3559] [ 94.314296][ T4232] CPU: 1 PID: 4232 Comm: kworker/1:4 Not tainted syzkaller #0 [ 94.321798][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.331903][ T4232] Workqueue: events nsim_dev_trap_report_work [ 94.338010][ T4232] Call Trace: [ 94.341309][ T4232] [ 94.344273][ T4232] dump_stack_lvl+0x188/0x250 [ 94.347780][ T154] FAULT_INJECTION: forcing a failure. [ 94.347780][ T154] name failslab, interval 1, probability 1, space 0, times 964 [ 94.348996][ T4232] ? show_regs_print_info+0x20/0x20 [ 94.366980][ T4232] ? load_image+0x410/0x410 [ 94.371525][ T4232] ? prandom_u32+0x217/0x250 [ 94.376159][ T4232] should_fail+0x383/0x4b0 [ 94.380607][ T4232] should_failslab+0x5/0x20 [ 94.385138][ T4232] slab_pre_alloc_hook+0x51/0xc0 [ 94.390107][ T4232] __kmalloc_node_track_caller+0x68/0x3a0 [ 94.395850][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 94.401684][ T4232] ? __alloc_skb+0xf4/0x750 [ 94.406209][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 94.412039][ T4232] __alloc_skb+0x22c/0x750 [ 94.416479][ T4232] nsim_dev_trap_report_work+0x25c/0xab0 [ 94.422154][ T4232] process_one_work+0x867/0xff0 [ 94.427166][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 94.432840][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 94.438169][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.443228][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.448805][ T4232] ? wq_worker_running+0x97/0x170 [ 94.453861][ T4232] worker_thread+0xad7/0x12a0 [ 94.458574][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.464500][ T4232] kthread+0x42e/0x520 [ 94.468594][ T4232] ? rcu_lock_release+0x20/0x20 [ 94.473469][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 94.478131][ T4232] ret_from_fork+0x1f/0x30 [ 94.482585][ T4232] [ 94.485634][ T4199] CPU: 0 PID: 4199 Comm: syz-executor Not tainted syzkaller #0 [ 94.493224][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.493438][ T9] FAULT_INJECTION: forcing a failure. [ 94.493438][ T9] name failslab, interval 1, probability 1, space 0, times 963 [ 94.503311][ T4199] Call Trace: [ 94.503322][ T4199] [ 94.503331][ T4199] dump_stack_lvl+0x188/0x250 [ 94.527060][ T4199] ? show_regs_print_info+0x20/0x20 [ 94.532307][ T4199] ? load_image+0x410/0x410 [ 94.536839][ T4199] ? prandom_u32+0x217/0x250 [ 94.541485][ T4199] should_fail+0x383/0x4b0 [ 94.545947][ T4199] should_failslab+0x5/0x20 [ 94.550487][ T4199] slab_pre_alloc_hook+0x51/0xc0 [ 94.555461][ T4199] __kmalloc+0x6b/0x340 [ 94.559647][ T4199] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 94.565409][ T4199] tomoyo_realpath_from_path+0xed/0x5e0 [ 94.565990][ T4421] FAULT_INJECTION: forcing a failure. [ 94.565990][ T4421] name failslab, interval 1, probability 1, space 0, times 963 [ 94.571019][ T4199] tomoyo_path_perm+0x23f/0x5d0 [ 94.571047][ T4199] ? tomoyo_path_permission+0x3a0/0x3a0 [ 94.571098][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 94.571125][ T4199] ? __rwlock_init+0x140/0x140 [ 94.571161][ T4199] tomoyo_path_unlink+0xa7/0xf0 [ 94.571185][ T4199] ? tomoyo_path_truncate+0x20/0x20 [ 94.571221][ T4199] security_path_unlink+0xd8/0x130 [ 94.571248][ T4199] do_unlinkat+0x2fc/0x710 [ 94.571278][ T4199] ? fsnotify_link_count+0xf0/0xf0 [ 94.571309][ T4199] ? getname_flags+0x1f9/0x4f0 [ 94.571335][ T4199] __x64_sys_unlink+0x45/0x50 [ 94.571357][ T4199] do_syscall_64+0x4c/0xa0 [ 94.571376][ T4199] ? clear_bhb_loop+0x30/0x80 [ 94.647886][ T4199] ? clear_bhb_loop+0x30/0x80 [ 94.652594][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.658598][ T4199] RIP: 0033:0x7f731844ef87 [ 94.663038][ T4199] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.682870][ T4199] RSP: 002b:00007fff82a77ba8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 94.691323][ T4199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f731844ef87 [ 94.699329][ T4199] RDX: 00007fff82a77bd0 RSI: 00007fff82a77c60 RDI: 00007fff82a77c60 [ 94.707531][ T4199] RBP: 00007fff82a77c60 R08: 00007fff82a78c60 R09: 00000000ffffffff [ 94.715528][ T4199] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff82a78cf0 [ 94.723556][ T4199] R13: 00007f73184e530a R14: 000000000001401a R15: 00007fff82a78d30 [ 94.731567][ T4199] [ 94.734609][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 94.742633][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.752719][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 94.758997][ T9] Call Trace: [ 94.762302][ T9] [ 94.765259][ T9] dump_stack_lvl+0x188/0x250 [ 94.769975][ T9] ? show_regs_print_info+0x20/0x20 [ 94.775201][ T9] ? load_image+0x410/0x410 [ 94.779754][ T9] should_fail+0x383/0x4b0 [ 94.784210][ T9] should_failslab+0x5/0x20 [ 94.788733][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 94.793699][ T9] __kmalloc+0x6b/0x340 [ 94.797880][ T9] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 94.803801][ T9] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 94.809555][ T9] ? cfg80211_wiphy_work+0x224/0x260 [ 94.814873][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 94.821049][ T9] ? verify_lock_unused+0x140/0x140 [ 94.826279][ T9] ? kasan_set_track+0x62/0x70 [ 94.831075][ T9] ? mutex_lock_io_nested+0x60/0x60 [ 94.836300][ T9] ? ieee80211_iface_work+0x781/0xc50 [ 94.841699][ T9] ? verify_lock_unused+0x140/0x140 [ 94.846930][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 94.853033][ T9] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 94.859132][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.865149][ T9] ? __rwlock_init+0x140/0x140 [ 94.869942][ T9] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 94.875690][ T9] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 94.881616][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 94.886853][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.892775][ T9] ? _raw_spin_unlock+0x40/0x40 [ 94.897656][ T9] ? kcov_remote_start+0x6a/0x490 [ 94.902715][ T9] ? kcov_remote_start+0xfa/0x490 [ 94.907769][ T9] ieee80211_iface_work+0x714/0xc50 [ 94.912995][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.918310][ T9] cfg80211_wiphy_work+0x224/0x260 [ 94.923541][ T9] process_one_work+0x867/0xff0 [ 94.928438][ T9] ? worker_detach_from_pool+0x240/0x240 [ 94.934099][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 94.939502][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.944557][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.950153][ T9] ? wq_worker_running+0x97/0x170 [ 94.955213][ T9] worker_thread+0xad7/0x12a0 [ 94.959945][ T9] kthread+0x42e/0x520 [ 94.964065][ T9] ? rcu_lock_release+0x20/0x20 [ 94.968956][ T9] ? kthread_blkcg+0xd0/0xd0 [ 94.973689][ T9] ret_from_fork+0x1f/0x30 [ 94.978174][ T9] [ 94.981835][ T2] FAULT_INJECTION: forcing a failure. [ 94.981835][ T2] name failslab, interval 1, probability 1, space 0, times 962 [ 94.982029][ T3548] CPU: 1 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 94.997126][ T4181] FAULT_INJECTION: forcing a failure. [ 94.997126][ T4181] name failslab, interval 1, probability 1, space 0, times 962 [ 95.001598][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.001613][ T3548] Call Trace: [ 95.001620][ T3548] [ 95.001628][ T3548] dump_stack_lvl+0x188/0x250 [ 95.001660][ T3548] ? show_regs_print_info+0x20/0x20 [ 95.001685][ T3548] ? load_image+0x410/0x410 [ 95.045174][ T3548] ? prandom_u32+0x217/0x250 [ 95.049819][ T3548] should_fail+0x383/0x4b0 [ 95.054279][ T3548] should_failslab+0x5/0x20 [ 95.058811][ T3548] slab_pre_alloc_hook+0x51/0xc0 [ 95.063952][ T3548] __kmalloc_node_track_caller+0x68/0x3a0 [ 95.064520][ T240] FAULT_INJECTION: forcing a failure. [ 95.064520][ T240] name failslab, interval 1, probability 1, space 0, times 962 [ 95.069723][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 95.069749][ T3548] ? __alloc_skb+0xf4/0x750 [ 95.069770][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 95.069795][ T3548] __alloc_skb+0x22c/0x750 [ 95.069819][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 95.069853][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 95.107545][ T4179] FAULT_INJECTION: forcing a failure. [ 95.107545][ T4179] name failslab, interval 1, probability 1, space 0, times 962 [ 95.112670][ T3548] ? sock_kzfree_s+0x50/0x50 [ 95.112695][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 95.112719][ T3548] ? __rwlock_init+0x140/0x140 [ 95.112738][ T3548] ? mark_lock+0x94/0x320 [ 95.112759][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 95.150536][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 95.155687][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 95.160228][ T3548] ? aa_af_perm+0x340/0x340 [ 95.164764][ T3548] ? unix_dgram_poll+0x680/0x680 [ 95.169725][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 95.176174][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 95.181751][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 95.183557][ C0] FAULT_INJECTION: forcing a failure. [ 95.183557][ C0] name failslab, interval 1, probability 1, space 0, times 962 [ 95.187056][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 95.205308][ T3548] __sys_sendto+0x46d/0x620 [ 95.209840][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 95.215255][ T3548] ? lock_chain_count+0x20/0x20 [ 95.220135][ T3548] __x64_sys_sendto+0xda/0xf0 [ 95.224833][ T3548] do_syscall_64+0x4c/0xa0 [ 95.229269][ T3548] ? clear_bhb_loop+0x30/0x80 [ 95.233967][ T3548] ? clear_bhb_loop+0x30/0x80 [ 95.238664][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.244577][ T3548] RIP: 0033:0x7f14158ab407 [ 95.249016][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.268647][ T3548] RSP: 002b:00007ffde0049420 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 95.277091][ T3548] RAX: ffffffffffffffda RBX: 00007f141575bc80 RCX: 00007f14158ab407 [ 95.285091][ T3548] RDX: 000000000000003a RSI: 00007ffde0049560 RDI: 0000000000000003 [ 95.293083][ T3548] RBP: 00007ffde0049990 R08: 0000000000000000 R09: 0000000000000000 [ 95.301078][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde00499a8 [ 95.309078][ T3548] R13: 00007ffde0049560 R14: 000000000000001f R15: 00007ffde0049560 [ 95.317085][ T3548] [ 95.320127][ C0] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 95.327627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.337726][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 95.339837][ T3073] FAULT_INJECTION: forcing a failure. [ 95.339837][ T3073] name failslab, interval 1, probability 1, space 0, times 961 [ 95.344009][ C0] Call Trace: [ 95.344021][ C0] [ 95.362960][ C0] dump_stack_lvl+0x188/0x250 [ 95.367671][ C0] ? show_regs_print_info+0x20/0x20 [ 95.372899][ C0] ? load_image+0x410/0x410 [ 95.377441][ C0] ? prandom_u32+0x217/0x250 [ 95.382064][ C0] should_fail+0x383/0x4b0 [ 95.386516][ C0] should_failslab+0x5/0x20 [ 95.391040][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 95.396008][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 95.401755][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 95.406977][ C0] ? __alloc_skb+0xf4/0x750 [ 95.411502][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 95.416728][ C0] __alloc_skb+0x22c/0x750 [ 95.421166][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 95.426231][ C0] ? __alloc_skb+0x750/0x750 [ 95.430875][ C0] ? mark_lock+0x94/0x320 [ 95.435242][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 95.440731][ C0] ? verify_lock_unused+0x140/0x140 [ 95.445962][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 95.452100][ C0] ? verify_lock_unused+0x140/0x140 [ 95.457342][ C0] ? verify_lock_unused+0x140/0x140 [ 95.462587][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 95.468442][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 95.473938][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 95.479540][ C0] __iterate_interfaces+0x225/0x4c0 [ 95.484767][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.491045][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.497319][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 95.504372][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 95.509636][ C0] ? hw_scan_work+0xef0/0xef0 [ 95.514351][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 95.519597][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 95.524744][ C0] hrtimer_run_softirq+0x176/0x240 [ 95.529887][ C0] handle_softirqs+0x336/0x830 [ 95.534678][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 95.539556][ C0] ? do_softirq+0x210/0x210 [ 95.544077][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 95.549224][ C0] __irq_exit_rcu+0x13b/0x230 [ 95.553926][ C0] ? irq_exit_rcu+0x20/0x20 [ 95.558462][ C0] irq_exit_rcu+0x5/0x20 [ 95.562736][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 95.568529][ C0] [ 95.571500][ C0] [ 95.574471][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 95.580503][ C0] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 95.586701][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 95.606423][ C0] RSP: 0018:ffffc900020075b8 EFLAGS: 00000293 [ 95.612565][ C0] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88801dd68000 [ 95.620561][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 95.628557][ C0] RBP: ffffc900020076a8 R08: 0000000000000003 R09: 0000000000000004 [ 95.636549][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 95.644549][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000400ebc [ 95.652554][ C0] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 95.658364][ C0] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 95.664041][ C0] dump_stack_lvl+0x161/0x250 [ 95.668757][ C0] ? show_regs_print_info+0x20/0x20 [ 95.673984][ C0] ? load_image+0x410/0x410 [ 95.678525][ C0] should_fail+0x383/0x4b0 [ 95.682968][ C0] should_failslab+0x5/0x20 [ 95.687494][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 95.692453][ C0] __kmalloc+0x6b/0x340 [ 95.696628][ C0] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 95.702551][ C0] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 95.708567][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 95.714761][ C0] ? verify_lock_unused+0x140/0x140 [ 95.719994][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 95.725223][ C0] ? verify_lock_unused+0x140/0x140 [ 95.730454][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 95.736543][ C0] ? verify_lock_unused+0x140/0x140 [ 95.741769][ C0] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 95.747877][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.753887][ C0] ? __rwlock_init+0x140/0x140 [ 95.758678][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 95.764418][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 95.770333][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 95.775562][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 95.781725][ C0] ? _raw_spin_unlock+0x40/0x40 [ 95.786602][ C0] ? kcov_remote_start+0x6a/0x490 [ 95.791742][ C0] ? kcov_remote_start+0xfa/0x490 [ 95.796790][ C0] ieee80211_iface_work+0x714/0xc50 [ 95.802026][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 95.807265][ C0] cfg80211_wiphy_work+0x224/0x260 [ 95.812408][ C0] process_one_work+0x867/0xff0 [ 95.817300][ C0] ? worker_detach_from_pool+0x240/0x240 [ 95.822958][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 95.828276][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.833321][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 95.838893][ C0] ? wq_worker_running+0x97/0x170 [ 95.843945][ C0] worker_thread+0xad7/0x12a0 [ 95.848665][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 95.854588][ C0] kthread+0x42e/0x520 [ 95.858684][ C0] ? rcu_lock_release+0x20/0x20 [ 95.863560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 95.868193][ C0] ret_from_fork+0x1f/0x30 [ 95.872651][ C0] [ 95.875698][ T240] CPU: 1 PID: 240 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 95.883211][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.893299][ T240] Workqueue: writeback wb_workfn (flush-8:0) [ 95.899332][ T240] Call Trace: [ 95.901264][ C0] FAULT_INJECTION: forcing a failure. [ 95.901264][ C0] name failslab, interval 1, probability 1, space 0, times 960 [ 95.902642][ T240] [ 95.902654][ T240] dump_stack_lvl+0x188/0x250 [ 95.923063][ T240] ? show_regs_print_info+0x20/0x20 [ 95.928319][ T240] ? load_image+0x410/0x410 [ 95.932859][ T240] ? prandom_u32+0x217/0x250 [ 95.937521][ T240] should_fail+0x383/0x4b0 [ 95.941972][ T240] should_failslab+0x5/0x20 [ 95.946500][ T240] slab_pre_alloc_hook+0x51/0xc0 [ 95.951467][ T240] ? mempool_alloc+0x19d/0x510 [ 95.956256][ T240] kmem_cache_alloc+0x3d/0x280 [ 95.961051][ T240] ? mempool_free+0x320/0x320 [ 95.965764][ T240] mempool_alloc+0x19d/0x510 [ 95.970387][ T240] ? __test_set_page_writeback+0xc72/0xec0 [ 95.976576][ T240] ? mempool_resize+0x860/0x860 [ 95.981454][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 95.986517][ T240] bio_alloc_bioset+0x223/0x870 [ 95.991398][ T240] ext4_bio_write_page+0x1539/0x1f20 [ 95.996721][ T240] mpage_submit_page+0x17a/0x210 [ 96.001699][ T240] ext4_writepages+0x1970/0x2d40 [ 96.006692][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 96.011484][ T240] ? mark_lock+0x94/0x320 [ 96.015859][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 96.020913][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 96.026075][ T240] ? do_raw_spin_unlock+0x11d/0x230 [ 96.031307][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 96.036141][ T240] do_writepages+0x493/0x700 [ 96.040788][ T240] ? __writepage+0x130/0x130 [ 96.045403][ T240] ? writeback_sb_inodes+0x6b7/0x1750 [ 96.050803][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 96.055854][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 96.060946][ T240] __writeback_single_inode+0x153/0xda0 [ 96.066525][ T240] writeback_sb_inodes+0xaaa/0x1750 [ 96.071776][ T240] ? queue_io+0x530/0x530 [ 96.076124][ T240] ? __rwlock_init+0x140/0x140 [ 96.080932][ T240] __writeback_inodes_wb+0x12a/0x3f0 [ 96.086250][ T240] wb_writeback+0x45e/0xbc0 [ 96.090792][ T240] ? rcu_lock_release+0x20/0x20 [ 96.095668][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.101671][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 96.106727][ T240] ? cpumask_next+0xb3/0xd0 [ 96.111269][ T240] wb_workfn+0xb15/0xf20 [ 96.115646][ T240] ? inode_wait_for_writeback+0x220/0x220 [ 96.121436][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.127460][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 96.132514][ T240] ? read_lock_is_recursive+0x10/0x10 [ 96.137908][ T240] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 96.143824][ T240] ? _raw_spin_unlock+0x40/0x40 [ 96.148701][ T240] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.153935][ T240] process_one_work+0x867/0xff0 [ 96.158823][ T240] ? worker_detach_from_pool+0x240/0x240 [ 96.164477][ T240] ? lockdep_hardirqs_off+0x70/0x100 [ 96.169792][ T240] ? _raw_spin_lock_irq+0xb7/0xf0 [ 96.174840][ T240] ? _raw_spin_lock_irqsave+0x100/0x100 [ 96.180417][ T240] ? wq_worker_running+0x97/0x170 [ 96.185465][ T240] worker_thread+0xad7/0x12a0 [ 96.190200][ T240] kthread+0x42e/0x520 [ 96.194490][ T240] ? rcu_lock_release+0x20/0x20 [ 96.199381][ T240] ? kthread_blkcg+0xd0/0xd0 [ 96.204009][ T240] ret_from_fork+0x1f/0x30 [ 96.208591][ T240] [ 96.211643][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 96.213389][ T4199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.219007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.235783][ C0] Call Trace: [ 96.239085][ C0] [ 96.242036][ C0] dump_stack_lvl+0x188/0x250 [ 96.246750][ C0] ? show_regs_print_info+0x20/0x20 [ 96.251981][ C0] ? load_image+0x410/0x410 [ 96.256529][ C0] ? prandom_u32+0x217/0x250 [ 96.261186][ C0] should_fail+0x383/0x4b0 [ 96.265701][ C0] should_failslab+0x5/0x20 [ 96.270250][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 96.275243][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 96.281005][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 96.286249][ C0] ? __alloc_skb+0xf4/0x750 [ 96.288885][ T4199] FAULT_INJECTION: forcing a failure. [ 96.288885][ T4199] name failslab, interval 1, probability 1, space 0, times 959 [ 96.290891][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 96.290919][ C0] __alloc_skb+0x22c/0x750 [ 96.290947][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 96.318752][ C0] ? __alloc_skb+0x750/0x750 [ 96.323383][ C0] ? mark_lock+0x94/0x320 [ 96.327864][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 96.333392][ C0] ? verify_lock_unused+0x140/0x140 [ 96.338642][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 96.344674][ C0] ? verify_lock_unused+0x140/0x140 [ 96.350081][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 96.355596][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 96.361195][ C0] __iterate_interfaces+0x225/0x4c0 [ 96.362479][ T3559] FAULT_INJECTION: forcing a failure. [ 96.362479][ T3559] name failslab, interval 1, probability 1, space 0, times 959 [ 96.366593][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 96.385635][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 96.391907][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 96.398962][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 96.404187][ C0] ? hw_scan_work+0xef0/0xef0 [ 96.408894][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 96.414139][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 96.419295][ C0] hrtimer_run_softirq+0x176/0x240 [ 96.424437][ C0] handle_softirqs+0x336/0x830 [ 96.429228][ C0] ? run_ksoftirqd+0xa4/0x100 [ 96.433929][ C0] ? do_softirq+0x210/0x210 [ 96.438456][ C0] ? run_ksoftirqd+0x81/0x100 [ 96.443161][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.448419][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 96.453741][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.458972][ C0] run_ksoftirqd+0xa4/0x100 [ 96.463497][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.468726][ C0] smpboot_thread_fn+0x520/0x990 [ 96.473700][ C0] kthread+0x42e/0x520 [ 96.477796][ C0] ? cpu_report_death+0x180/0x180 [ 96.482845][ C0] ? kthread_blkcg+0xd0/0xd0 [ 96.487461][ C0] ret_from_fork+0x1f/0x30 [ 96.491913][ C0] [ 96.494969][ T4181] CPU: 1 PID: 4181 Comm: udevd Not tainted syzkaller #0 [ 96.501960][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.512054][ T4181] Call Trace: [ 96.515360][ T4181] [ 96.518324][ T4181] dump_stack_lvl+0x188/0x250 [ 96.522124][ C0] FAULT_INJECTION: forcing a failure. [ 96.522124][ C0] name failslab, interval 1, probability 1, space 0, times 958 [ 96.523040][ T4181] ? show_regs_print_info+0x20/0x20 [ 96.541230][ T4181] ? load_image+0x410/0x410 [ 96.545779][ T4181] ? prandom_u32+0x217/0x250 [ 96.550408][ T4181] should_fail+0x383/0x4b0 [ 96.554852][ T4181] should_failslab+0x5/0x20 [ 96.559379][ T4181] slab_pre_alloc_hook+0x51/0xc0 [ 96.564340][ T4181] ? getname_flags+0xb7/0x4f0 [ 96.569040][ T4181] kmem_cache_alloc+0x3d/0x280 [ 96.573830][ T4181] getname_flags+0xb7/0x4f0 [ 96.578364][ T4181] user_path_at_empty+0x2a/0x190 [ 96.583435][ T4181] do_readlinkat+0xd9/0x490 [ 96.587961][ T4181] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.593971][ T4181] ? cp_new_stat+0x540/0x540 [ 96.598670][ T4181] ? lock_chain_count+0x20/0x20 [ 96.603657][ T4181] __x64_sys_readlink+0x7b/0x90 [ 96.608546][ T4181] do_syscall_64+0x4c/0xa0 [ 96.612986][ T4181] ? clear_bhb_loop+0x30/0x80 [ 96.617689][ T4181] ? clear_bhb_loop+0x30/0x80 [ 96.622489][ T4181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.628410][ T4181] RIP: 0033:0x7f42e131c3a7 [ 96.632852][ T4181] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 96.652574][ T4181] RSP: 002b:00007ffd1d8cb178 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 96.661014][ T4181] RAX: ffffffffffffffda RBX: 00007ffd1d8cbb50 RCX: 00007f42e131c3a7 [ 96.669111][ T4181] RDX: 0000000000000400 RSI: 00007ffd1d8cb630 RDI: 00007ffd1d8cbb50 [ 96.677293][ T4181] RBP: 00007ffd1d8cbb5f R08: 0000000000000075 R09: 0000000000000000 [ 96.685369][ T4181] R10: 0000000000000100 R11: 0000000000000246 R12: 00007ffd1d8cb630 [ 96.693381][ T4181] R13: 00007ffd1d8cb230 R14: 00005654d7e9b6d7 R15: 00005654dd0b5280 [ 96.701399][ T4181] [ 96.704446][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 96.711790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.721886][ C0] Call Trace: [ 96.725202][ C0] [ 96.728157][ C0] dump_stack_lvl+0x188/0x250 [ 96.732889][ C0] ? show_regs_print_info+0x20/0x20 [ 96.738120][ C0] ? load_image+0x410/0x410 [ 96.742741][ C0] ? __lock_acquire+0x1305/0x7b50 [ 96.747805][ C0] ? prandom_u32+0x217/0x250 [ 96.752449][ C0] should_fail+0x383/0x4b0 [ 96.756908][ C0] should_failslab+0x5/0x20 [ 96.761454][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 96.766459][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 96.771709][ C0] ? __alloc_skb+0xf4/0x750 [ 96.776248][ C0] __alloc_skb+0xf4/0x750 [ 96.780619][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 96.785679][ C0] ? __alloc_skb+0x750/0x750 [ 96.790299][ C0] ? mark_lock+0x94/0x320 [ 96.794663][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 96.800166][ C0] ? verify_lock_unused+0x140/0x140 [ 96.805413][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 96.811428][ C0] ? verify_lock_unused+0x140/0x140 [ 96.816663][ C0] ? verify_lock_unused+0x140/0x140 [ 96.821040][ C1] FAULT_INJECTION: forcing a failure. [ 96.821040][ C1] name failslab, interval 1, probability 1, space 0, times 958 [ 96.821893][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 96.840526][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 96.846030][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 96.851616][ C0] __iterate_interfaces+0x225/0x4c0 [ 96.856848][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 96.863138][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 96.869428][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 96.876512][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 96.881776][ C0] ? hw_scan_work+0xef0/0xef0 [ 96.886494][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 96.891741][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 96.896898][ C0] hrtimer_run_softirq+0x176/0x240 [ 96.902044][ C0] handle_softirqs+0x336/0x830 [ 96.906839][ C0] ? run_ksoftirqd+0xa4/0x100 [ 96.911548][ C0] ? do_softirq+0x210/0x210 [ 96.916081][ C0] ? run_ksoftirqd+0x81/0x100 [ 96.920793][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.926024][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 96.931344][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.936575][ C0] run_ksoftirqd+0xa4/0x100 [ 96.941110][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 96.946349][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 96.951756][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 96.956995][ C0] smpboot_thread_fn+0x520/0x990 [ 96.961978][ C0] kthread+0x42e/0x520 [ 96.966088][ C0] ? cpu_report_death+0x180/0x180 [ 96.971143][ C0] ? kthread_blkcg+0xd0/0xd0 [ 96.975768][ C0] ret_from_fork+0x1f/0x30 [ 96.980245][ C0] [ 96.983288][ C1] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 96.990274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.000354][ C1] Call Trace: [ 97.003659][ C1] [ 97.006530][ C1] dump_stack_lvl+0x188/0x250 [ 97.011234][ C1] ? show_regs_print_info+0x20/0x20 [ 97.016466][ C1] ? load_image+0x410/0x410 [ 97.020994][ C1] ? prandom_u32+0x217/0x250 [ 97.025616][ C1] should_fail+0x383/0x4b0 [ 97.030074][ C1] should_failslab+0x5/0x20 [ 97.034600][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 97.039593][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 97.044838][ C1] ? __alloc_skb+0xf4/0x750 [ 97.049370][ C1] __alloc_skb+0xf4/0x750 [ 97.053717][ C1] skb_copy+0x122/0x6f0 [ 97.057902][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 97.064006][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 97.070191][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 97.076133][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 97.081629][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 97.087208][ C1] __iterate_interfaces+0x225/0x4c0 [ 97.092420][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 97.098691][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 97.104974][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 97.112031][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 97.117429][ C1] ? hw_scan_work+0xef0/0xef0 [ 97.122128][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 97.127370][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 97.132523][ C1] hrtimer_run_softirq+0x176/0x240 [ 97.137675][ C1] handle_softirqs+0x336/0x830 [ 97.142455][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 97.147331][ C1] ? do_softirq+0x210/0x210 [ 97.151848][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 97.157001][ C1] __irq_exit_rcu+0x13b/0x230 [ 97.161688][ C1] ? irq_exit_rcu+0x20/0x20 [ 97.166223][ C1] irq_exit_rcu+0x5/0x20 [ 97.170478][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 97.176134][ C1] [ 97.179064][ C1] [ 97.182002][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.187995][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 97.194162][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 97.213790][ C1] RSP: 0018:ffffc900012df838 EFLAGS: 00000293 [ 97.219900][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807dbfbb80 [ 97.227894][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 97.235873][ C1] RBP: ffffc900012df938 R08: 0000000000000003 R09: 0000000000000004 [ 97.243853][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 97.251847][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200025bf0c [ 97.259845][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 97.265516][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 97.271169][ C1] dump_stack_lvl+0x161/0x250 [ 97.275919][ C1] ? show_regs_print_info+0x20/0x20 [ 97.281219][ C1] ? load_image+0x410/0x410 [ 97.285740][ C1] ? prandom_u32+0x217/0x250 [ 97.290353][ C1] should_fail+0x383/0x4b0 [ 97.294798][ C1] should_failslab+0x5/0x20 [ 97.299315][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 97.304261][ C1] __kmalloc+0x6b/0x340 [ 97.308432][ C1] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 97.314162][ C1] ? kmem_cache_free+0x8f/0x210 [ 97.319033][ C1] tomoyo_realpath_from_path+0xed/0x5e0 [ 97.324605][ C1] tomoyo_path_perm+0x23f/0x5d0 [ 97.329479][ C1] ? tomoyo_path_permission+0x3a0/0x3a0 [ 97.335053][ C1] ? lock_chain_count+0x20/0x20 [ 97.339943][ C1] security_inode_getattr+0xcf/0x120 [ 97.345262][ C1] vfs_getattr+0x26/0x3a0 [ 97.349614][ C1] __x64_sys_newfstat+0x137/0x210 [ 97.354686][ C1] ? __context_tracking_exit+0x4c/0x80 [ 97.360197][ C1] ? __ia32_sys_newfstatat+0x200/0x200 [ 97.365768][ C1] ? lock_chain_count+0x20/0x20 [ 97.370634][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 97.375867][ C1] do_syscall_64+0x4c/0xa0 [ 97.380292][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.384984][ C1] ? clear_bhb_loop+0x30/0x80 [ 97.389688][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.395599][ C1] RIP: 0033:0x7f42e1318ad7 [ 97.400022][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 97.419658][ C1] RSP: 002b:00007ffd1d8c7b98 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 97.428216][ C1] RAX: ffffffffffffffda RBX: 00005654dd0e5570 RCX: 00007f42e1318ad7 [ 97.436195][ C1] RDX: 00007f42e13f6ea0 RSI: 00007ffd1d8c7ba0 RDI: 000000000000000c [ 97.444181][ C1] RBP: 00007f42e13f6ff0 R08: 0000000000000001 R09: 0000000000000000 [ 97.452175][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 97.460162][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 00005654dd0e5570 [ 97.468163][ C1] [ 97.472524][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 97.479507][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.489679][ T3559] Call Trace: [ 97.492989][ T3559] [ 97.495952][ T3559] dump_stack_lvl+0x188/0x250 [ 97.500673][ T3559] ? show_regs_print_info+0x20/0x20 [ 97.505908][ T3559] ? load_image+0x410/0x410 [ 97.510440][ T3559] ? prandom_u32+0x217/0x250 [ 97.515058][ T3559] should_fail+0x383/0x4b0 [ 97.519506][ T3559] should_failslab+0x5/0x20 [ 97.524041][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 97.529028][ T3559] __kmalloc+0x6b/0x340 [ 97.533220][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 97.538964][ T3559] ? kmem_cache_free+0x8f/0x210 [ 97.543844][ T3559] tomoyo_realpath_from_path+0xed/0x5e0 [ 97.549428][ T3559] tomoyo_path_perm+0x23f/0x5d0 [ 97.554307][ T3559] ? tomoyo_path_permission+0x3a0/0x3a0 [ 97.559918][ T3559] ? lock_chain_count+0x20/0x20 [ 97.564832][ T3559] security_inode_getattr+0xcf/0x120 [ 97.570284][ T3559] vfs_getattr+0x26/0x3a0 [ 97.574658][ T3559] __x64_sys_newfstat+0x137/0x210 [ 97.579715][ T3559] ? __context_tracking_exit+0x4c/0x80 [ 97.585214][ T3559] ? __ia32_sys_newfstatat+0x200/0x200 [ 97.590725][ T3559] ? lock_chain_count+0x20/0x20 [ 97.595606][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 97.600826][ T3559] do_syscall_64+0x4c/0xa0 [ 97.605264][ T3559] ? clear_bhb_loop+0x30/0x80 [ 97.609961][ T3559] ? clear_bhb_loop+0x30/0x80 [ 97.614663][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.620581][ T3559] RIP: 0033:0x7f42e1318ad7 [ 97.625019][ T3559] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 97.644668][ T3559] RSP: 002b:00007ffd1d8c7b98 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 97.653110][ T3559] RAX: ffffffffffffffda RBX: 00005654dd0e5570 RCX: 00007f42e1318ad7 [ 97.661108][ T3559] RDX: 00007f42e13f6ea0 RSI: 00007ffd1d8c7ba0 RDI: 000000000000000c [ 97.669105][ T3559] RBP: 00007f42e13f6ff0 R08: 0000000000000001 R09: 0000000000000000 [ 97.677095][ T3559] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 97.685087][ T3559] R13: 0000000000003fff R14: 0000000000000000 R15: 00005654dd0e5570 [ 97.693246][ T3559] [ 97.696296][ T4179] CPU: 0 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 97.698727][ C1] FAULT_INJECTION: forcing a failure. [ 97.698727][ C1] name failslab, interval 1, probability 1, space 0, times 956 [ 97.703275][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.703291][ T4179] Call Trace: [ 97.703298][ T4179] [ 97.703307][ T4179] dump_stack_lvl+0x188/0x250 [ 97.737067][ T4179] ? show_regs_print_info+0x20/0x20 [ 97.742295][ T4179] ? load_image+0x410/0x410 [ 97.746834][ T4179] ? prandom_u32+0x217/0x250 [ 97.751475][ T4179] should_fail+0x383/0x4b0 [ 97.756146][ T4179] should_failslab+0x5/0x20 [ 97.760701][ T4179] slab_pre_alloc_hook+0x51/0xc0 [ 97.765680][ T4179] __kmalloc+0x6b/0x340 [ 97.769862][ T4179] ? tomoyo_encode+0x28a/0x550 [ 97.774658][ T4179] tomoyo_encode+0x28a/0x550 [ 97.779275][ T4179] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 97.784943][ T4179] tomoyo_path_number_perm+0x251/0x6b0 [ 97.790430][ T4179] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 97.795923][ T4179] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.801948][ T4179] ? __d_lookup_rcu+0x652/0x720 [ 97.806828][ T4179] ? __lock_acquire+0x7b50/0x7b50 [ 97.811877][ T4179] ? __rwlock_init+0x140/0x140 [ 97.816660][ T4179] ? d_set_d_op+0xe5/0x370 [ 97.821107][ T4179] tomoyo_path_mknod+0x147/0x190 [ 97.826076][ T4179] ? d_alloc_parallel+0x1215/0x1320 [ 97.831293][ T4179] ? tomoyo_path_symlink+0xf0/0xf0 [ 97.836433][ T4179] security_path_mknod+0xec/0x140 [ 97.841486][ T4179] path_openat+0xba5/0x2fb0 [ 97.846047][ T4179] ? do_filp_open+0x400/0x400 [ 97.850774][ T4179] do_filp_open+0x1df/0x400 [ 97.855307][ T4179] ? vfs_tmpfile+0x300/0x300 [ 97.859936][ T4179] ? _raw_spin_unlock+0x24/0x40 [ 97.864855][ T4179] ? alloc_fd+0x59e/0x650 [ 97.869215][ T4179] do_sys_openat2+0x14b/0x500 [ 97.873912][ T4179] ? __lock_acquire+0x7b50/0x7b50 [ 97.878971][ T4179] ? do_sys_open+0xe0/0xe0 [ 97.883411][ T4179] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.889425][ T4179] ? lock_chain_count+0x20/0x20 [ 97.894301][ T4179] __x64_sys_openat+0x135/0x160 [ 97.899174][ T4179] do_syscall_64+0x4c/0xa0 [ 97.903616][ T4179] ? clear_bhb_loop+0x30/0x80 [ 97.908318][ T4179] ? clear_bhb_loop+0x30/0x80 [ 97.913022][ T4179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.918942][ T4179] RIP: 0033:0x7f42e12ae407 [ 97.923385][ T4179] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 97.943023][ T4179] RSP: 002b:00007ffd1d8cb5f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 97.951475][ T4179] RAX: ffffffffffffffda RBX: 00007f42e11c0880 RCX: 00007f42e12ae407 [ 97.959475][ T4179] RDX: 0000000000080241 RSI: 00007ffd1d8cbb50 RDI: ffffffffffffff9c [ 97.967567][ T4179] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 97.975568][ T4179] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005654d7e9bdfc [ 97.983561][ T4179] R13: 00005654d7e9bdfc R14: 0000000000000001 R15: 00005654d7eb6140 [ 97.991577][ T4179] [ 97.994621][ C1] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 98.001603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.011683][ C1] Call Trace: [ 98.014982][ C1] [ 98.017850][ C1] dump_stack_lvl+0x188/0x250 [ 98.022565][ C1] ? show_regs_print_info+0x20/0x20 [ 98.027792][ C1] ? load_image+0x410/0x410 [ 98.032330][ C1] ? prandom_u32+0x217/0x250 [ 98.033471][ T9] FAULT_INJECTION: forcing a failure. [ 98.033471][ T9] name failslab, interval 1, probability 1, space 0, times 955 [ 98.036963][ C1] should_fail+0x383/0x4b0 [ 98.054197][ C1] should_failslab+0x5/0x20 [ 98.057188][ T1241] FAULT_INJECTION: forcing a failure. [ 98.057188][ T1241] name failslab, interval 1, probability 1, space 0, times 955 [ 98.058743][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 98.076597][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 98.082369][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 98.087601][ C1] ? __alloc_skb+0xf4/0x750 [ 98.092135][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 98.097360][ C1] __alloc_skb+0x22c/0x750 [ 98.101809][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 98.106877][ C1] ? __alloc_skb+0x750/0x750 [ 98.111497][ C1] ? mark_lock+0x94/0x320 [ 98.115860][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 98.121789][ C1] ? verify_lock_unused+0x140/0x140 [ 98.127026][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 98.133055][ C1] ? verify_lock_unused+0x140/0x140 [ 98.138280][ C1] ? verify_lock_unused+0x140/0x140 [ 98.143506][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 98.149362][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 98.154863][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 98.160452][ C1] __iterate_interfaces+0x225/0x4c0 [ 98.165676][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 98.171957][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 98.178225][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 98.185282][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 98.190508][ C1] ? hw_scan_work+0xef0/0xef0 [ 98.195208][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 98.200446][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 98.205594][ C1] hrtimer_run_softirq+0x176/0x240 [ 98.210735][ C1] handle_softirqs+0x336/0x830 [ 98.215537][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 98.220425][ C1] ? do_softirq+0x210/0x210 [ 98.224950][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 98.230110][ C1] __irq_exit_rcu+0x13b/0x230 [ 98.234812][ C1] ? irq_exit_rcu+0x20/0x20 [ 98.239356][ C1] irq_exit_rcu+0x5/0x20 [ 98.243624][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 98.249289][ C1] [ 98.252331][ C1] [ 98.255294][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.261324][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 98.266808][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 98.286442][ C1] RSP: 0018:ffffc900012df840 EFLAGS: 00000293 [ 98.292540][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807dbfbb80 [ 98.300544][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.308534][ C1] RBP: ffffc900012df938 R08: 0000000000000003 R09: 0000000000000004 [ 98.316531][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 98.324525][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200025bf0c [ 98.332535][ C1] ? dump_stack_lvl+0x204/0x250 [ 98.337440][ C1] ? show_regs_print_info+0x20/0x20 [ 98.342674][ C1] ? load_image+0x410/0x410 [ 98.347205][ C1] ? prandom_u32+0x217/0x250 [ 98.351831][ C1] should_fail+0x383/0x4b0 [ 98.356280][ C1] should_failslab+0x5/0x20 [ 98.360807][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 98.365774][ C1] __kmalloc+0x6b/0x340 [ 98.369959][ C1] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 98.375722][ C1] ? kmem_cache_free+0x8f/0x210 [ 98.380616][ C1] tomoyo_realpath_from_path+0xed/0x5e0 [ 98.386210][ C1] tomoyo_path_perm+0x23f/0x5d0 [ 98.391090][ C1] ? tomoyo_path_permission+0x3a0/0x3a0 [ 98.396707][ C1] ? lock_chain_count+0x20/0x20 [ 98.401608][ C1] security_inode_getattr+0xcf/0x120 [ 98.406922][ C1] vfs_getattr+0x26/0x3a0 [ 98.411283][ C1] __x64_sys_newfstat+0x137/0x210 [ 98.416334][ C1] ? __context_tracking_exit+0x4c/0x80 [ 98.421817][ C1] ? __ia32_sys_newfstatat+0x200/0x200 [ 98.427313][ C1] ? lock_chain_count+0x20/0x20 [ 98.432195][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 98.437419][ C1] do_syscall_64+0x4c/0xa0 [ 98.441861][ C1] ? clear_bhb_loop+0x30/0x80 [ 98.446559][ C1] ? clear_bhb_loop+0x30/0x80 [ 98.451261][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.457187][ C1] RIP: 0033:0x7f42e1318ad7 [ 98.461672][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 98.481303][ C1] RSP: 002b:00007ffd1d8c7b98 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 98.489746][ C1] RAX: ffffffffffffffda RBX: 00005654dd0e5570 RCX: 00007f42e1318ad7 [ 98.497740][ C1] RDX: 00007f42e13f6ea0 RSI: 00007ffd1d8c7ba0 RDI: 000000000000000c [ 98.505732][ C1] RBP: 00007f42e13f6ff0 R08: 0000000000000001 R09: 0000000000000000 [ 98.513725][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 98.521831][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 00005654dd0e5570 [ 98.529865][ C1] [ 98.532926][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 98.540254][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.550351][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 98.556633][ T9] Call Trace: [ 98.559944][ T9] [ 98.562902][ T9] dump_stack_lvl+0x188/0x250 [ 98.567622][ T9] ? show_regs_print_info+0x20/0x20 [ 98.572860][ T9] ? load_image+0x410/0x410 [ 98.577403][ T9] should_fail+0x383/0x4b0 [ 98.581856][ T9] should_failslab+0x5/0x20 [ 98.586497][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 98.590322][ T4232] FAULT_INJECTION: forcing a failure. [ 98.590322][ T4232] name failslab, interval 1, probability 1, space 0, times 954 [ 98.591482][ T9] __kmalloc+0x6b/0x340 [ 98.608548][ T9] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 98.614475][ T9] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 98.620244][ T9] ? __lock_acquire+0x7b50/0x7b50 [ 98.625662][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 98.631835][ T9] ieee80211_bss_info_update+0x74d/0xa80 [ 98.637527][ T9] ? ieee80211_rx_bss_put+0x60/0x60 [ 98.642814][ T9] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 98.648680][ T9] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 98.654881][ T9] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 98.660819][ T9] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 98.666742][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 98.672143][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 98.678070][ T9] ? _raw_spin_unlock+0x40/0x40 [ 98.682952][ T9] ? kcov_remote_start+0x6a/0x490 [ 98.688005][ T9] ? kcov_remote_start+0xfa/0x490 [ 98.693063][ T9] ieee80211_iface_work+0x714/0xc50 [ 98.698294][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 98.703522][ T9] cfg80211_wiphy_work+0x224/0x260 [ 98.708664][ T9] process_one_work+0x867/0xff0 [ 98.713571][ T9] ? worker_detach_from_pool+0x240/0x240 [ 98.719321][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 98.724746][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.729799][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 98.735374][ T9] ? wq_worker_running+0x97/0x170 [ 98.740510][ T9] worker_thread+0xad7/0x12a0 [ 98.745251][ T9] kthread+0x42e/0x520 [ 98.749345][ T9] ? rcu_lock_release+0x20/0x20 [ 98.754220][ T9] ? kthread_blkcg+0xd0/0xd0 [ 98.758831][ T9] ret_from_fork+0x1f/0x30 [ 98.763282][ T9] [ 98.766323][ T4232] CPU: 1 PID: 4232 Comm: kworker/1:4 Not tainted syzkaller #0 [ 98.773817][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.783894][ T4232] Workqueue: events nsim_dev_trap_report_work [ 98.790001][ T4232] Call Trace: [ 98.793302][ T4232] [ 98.796253][ T4232] dump_stack_lvl+0x188/0x250 [ 98.800964][ T4232] ? show_regs_print_info+0x20/0x20 [ 98.806203][ T4232] ? load_image+0x410/0x410 [ 98.810746][ T4232] ? prandom_u32+0x217/0x250 [ 98.815373][ T4232] should_fail+0x383/0x4b0 [ 98.819837][ T4232] should_failslab+0x5/0x20 [ 98.824362][ T4232] slab_pre_alloc_hook+0x51/0xc0 [ 98.829326][ T4232] __kmalloc_node_track_caller+0x68/0x3a0 [ 98.835073][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 98.840903][ T4232] ? __alloc_skb+0xf4/0x750 [ 98.845432][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 98.851268][ T4232] __alloc_skb+0x22c/0x750 [ 98.855723][ T4232] nsim_dev_trap_report_work+0x25c/0xab0 [ 98.861408][ T4232] process_one_work+0x867/0xff0 [ 98.866301][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 98.871954][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 98.877266][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.882314][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 98.887891][ T4232] ? wq_worker_running+0x97/0x170 [ 98.892948][ T4232] worker_thread+0xad7/0x12a0 [ 98.897662][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 98.903597][ T4232] kthread+0x42e/0x520 [ 98.907692][ T4232] ? rcu_lock_release+0x20/0x20 [ 98.912568][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 98.917180][ T4232] ret_from_fork+0x1f/0x30 [ 98.921636][ T4232] [ 98.924672][ T1241] CPU: 0 PID: 1241 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 98.927202][ C1] FAULT_INJECTION: forcing a failure. [ 98.927202][ C1] name failslab, interval 1, probability 1, space 0, times 953 [ 98.932252][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.932270][ T1241] Workqueue: events_unbound cfg80211_wiphy_work [ 98.932299][ T1241] Call Trace: [ 98.964665][ T1241] [ 98.967621][ T1241] dump_stack_lvl+0x188/0x250 [ 98.972330][ T1241] ? show_regs_print_info+0x20/0x20 [ 98.977557][ T1241] ? load_image+0x410/0x410 [ 98.982096][ T1241] should_fail+0x383/0x4b0 [ 98.986631][ T1241] should_failslab+0x5/0x20 [ 98.991162][ T1241] slab_pre_alloc_hook+0x51/0xc0 [ 98.996126][ T1241] __kmalloc+0x6b/0x340 [ 99.000305][ T1241] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 99.006658][ T1241] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 99.012847][ T1241] ? verify_lock_unused+0x140/0x140 [ 99.018076][ T1241] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 99.024181][ T1241] ? __lock_acquire+0x7b50/0x7b50 [ 99.029247][ T1241] ieee80211_bss_info_update+0x6ba/0xa80 [ 99.034915][ T1241] ? ieee80211_rx_bss_put+0x60/0x60 [ 99.040239][ T1241] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 99.046096][ T1241] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 99.052308][ T1241] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 99.058184][ T1241] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 99.064120][ T1241] ? lockdep_hardirqs_on+0x94/0x140 [ 99.069379][ T1241] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.075335][ T1241] ? _raw_spin_unlock+0x40/0x40 [ 99.080215][ T1241] ? kcov_remote_start+0x6a/0x490 [ 99.085290][ T1241] ? kcov_remote_start+0xfa/0x490 [ 99.090376][ T1241] ieee80211_iface_work+0x714/0xc50 [ 99.095716][ T1241] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.100960][ T1241] cfg80211_wiphy_work+0x224/0x260 [ 99.106118][ T1241] process_one_work+0x867/0xff0 [ 99.111017][ T1241] ? worker_detach_from_pool+0x240/0x240 [ 99.116798][ T1241] ? lockdep_hardirqs_off+0x70/0x100 [ 99.122138][ T1241] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.127214][ T1241] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.132802][ T1241] ? wq_worker_running+0x97/0x170 [ 99.137909][ T1241] worker_thread+0xad7/0x12a0 [ 99.142631][ T1241] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.148580][ T1241] kthread+0x42e/0x520 [ 99.152877][ T1241] ? rcu_lock_release+0x20/0x20 [ 99.157806][ T1241] ? kthread_blkcg+0xd0/0xd0 [ 99.162433][ T1241] ret_from_fork+0x1f/0x30 [ 99.166896][ T1241] [ 99.169942][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 99.177264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.187436][ C1] Call Trace: [ 99.190749][ C1] [ 99.193712][ C1] dump_stack_lvl+0x188/0x250 [ 99.198532][ C1] ? show_regs_print_info+0x20/0x20 [ 99.203777][ C1] ? load_image+0x410/0x410 [ 99.208318][ C1] ? prandom_u32+0x217/0x250 [ 99.213062][ C1] should_fail+0x383/0x4b0 [ 99.217519][ C1] should_failslab+0x5/0x20 [ 99.222052][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 99.227031][ C1] kmem_cache_alloc_trace+0x47/0x290 [ 99.232368][ C1] ? dst_cow_metrics_generic+0x52/0x1b0 [ 99.237964][ C1] dst_cow_metrics_generic+0x52/0x1b0 [ 99.243374][ C1] icmp6_dst_alloc+0x2ca/0x470 [ 99.248173][ C1] ndisc_send_skb+0x3d1/0x1410 [ 99.252984][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 99.258112][ C1] ? ndisc_send_rs+0x524/0x700 [ 99.262920][ C1] addrconf_rs_timer+0x367/0x640 [ 99.267893][ C1] ? detach_timer+0x33/0x2b0 [ 99.272522][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.278643][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.284837][ C1] call_timer_fn+0x17b/0x540 [ 99.289480][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.295596][ C1] ? __run_timers+0x810/0x810 [ 99.300314][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.305671][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 99.310892][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.316995][ C1] __run_timers+0x56c/0x810 [ 99.321528][ C1] ? lock_chain_count+0x20/0x20 [ 99.326432][ C1] ? detach_timer+0x2b0/0x2b0 [ 99.331145][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.337177][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 99.342155][ C1] run_timer_softirq+0x63/0xf0 [ 99.347119][ C1] handle_softirqs+0x336/0x830 [ 99.351936][ C1] ? run_ksoftirqd+0xa4/0x100 [ 99.356662][ C1] ? do_softirq+0x210/0x210 [ 99.361227][ C1] ? run_ksoftirqd+0x81/0x100 [ 99.365936][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 99.371159][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 99.376473][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 99.381695][ C1] run_ksoftirqd+0xa4/0x100 [ 99.386338][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 99.391588][ C1] smpboot_thread_fn+0x520/0x990 [ 99.396591][ C1] kthread+0x42e/0x520 [ 99.400688][ C1] ? cpu_report_death+0x180/0x180 [ 99.405753][ C1] ? kthread_blkcg+0xd0/0xd0 [ 99.410382][ C1] ret_from_fork+0x1f/0x30 [ 99.414879][ C1] [ 99.417925][ T2] CPU: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 [ 99.424917][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.435008][ T2] Call Trace: [ 99.438411][ T2] [ 99.441373][ T2] dump_stack_lvl+0x188/0x250 [ 99.441396][ T4174] FAULT_INJECTION: forcing a failure. [ 99.441396][ T4174] name failslab, interval 1, probability 1, space 0, times 951 [ 99.446098][ T2] ? show_regs_print_info+0x20/0x20 [ 99.464161][ T2] ? load_image+0x410/0x410 [ 99.468714][ T2] ? prandom_u32+0x217/0x250 [ 99.473365][ T2] should_fail+0x383/0x4b0 [ 99.477823][ T2] should_failslab+0x5/0x20 [ 99.482352][ T2] slab_pre_alloc_hook+0x51/0xc0 [ 99.487323][ T2] kmem_cache_alloc_node+0x47/0x2c0 [ 99.492552][ T2] ? dup_task_struct+0x57/0xb70 [ 99.497439][ T2] dup_task_struct+0x57/0xb70 [ 99.502138][ T2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.507361][ T2] ? lockdep_hardirqs_on+0x94/0x140 [ 99.512714][ T2] copy_process+0x61f/0x3ec0 [ 99.517355][ T2] ? mark_lock+0x94/0x320 [ 99.521720][ T2] ? __pidfd_prepare+0x140/0x140 [ 99.526690][ T2] ? finish_lock_switch+0x12d/0x290 [ 99.531931][ T2] kernel_clone+0x23f/0x990 [ 99.536460][ T2] ? finish_task_switch+0x12f/0x650 [ 99.541680][ T2] ? create_io_thread+0x180/0x180 [ 99.546837][ T2] ? __schedule+0x11cb/0x4350 [ 99.551568][ T2] kernel_thread+0xfa/0x160 [ 99.556124][ T2] ? kthread_blkcg+0xd0/0xd0 [ 99.560803][ T2] ? ptrace_event_pid+0x310/0x310 [ 99.565857][ T2] ? kthread_blkcg+0xd0/0xd0 [ 99.570519][ T2] ? __rwlock_init+0x140/0x140 [ 99.575311][ T2] ? do_raw_spin_unlock+0x11d/0x230 [ 99.580552][ T2] kthreadd+0x539/0x700 [ 99.584755][ T2] ? kthread_stop+0x540/0x540 [ 99.589464][ T2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.594704][ T2] ? lockdep_hardirqs_on+0x94/0x140 [ 99.599956][ T2] ? kthread_stop+0x540/0x540 [ 99.604661][ T2] ret_from_fork+0x1f/0x30 [ 99.609114][ T2] [ 99.612160][ T4421] CPU: 1 PID: 4421 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 99.619750][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.629838][ T4421] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 99.637802][ T4421] Call Trace: [ 99.641111][ T4421] [ 99.644074][ T4421] dump_stack_lvl+0x188/0x250 [ 99.648793][ T4421] ? show_regs_print_info+0x20/0x20 [ 99.654028][ T4421] ? load_image+0x410/0x410 [ 99.658558][ T4421] ? prandom_u32+0x217/0x250 [ 99.663186][ T4421] should_fail+0x383/0x4b0 [ 99.667633][ T4421] should_failslab+0x5/0x20 [ 99.672179][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 99.677170][ T4421] kmem_cache_alloc_trace+0x47/0x290 [ 99.682493][ T4421] ? batadv_forw_packet_alloc+0x174/0x360 [ 99.688258][ T4421] batadv_forw_packet_alloc+0x174/0x360 [ 99.693845][ T4421] batadv_iv_ogm_queue_add+0x86a/0xdb0 [ 99.699334][ T4421] ? __lock_acquire+0x7b50/0x7b50 [ 99.704401][ T4421] batadv_iv_ogm_schedule+0x81f/0x1000 [ 99.709892][ T4421] ? pskb_expand_head+0xb45/0x1100 [ 99.715070][ T4421] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 99.722396][ T4421] ? batadv_send_skb_packet+0x36e/0x580 [ 99.727972][ T4421] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 99.735049][ T4421] process_one_work+0x867/0xff0 [ 99.739944][ T4421] ? worker_detach_from_pool+0x240/0x240 [ 99.745604][ T4421] ? lockdep_hardirqs_off+0x70/0x100 [ 99.750937][ T4421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.755995][ T4421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.761562][ T4421] ? wq_worker_running+0x97/0x170 [ 99.766626][ T4421] worker_thread+0xad7/0x12a0 [ 99.771354][ T4421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.777278][ T4421] kthread+0x42e/0x520 [ 99.781367][ T4421] ? rcu_lock_release+0x20/0x20 [ 99.786244][ T4421] ? kthread_blkcg+0xd0/0xd0 [ 99.790859][ T4421] ret_from_fork+0x1f/0x30 [ 99.795326][ T4421] [ 99.798424][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 99.805927][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.816290][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 99.822584][ T154] Call Trace: [ 99.825895][ T154] [ 99.828860][ T154] dump_stack_lvl+0x188/0x250 [ 99.833573][ T154] ? show_regs_print_info+0x20/0x20 [ 99.838802][ T154] ? load_image+0x410/0x410 [ 99.843343][ T154] should_fail+0x383/0x4b0 [ 99.847793][ T154] should_failslab+0x5/0x20 [ 99.852324][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 99.857299][ T154] __kmalloc+0x6b/0x340 [ 99.861491][ T154] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 99.867412][ T154] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 99.873178][ T154] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 99.879363][ T154] ? verify_lock_unused+0x140/0x140 [ 99.884723][ T154] ? mutex_lock_io_nested+0x60/0x60 [ 99.889959][ T154] ? verify_lock_unused+0x140/0x140 [ 99.895189][ T154] ? ieee80211_queue_delayed_work+0x150/0x150 [ 99.901369][ T154] ? verify_lock_unused+0x140/0x140 [ 99.906606][ T154] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 99.912709][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.918742][ T154] ? __rwlock_init+0x140/0x140 [ 99.923542][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 99.929285][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 99.935200][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 99.940428][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.946355][ T154] ? _raw_spin_unlock+0x40/0x40 [ 99.951241][ T154] ? kcov_remote_start+0x6a/0x490 [ 99.956298][ T154] ? kcov_remote_start+0xfa/0x490 [ 99.961349][ T154] ieee80211_iface_work+0x714/0xc50 [ 99.966586][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.971822][ T154] cfg80211_wiphy_work+0x224/0x260 [ 99.976980][ T154] process_one_work+0x867/0xff0 [ 99.981884][ T154] ? worker_detach_from_pool+0x240/0x240 [ 99.987628][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 99.992941][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.997989][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.999853][ T4179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.003560][ T154] ? wq_worker_running+0x97/0x170 [ 100.015292][ T154] worker_thread+0xad7/0x12a0 [ 100.020018][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.025946][ T154] kthread+0x42e/0x520 [ 100.030036][ T154] ? rcu_lock_release+0x20/0x20 [ 100.034913][ T154] ? kthread_blkcg+0xd0/0xd0 [ 100.039528][ T154] ret_from_fork+0x1f/0x30 [ 100.042351][ T4179] FAULT_INJECTION: forcing a failure. [ 100.042351][ T4179] name failslab, interval 1, probability 1, space 0, times 950 [ 100.044012][ T154] [ 100.060440][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted syzkaller #0 [ 100.068036][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.078131][ T4174] Call Trace: [ 100.081440][ T4174] [ 100.084394][ T4174] dump_stack_lvl+0x188/0x250 [ 100.089108][ T4174] ? show_regs_print_info+0x20/0x20 [ 100.094332][ T4174] ? load_image+0x410/0x410 [ 100.098873][ T4174] should_fail+0x383/0x4b0 [ 100.103316][ T4174] should_failslab+0x5/0x20 [ 100.107851][ T4174] slab_pre_alloc_hook+0x51/0xc0 [ 100.112817][ T4174] ? new_inode_pseudo+0x77/0x210 [ 100.117778][ T4174] kmem_cache_alloc+0x3d/0x280 [ 100.122744][ T4174] new_inode_pseudo+0x77/0x210 [ 100.127544][ T4174] create_pipe_files+0x4c/0x6b0 [ 100.132428][ T4174] ? __context_tracking_exit+0x4c/0x80 [ 100.137912][ T4174] __do_pipe_flags+0x46/0x1f0 [ 100.142613][ T4174] do_pipe2+0xa7/0x190 [ 100.146710][ T4174] ? pipe_fcntl+0x530/0x530 [ 100.151236][ T4174] ? lock_chain_count+0x20/0x20 [ 100.156117][ T4174] ? syscall_enter_from_user_mode+0x21/0x70 [ 100.162041][ T4174] __x64_sys_pipe2+0x56/0x60 [ 100.166666][ T4174] do_syscall_64+0x4c/0xa0 [ 100.171117][ T4174] ? clear_bhb_loop+0x30/0x80 [ 100.175815][ T4174] ? clear_bhb_loop+0x30/0x80 [ 100.180518][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.186436][ T4174] RIP: 0033:0x7f34fa341ec9 [ 100.190872][ T4174] Code: 38 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 eb aa e8 ea 34 00 00 66 2e 0f 1f 84 00 00 00 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff [ 100.210501][ T4174] RSP: 002b:00007ffe690d2958 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 100.218938][ T4174] RAX: ffffffffffffffda RBX: 0000555578947cf0 RCX: 00007f34fa341ec9 [ 100.226933][ T4174] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffe690d2970 [ 100.234927][ T4174] RBP: 00007ffe690d2f30 R08: 00007f34fa595e20 R09: 0000000000000000 [ 100.242920][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe690d2a90 [ 100.250916][ T4174] R13: 0000555578945eb0 R14: 0000555578944b48 R15: 00007ffe690d2ab0 [ 100.258926][ T4174] [ 100.261967][ T4179] CPU: 0 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 100.266068][ T3548] FAULT_INJECTION: forcing a failure. [ 100.266068][ T3548] name failslab, interval 1, probability 1, space 0, times 948 [ 100.268942][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.291782][ T4179] Call Trace: [ 100.295082][ T4179] [ 100.298037][ T4179] dump_stack_lvl+0x188/0x250 [ 100.302749][ T4179] ? show_regs_print_info+0x20/0x20 [ 100.307971][ T4179] ? load_image+0x410/0x410 [ 100.312506][ T4179] should_fail+0x383/0x4b0 [ 100.316951][ T4179] should_failslab+0x5/0x20 [ 100.321467][ T4179] slab_pre_alloc_hook+0x51/0xc0 [ 100.326427][ T4179] ? getname_flags+0xb7/0x4f0 [ 100.331124][ T4179] kmem_cache_alloc+0x3d/0x280 [ 100.335915][ T4179] getname_flags+0xb7/0x4f0 [ 100.340447][ T4179] __x64_sys_rename+0x6a/0x90 [ 100.345158][ T4179] do_syscall_64+0x4c/0xa0 [ 100.349594][ T4179] ? clear_bhb_loop+0x30/0x80 [ 100.354291][ T4179] ? clear_bhb_loop+0x30/0x80 [ 100.358992][ T4179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.364911][ T4179] RIP: 0033:0x7f42e1281cc7 [ 100.369346][ T4179] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 100.388974][ T4179] RSP: 002b:00007ffd1d8cb738 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 100.389770][ T3559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.397409][ T4179] RAX: ffffffffffffffda RBX: 00005654dd0e5570 RCX: 00007f42e1281cc7 [ 100.412086][ T4179] RDX: 00005654dd0b4010 RSI: 00007ffd1d8cb750 RDI: 00007ffd1d8cbb50 [ 100.420085][ T4179] RBP: 00005654dd0cce00 R08: 00000000000001e0 R09: 0000000000000000 [ 100.421197][ T3559] FAULT_INJECTION: forcing a failure. [ 100.421197][ T3559] name failslab, interval 1, probability 1, space 0, times 947 [ 100.428085][ T4179] R10: 00000000000001b6 R11: 0000000000000206 R12: 00007ffd1d8cb750 [ 100.448836][ T4179] R13: 00007ffd1d8cbb50 R14: 00005654d7eb6100 R15: 00005654d7eb6140 [ 100.456855][ T4179] [ 100.459996][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 100.466969][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.477144][ T3559] Call Trace: [ 100.480451][ T3559] [ 100.483400][ T3559] dump_stack_lvl+0x188/0x250 [ 100.488114][ T3559] ? show_regs_print_info+0x20/0x20 [ 100.493338][ T3559] ? load_image+0x410/0x410 [ 100.497875][ T3559] ? prandom_u32+0x217/0x250 [ 100.502561][ T3559] should_fail+0x383/0x4b0 [ 100.507018][ T3559] should_failslab+0x5/0x20 [ 100.511547][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 100.516515][ T3559] __kmalloc+0x6b/0x340 [ 100.520694][ T3559] ? tomoyo_encode+0x28a/0x550 [ 100.525483][ T3559] tomoyo_encode+0x28a/0x550 [ 100.530113][ T3559] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 100.535791][ T3559] tomoyo_path_number_perm+0x251/0x6b0 [ 100.541293][ T3559] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.546815][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 100.551899][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.557912][ T3559] ? lock_chain_count+0x20/0x20 [ 100.562790][ T3559] security_file_ioctl+0x6c/0xa0 [ 100.567774][ T3559] __se_sys_ioctl+0x48/0x170 [ 100.572412][ T3559] do_syscall_64+0x4c/0xa0 [ 100.576951][ T3559] ? clear_bhb_loop+0x30/0x80 [ 100.581660][ T3559] ? clear_bhb_loop+0x30/0x80 [ 100.586380][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.592304][ T3559] RIP: 0033:0x7f42e1324378 [ 100.596750][ T3559] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 100.616474][ T3559] RSP: 002b:00007ffd1d8cc1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.624916][ T3559] RAX: ffffffffffffffda RBX: 00005654dd0e1570 RCX: 00007f42e1324378 [ 100.633123][ T3559] RDX: 0000000000000000 RSI: 000000000000125f RDI: 000000000000000c [ 100.641123][ T3559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.649111][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 100.657116][ T3559] R13: 00005654d7eb6100 R14: 0000000000000000 R15: 00007ffd1d8cc3d0 [ 100.665132][ T3559] [ 100.668181][ T3073] CPU: 0 PID: 3073 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 100.675767][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.685855][ T3073] Workqueue: events_unbound cfg80211_wiphy_work [ 100.692147][ T3073] Call Trace: [ 100.695529][ T3073] [ 100.698506][ T3073] dump_stack_lvl+0x188/0x250 [ 100.703232][ T3073] ? show_regs_print_info+0x20/0x20 [ 100.708556][ T3073] ? load_image+0x410/0x410 [ 100.713107][ T3073] should_fail+0x383/0x4b0 [ 100.717668][ T3073] should_failslab+0x5/0x20 [ 100.722207][ T3073] slab_pre_alloc_hook+0x51/0xc0 [ 100.727176][ T3073] __kmalloc+0x6b/0x340 [ 100.731361][ T3073] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 100.737907][ T3073] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 100.744115][ T3073] ? verify_lock_unused+0x140/0x140 [ 100.749351][ T3073] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 100.755468][ T3073] ? __lock_acquire+0x7b50/0x7b50 [ 100.760554][ T3073] ieee80211_bss_info_update+0x6ba/0xa80 [ 100.762142][ T4421] FAULT_INJECTION: forcing a failure. [ 100.762142][ T4421] name failslab, interval 1, probability 1, space 0, times 942 [ 100.766235][ T3073] ? ieee80211_rx_bss_put+0x60/0x60 [ 100.784247][ T3073] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 100.790098][ T3073] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 100.796312][ T3073] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 100.802066][ T3073] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 100.807991][ T3073] ? lockdep_hardirqs_on+0x94/0x140 [ 100.813226][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.819147][ T3073] ? _raw_spin_unlock+0x40/0x40 [ 100.824020][ T3073] ? kcov_remote_start+0x6a/0x490 [ 100.829111][ T3073] ? kcov_remote_start+0xfa/0x490 [ 100.834177][ T3073] ieee80211_iface_work+0x714/0xc50 [ 100.839418][ T3073] ? _raw_spin_unlock_irq+0x1f/0x40 [ 100.844654][ T3073] cfg80211_wiphy_work+0x224/0x260 [ 100.849802][ T3073] process_one_work+0x867/0xff0 [ 100.854739][ T3073] ? worker_detach_from_pool+0x240/0x240 [ 100.860486][ T3073] ? lockdep_hardirqs_off+0x70/0x100 [ 100.865825][ T3073] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.870895][ T3073] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.876493][ T3073] ? wq_worker_running+0x97/0x170 [ 100.881565][ T3073] worker_thread+0xad7/0x12a0 [ 100.886302][ T3073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.892239][ T3073] kthread+0x42e/0x520 [ 100.896331][ T3073] ? rcu_lock_release+0x20/0x20 [ 100.901201][ T3073] ? kthread_blkcg+0xd0/0xd0 [ 100.905814][ T3073] ret_from_fork+0x1f/0x30 SYZFAIL: pipe failed (errno 23: Too many open files in system) [ 100.910275][ T3073] [ 100.918315][ T1] FAULT_INJECTION: forcing a failure. [ 100.918315][ T1] name failslab, interval 1, probability 1, space 0, times 942 [ 100.919762][ T4421] CPU: 1 PID: 4421 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 100.938709][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.948792][ T4421] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 100.956650][ T4421] Call Trace: [ 100.959951][ T4421] [ 100.962911][ T4421] dump_stack_lvl+0x188/0x250 [ 100.967616][ T4421] ? __kasan_slab_alloc+0x92/0xc0 [ 100.972671][ T4421] ? kmem_cache_alloc+0x15d/0x280 [ 100.977735][ T4421] ? show_regs_print_info+0x20/0x20 [ 100.983057][ T4421] ? load_image+0x410/0x410 [ 100.987598][ T4421] ? prandom_u32+0x217/0x250 [ 100.992236][ T4421] should_fail+0x383/0x4b0 [ 100.996691][ T4421] ? batadv_skb_head_push+0x162/0x1f0 [ 101.002096][ T4421] should_failslab+0x5/0x20 [ 101.006634][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 101.011642][ T4421] ? batadv_skb_head_push+0x162/0x1f0 [ 101.017040][ T4421] __kmalloc_node_track_caller+0x68/0x3a0 [ 101.022782][ T4421] ? batadv_skb_head_push+0x162/0x1f0 [ 101.028186][ T4421] ? batadv_skb_head_push+0x162/0x1f0 [ 101.033581][ T4421] pskb_expand_head+0x128/0x1100 [ 101.038557][ T4421] ? __copy_skb_header+0x3ba/0x4f0 [ 101.043708][ T4421] batadv_skb_head_push+0x162/0x1f0 [ 101.048944][ T4421] batadv_send_skb_packet+0xf7/0x580 [ 101.054271][ T4421] batadv_iv_send_outstanding_bat_ogm_packet+0x657/0x800 [ 101.061351][ T4421] process_one_work+0x867/0xff0 [ 101.066255][ T4421] ? worker_detach_from_pool+0x240/0x240 [ 101.071928][ T4421] ? lockdep_hardirqs_off+0x70/0x100 [ 101.077243][ T4421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.082289][ T4421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.087865][ T4421] ? wq_worker_running+0x97/0x170 [ 101.092920][ T4421] worker_thread+0xad7/0x12a0 [ 101.097653][ T4421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.103598][ T4421] kthread+0x42e/0x520 [ 101.107703][ T4421] ? rcu_lock_release+0x20/0x20 [ 101.112593][ T4421] ? kthread_blkcg+0xd0/0xd0 [ 101.117221][ T4421] ret_from_fork+0x1f/0x30 [ 101.121690][ T4421] [ 101.125106][ T154] FAULT_INJECTION: forcing a failure. [ 101.125106][ T154] name failslab, interval 1, probability 1, space 0, times 941 [ 101.139684][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 101.146325][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.156411][ T1] Call Trace: [ 101.159716][ T1] [ 101.162674][ T1] dump_stack_lvl+0x188/0x250 [ 101.167401][ T1] ? show_regs_print_info+0x20/0x20 [ 101.172648][ T1] ? load_image+0x410/0x410 [ 101.177200][ T1] ? prandom_u32+0x217/0x250 [ 101.181838][ T1] should_fail+0x383/0x4b0 [ 101.186289][ T1] should_failslab+0x5/0x20 [ 101.190825][ T1] slab_pre_alloc_hook+0x51/0xc0 [ 101.195786][ T1] ? posix_lock_inode+0x365/0x3270 [ 101.200922][ T1] kmem_cache_alloc+0x3d/0x280 [ 101.205703][ T1] ? __init_waitqueue_head+0xa4/0x140 [ 101.211194][ T1] posix_lock_inode+0x365/0x3270 [ 101.216155][ T1] ? aa_path_link+0x8a0/0x8a0 [ 101.220856][ T1] ? lockdep_softirqs_off+0x430/0x430 [ 101.226252][ T1] ? posix_lock_file+0x50/0x50 [ 101.231039][ T1] ? bpf_lsm_file_lock+0x5/0x10 [ 101.235916][ T1] fcntl_setlk+0xa7f/0x1060 [ 101.240451][ T1] ? vfs_lock_file+0xd0/0xd0 [ 101.245060][ T1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.251060][ T1] ? __might_fault+0xb3/0x110 [ 101.255759][ T1] ? _copy_from_user+0x111/0x170 [ 101.260724][ T1] do_fcntl+0x533/0x1360 [ 101.264986][ T1] ? __context_tracking_exit+0x4c/0x80 [ 101.270467][ T1] ? rcu_lock_release+0x20/0x20 [ 101.275346][ T1] ? __lock_acquire+0x7b50/0x7b50 [ 101.280401][ T1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.286403][ T1] ? tomoyo_file_fcntl+0x77/0x210 [ 101.291451][ T1] ? lock_chain_count+0x20/0x20 [ 101.296326][ T1] ? bpf_lsm_file_fcntl+0x5/0x10 [ 101.301286][ T1] ? security_file_fcntl+0x7c/0xa0 [ 101.306421][ T1] __se_sys_fcntl+0xcc/0x190 [ 101.311035][ T1] do_syscall_64+0x4c/0xa0 [ 101.315480][ T1] ? clear_bhb_loop+0x30/0x80 [ 101.320173][ T1] ? clear_bhb_loop+0x30/0x80 [ 101.324878][ T1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.330789][ T1] RIP: 0033:0x7f929d667add [ 101.335227][ T1] Code: 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 c7 44 24 b8 10 00 00 00 48 89 44 24 c8 83 fe 09 74 1a b8 48 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 c3 66 2e 0f 1f 84 00 00 00 00 00 48 8d 54 [ 101.354851][ T1] RSP: 002b:00007ffc7a158218 EFLAGS: 00000293 ORIG_RAX: 0000000000000048 [ 101.363294][ T1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f929d667add [ 101.371288][ T1] RDX: 00007ffc7a158220 RSI: 0000000000000007 RDI: 0000000000000003 [ 101.379370][ T1] RBP: 0000000000000003 R08: 00007ffc7a158240 R09: 0000000000000000 [ 101.387372][ T1] R10: 0000000000000008 R11: 0000000000000293 R12: 0000000000000000 [ 101.395371][ T1] R13: 00007ffc7a158240 R14: 0000000000000002 R15: 000056519dd43d98 [ 101.403376][ T1] [ 101.406458][ T3548] CPU: 1 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 101.413444][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.423536][ T3548] Call Trace: [ 101.426844][ T3548] [ 101.429812][ T3548] dump_stack_lvl+0x188/0x250 [ 101.434529][ T3548] ? show_regs_print_info+0x20/0x20 [ 101.439753][ T3548] ? load_image+0x410/0x410 [ 101.444292][ T3548] ? prandom_u32+0x217/0x250 [ 101.448930][ T3548] should_fail+0x383/0x4b0 [ 101.453389][ T3548] should_failslab+0x5/0x20 [ 101.457988][ T3548] slab_pre_alloc_hook+0x51/0xc0 [ 101.462957][ T3548] __kmalloc_node_track_caller+0x68/0x3a0 [ 101.468738][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 101.474069][ T3548] ? __alloc_skb+0xf4/0x750 [ 101.478599][ T3548] ? alloc_skb_with_frags+0xa7/0x720 [ 101.483917][ T3548] __alloc_skb+0x22c/0x750 [ 101.488360][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 101.493507][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 101.498748][ T3548] ? sock_kzfree_s+0x50/0x50 [ 101.503359][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 101.508423][ T3548] ? __rwlock_init+0x140/0x140 [ 101.513212][ T3548] ? mark_lock+0x94/0x320 [ 101.517566][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 101.522796][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 101.527948][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 101.532482][ T3548] ? aa_af_perm+0x340/0x340 [ 101.537010][ T3548] ? unix_dgram_poll+0x680/0x680 [ 101.541969][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 101.548425][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 101.553999][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 101.559315][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 101.564809][ T3548] __sys_sendto+0x46d/0x620 [ 101.569356][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 101.574785][ T3548] ? lock_chain_count+0x20/0x20 [ 101.579671][ T3548] __x64_sys_sendto+0xda/0xf0 [ 101.584385][ T3548] do_syscall_64+0x4c/0xa0 [ 101.588828][ T3548] ? clear_bhb_loop+0x30/0x80 [ 101.593549][ T3548] ? clear_bhb_loop+0x30/0x80 [ 101.598264][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.604184][ T3548] RIP: 0033:0x7f14158ab407 [ 101.608627][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.628265][ T3548] RSP: 002b:00007ffde0049420 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 101.636721][ T3548] RAX: ffffffffffffffda RBX: 00007f141575bc80 RCX: 00007f14158ab407 [ 101.644726][ T3548] RDX: 0000000000000053 RSI: 00007ffde0049560 RDI: 0000000000000003 [ 101.652750][ T3548] RBP: 00007ffde0049990 R08: 0000000000000000 R09: 0000000000000000 [ 101.660746][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde00499a8 [ 101.668742][ T3548] R13: 00007ffde0049560 R14: 0000000000000038 R15: 00007ffde0049560 [ 101.676762][ T3548] [ 101.689729][ T4199] CPU: 0 PID: 4199 Comm: syz-executor Not tainted syzkaller #0 [ 101.697952][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.708048][ T4199] Call Trace: [ 101.711366][ T4199] [ 101.714316][ T4199] dump_stack_lvl+0x188/0x250 [ 101.719041][ T4199] ? show_regs_print_info+0x20/0x20 [ 101.724299][ T4199] ? load_image+0x410/0x410 [ 101.728849][ T4199] ? prandom_u32+0x217/0x250 [ 101.733481][ T4199] should_fail+0x383/0x4b0 [ 101.737939][ T4199] should_failslab+0x5/0x20 [ 101.742473][ T4199] slab_pre_alloc_hook+0x51/0xc0 [ 101.747440][ T4199] kmem_cache_alloc_node+0x47/0x2c0 [ 101.752664][ T4199] ? alloc_vmap_area+0x199/0x1b30 [ 101.757720][ T4199] alloc_vmap_area+0x199/0x1b30 [ 101.762608][ T4199] ? vm_map_ram+0xba0/0xba0 [ 101.767143][ T4199] __get_vm_area_node+0x14f/0x2d0 [ 101.772199][ T4199] __vmalloc_node_range+0xef/0x8b0 [ 101.777336][ T4199] ? alloc_counters+0xcc/0x740 [ 101.782135][ T4199] ? alloc_counters+0xcc/0x740 [ 101.786919][ T4199] vzalloc+0x75/0x80 [ 101.790837][ T4199] ? alloc_counters+0xcc/0x740 [ 101.795626][ T4199] alloc_counters+0xcc/0x740 [ 101.800246][ T4199] ? compat_copy_entries_to_user+0x4b0/0x4b0 [ 101.806265][ T4199] do_ipt_get_ctl+0xa37/0x1110 [ 101.811058][ T4199] ? do_ipt_set_ctl+0xd70/0xd70 [ 101.815962][ T4199] ? nf_getsockopt+0x21b/0x280 [ 101.820751][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 101.825813][ T4199] ? __mutex_lock_common+0x435/0x2400 [ 101.831235][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 101.836944][ T4199] ? mutex_unlock+0x10/0x10 [ 101.841568][ T4199] ? __might_fault+0xb7/0x110 [ 101.846294][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 101.851353][ T4199] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.856752][ T4199] nf_getsockopt+0x25e/0x280 [ 101.860475][ T3559] FAULT_INJECTION: forcing a failure. [ 101.860475][ T3559] name failslab, interval 1, probability 1, space 0, times 940 [ 101.861369][ T4199] ip_getsockopt+0x1219/0x1660 [ 101.878904][ T4199] ? arch_stack_walk+0xf2/0x140 [ 101.883799][ T4199] ? ip_setsockopt+0x31e0/0x31e0 [ 101.888770][ T4199] ? stack_trace_save+0xa6/0xf0 [ 101.893644][ T4199] ? stack_trace_snprint+0xe0/0xe0 [ 101.898796][ T4199] ? __kasan_slab_alloc+0xa9/0xc0 [ 101.903845][ T4199] ? __kasan_slab_alloc+0x92/0xc0 [ 101.908894][ T4199] ? slab_post_alloc_hook+0x4c/0x380 [ 101.913659][ C1] FAULT_INJECTION: forcing a failure. [ 101.913659][ C1] name failslab, interval 1, probability 1, space 0, times 940 [ 101.914204][ T4199] ? kmem_cache_alloc+0x15d/0x280 [ 101.914229][ T4199] ? security_file_alloc+0x30/0x110 [ 101.937419][ T4199] ? __alloc_file+0xc2/0x240 [ 101.942033][ T4199] ? alloc_empty_file+0x90/0x180 [ 101.947006][ T4199] ? alloc_file+0x5c/0x510 [ 101.951443][ T4199] ? alloc_file_pseudo+0x180/0x200 [ 101.956585][ T4199] ? sock_alloc_file+0xb3/0x240 [ 101.961458][ T4199] ? __sys_socket+0x11d/0x170 [ 101.966153][ T4199] ? __x64_sys_socket+0x76/0x80 [ 101.971027][ T4199] ? do_syscall_64+0x4c/0xa0 [ 101.975640][ T4199] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.981743][ T4199] ? mark_lock+0x94/0x320 [ 101.986098][ T4199] tcp_getsockopt+0x209/0x2530 [ 101.990976][ T4199] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 101.996632][ T4199] ? aa_label_sk_perm+0x3e6/0x540 [ 102.001691][ T4199] ? aa_sk_perm+0x910/0x910 [ 102.006228][ T4199] ? __might_sleep+0xf0/0xf0 [ 102.010846][ T4199] ? percpu_counter_add_batch+0x135/0x150 [ 102.016599][ T4199] ? aa_sk_perm+0x7dc/0x910 [ 102.021128][ T4199] ? aa_af_perm+0x340/0x340 [ 102.025649][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 102.030703][ T4199] ? aa_sock_opt_perm+0x74/0x100 [ 102.035664][ T4199] ? sock_common_getsockopt+0x29/0xa0 [ 102.041057][ T4199] ? sock_recv_errqueue+0x580/0x580 [ 102.046277][ T4199] __sys_getsockopt+0x1b0/0x230 [ 102.051156][ T4199] __x64_sys_getsockopt+0xb1/0xc0 [ 102.056205][ T4199] do_syscall_64+0x4c/0xa0 [ 102.060643][ T4199] ? clear_bhb_loop+0x30/0x80 [ 102.065341][ T4199] ? clear_bhb_loop+0x30/0x80 [ 102.070040][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.075957][ T4199] RIP: 0033:0x7f731845166a [ 102.080397][ T4199] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 102.100029][ T4199] RSP: 002b:00007fff82a785a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 102.108468][ T4199] RAX: ffffffffffffffda RBX: 00007fff82a78630 RCX: 00007f731845166a [ 102.116552][ T4199] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.124577][ T4199] RBP: 0000000000000003 R08: 00007fff82a785cc R09: 0000000000000000 [ 102.132572][ T4199] R10: 00007fff82a78630 R11: 0000000000000216 R12: 00007f731869ffc0 [ 102.140564][ T4199] R13: 00007fff82a785cc R14: 0000000000000000 R15: 00007f73186a2180 [ 102.148570][ T4199] [ 102.151612][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 102.158949][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.169037][ C1] Call Trace: [ 102.172344][ C1] [ 102.175303][ C1] dump_stack_lvl+0x188/0x250 [ 102.180017][ C1] ? show_regs_print_info+0x20/0x20 [ 102.185248][ C1] ? load_image+0x410/0x410 [ 102.189787][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.195811][ C1] ? prandom_u32+0x217/0x250 [ 102.200445][ C1] should_fail+0x383/0x4b0 [ 102.204898][ C1] should_failslab+0x5/0x20 [ 102.209429][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 102.214405][ C1] __kmalloc+0x6b/0x340 [ 102.218634][ C1] ? ___neigh_create+0x6fa/0x2210 [ 102.223705][ C1] ___neigh_create+0x6fa/0x2210 [ 102.228783][ C1] ip6_finish_output2+0x9f5/0x1530 [ 102.233944][ C1] ? nf_hook+0x360/0x360 [ 102.238222][ C1] ? ip6_mtu+0x2fb/0x3d0 [ 102.242497][ C1] ? ip6_finish_output+0x627/0x790 [ 102.247653][ C1] ndisc_send_skb+0xb7a/0x1410 [ 102.252466][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 102.257469][ C1] ? rcu_lock_release+0x20/0x20 [ 102.262369][ C1] ? ndisc_send_rs+0x524/0x700 [ 102.267196][ C1] addrconf_rs_timer+0x367/0x640 [ 102.272171][ C1] ? detach_timer+0x33/0x2b0 [ 102.276800][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.282907][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.289017][ C1] call_timer_fn+0x17b/0x540 [ 102.293649][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.299748][ C1] ? __run_timers+0x810/0x810 [ 102.304461][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.309692][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 102.314915][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.321018][ C1] __run_timers+0x56c/0x810 [ 102.325575][ C1] ? detach_timer+0x2b0/0x2b0 [ 102.330278][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.336383][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 102.341284][ C1] run_timer_softirq+0x63/0xf0 [ 102.346080][ C1] handle_softirqs+0x336/0x830 [ 102.350885][ C1] ? run_ksoftirqd+0xa4/0x100 [ 102.355600][ C1] ? do_softirq+0x210/0x210 [ 102.360130][ C1] ? run_ksoftirqd+0x81/0x100 [ 102.364839][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.370068][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 102.375385][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.380622][ C1] run_ksoftirqd+0xa4/0x100 [ 102.385166][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.390403][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 102.395808][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 102.400952][ C1] smpboot_thread_fn+0x520/0x990 [ 102.405940][ C1] kthread+0x42e/0x520 [ 102.410036][ C1] ? cpu_report_death+0x180/0x180 [ 102.415089][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.419714][ C1] ret_from_fork+0x1f/0x30 [ 102.424183][ C1] [ 102.429990][ C1] FAULT_INJECTION: forcing a failure. [ 102.429990][ C1] name failslab, interval 1, probability 1, space 0, times 938 [ 102.442837][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 102.450155][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.460254][ C1] Call Trace: [ 102.463567][ C1] [ 102.466525][ C1] dump_stack_lvl+0x188/0x250 [ 102.471241][ C1] ? show_regs_print_info+0x20/0x20 [ 102.476483][ C1] ? load_image+0x410/0x410 [ 102.481060][ C1] should_fail+0x383/0x4b0 [ 102.485526][ C1] should_failslab+0x5/0x20 [ 102.490063][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 102.495031][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 102.500786][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 102.505667][ C1] ? __alloc_skb+0xf4/0x750 [ 102.510201][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 102.515085][ C1] __alloc_skb+0x22c/0x750 [ 102.519533][ C1] ndisc_alloc_skb+0xa6/0x420 [ 102.524252][ C1] ndisc_send_rs+0x271/0x700 [ 102.528964][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 102.533945][ C1] addrconf_rs_timer+0x367/0x640 [ 102.538920][ C1] ? detach_timer+0x33/0x2b0 [ 102.543549][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.549660][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.555895][ C1] call_timer_fn+0x17b/0x540 [ 102.560533][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.566655][ C1] ? __run_timers+0x810/0x810 [ 102.571388][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.576634][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 102.578405][ T1] FAULT_INJECTION: forcing a failure. [ 102.578405][ T1] name failslab, interval 1, probability 1, space 0, times 936 [ 102.581864][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.581894][ C1] __run_timers+0x56c/0x810 [ 102.581932][ C1] ? detach_timer+0x2b0/0x2b0 [ 102.609957][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.615971][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 102.620852][ C1] run_timer_softirq+0x63/0xf0 [ 102.625644][ C1] handle_softirqs+0x336/0x830 [ 102.630430][ C1] ? run_ksoftirqd+0xa4/0x100 [ 102.635134][ C1] ? do_softirq+0x210/0x210 [ 102.639655][ C1] ? run_ksoftirqd+0x81/0x100 [ 102.644358][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.649585][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 102.654896][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.660117][ C1] run_ksoftirqd+0xa4/0x100 [ 102.664644][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 102.669887][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 102.675325][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 102.680625][ C1] smpboot_thread_fn+0x520/0x990 [ 102.685621][ C1] kthread+0x42e/0x520 [ 102.689723][ C1] ? cpu_report_death+0x180/0x180 [ 102.694783][ C1] ? kthread_blkcg+0xd0/0xd0 [ 102.699405][ C1] ret_from_fork+0x1f/0x30 [ 102.703863][ C1] [ 102.706908][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 102.707187][ C1] FAULT_INJECTION: forcing a failure. [ 102.707187][ C1] name failslab, interval 1, probability 1, space 0, times 935 [ 102.713538][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.713553][ T1] Call Trace: [ 102.713561][ T1] [ 102.713570][ T1] dump_stack_lvl+0x188/0x250 [ 102.747482][ T1] ? show_regs_print_info+0x20/0x20 [ 102.752717][ T1] ? load_image+0x410/0x410 [ 102.757291][ T1] ? prandom_u32+0x217/0x250 [ 102.762127][ T1] should_fail+0x383/0x4b0 [ 102.766579][ T1] should_failslab+0x5/0x20 [ 102.771110][ T1] slab_pre_alloc_hook+0x51/0xc0 [ 102.776077][ T1] ? fcntl_setlk+0xa5/0x1060 [ 102.780697][ T1] kmem_cache_alloc+0x3d/0x280 [ 102.785493][ T1] fcntl_setlk+0xa5/0x1060 [ 102.789934][ T1] ? verify_lock_unused+0x140/0x140 [ 102.795155][ T1] ? __might_fault+0xb7/0x110 [ 102.799858][ T1] ? __lock_acquire+0x7b50/0x7b50 [ 102.804903][ T1] ? vfs_lock_file+0xd0/0xd0 [ 102.809529][ T1] ? vfs_read+0x87b/0xd50 [ 102.813881][ T1] ? __might_fault+0xb3/0x110 [ 102.818581][ T1] ? _copy_from_user+0x111/0x170 [ 102.823544][ T1] do_fcntl+0x533/0x1360 [ 102.827813][ T1] ? __context_tracking_exit+0x4c/0x80 [ 102.833295][ T1] ? rcu_lock_release+0x20/0x20 [ 102.838167][ T1] ? __lock_acquire+0x7b50/0x7b50 [ 102.843218][ T1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.849235][ T1] ? tomoyo_file_fcntl+0x77/0x210 [ 102.854287][ T1] ? lock_chain_count+0x20/0x20 [ 102.859162][ T1] ? bpf_lsm_file_fcntl+0x5/0x10 [ 102.864124][ T1] ? security_file_fcntl+0x7c/0xa0 [ 102.869265][ T1] __se_sys_fcntl+0xcc/0x190 [ 102.873886][ T1] do_syscall_64+0x4c/0xa0 [ 102.878319][ T1] ? clear_bhb_loop+0x30/0x80 [ 102.883013][ T1] ? clear_bhb_loop+0x30/0x80 [ 102.887712][ T1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.893634][ T1] RIP: 0033:0x7f929d667add [ 102.898074][ T1] Code: 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 c7 44 24 b8 10 00 00 00 48 89 44 24 c8 83 fe 09 74 1a b8 48 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 c3 66 2e 0f 1f 84 00 00 00 00 00 48 8d 54 [ 102.917701][ T1] RSP: 002b:00007ffc7a1583a8 EFLAGS: 00000293 ORIG_RAX: 0000000000000048 [ 102.926143][ T1] RAX: ffffffffffffffda RBX: 00005651a71df1c0 RCX: 00007f929d667add [ 102.934130][ T1] RDX: 00007ffc7a1583b0 RSI: 0000000000000007 RDI: 0000000000000003 [ 102.942115][ T1] RBP: 00007ffc7a158428 R08: 0000000000000000 R09: 0000000000000000 [ 102.950110][ T1] R10: 0000000000000180 R11: 0000000000000293 R12: 0000000000000000 [ 102.958187][ T1] R13: ffffffffffffff88 R14: 0000000000000002 R15: 000056519dd43d98 [ 102.966211][ T1] [ 102.969250][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 102.976574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.986673][ C1] Call Trace: [ 102.989997][ C1] [ 102.992962][ C1] dump_stack_lvl+0x188/0x250 [ 102.997685][ C1] ? verify_lock_unused+0x140/0x140 [ 103.002932][ C1] ? show_regs_print_info+0x20/0x20 [ 103.008168][ C1] ? load_image+0x410/0x410 [ 103.011716][ C0] FAULT_INJECTION: forcing a failure. [ 103.011716][ C0] name failslab, interval 1, probability 1, space 0, times 935 [ 103.012710][ C1] ? __lock_acquire+0x1305/0x7b50 [ 103.030615][ C1] ? prandom_u32+0x217/0x250 [ 103.035247][ C1] should_fail+0x383/0x4b0 [ 103.039698][ C1] should_failslab+0x5/0x20 [ 103.044226][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 103.049188][ C1] ? dst_alloc+0x101/0x160 [ 103.053636][ C1] kmem_cache_alloc+0x3d/0x280 [ 103.058424][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 103.064078][ C1] dst_alloc+0x101/0x160 [ 103.068343][ C1] icmp6_dst_alloc+0x7e/0x470 [ 103.073048][ C1] ? icmpv6_flow_init+0x5e/0x120 [ 103.078009][ C1] ndisc_send_skb+0x3d1/0x1410 [ 103.082806][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 103.087776][ C1] ? ndisc_send_rs+0x524/0x700 [ 103.092566][ C1] addrconf_rs_timer+0x367/0x640 [ 103.097529][ C1] ? detach_timer+0x33/0x2b0 [ 103.102145][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.108240][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.114327][ C1] call_timer_fn+0x17b/0x540 [ 103.118942][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.125036][ C1] ? __run_timers+0x810/0x810 [ 103.129739][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.134961][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 103.140206][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.146328][ C1] __run_timers+0x56c/0x810 [ 103.150893][ C1] ? detach_timer+0x2b0/0x2b0 [ 103.155591][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.161600][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 103.166479][ C1] run_timer_softirq+0x63/0xf0 [ 103.171264][ C1] handle_softirqs+0x336/0x830 [ 103.176066][ C1] ? run_ksoftirqd+0xa4/0x100 [ 103.180766][ C1] ? do_softirq+0x210/0x210 [ 103.185290][ C1] ? run_ksoftirqd+0x81/0x100 [ 103.189982][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.195233][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 103.200541][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.205759][ C1] run_ksoftirqd+0xa4/0x100 [ 103.210288][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.215509][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 103.220906][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 103.226044][ C1] smpboot_thread_fn+0x520/0x990 [ 103.231014][ C1] kthread+0x42e/0x520 [ 103.235102][ C1] ? cpu_report_death+0x180/0x180 [ 103.240144][ C1] ? kthread_blkcg+0xd0/0xd0 [ 103.244759][ C1] ret_from_fork+0x1f/0x30 [ 103.249210][ C1] [ 103.252246][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 103.255778][ C1] FAULT_INJECTION: forcing a failure. [ 103.255778][ C1] name failslab, interval 1, probability 1, space 0, times 934 [ 103.259563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.282400][ C0] Call Trace: [ 103.285697][ C0] [ 103.288658][ C0] dump_stack_lvl+0x188/0x250 [ 103.293377][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 103.298597][ C0] ? show_regs_print_info+0x20/0x20 [ 103.303823][ C0] ? load_image+0x410/0x410 [ 103.308351][ C0] ? prandom_u32+0x217/0x250 [ 103.312984][ C0] should_fail+0x383/0x4b0 [ 103.317427][ C0] should_failslab+0x5/0x20 [ 103.321956][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 103.326913][ C0] ? skb_ext_add+0x1c1/0x900 [ 103.331523][ C0] kmem_cache_alloc+0x3d/0x280 [ 103.336318][ C0] skb_ext_add+0x1c1/0x900 [ 103.340787][ C0] ? nf_ct_bridge_refrag_post+0x5f0/0x5f0 [ 103.346533][ C0] ? smpboot_thread_fn+0x520/0x990 [ 103.351665][ C0] br_nf_forward_ip+0xc2/0x10c0 [ 103.356547][ C0] ? br_nf_local_in+0x460/0x460 [ 103.361506][ C0] nf_hook_slow+0xb9/0x200 [ 103.365943][ C0] ? br_dev_queue_push_xmit+0x850/0x850 [ 103.371511][ C0] NF_HOOK+0x1f3/0x380 [ 103.375606][ C0] ? br_forward_finish+0x80/0x80 [ 103.380574][ C0] ? br_dev_queue_push_xmit+0x850/0x850 [ 103.386513][ C0] __br_forward+0x433/0x610 [ 103.391059][ C0] ? br_dev_queue_push_xmit+0x850/0x850 [ 103.396722][ C0] ? should_deliver+0x2c0/0x2c0 [ 103.401600][ C0] ? br_flood+0x3a7/0x450 [ 103.406010][ C0] br_handle_frame_finish+0x102b/0x1310 [ 103.411595][ C0] ? brport_get_ownership+0x80/0x80 [ 103.416837][ C0] ? ip6t_do_table+0x1350/0x1500 [ 103.421798][ C0] ? nf_hook_slow+0x16a/0x200 [ 103.426502][ C0] ? brport_get_ownership+0x80/0x80 [ 103.431731][ C0] br_nf_hook_thresh+0x3c9/0x4a0 [ 103.436696][ C0] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 103.442107][ C0] ? brnf_get_logical_dev+0x2c0/0x2c0 [ 103.447544][ C0] ? brport_get_ownership+0x80/0x80 [ 103.452765][ C0] ? rcu_lock_release+0x5/0x20 [ 103.457561][ C0] br_nf_pre_routing_finish_ipv6+0x958/0xc40 [ 103.463558][ C0] ? brport_get_ownership+0x80/0x80 [ 103.468789][ C0] br_nf_pre_routing_ipv6+0x353/0x670 [ 103.474185][ C0] ? br_nf_check_hbh_len+0x590/0x590 [ 103.479620][ C0] ? br_nf_pre_routing_ipv6+0x670/0x670 [ 103.485194][ C0] ? br_nf_pre_routing+0x6cb/0x1450 [ 103.490422][ C0] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 103.495554][ C0] br_handle_frame+0xec1/0x10d0 [ 103.501044][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 103.506353][ C0] ? brport_get_ownership+0x80/0x80 [ 103.511610][ C0] ? rcu_is_watching+0x11/0xa0 [ 103.516409][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 103.521720][ C0] __netif_receive_skb_core+0xfd5/0x3670 [ 103.527390][ C0] ? set_rps_cpu+0x660/0x660 [ 103.532011][ C0] ? read_lock_is_recursive+0x10/0x10 [ 103.537409][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 103.542463][ C0] __netif_receive_skb+0x74/0x290 [ 103.547551][ C0] process_backlog+0x366/0x770 [ 103.552351][ C0] ? rps_trigger_softirq+0x210/0x210 [ 103.557670][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.563685][ C0] ? __rwlock_init+0x140/0x140 [ 103.568477][ C0] ? lock_chain_count+0x20/0x20 [ 103.573456][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.578682][ C0] __napi_poll+0xbb/0x430 [ 103.583048][ C0] net_rx_action+0x522/0xa80 [ 103.587669][ C0] ? net_tx_action+0x880/0x880 [ 103.592470][ C0] ? detach_timer+0x2b0/0x2b0 [ 103.597184][ C0] handle_softirqs+0x336/0x830 [ 103.602061][ C0] ? run_ksoftirqd+0xa4/0x100 [ 103.606761][ C0] ? do_softirq+0x210/0x210 [ 103.611283][ C0] ? run_ksoftirqd+0x81/0x100 [ 103.615985][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 103.621202][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 103.626517][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 103.631741][ C0] run_ksoftirqd+0xa4/0x100 [ 103.636270][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 103.641493][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 103.646951][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 103.652106][ C0] smpboot_thread_fn+0x520/0x990 [ 103.657082][ C0] kthread+0x42e/0x520 [ 103.661174][ C0] ? cpu_report_death+0x180/0x180 [ 103.666223][ C0] ? kthread_blkcg+0xd0/0xd0 [ 103.670859][ C0] ret_from_fork+0x1f/0x30 [ 103.675308][ C0] [ 103.678342][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 103.685708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.695818][ C1] Call Trace: [ 103.699138][ C1] [ 103.702218][ C1] dump_stack_lvl+0x188/0x250 [ 103.706951][ C1] ? verify_lock_unused+0x140/0x140 [ 103.712201][ C1] ? show_regs_print_info+0x20/0x20 [ 103.717452][ C1] ? load_image+0x410/0x410 [ 103.720356][ T4173] FAULT_INJECTION: forcing a failure. [ 103.720356][ T4173] name failslab, interval 1, probability 1, space 0, times 933 [ 103.722000][ C1] ? __lock_acquire+0x1305/0x7b50 [ 103.739807][ C1] ? prandom_u32+0x217/0x250 [ 103.744550][ C1] should_fail+0x383/0x4b0 [ 103.749034][ C1] should_failslab+0x5/0x20 [ 103.753568][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 103.758535][ C1] ? dst_alloc+0x101/0x160 [ 103.762978][ C1] kmem_cache_alloc+0x3d/0x280 [ 103.767775][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 103.773440][ C1] dst_alloc+0x101/0x160 [ 103.778586][ C1] icmp6_dst_alloc+0x7e/0x470 [ 103.783291][ C1] ? icmpv6_flow_init+0x5e/0x120 [ 103.788255][ C1] ndisc_send_skb+0x3d1/0x1410 [ 103.793057][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 103.798043][ C1] ? ndisc_send_rs+0x524/0x700 [ 103.804631][ C1] addrconf_rs_timer+0x367/0x640 [ 103.809627][ C1] ? detach_timer+0x33/0x2b0 [ 103.814264][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.820488][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.820497][ T4199] syz-executor: vmalloc error: size 64, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 103.826618][ C1] call_timer_fn+0x17b/0x540 [ 103.827281][ T4199] syz4 [ 103.839845][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.839880][ C1] ? __run_timers+0x810/0x810 [ 103.858188][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.863415][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 103.868634][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.869787][ T4199] ,mems_allowed=0-1 [ 103.874721][ C1] __run_timers+0x56c/0x810 [ 103.883081][ C1] ? detach_timer+0x2b0/0x2b0 [ 103.887809][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.893823][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 103.898701][ C1] run_timer_softirq+0x63/0xf0 [ 103.903490][ C1] handle_softirqs+0x336/0x830 [ 103.908282][ C1] ? run_ksoftirqd+0xa4/0x100 [ 103.913007][ C1] ? do_softirq+0x210/0x210 [ 103.917532][ C1] ? run_ksoftirqd+0x81/0x100 [ 103.922581][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.927802][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 103.933119][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.938342][ C1] run_ksoftirqd+0xa4/0x100 [ 103.942867][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 103.948124][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 103.953528][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 103.958666][ C1] smpboot_thread_fn+0x520/0x990 [ 103.963648][ C1] kthread+0x42e/0x520 [ 103.967741][ C1] ? cpu_report_death+0x180/0x180 [ 103.972783][ C1] ? kthread_blkcg+0xd0/0xd0 [ 103.977396][ C1] ret_from_fork+0x1f/0x30 [ 103.981934][ C1] [ 103.984975][ T4173] CPU: 0 PID: 4173 Comm: sshd-session Not tainted syzkaller #0 [ 103.992568][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.002143][ C1] FAULT_INJECTION: forcing a failure. [ 104.002143][ C1] name failslab, interval 1, probability 1, space 0, times 931 [ 104.002658][ T4173] Call Trace: [ 104.002669][ T4173] [ 104.021666][ T4173] dump_stack_lvl+0x188/0x250 [ 104.026373][ T4173] ? show_regs_print_info+0x20/0x20 [ 104.031600][ T4173] ? load_image+0x410/0x410 [ 104.036132][ T4173] ? prandom_u32+0x217/0x250 [ 104.040756][ T4173] should_fail+0x383/0x4b0 [ 104.045215][ T4173] should_failslab+0x5/0x20 [ 104.049736][ T4173] slab_pre_alloc_hook+0x51/0xc0 [ 104.054707][ T4173] __kmalloc_node_track_caller+0x68/0x3a0 [ 104.060457][ T4173] ? alloc_skb_with_frags+0xa7/0x720 [ 104.065775][ T4173] ? __alloc_skb+0xf4/0x750 [ 104.070300][ T4173] ? alloc_skb_with_frags+0xa7/0x720 [ 104.075615][ T4173] __alloc_skb+0x22c/0x750 [ 104.080058][ T4173] alloc_skb_with_frags+0xa7/0x720 [ 104.085201][ T4173] sock_alloc_send_pskb+0x87f/0x9a0 [ 104.090435][ T4173] ? sock_kzfree_s+0x50/0x50 [ 104.095046][ T4173] ? do_raw_spin_lock+0x128/0x2f0 [ 104.100101][ T4173] ? __rwlock_init+0x140/0x140 [ 104.104890][ T4173] ? mark_lock+0x94/0x320 [ 104.109241][ T4173] ? do_raw_spin_unlock+0x11d/0x230 [ 104.114468][ T4173] unix_dgram_sendmsg+0x6f8/0x19c0 [ 104.119619][ T4173] ? aa_sk_perm+0x7dc/0x910 [ 104.124154][ T4173] ? aa_af_perm+0x340/0x340 [ 104.128686][ T4173] ? unix_dgram_poll+0x680/0x680 [ 104.133648][ T4173] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 104.140092][ T4173] ? apparmor_socket_sendmsg+0x88/0x230 [ 104.145670][ T4173] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.150984][ T4173] ? security_socket_sendmsg+0x7c/0xa0 [ 104.156471][ T4173] __sys_sendto+0x46d/0x620 [ 104.161002][ T4173] ? __ia32_sys_getpeername+0x80/0x80 [ 104.166415][ T4173] ? lock_chain_count+0x20/0x20 [ 104.171296][ T4173] __x64_sys_sendto+0xda/0xf0 [ 104.175997][ T4173] do_syscall_64+0x4c/0xa0 [ 104.180432][ T4173] ? clear_bhb_loop+0x30/0x80 [ 104.185131][ T4173] ? clear_bhb_loop+0x30/0x80 [ 104.189832][ T4173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.195746][ T4173] RIP: 0033:0x7f8b01fa4407 [ 104.200194][ T4173] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 104.219823][ T4173] RSP: 002b:00007fff602fb940 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 104.228259][ T4173] RAX: ffffffffffffffda RBX: 00007f8b01eb0300 RCX: 00007f8b01fa4407 [ 104.236253][ T4173] RDX: 0000000000000071 RSI: 00007fff602fba80 RDI: 0000000000000006 [ 104.244282][ T4173] RBP: 00007fff602fbeb0 R08: 0000000000000000 R09: 0000000000000000 [ 104.252276][ T4173] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff602fbec8 [ 104.260272][ T4173] R13: 00007fff602fba80 R14: 0000000000000049 R15: 00007fff602fba80 [ 104.268276][ T4173] [ 104.271316][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 104.278644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.288722][ C1] Call Trace: [ 104.292022][ C1] [ 104.294974][ C1] dump_stack_lvl+0x188/0x250 [ 104.299686][ C1] ? show_regs_print_info+0x20/0x20 [ 104.304910][ C1] ? load_image+0x410/0x410 [ 104.309440][ C1] ? prandom_u32+0x217/0x250 [ 104.314064][ C1] should_fail+0x383/0x4b0 [ 104.318504][ C1] should_failslab+0x5/0x20 [ 104.323030][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 104.328002][ C1] ? __debug_object_init+0x98f/0xc80 [ 104.333319][ C1] kmem_cache_alloc+0x3d/0x280 [ 104.338582][ C1] __debug_object_init+0x98f/0xc80 [ 104.343766][ C1] ? debug_object_init+0x10/0x10 [ 104.348738][ C1] ? memset+0x1e/0x40 [ 104.352769][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 104.358183][ C1] ? neigh_release+0x80/0x80 [ 104.362800][ C1] init_timer_key+0x3d/0x2a0 [ 104.367423][ C1] ___neigh_create+0x9ee/0x2210 [ 104.372327][ C1] ip6_finish_output2+0x9f5/0x1530 [ 104.377469][ C1] ? nf_hook+0x360/0x360 [ 104.381734][ C1] ? ip6_mtu+0x2fb/0x3d0 [ 104.385999][ C1] ? ip6_finish_output+0x627/0x790 [ 104.391139][ C1] ndisc_send_skb+0xb7a/0x1410 [ 104.395945][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 104.400911][ C1] ? rcu_lock_release+0x20/0x20 [ 104.405798][ C1] ? ndisc_send_rs+0x524/0x700 [ 104.410594][ C1] addrconf_rs_timer+0x367/0x640 [ 104.415561][ C1] ? detach_timer+0x33/0x2b0 [ 104.420184][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 104.426281][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 104.432399][ C1] call_timer_fn+0x17b/0x540 [ 104.437036][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 104.443148][ C1] ? __run_timers+0x810/0x810 [ 104.447879][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.453110][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 104.458455][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 104.464582][ C1] __run_timers+0x56c/0x810 [ 104.469135][ C1] ? detach_timer+0x2b0/0x2b0 [ 104.473833][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.479846][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 104.484731][ C1] run_timer_softirq+0x63/0xf0 [ 104.489521][ C1] handle_softirqs+0x336/0x830 [ 104.494343][ C1] ? run_ksoftirqd+0xa4/0x100 [ 104.499053][ C1] ? do_softirq+0x210/0x210 [ 104.503586][ C1] ? run_ksoftirqd+0x81/0x100 [ 104.508285][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 104.513507][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 104.518815][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 104.524044][ C1] run_ksoftirqd+0xa4/0x100 [ 104.528589][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 104.533812][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 104.539355][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 104.544513][ C1] smpboot_thread_fn+0x520/0x990 [ 104.549518][ C1] kthread+0x42e/0x520 [ 104.553618][ C1] ? cpu_report_death+0x180/0x180 [ 104.558678][ C1] ? kthread_blkcg+0xd0/0xd0 [ 104.563310][ C1] ret_from_fork+0x1f/0x30 [ 104.567776][ C1] [ 104.573529][ C1] FAULT_INJECTION: forcing a failure. [ 104.573529][ C1] name failslab, interval 1, probability 1, space 0, times 928 [ 104.579871][ T4199] CPU: 0 PID: 4199 Comm: syz-executor Not tainted syzkaller #0 [ 104.593950][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.604077][ T4199] Call Trace: [ 104.607384][ T4199] [ 104.610338][ T4199] dump_stack_lvl+0x188/0x250 [ 104.615159][ T4199] ? rcu_lock_release+0x5/0x20 [ 104.620072][ T4199] ? show_regs_print_info+0x20/0x20 [ 104.625328][ T4199] ? load_image+0x410/0x410 [ 104.629874][ T4199] ? __rcu_read_unlock+0x78/0xd0 [ 104.634949][ T4199] warn_alloc+0x245/0x320 [ 104.639331][ T4199] ? zone_watermark_ok_safe+0x250/0x250 [ 104.644919][ T4199] ? __get_vm_area_node+0x164/0x2d0 [ 104.650146][ T4199] ? kfree+0xef/0x2a0 [ 104.654301][ T4199] __vmalloc_node_range+0x2b1/0x8b0 [ 104.659552][ T4199] ? alloc_counters+0xcc/0x740 [ 104.664445][ T4199] vzalloc+0x75/0x80 [ 104.668470][ T4199] ? alloc_counters+0xcc/0x740 [ 104.673266][ T4199] alloc_counters+0xcc/0x740 [ 104.677903][ T4199] ? compat_copy_entries_to_user+0x4b0/0x4b0 [ 104.683945][ T4199] do_ipt_get_ctl+0xa37/0x1110 [ 104.688764][ T4199] ? do_ipt_set_ctl+0xd70/0xd70 [ 104.693684][ T4199] ? nf_getsockopt+0x21b/0x280 [ 104.698490][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 104.703550][ T4199] ? __mutex_lock_common+0x435/0x2400 [ 104.708966][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 104.714626][ T4199] ? mutex_unlock+0x10/0x10 [ 104.719252][ T4199] ? __might_fault+0xb7/0x110 [ 104.723977][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 104.729191][ T4199] ? __local_bh_enable_ip+0x136/0x1c0 [ 104.734669][ T4199] nf_getsockopt+0x25e/0x280 [ 104.739307][ T4199] ip_getsockopt+0x1219/0x1660 [ 104.744109][ T4199] ? arch_stack_walk+0xf2/0x140 [ 104.748994][ T4199] ? ip_setsockopt+0x31e0/0x31e0 [ 104.753970][ T4199] ? stack_trace_save+0xa6/0xf0 [ 104.758982][ T4199] ? stack_trace_snprint+0xe0/0xe0 [ 104.764175][ T4199] ? __kasan_slab_alloc+0xa9/0xc0 [ 104.769222][ T4199] ? __kasan_slab_alloc+0x92/0xc0 [ 104.774273][ T4199] ? slab_post_alloc_hook+0x4c/0x380 [ 104.779580][ T4199] ? kmem_cache_alloc+0x15d/0x280 [ 104.784626][ T4199] ? security_file_alloc+0x30/0x110 [ 104.789843][ T4199] ? __alloc_file+0xc2/0x240 [ 104.794459][ T4199] ? alloc_empty_file+0x90/0x180 [ 104.799412][ T4199] ? alloc_file+0x5c/0x510 [ 104.803847][ T4199] ? alloc_file_pseudo+0x180/0x200 [ 104.808980][ T4199] ? sock_alloc_file+0xb3/0x240 [ 104.813852][ T4199] ? __sys_socket+0x11d/0x170 [ 104.818558][ T4199] ? __x64_sys_socket+0x76/0x80 [ 104.823423][ T4199] ? do_syscall_64+0x4c/0xa0 [ 104.828035][ T4199] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.834135][ T4199] ? mark_lock+0x94/0x320 [ 104.838489][ T4199] tcp_getsockopt+0x209/0x2530 [ 104.843282][ T4199] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 104.848930][ T4199] ? aa_label_sk_perm+0x3e6/0x540 [ 104.853996][ T4199] ? aa_sk_perm+0x910/0x910 [ 104.858540][ T4199] ? __might_sleep+0xf0/0xf0 [ 104.863154][ T4199] ? percpu_counter_add_batch+0x135/0x150 [ 104.868909][ T4199] ? aa_sk_perm+0x7dc/0x910 [ 104.873440][ T4199] ? aa_af_perm+0x340/0x340 [ 104.877961][ T4199] ? __lock_acquire+0x7b50/0x7b50 [ 104.883009][ T4199] ? aa_sock_opt_perm+0x74/0x100 [ 104.887970][ T4199] ? sock_common_getsockopt+0x29/0xa0 [ 104.893360][ T4199] ? sock_recv_errqueue+0x580/0x580 [ 104.898581][ T4199] __sys_getsockopt+0x1b0/0x230 [ 104.903577][ T4199] __x64_sys_getsockopt+0xb1/0xc0 [ 104.908761][ T4199] do_syscall_64+0x4c/0xa0 [ 104.913235][ T4199] ? clear_bhb_loop+0x30/0x80 [ 104.917947][ T4199] ? clear_bhb_loop+0x30/0x80 [ 104.922658][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.928576][ T4199] RIP: 0033:0x7f731845166a [ 104.933014][ T4199] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 104.952642][ T4199] RSP: 002b:00007fff82a785a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 104.961085][ T4199] RAX: ffffffffffffffda RBX: 00007fff82a78630 RCX: 00007f731845166a [ 104.969091][ T4199] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.977178][ T4199] RBP: 0000000000000003 R08: 00007fff82a785cc R09: 0000000000000000 [ 104.985184][ T4199] R10: 00007fff82a78630 R11: 0000000000000216 R12: 00007f731869ffc0 [ 104.993188][ T4199] R13: 00007fff82a785cc R14: 0000000000000000 R15: 00007f73186a2180 [ 105.001196][ T4199] [ 105.004230][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 105.011557][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.021649][ C1] Call Trace: [ 105.024962][ C1] [ 105.027923][ C1] dump_stack_lvl+0x188/0x250 [ 105.032649][ C1] ? show_regs_print_info+0x20/0x20 [ 105.037892][ C1] ? load_image+0x410/0x410 [ 105.042447][ C1] should_fail+0x383/0x4b0 [ 105.046901][ C1] should_failslab+0x5/0x20 [ 105.051434][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 105.051449][ C0] FAULT_INJECTION: forcing a failure. [ 105.051449][ C0] name failslab, interval 1, probability 1, space 0, times 928 [ 105.056405][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 105.074914][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 105.079792][ C1] ? __alloc_skb+0xf4/0x750 [ 105.084319][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 105.089187][ C1] __alloc_skb+0x22c/0x750 [ 105.093626][ C1] ndisc_alloc_skb+0xa6/0x420 [ 105.098331][ C1] ndisc_send_rs+0x271/0x700 [ 105.102949][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 105.107916][ C1] addrconf_rs_timer+0x367/0x640 [ 105.112873][ C1] ? detach_timer+0x33/0x2b0 [ 105.117519][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.123617][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.129702][ C1] call_timer_fn+0x17b/0x540 [ 105.134320][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.140407][ C1] ? __run_timers+0x810/0x810 [ 105.145120][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.150334][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 105.155595][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.161722][ C1] __run_timers+0x56c/0x810 [ 105.166268][ C1] ? detach_timer+0x2b0/0x2b0 [ 105.170964][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.176997][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 105.182147][ C1] run_timer_softirq+0x63/0xf0 [ 105.186935][ C1] handle_softirqs+0x336/0x830 [ 105.191721][ C1] ? run_ksoftirqd+0xa4/0x100 [ 105.196426][ C1] ? do_softirq+0x210/0x210 [ 105.200952][ C1] ? run_ksoftirqd+0x81/0x100 [ 105.205647][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.210866][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 105.216175][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.221393][ C1] run_ksoftirqd+0xa4/0x100 [ 105.225950][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.231177][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 105.236575][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 105.241707][ C1] smpboot_thread_fn+0x520/0x990 [ 105.246677][ C1] kthread+0x42e/0x520 [ 105.250846][ C1] ? cpu_report_death+0x180/0x180 [ 105.255886][ C1] ? kthread_blkcg+0xd0/0xd0 [ 105.260494][ C1] ret_from_fork+0x1f/0x30 [ 105.264951][ C1] [ 105.267988][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 105.275314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.285409][ C0] Call Trace: [ 105.288727][ C0] [ 105.289929][ C1] FAULT_INJECTION: forcing a failure. [ 105.289929][ C1] name failslab, interval 1, probability 1, space 0, times 927 [ 105.291689][ C0] dump_stack_lvl+0x188/0x250 [ 105.309152][ C0] ? show_regs_print_info+0x20/0x20 [ 105.314378][ C0] ? load_image+0x410/0x410 [ 105.318916][ C0] should_fail+0x383/0x4b0 [ 105.323705][ C0] should_failslab+0x5/0x20 [ 105.328251][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 105.333219][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 105.338976][ C0] ? ndisc_alloc_skb+0xa6/0x420 [ 105.343855][ C0] ? __alloc_skb+0xf4/0x750 [ 105.348381][ C0] ? ndisc_alloc_skb+0xa6/0x420 [ 105.353250][ C0] __alloc_skb+0x22c/0x750 [ 105.357694][ C0] ndisc_alloc_skb+0xa6/0x420 [ 105.362397][ C0] ndisc_send_rs+0x271/0x700 [ 105.367008][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 105.371973][ C0] addrconf_rs_timer+0x367/0x640 [ 105.376928][ C0] ? detach_timer+0x33/0x2b0 [ 105.381537][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.387632][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.393717][ C0] call_timer_fn+0x17b/0x540 [ 105.398327][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.404408][ C0] ? __run_timers+0x810/0x810 [ 105.409109][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.414325][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 105.419539][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.425631][ C0] __run_timers+0x56c/0x810 [ 105.430176][ C0] ? detach_timer+0x2b0/0x2b0 [ 105.434875][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.440879][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 105.445762][ C0] run_timer_softirq+0x63/0xf0 [ 105.450548][ C0] handle_softirqs+0x336/0x830 [ 105.455336][ C0] ? run_ksoftirqd+0xa4/0x100 [ 105.460042][ C0] ? do_softirq+0x210/0x210 [ 105.464560][ C0] ? run_ksoftirqd+0x81/0x100 [ 105.469253][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 105.474469][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 105.479780][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 105.484996][ C0] run_ksoftirqd+0xa4/0x100 [ 105.489528][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 105.494750][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 105.500142][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 105.505276][ C0] smpboot_thread_fn+0x520/0x990 [ 105.510246][ C0] kthread+0x42e/0x520 [ 105.514335][ C0] ? cpu_report_death+0x180/0x180 [ 105.519383][ C0] ? kthread_blkcg+0xd0/0xd0 [ 105.523997][ C0] ret_from_fork+0x1f/0x30 [ 105.528454][ C0] [ 105.531495][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 105.538822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.548895][ C1] Call Trace: [ 105.552182][ C1] [ 105.555126][ C1] dump_stack_lvl+0x188/0x250 [ 105.559829][ C1] ? show_regs_print_info+0x20/0x20 [ 105.565041][ C1] ? load_image+0x410/0x410 [ 105.569556][ C1] ? prandom_u32+0x217/0x250 [ 105.574156][ C1] should_fail+0x383/0x4b0 [ 105.578588][ C1] should_failslab+0x5/0x20 [ 105.583183][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 105.588239][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 105.593442][ C1] ? __alloc_skb+0xf4/0x750 [ 105.597963][ C1] __alloc_skb+0xf4/0x750 [ 105.602306][ C1] skb_copy+0x122/0x6f0 [ 105.606482][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 105.612578][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 105.618746][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 105.624659][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 105.630147][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 105.635718][ C1] __iterate_interfaces+0x225/0x4c0 [ 105.640932][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 105.647190][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 105.653443][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 105.660496][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 105.665732][ C1] ? hw_scan_work+0xef0/0xef0 [ 105.670444][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 105.675677][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 105.680807][ C1] hrtimer_run_softirq+0x176/0x240 [ 105.685940][ C1] handle_softirqs+0x336/0x830 [ 105.690865][ C1] ? run_ksoftirqd+0xa4/0x100 [ 105.695590][ C1] ? do_softirq+0x210/0x210 [ 105.700104][ C1] ? run_ksoftirqd+0x81/0x100 [ 105.704802][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.710046][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 105.715358][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.720579][ C1] run_ksoftirqd+0xa4/0x100 [ 105.725097][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 105.730315][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 105.735717][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 105.740843][ C1] smpboot_thread_fn+0x520/0x990 [ 105.745816][ C1] kthread+0x42e/0x520 [ 105.749888][ C1] ? cpu_report_death+0x180/0x180 [ 105.754950][ C1] ? kthread_blkcg+0xd0/0xd0 [ 105.759550][ C1] ret_from_fork+0x1f/0x30 [ 105.763984][ C1] [ 105.767736][ C0] FAULT_INJECTION: forcing a failure. [ 105.767736][ C0] name failslab, interval 1, probability 1, space 0, times 925 [ 105.780584][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 105.785288][ T3851] FAULT_INJECTION: forcing a failure. [ 105.785288][ T3851] name failslab, interval 1, probability 1, space 0, times 925 [ 105.787898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.811009][ C0] Call Trace: [ 105.812423][ T3852] FAULT_INJECTION: forcing a failure. [ 105.812423][ T3852] name failslab, interval 1, probability 1, space 0, times 925 [ 105.814321][ C0] [ 105.814332][ C0] dump_stack_lvl+0x188/0x250 [ 105.814367][ C0] ? show_regs_print_info+0x20/0x20 [ 105.840179][ C0] ? load_image+0x410/0x410 [ 105.844720][ C0] ? prandom_u32+0x217/0x250 [ 105.849345][ C0] should_fail+0x383/0x4b0 [ 105.853786][ C0] should_failslab+0x5/0x20 [ 105.858575][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 105.863549][ C0] kmem_cache_alloc_trace+0x47/0x290 [ 105.867576][ T240] FAULT_INJECTION: forcing a failure. [ 105.867576][ T240] name failslab, interval 1, probability 1, space 0, times 925 [ 105.868874][ C0] ? dst_cow_metrics_generic+0x52/0x1b0 [ 105.887205][ C0] dst_cow_metrics_generic+0x52/0x1b0 [ 105.892616][ C0] icmp6_dst_alloc+0x2ca/0x470 [ 105.897417][ C0] ndisc_send_skb+0x3d1/0x1410 [ 105.902215][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 105.907186][ C0] ? ndisc_send_rs+0x524/0x700 [ 105.911978][ C0] addrconf_rs_timer+0x367/0x640 [ 105.916941][ C0] ? detach_timer+0x33/0x2b0 [ 105.921557][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.927666][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.933797][ C0] call_timer_fn+0x17b/0x540 [ 105.938418][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.944523][ C0] ? __run_timers+0x810/0x810 [ 105.949246][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.954524][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 105.959742][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.965840][ C0] __run_timers+0x56c/0x810 [ 105.970386][ C0] ? detach_timer+0x2b0/0x2b0 [ 105.975086][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.981307][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 105.986185][ C0] run_timer_softirq+0x63/0xf0 [ 105.990979][ C0] handle_softirqs+0x336/0x830 [ 105.995776][ C0] ? run_ksoftirqd+0xa4/0x100 [ 106.000589][ C0] ? do_softirq+0x210/0x210 [ 106.005141][ C0] ? run_ksoftirqd+0x81/0x100 [ 106.009844][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 106.015062][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 106.020368][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 106.025589][ C0] run_ksoftirqd+0xa4/0x100 [ 106.030115][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 106.035422][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 106.040822][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 106.045957][ C0] smpboot_thread_fn+0x520/0x990 [ 106.050929][ C0] kthread+0x42e/0x520 [ 106.055025][ C0] ? cpu_report_death+0x180/0x180 [ 106.060082][ C0] ? kthread_blkcg+0xd0/0xd0 [ 106.064697][ C0] ret_from_fork+0x1f/0x30 [ 106.069148][ C0] [ 106.072183][ T240] CPU: 1 PID: 240 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 106.079689][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.084724][ T4300] FAULT_INJECTION: forcing a failure. [ 106.084724][ T4300] name failslab, interval 1, probability 1, space 0, times 924 [ 106.089868][ T240] Workqueue: writeback wb_workfn (flush-8:0) [ 106.089907][ T240] Call Trace: [ 106.089915][ T240] [ 106.089925][ T240] dump_stack_lvl+0x188/0x250 [ 106.119597][ T240] ? show_regs_print_info+0x20/0x20 [ 106.124835][ T240] ? load_image+0x410/0x410 [ 106.129375][ T240] ? prandom_u32+0x217/0x250 [ 106.133995][ T240] should_fail+0x383/0x4b0 [ 106.138435][ T240] should_failslab+0x5/0x20 [ 106.142955][ T240] slab_pre_alloc_hook+0x51/0xc0 [ 106.147916][ T240] ? mempool_alloc+0x19d/0x510 [ 106.152703][ T240] kmem_cache_alloc+0x3d/0x280 [ 106.157498][ T240] ? mempool_free+0x320/0x320 [ 106.162207][ T240] mempool_alloc+0x19d/0x510 [ 106.166829][ T240] ? __test_set_page_writeback+0xc72/0xec0 [ 106.172697][ T240] ? mempool_resize+0x860/0x860 [ 106.177575][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 106.182635][ T240] bio_alloc_bioset+0x121/0x870 [ 106.187516][ T240] ? clear_page_dirty_for_io+0x889/0x9f0 [ 106.193233][ T240] ext4_bio_write_page+0x1539/0x1f20 [ 106.198646][ T240] mpage_submit_page+0x17a/0x210 [ 106.203633][ T240] ext4_writepages+0x1970/0x2d40 [ 106.208632][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 106.213424][ T240] ? mark_lock+0x94/0x320 [ 106.217795][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 106.222846][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 106.228026][ T240] ? do_raw_spin_unlock+0x11d/0x230 [ 106.233270][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 106.238066][ T240] do_writepages+0x493/0x700 [ 106.242695][ T240] ? __writepage+0x130/0x130 [ 106.247313][ T240] ? writeback_sb_inodes+0x6b7/0x1750 [ 106.252714][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 106.257760][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 106.262822][ T240] __writeback_single_inode+0x153/0xda0 [ 106.268404][ T240] writeback_sb_inodes+0xaaa/0x1750 [ 106.273655][ T240] ? queue_io+0x530/0x530 [ 106.278004][ T240] ? __rwlock_init+0x140/0x140 [ 106.282831][ T240] __writeback_inodes_wb+0x12a/0x3f0 [ 106.288152][ T240] wb_writeback+0x45e/0xbc0 [ 106.292694][ T240] ? rcu_lock_release+0x20/0x20 [ 106.297566][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.303575][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 106.308639][ T240] ? cpumask_next+0xb3/0xd0 [ 106.313177][ T240] wb_workfn+0xb15/0xf20 [ 106.317471][ T240] ? inode_wait_for_writeback+0x220/0x220 [ 106.323230][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.329239][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 106.334298][ T240] ? read_lock_is_recursive+0x10/0x10 [ 106.339695][ T240] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 106.345621][ T240] ? _raw_spin_unlock+0x40/0x40 [ 106.350496][ T240] ? _raw_spin_unlock_irq+0x1f/0x40 [ 106.355721][ T240] process_one_work+0x867/0xff0 [ 106.360614][ T240] ? worker_detach_from_pool+0x240/0x240 [ 106.366301][ T240] ? lockdep_hardirqs_off+0x70/0x100 [ 106.371616][ T240] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.376755][ T240] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.382350][ T240] ? wq_worker_running+0x97/0x170 [ 106.387409][ T240] worker_thread+0xad7/0x12a0 [ 106.392149][ T240] kthread+0x42e/0x520 [ 106.396419][ T240] ? rcu_lock_release+0x20/0x20 [ 106.401295][ T240] ? kthread_blkcg+0xd0/0xd0 [ 106.405920][ T240] ret_from_fork+0x1f/0x30 [ 106.410373][ T240] [ 106.413417][ T4300] CPU: 0 PID: 4300 Comm: kworker/0:8 Not tainted syzkaller #0 [ 106.420921][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.431024][ T4300] Workqueue: events nsim_dev_trap_report_work [ 106.437155][ T4300] Call Trace: [ 106.440470][ T4300] [ 106.443431][ T4300] dump_stack_lvl+0x188/0x250 [ 106.448145][ T4300] ? show_regs_print_info+0x20/0x20 [ 106.453370][ T4300] ? load_image+0x410/0x410 [ 106.457915][ T4300] ? prandom_u32+0x217/0x250 [ 106.462549][ T4300] should_fail+0x383/0x4b0 [ 106.467027][ T4300] should_failslab+0x5/0x20 [ 106.471573][ T4300] slab_pre_alloc_hook+0x51/0xc0 [ 106.476546][ T4300] __kmalloc_node_track_caller+0x68/0x3a0 [ 106.482295][ T4300] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 106.488142][ T4300] ? __alloc_skb+0xf4/0x750 [ 106.492685][ T4300] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 106.498523][ T4300] __alloc_skb+0x22c/0x750 [ 106.502981][ T4300] nsim_dev_trap_report_work+0x25c/0xab0 [ 106.508677][ T4300] process_one_work+0x867/0xff0 [ 106.513587][ T4300] ? worker_detach_from_pool+0x240/0x240 [ 106.519420][ T4300] ? lockdep_hardirqs_off+0x70/0x100 [ 106.524736][ T4300] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.529793][ T4300] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.535383][ T4300] ? wq_worker_running+0x97/0x170 [ 106.540480][ T4300] worker_thread+0xad7/0x12a0 [ 106.545202][ T4300] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 106.551154][ T4300] kthread+0x42e/0x520 [ 106.555591][ T4300] ? rcu_lock_release+0x20/0x20 [ 106.560485][ T4300] ? kthread_blkcg+0xd0/0xd0 [ 106.565104][ T4300] ret_from_fork+0x1f/0x30 [ 106.569556][ T4300] [ 106.572599][ T3851] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 106.579667][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.589758][ T3851] Call Trace: [ 106.593069][ T3851] [ 106.596026][ T3851] dump_stack_lvl+0x188/0x250 [ 106.600789][ T3851] ? show_regs_print_info+0x20/0x20 [ 106.606028][ T3851] ? load_image+0x410/0x410 [ 106.610576][ T3851] ? prandom_u32+0x217/0x250 [ 106.615212][ T3851] should_fail+0x383/0x4b0 [ 106.619669][ T3851] should_failslab+0x5/0x20 [ 106.624207][ T3851] slab_pre_alloc_hook+0x51/0xc0 [ 106.629181][ T3851] __kmalloc+0x6b/0x340 [ 106.633474][ T3851] ? tomoyo_encode+0x28a/0x550 [ 106.638286][ T3851] tomoyo_encode+0x28a/0x550 [ 106.642919][ T3851] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 106.648768][ T3851] tomoyo_path_number_perm+0x251/0x6b0 [ 106.654560][ T3851] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 106.660073][ T3851] ? __seccomp_filter+0x842/0x1a00 [ 106.665231][ T3851] ? file_end_write+0xd8/0x250 [ 106.670045][ T3851] ? __secure_computing+0x2f0/0x2f0 [ 106.675299][ T3851] ? __lock_acquire+0x7b50/0x7b50 [ 106.680368][ T3851] ? lock_chain_count+0x20/0x20 [ 106.685264][ T3851] security_file_ioctl+0x6c/0xa0 [ 106.690237][ T3851] __se_sys_ioctl+0x48/0x170 [ 106.695006][ T3851] do_syscall_64+0x4c/0xa0 [ 106.699471][ T3851] ? clear_bhb_loop+0x30/0x80 [ 106.704196][ T3851] ? clear_bhb_loop+0x30/0x80 [ 106.708914][ T3851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.714975][ T3851] RIP: 0033:0x7f6bc8c71378 [ 106.719432][ T3851] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 106.739077][ T3851] RSP: 002b:00007fff14ea6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.747556][ T3851] RAX: ffffffffffffffda RBX: 000055b8acd98930 RCX: 00007f6bc8c71378 [ 106.755548][ T3851] RDX: 00007fff14ea6e70 RSI: 0000000000008921 RDI: 000000000000000f [ 106.763535][ T3851] RBP: 00007fff14ea6e70 R08: 0000000000000000 R09: 0000000000000000 [ 106.771532][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 000055b8acd9c420 [ 106.779556][ T3851] R13: 000055b8acd98930 R14: 000055b8acd9c420 R15: 00007fff14ea70c0 [ 106.787577][ T3851] [ 106.791673][ T4418] FAULT_INJECTION: forcing a failure. [ 106.791673][ T4418] name failslab, interval 1, probability 1, space 0, times 922 [ 106.804766][ T4199] Mem-Info: [ 106.804792][ T4199] active_anon:264 inactive_anon:3552 isolated_anon:0 [ 106.804792][ T4199] active_file:14647 inactive_file:37880 isolated_file:0 [ 106.804792][ T4199] unevictable:768 dirty:252 writeback:171 [ 106.804792][ T4199] slab_reclaimable:20756 slab_unreclaimable:92539 [ 106.804792][ T4199] mapped:12723 shmem:1632 pagetables:294 bounce:0 [ 106.804792][ T4199] kernel_misc_reclaimable:0 [ 106.804792][ T4199] free:1402532 free_pcp:13182 free_cma:0 [ 106.859686][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 106.866679][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.876751][ T3559] Call Trace: [ 106.880047][ T3559] [ 106.882996][ T3559] dump_stack_lvl+0x188/0x250 [ 106.887700][ T3559] ? show_regs_print_info+0x20/0x20 [ 106.892962][ T3559] ? load_image+0x410/0x410 [ 106.897611][ T3559] ? prandom_u32+0x217/0x250 [ 106.902233][ T3559] should_fail+0x383/0x4b0 [ 106.906674][ T3559] should_failslab+0x5/0x20 [ 106.911199][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 106.916157][ T3559] ? getname_flags+0xb7/0x4f0 [ 106.920943][ T3559] kmem_cache_alloc+0x3d/0x280 [ 106.925733][ T3559] getname_flags+0xb7/0x4f0 [ 106.930263][ T3559] user_path_at_empty+0x2a/0x190 [ 106.935221][ T3559] do_readlinkat+0xd9/0x490 [ 106.939829][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.945829][ T3559] ? cp_new_stat+0x540/0x540 [ 106.950463][ T3559] ? lock_chain_count+0x20/0x20 [ 106.955343][ T3559] __x64_sys_readlink+0x7b/0x90 [ 106.960220][ T3559] do_syscall_64+0x4c/0xa0 [ 106.964660][ T3559] ? clear_bhb_loop+0x30/0x80 [ 106.969355][ T3559] ? clear_bhb_loop+0x30/0x80 [ 106.974050][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.979970][ T3559] RIP: 0033:0x7f42e131c3a7 [ 106.984422][ T3559] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 107.004048][ T3559] RSP: 002b:00007ffd1d8cb4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 107.012514][ T3559] RAX: ffffffffffffffda RBX: 00007ffd1d8cb9b0 RCX: 00007f42e131c3a7 [ 107.020518][ T3559] RDX: 0000000000000400 RSI: 00007ffd1d8cb4e0 RDI: 00007ffd1d8cb9b0 [ 107.028507][ T3559] RBP: 00007ffd1d8cb4e0 R08: 00000000000001e0 R09: 0000000000000000 [ 107.036498][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 107.044483][ T3559] R13: 00005654d7eb6100 R14: 00005654dd0bbeb0 R15: 00007ffd1d8cc3d0 [ 107.052486][ T3559] [ 107.055565][ T4199] Node 0 active_anon:1024kB inactive_anon:13696kB active_file:58384kB inactive_file:151520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:50892kB dirty:1008kB writeback:684kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9948kB pagetables:1176kB all_unreclaimable? no [ 107.055623][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 107.087017][ T4199] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 107.094354][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.094371][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 107.123617][ T4199] Node 0 [ 107.133532][ T154] Call Trace: [ 107.133544][ T154] [ 107.133554][ T154] dump_stack_lvl+0x188/0x250 [ 107.139893][ T4199] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.142774][ T154] ? show_regs_print_info+0x20/0x20 [ 107.146061][ T4199] lowmem_reserve[]: 0 [ 107.149018][ T154] ? load_image+0x410/0x410 [ 107.153814][ T4199] 2539 [ 107.179232][ T154] should_fail+0x383/0x4b0 [ 107.179270][ T154] should_failslab+0x5/0x20 [ 107.184550][ T4199] 2540 [ 107.188455][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 107.193046][ T4199] 2540 [ 107.195732][ T154] __kmalloc+0x6b/0x340 [ 107.200228][ T4199] 2540 [ 107.204650][ T154] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 107.207420][ T4199] [ 107.207429][ T4199] Node 0 [ 107.212375][ T154] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 107.212437][ T154] ? verify_lock_unused+0x140/0x140 [ 107.215183][ T4199] DMA32 free:1683684kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1024kB inactive_anon:13696kB active_file:58384kB inactive_file:151520kB unevictable:1536kB writepending:1696kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:41832kB local_pcp:20232kB free_cma:0kB [ 107.219347][ T154] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 107.222195][ T4199] lowmem_reserve[]: [ 107.228484][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 107.230860][ T4199] 0 [ 107.233752][ T154] ieee80211_bss_info_update+0x6ba/0xa80 [ 107.239974][ T4199] 0 [ 107.245111][ T154] ? ieee80211_rx_bss_put+0x60/0x60 [ 107.274773][ T4199] 0 [ 107.280721][ T154] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 107.284557][ T4199] 0 [ 107.289583][ T154] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 107.292179][ T4199] 0 [ 107.297885][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 107.300430][ T4199] [ 107.305538][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 107.308054][ T4199] Node 0 [ 107.313870][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 107.313898][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.316429][ T4199] Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.322666][ T154] ? _raw_spin_unlock+0x40/0x40 [ 107.322690][ T154] ? kcov_remote_start+0x6a/0x490 [ 107.336482][ T4199] lowmem_reserve[]: [ 107.339264][ T154] ? kcov_remote_start+0xfa/0x490 [ 107.342453][ T4199] 0 [ 107.347408][ T154] ieee80211_iface_work+0x714/0xc50 [ 107.353416][ T4199] 0 [ 107.378212][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 107.378246][ T154] cfg80211_wiphy_work+0x224/0x260 [ 107.383222][ T4199] 0 [ 107.388187][ T154] process_one_work+0x867/0xff0 [ 107.392104][ T4199] 0 [ 107.397067][ T154] ? worker_detach_from_pool+0x240/0x240 [ 107.399539][ T4199] 0 [ 107.404745][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 107.404776][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.407303][ T4199] Node 1 [ 107.412492][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 107.412520][ T154] ? wq_worker_running+0x97/0x170 [ 107.417655][ T4199] Normal free:3915084kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9728kB local_pcp:2656kB free_cma:0kB [ 107.420160][ T154] worker_thread+0xad7/0x12a0 [ 107.420221][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.425049][ T4199] lowmem_reserve[]: 0 [ 107.427621][ T154] kthread+0x42e/0x520 [ 107.506320][ T154] ? rcu_lock_release+0x20/0x20 [ 107.511203][ T154] ? kthread_blkcg+0xd0/0xd0 [ 107.515817][ T154] ret_from_fork+0x1f/0x30 [ 107.520293][ T154] [ 107.523376][ T4199] 0 0 0 0 [ 107.523414][ T3852] CPU: 1 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 107.526465][ T4199] Node 0 [ 107.533487][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.533502][ T3852] Call Trace: [ 107.533512][ T3852] [ 107.533521][ T3852] dump_stack_lvl+0x188/0x250 [ 107.536485][ T4199] DMA: [ 107.546548][ T3852] ? show_regs_print_info+0x20/0x20 [ 107.546577][ T3852] ? load_image+0x410/0x410 [ 107.550075][ T4199] 0*4kB [ 107.552817][ T3852] ? prandom_u32+0x217/0x250 [ 107.557534][ T4199] 0*8kB [ 107.560317][ T3852] should_fail+0x383/0x4b0 [ 107.560349][ T3852] should_failslab+0x5/0x20 [ 107.565567][ T4199] 0*16kB [ 107.570065][ T3852] slab_pre_alloc_hook+0x51/0xc0 [ 107.570092][ T3852] ? anon_vma_fork+0xea/0x520 [ 107.572963][ T4199] 0*32kB [ 107.577557][ T3852] kmem_cache_alloc+0x3d/0x280 [ 107.580537][ T4199] 0*64kB [ 107.584854][ T3852] anon_vma_fork+0xea/0x520 [ 107.590674][ T1] FAULT_INJECTION: forcing a failure. [ 107.590674][ T1] name failslab, interval 1, probability 1, space 0, times 922 [ 107.592309][ T3852] ? copy_mm+0x8b6/0x13d0 [ 107.599823][ T4199] 0*128kB [ 107.601945][ T3852] ? dup_userfaultfd+0xa7/0x5e0 [ 107.604888][ T4199] 0*256kB [ 107.609666][ T3852] copy_mm+0x9df/0x13d0 [ 107.609704][ T3852] ? copy_signal+0x610/0x610 [ 107.629777][ T4199] 0*512kB [ 107.629912][ T3852] ? __init_rwsem+0x11e/0x160 [ 107.634256][ T4199] 1*1024kB [ 107.637291][ T3852] ? copy_signal+0x501/0x610 [ 107.649751][ T4199] (U) [ 107.653968][ T3852] copy_process+0x17fb/0x3ec0 [ 107.656997][ T4199] 1*2048kB [ 107.661711][ T3852] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 107.661758][ T3852] ? __pidfd_prepare+0x140/0x140 [ 107.679931][ T4199] (M) [ 107.680070][ T3852] ? verify_lock_unused+0x140/0x140 [ 107.686057][ T4199] 3*4096kB [ 107.691009][ T3852] kernel_clone+0x23f/0x990 [ 107.691044][ T3852] ? create_io_thread+0x180/0x180 [ 107.709826][ T4199] (M) = 15360kB [ 107.711787][ T3852] __x64_sys_clone+0x19a/0x210 [ 107.715253][ T4199] Node 0 [ 107.720023][ T3852] ? __ia32_sys_vfork+0x130/0x130 [ 107.720065][ T3852] ? lockdep_hardirqs_on+0x94/0x140 [ 107.733251][ T3852] do_syscall_64+0x4c/0xa0 [ 107.737711][ T3852] ? clear_bhb_loop+0x30/0x80 [ 107.739920][ T4199] DMA32: 1994*4kB [ 107.742428][ T3852] ? clear_bhb_loop+0x30/0x80 [ 107.742459][ T3852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.746190][ T4199] (UME) [ 107.750871][ T3852] RIP: 0033:0x7f6bc8c45636 [ 107.750896][ T3852] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 107.750915][ T3852] RSP: 002b:00007fff14e86ce0 EFLAGS: 00000246 [ 107.769789][ T4199] 868*8kB [ 107.783692][ T3852] ORIG_RAX: 0000000000000038 [ 107.783706][ T3852] RAX: ffffffffffffffda RBX: 00007fff14e86ce8 RCX: 00007f6bc8c45636 [ 107.783723][ T3852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 107.783737][ T3852] RBP: 00007fff14ea7230 R08: 0000000000000000 R09: 0000000000000001 [ 107.809928][ T4199] (UME) [ 107.813715][ T3852] R10: 00007f6bc8b71a10 R11: 0000000000000246 R12: 00007fff14e86e20 [ 107.832662][ T3852] R13: 0000000000000000 R14: 0000000000000000 R15: 000055b87acaaac0 [ 107.840671][ T3852] [ 107.843743][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 107.850364][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.860442][ T1] Call Trace: [ 107.863742][ T1] [ 107.866723][ T1] dump_stack_lvl+0x188/0x250 [ 107.871448][ T1] ? show_regs_print_info+0x20/0x20 [ 107.876687][ T1] ? load_image+0x410/0x410 [ 107.877712][ T4421] FAULT_INJECTION: forcing a failure. [ 107.877712][ T4421] name failslab, interval 1, probability 1, space 0, times 922 [ 107.881230][ T1] ? prandom_u32+0x217/0x250 [ 107.881264][ T1] should_fail+0x383/0x4b0 [ 107.881292][ T1] should_failslab+0x5/0x20 [ 107.907767][ T1] slab_pre_alloc_hook+0x51/0xc0 [ 107.912728][ T1] ? prepare_creds+0x3c/0x610 [ 107.917439][ T1] kmem_cache_alloc+0x3d/0x280 [ 107.922220][ T1] prepare_creds+0x3c/0x610 [ 107.926740][ T1] do_faccessat+0xe8/0x9e0 [ 107.931174][ T1] ? __sb_end_write+0x1c0/0x1c0 [ 107.936044][ T1] ? lockdep_hardirqs_on+0x94/0x140 [ 107.941264][ T1] do_syscall_64+0x4c/0xa0 [ 107.945700][ T1] ? clear_bhb_loop+0x30/0x80 [ 107.950442][ T1] ? clear_bhb_loop+0x30/0x80 [ 107.955139][ T1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.961048][ T1] RIP: 0033:0x7f929d6632c7 [ 107.965480][ T1] Code: 0f 1f 00 8b 87 10 01 00 00 89 06 31 c0 c3 0f 1f 44 00 00 89 b7 10 01 00 00 31 c0 c3 0f 1f 80 00 00 00 00 b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 fb 0d 00 f7 d8 64 89 02 b8 [ 107.985099][ T1] RSP: 002b:00007ffc7a158408 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 107.993536][ T1] RAX: ffffffffffffffda RBX: 00007f929d7070b7 RCX: 00007f929d6632c7 [ 108.001563][ T1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f929d7070b7 [ 108.009554][ T1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.017538][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.025524][ T1] R13: 0000000000000000 R14: 0000000000001056 R15: 000056519dd43d98 [ 108.033524][ T1] [ 108.036620][ T4418] CPU: 1 PID: 4418 Comm: syz.3.53 Not tainted syzkaller #0 [ 108.036655][ T4199] 564*16kB [ 108.043852][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.047014][ T4199] (UME) [ 108.057086][ T4418] Call Trace: [ 108.057098][ T4418] [ 108.057108][ T4418] dump_stack_lvl+0x188/0x250 [ 108.060051][ T4199] 679*32kB [ 108.063269][ T4418] ? show_regs_print_info+0x20/0x20 [ 108.066209][ T4199] (UME) [ 108.070889][ T4418] ? load_image+0x410/0x410 [ 108.070919][ T4418] ? prandom_u32+0x217/0x250 [ 108.091197][ T4418] should_fail+0x383/0x4b0 [ 108.095656][ T4418] should_failslab+0x5/0x20 [ 108.100190][ T4418] slab_pre_alloc_hook+0x51/0xc0 [ 108.105157][ T4418] ? __debug_object_init+0x8a1/0xc80 [ 108.110490][ T4418] kmem_cache_alloc+0x3d/0x280 [ 108.115272][ T4418] __debug_object_init+0x8a1/0xc80 [ 108.120410][ T4418] ? debug_object_init+0x10/0x10 [ 108.125394][ T4418] ? do_raw_spin_unlock+0x11d/0x230 [ 108.130612][ T4418] synchronize_rcu_expedited+0x416/0x750 [ 108.136264][ T4418] ? synchronize_rcu+0x1e0/0x1e0 [ 108.141235][ T4418] ? __might_sleep+0xf0/0xf0 [ 108.145861][ T4418] dev_deactivate_many+0x5f0/0xc00 [ 108.150996][ T4418] __dev_close_many+0x164/0x2b0 [ 108.155869][ T4418] ? dev_close_many+0x400/0x400 [ 108.160737][ T4418] ? try_to_wake_up+0x668/0x1020 [ 108.165703][ T4418] dev_close_many+0x21c/0x400 [ 108.170399][ T4418] ? __dev_open+0x430/0x430 [ 108.174929][ T4418] unregister_netdevice_many+0x4b8/0x1a40 [ 108.180681][ T4418] ? alloc_netdev_mqs+0xc40/0xc40 [ 108.185722][ T4418] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.191728][ T4418] ? lock_chain_count+0x20/0x20 [ 108.196604][ T4418] ? __queue_work+0x9a7/0xc80 [ 108.201399][ T4418] ? queue_delayed_work_on+0x110/0x1f0 [ 108.206874][ T4418] ? lockdep_hardirqs_on+0x94/0x140 [ 108.212098][ T4418] unregister_netdevice_queue+0x2e1/0x320 [ 108.217846][ T4418] ? delayed_work_timer_fn+0x80/0x80 [ 108.223174][ T4418] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 108.229084][ T4418] ? list_netdevice+0x460/0x460 [ 108.233956][ T4418] ? linkwatch_urgent_event+0x5f/0x430 [ 108.239453][ T4418] ? linkwatch_fire_event+0x2b7/0x370 [ 108.244849][ T4418] __tun_detach+0xdb7/0x1580 [ 108.249468][ T4418] tun_chr_close+0x109/0x1b0 [ 108.254074][ T4418] ? tun_chr_open+0x4d0/0x4d0 [ 108.258766][ T4418] __fput+0x212/0x8c0 [ 108.262776][ T4418] task_work_run+0x125/0x1a0 [ 108.267392][ T4418] do_exit+0x635/0x2110 [ 108.271573][ T4418] ? put_task_struct+0x80/0x80 [ 108.276357][ T4418] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.282379][ T4418] ? _raw_spin_lock_irq+0xb7/0xf0 [ 108.287427][ T4418] do_group_exit+0x12c/0x2f0 [ 108.292031][ T4418] ? lockdep_hardirqs_on+0x94/0x140 [ 108.297251][ T4418] get_signal+0x7eb/0x12e0 [ 108.301696][ T4418] arch_do_signal_or_restart+0xe6/0x12a0 [ 108.307357][ T4418] ? futex_exit_release+0x1c0/0x1c0 [ 108.312575][ T4418] ? get_sigframe_size+0x10/0x10 [ 108.317533][ T4418] ? __context_tracking_exit+0x4c/0x80 [ 108.323022][ T4418] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.329033][ T4418] ? exit_to_user_mode_loop+0x3b/0x130 [ 108.334517][ T4418] exit_to_user_mode_loop+0x9e/0x130 [ 108.339831][ T4418] exit_to_user_mode_prepare+0xee/0x180 [ 108.345402][ T4418] syscall_exit_to_user_mode+0x16/0x40 [ 108.350883][ T4418] do_syscall_64+0x58/0xa0 [ 108.355319][ T4418] ? clear_bhb_loop+0x30/0x80 [ 108.360007][ T4418] ? clear_bhb_loop+0x30/0x80 [ 108.364699][ T4418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.370612][ T4418] RIP: 0033:0x7f6943e27e99 [ 108.375042][ T4418] Code: Unable to access opcode bytes at RIP 0x7f6943e27e6f. [ 108.382439][ T4418] RSP: 002b:00007f69420800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.390870][ T4418] RAX: fffffffffffffe00 RBX: 00007f69440affa8 RCX: 00007f6943e27e99 [ 108.398858][ T4418] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69440affa8 [ 108.406851][ T4418] RBP: 00007f69440affa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.414845][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.422837][ T4418] R13: 00007f69440b0038 R14: 00007ffd0d9da310 R15: 00007ffd0d9da3f8 [ 108.430838][ T4418] [ 108.433938][ T4421] CPU: 1 PID: 4421 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 108.434008][ T4199] 334*64kB [ 108.441551][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.441567][ T4421] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 108.444713][ T4199] (UME) [ 108.454765][ T4421] Call Trace: [ 108.454776][ T4421] [ 108.454786][ T4421] dump_stack_lvl+0x188/0x250 [ 108.462701][ T4199] 179*128kB [ 108.465469][ T4421] ? show_regs_print_info+0x20/0x20 [ 108.468755][ T4199] (UME) 38*256kB [ 108.471704][ T4421] ? load_image+0x410/0x410 [ 108.471733][ T4421] ? prandom_u32+0x217/0x250 [ 108.476426][ T4199] (UM) [ 108.479656][ T4421] should_fail+0x383/0x4b0 [ 108.479689][ T4421] should_failslab+0x5/0x20 [ 108.484883][ T4199] 40*512kB [ 108.488519][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 108.493132][ T4199] (UM) [ 108.497620][ T4421] ? __debug_object_init+0x85d/0xc80 [ 108.500491][ T4199] 17*1024kB [ 108.504812][ T4421] kmem_cache_alloc+0x3d/0x280 [ 108.509319][ T4199] (UME) [ 108.512444][ T4421] __debug_object_init+0x85d/0xc80 [ 108.512479][ T4421] ? debug_object_init+0x10/0x10 [ 108.517454][ T4199] 15*2048kB [ 108.520234][ T4421] ? batadv_iv_ogm_queue_add+0x954/0xdb0 [ 108.525538][ T4199] (UM) [ 108.528750][ T4421] batadv_iv_ogm_queue_add+0xa2c/0xdb0 [ 108.533610][ T4199] 370*4096kB [ 108.536427][ T4421] batadv_iv_ogm_schedule+0xb35/0x1000 [ 108.541590][ T4199] (M) [ 108.546439][ T4421] ? pskb_expand_head+0xb45/0x1100 [ 108.549728][ T4199] = 1683816kB [ 108.555302][ T4421] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 108.558056][ T4199] Node 0 [ 108.563516][ T4421] ? batadv_send_skb_packet+0x36e/0x580 [ 108.563547][ T4421] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 108.566854][ T4199] Normal: [ 108.572336][ T4421] process_one_work+0x867/0xff0 [ 108.575041][ T4199] 0*4kB [ 108.580162][ T4421] ? worker_detach_from_pool+0x240/0x240 [ 108.585942][ T1] FAULT_INJECTION: forcing a failure. [ 108.585942][ T1] name failslab, interval 1, probability 1, space 0, times 921 [ 108.590662][ T4421] ? lockdep_hardirqs_off+0x70/0x100 [ 108.590695][ T4421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 108.593725][ T4199] 0*8kB [ 108.599202][ T4421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 108.619773][ T4199] 0*16kB [ 108.622588][ T4421] ? wq_worker_running+0x97/0x170 [ 108.649765][ T4199] 0*32kB [ 108.654156][ T4421] worker_thread+0xad7/0x12a0 [ 108.657097][ T4199] 0*64kB [ 108.662146][ T4421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 108.678670][ T4421] kthread+0x42e/0x520 [ 108.679747][ T4199] 0*128kB 0*256kB [ 108.682756][ T4421] ? rcu_lock_release+0x20/0x20 [ 108.686493][ T4199] 0*512kB [ 108.691342][ T4421] ? kthread_blkcg+0xd0/0xd0 [ 108.691367][ T4421] ret_from_fork+0x1f/0x30 [ 108.703639][ T4421] [ 108.706681][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 108.709045][ T3548] FAULT_INJECTION: forcing a failure. [ 108.709045][ T3548] name failslab, interval 1, probability 1, space 0, times 920 [ 108.713331][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.713347][ T1] Call Trace: [ 108.713355][ T1] [ 108.713364][ T1] dump_stack_lvl+0x188/0x250 [ 108.747116][ T1] ? show_regs_print_info+0x20/0x20 [ 108.752340][ T1] ? load_image+0x410/0x410 [ 108.756870][ T1] ? prandom_u32+0x217/0x250 [ 108.761488][ T1] should_fail+0x383/0x4b0 [ 108.765928][ T1] should_failslab+0x5/0x20 [ 108.770675][ T1] slab_pre_alloc_hook+0x51/0xc0 [ 108.775644][ T1] ? __debug_object_init+0x9b1/0xc80 [ 108.780956][ T1] kmem_cache_alloc+0x3d/0x280 [ 108.785753][ T1] __debug_object_init+0x9b1/0xc80 [ 108.790901][ T1] ? debug_object_init+0x10/0x10 [ 108.795876][ T1] hrtimer_nanosleep+0x15f/0x590 [ 108.800864][ T1] ? __might_fault+0xb3/0x110 [ 108.805610][ T1] ? nanosleep_copyout+0x110/0x110 [ 108.810749][ T1] ? timespec64_add_safe+0x1f0/0x1f0 [ 108.816080][ T1] ? __lock_acquire+0x7b50/0x7b50 [ 108.821159][ T1] __se_sys_clock_nanosleep+0x30b/0x3a0 [ 108.826824][ T1] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 108.832484][ T1] ? lockdep_hardirqs_on+0x94/0x140 [ 108.837712][ T1] do_syscall_64+0x4c/0xa0 [ 108.842145][ T1] ? clear_bhb_loop+0x30/0x80 [ 108.846845][ T1] ? clear_bhb_loop+0x30/0x80 [ 108.851543][ T1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.857460][ T1] RIP: 0033:0x7f929d5f9407 [ 108.861892][ T1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 108.881519][ T1] RSP: 002b:00007ffc7a1585a0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 108.889956][ T1] RAX: ffffffffffffffda RBX: 00007f929d4a9c80 RCX: 00007f929d5f9407 [ 108.897953][ T1] RDX: 00007ffc7a1585e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.905949][ T1] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000 [ 108.913965][ T1] R10: 00007ffc7a1585e0 R11: 0000000000000202 R12: 00007f929d813490 [ 108.921957][ T1] R13: 00007ffc7a15861c R14: 00007f929d84b000 R15: 000056519dd43d98 [ 108.929970][ T1] [ 108.933082][ T3548] CPU: 1 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 108.933705][ T4199] 0*1024kB [ 108.940054][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.940070][ T3548] Call Trace: [ 108.940077][ T3548] [ 108.940085][ T3548] dump_stack_lvl+0x188/0x250 [ 108.943235][ T4199] 0*2048kB [ 108.953299][ T3548] ? show_regs_print_info+0x20/0x20 [ 108.953328][ T3548] ? load_image+0x410/0x410 [ 108.970385][ C0] FAULT_INJECTION: forcing a failure. [ 108.970385][ C0] name failslab, interval 1, probability 1, space 0, times 920 [ 108.972625][ T3548] ? prandom_u32+0x217/0x250 [ 108.994506][ T3548] should_fail+0x383/0x4b0 [ 108.998959][ T3548] should_failslab+0x5/0x20 [ 109.003492][ T3548] slab_pre_alloc_hook+0x51/0xc0 [ 109.008548][ T3548] kmem_cache_alloc_node+0x47/0x2c0 [ 109.013777][ T3548] ? __alloc_skb+0xf4/0x750 [ 109.018311][ T3548] __alloc_skb+0xf4/0x750 [ 109.022674][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 109.027842][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 109.033076][ T3548] ? sock_kzfree_s+0x50/0x50 [ 109.037689][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 109.042734][ T3548] ? __rwlock_init+0x140/0x140 [ 109.047521][ T3548] ? mark_lock+0x94/0x320 [ 109.051912][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 109.057135][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 109.062284][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 109.066815][ T3548] ? aa_af_perm+0x340/0x340 [ 109.071367][ T3548] ? unix_dgram_poll+0x680/0x680 [ 109.076326][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 109.082766][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 109.088339][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 109.093653][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 109.099182][ T3548] __sys_sendto+0x46d/0x620 [ 109.103713][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 109.109129][ T3548] ? lock_chain_count+0x20/0x20 [ 109.114006][ T3548] __x64_sys_sendto+0xda/0xf0 [ 109.118703][ T3548] do_syscall_64+0x4c/0xa0 [ 109.123137][ T3548] ? clear_bhb_loop+0x30/0x80 [ 109.127830][ T3548] ? clear_bhb_loop+0x30/0x80 [ 109.132560][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.138498][ T3548] RIP: 0033:0x7f14158ab407 [ 109.142946][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 109.162573][ T3548] RSP: 002b:00007ffde0049420 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 109.171017][ T3548] RAX: ffffffffffffffda RBX: 00007f141575bc80 RCX: 00007f14158ab407 [ 109.179010][ T3548] RDX: 000000000000004b RSI: 00007ffde0049560 RDI: 0000000000000003 [ 109.186998][ T3548] RBP: 00007ffde0049990 R08: 0000000000000000 R09: 0000000000000000 [ 109.194987][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde00499a8 [ 109.203082][ T3548] R13: 00007ffde0049560 R14: 0000000000000030 R15: 00007ffde0049560 [ 109.211086][ T3548] [ 109.214125][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 109.220742][ T3559] FAULT_INJECTION: forcing a failure. [ 109.220742][ T3559] name failslab, interval 1, probability 1, space 0, times 919 [ 109.221450][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.221469][ C0] Call Trace: [ 109.221477][ C0] [ 109.221485][ C0] dump_stack_lvl+0x188/0x250 [ 109.234677][ T3851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.244522][ C0] ? show_regs_print_info+0x20/0x20 [ 109.244556][ C0] ? load_image+0x410/0x410 [ 109.271895][ C0] ? prandom_u32+0x217/0x250 [ 109.276524][ C0] should_fail+0x383/0x4b0 [ 109.280971][ C0] should_failslab+0x5/0x20 [ 109.285508][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 109.290506][ C0] ? __debug_object_init+0x9b1/0xc80 [ 109.295842][ C0] kmem_cache_alloc+0x3d/0x280 [ 109.300630][ C0] __debug_object_init+0x9b1/0xc80 [ 109.305774][ C0] ? debug_object_init+0x10/0x10 [ 109.310728][ C0] ? memset+0x1e/0x40 [ 109.314748][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 109.320150][ C0] ? neigh_release+0x80/0x80 [ 109.324806][ C0] init_timer_key+0x3d/0x2a0 [ 109.329440][ C0] ___neigh_create+0x9ee/0x2210 [ 109.334347][ C0] ip6_finish_output2+0x9f5/0x1530 [ 109.339593][ C0] ? nf_hook+0x360/0x360 [ 109.343871][ C0] ? ip6_mtu+0x2fb/0x3d0 [ 109.348154][ C0] ? ip6_finish_output+0x627/0x790 [ 109.353317][ C0] ndisc_send_skb+0xb7a/0x1410 [ 109.358210][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 109.363178][ C0] ? rcu_lock_release+0x20/0x20 [ 109.368088][ C0] ? ndisc_send_rs+0x524/0x700 [ 109.372891][ C0] addrconf_rs_timer+0x367/0x640 [ 109.377850][ C0] ? detach_timer+0x33/0x2b0 [ 109.382471][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.388577][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.391074][ T240] FAULT_INJECTION: forcing a failure. [ 109.391074][ T240] name failslab, interval 1, probability 1, space 0, times 917 [ 109.394679][ C0] call_timer_fn+0x17b/0x540 [ 109.394710][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.418301][ C0] ? __run_timers+0x810/0x810 [ 109.423016][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 109.428236][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 109.433457][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.439560][ C0] __run_timers+0x56c/0x810 [ 109.444096][ C0] ? detach_timer+0x2b0/0x2b0 [ 109.448791][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.454802][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 109.459764][ C0] run_timer_softirq+0x63/0xf0 [ 109.464686][ C0] handle_softirqs+0x336/0x830 [ 109.469499][ C0] ? run_ksoftirqd+0xa4/0x100 [ 109.474217][ C0] ? do_softirq+0x210/0x210 [ 109.478762][ C0] ? run_ksoftirqd+0x81/0x100 [ 109.483459][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 109.488680][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 109.493987][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 109.499224][ C0] run_ksoftirqd+0xa4/0x100 [ 109.503753][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 109.508972][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 109.514367][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 109.519499][ C0] smpboot_thread_fn+0x520/0x990 [ 109.524468][ C0] kthread+0x42e/0x520 [ 109.528593][ C0] ? cpu_report_death+0x180/0x180 [ 109.533658][ C0] ? kthread_blkcg+0xd0/0xd0 [ 109.538276][ C0] ret_from_fork+0x1f/0x30 [ 109.542737][ C0] [ 109.545781][ T240] CPU: 1 PID: 240 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 109.546546][ C0] FAULT_INJECTION: forcing a failure. [ 109.546546][ C0] name failslab, interval 1, probability 1, space 0, times 916 [ 109.553285][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.553301][ T240] Workqueue: writeback wb_workfn (flush-8:0) [ 109.553339][ T240] Call Trace: [ 109.585458][ T240] [ 109.588429][ T240] dump_stack_lvl+0x188/0x250 [ 109.593130][ T240] ? lockdep_hardirqs_on+0x94/0x140 [ 109.598359][ T240] ? show_regs_print_info+0x20/0x20 [ 109.603585][ T240] ? load_image+0x410/0x410 [ 109.608113][ T240] ? prandom_u32+0x217/0x250 [ 109.612740][ T240] should_fail+0x383/0x4b0 [ 109.617181][ T240] should_failslab+0x5/0x20 [ 109.621707][ T240] slab_pre_alloc_hook+0x51/0xc0 [ 109.626665][ T240] ? __es_insert_extent+0x706/0x17b0 [ 109.631974][ T240] kmem_cache_alloc+0x3d/0x280 [ 109.636761][ T240] __es_insert_extent+0x706/0x17b0 [ 109.641909][ T240] ext4_es_insert_extent+0x5ac/0x2dd0 [ 109.647326][ T240] ? ext4_es_scan_clu+0x230/0x230 [ 109.652375][ T240] ? rcu_is_watching+0x11/0xa0 [ 109.657175][ T240] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 109.662930][ T240] ext4_map_blocks+0xcb6/0x1a50 [ 109.667814][ T240] ? ext4_issue_zeroout+0x250/0x250 [ 109.673049][ T240] ? ext4_inode_journal_mode+0x372/0x460 [ 109.678716][ T240] ext4_writepages+0x124a/0x2d40 [ 109.683705][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 109.688488][ T240] ? mark_lock+0x94/0x320 [ 109.692862][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 109.697910][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 109.702961][ T240] ? do_raw_spin_unlock+0x11d/0x230 [ 109.708178][ T240] ? ext4_readpage+0x2e0/0x2e0 [ 109.712975][ T240] do_writepages+0x493/0x700 [ 109.717607][ T240] ? __writepage+0x130/0x130 [ 109.722480][ T240] ? writeback_sb_inodes+0x6b7/0x1750 [ 109.727891][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 109.732946][ T240] ? do_raw_spin_lock+0x128/0x2f0 [ 109.738012][ T240] __writeback_single_inode+0x153/0xda0 [ 109.743595][ T240] writeback_sb_inodes+0xaaa/0x1750 [ 109.748842][ T240] ? queue_io+0x530/0x530 [ 109.753195][ T240] ? __rwlock_init+0x140/0x140 [ 109.758007][ T240] __writeback_inodes_wb+0x12a/0x3f0 [ 109.763319][ T240] wb_writeback+0x45e/0xbc0 [ 109.767858][ T240] ? rcu_lock_release+0x20/0x20 [ 109.772759][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.778761][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 109.783815][ T240] ? cpumask_next+0xb3/0xd0 [ 109.788350][ T240] wb_workfn+0xb15/0xf20 [ 109.792630][ T240] ? inode_wait_for_writeback+0x220/0x220 [ 109.798390][ T240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.804394][ T240] ? __lock_acquire+0x7b50/0x7b50 [ 109.809445][ T240] ? read_lock_is_recursive+0x10/0x10 [ 109.814837][ T240] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.820747][ T240] ? _raw_spin_unlock+0x40/0x40 [ 109.825620][ T240] ? _raw_spin_unlock_irq+0x1f/0x40 [ 109.830843][ T240] process_one_work+0x867/0xff0 [ 109.835732][ T240] ? worker_detach_from_pool+0x240/0x240 [ 109.841382][ T240] ? lockdep_hardirqs_off+0x70/0x100 [ 109.847121][ T240] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.852160][ T240] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.857738][ T240] ? wq_worker_running+0x97/0x170 [ 109.862785][ T240] worker_thread+0xad7/0x12a0 [ 109.867551][ T240] kthread+0x42e/0x520 [ 109.871636][ T240] ? rcu_lock_release+0x20/0x20 [ 109.876505][ T240] ? kthread_blkcg+0xd0/0xd0 [ 109.881111][ T240] ret_from_fork+0x1f/0x30 [ 109.885570][ T240] [ 109.888611][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 109.895929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.906010][ C0] Call Trace: [ 109.909309][ C0] [ 109.912267][ C0] dump_stack_lvl+0x188/0x250 [ 109.916991][ C0] ? show_regs_print_info+0x20/0x20 [ 109.922228][ C0] ? load_image+0x410/0x410 [ 109.926776][ C0] ? prandom_u32+0x217/0x250 [ 109.928158][ T3852] FAULT_INJECTION: forcing a failure. [ 109.928158][ T3852] name failslab, interval 1, probability 1, space 0, times 913 [ 109.931409][ C0] should_fail+0x383/0x4b0 [ 109.931437][ C0] should_failslab+0x5/0x20 [ 109.931459][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 109.958134][ C0] __kmalloc_node+0x6d/0x3a0 [ 109.962924][ C0] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 109.968940][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 109.974003][ C0] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 109.979839][ C0] new_slab+0x100/0x4b0 [ 109.984028][ C0] ___slab_alloc+0x807/0xdd0 [ 109.988652][ C0] ? dst_alloc+0x101/0x160 [ 109.993106][ C0] ? dst_alloc+0x101/0x160 [ 109.997559][ C0] kmem_cache_alloc+0xf0/0x280 [ 110.002358][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 110.008019][ C0] dst_alloc+0x101/0x160 [ 110.012283][ C0] icmp6_dst_alloc+0x7e/0x470 [ 110.016997][ C0] ? icmpv6_flow_init+0x5e/0x120 [ 110.021971][ C0] ndisc_send_skb+0x3d1/0x1410 [ 110.026791][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 110.031762][ C0] ? ndisc_send_rs+0x524/0x700 [ 110.036552][ C0] addrconf_rs_timer+0x367/0x640 [ 110.041519][ C0] ? detach_timer+0x33/0x2b0 [ 110.046156][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.052259][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.058356][ C0] call_timer_fn+0x17b/0x540 [ 110.062969][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.069056][ C0] ? __run_timers+0x810/0x810 [ 110.073763][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 110.078982][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 110.084212][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.090298][ C0] __run_timers+0x56c/0x810 [ 110.094848][ C0] ? detach_timer+0x2b0/0x2b0 [ 110.099552][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.105564][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 110.110468][ C0] run_timer_softirq+0x63/0xf0 [ 110.115253][ C0] handle_softirqs+0x336/0x830 [ 110.120035][ C0] ? run_ksoftirqd+0xa4/0x100 [ 110.124734][ C0] ? do_softirq+0x210/0x210 [ 110.129259][ C0] ? run_ksoftirqd+0x81/0x100 [ 110.133954][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 110.139175][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 110.144480][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 110.149693][ C0] run_ksoftirqd+0xa4/0x100 [ 110.154228][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 110.159449][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 110.164844][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 110.169984][ C0] smpboot_thread_fn+0x520/0x990 [ 110.174950][ C0] kthread+0x42e/0x520 [ 110.179033][ C0] ? cpu_report_death+0x180/0x180 [ 110.184069][ C0] ? kthread_blkcg+0xd0/0xd0 [ 110.188678][ C0] ret_from_fork+0x1f/0x30 [ 110.193127][ C0] [ 110.196158][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 110.203141][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.208534][ T4231] FAULT_INJECTION: forcing a failure. [ 110.208534][ T4231] name failslab, interval 1, probability 1, space 0, times 912 [ 110.213315][ T3559] Call Trace: [ 110.213326][ T3559] [ 110.213336][ T3559] dump_stack_lvl+0x188/0x250 [ 110.213369][ T3559] ? show_regs_print_info+0x20/0x20 [ 110.242235][ T3559] ? load_image+0x410/0x410 [ 110.246765][ T3559] ? prandom_u32+0x217/0x250 [ 110.251380][ T3559] should_fail+0x383/0x4b0 [ 110.255818][ T3559] should_failslab+0x5/0x20 [ 110.260340][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 110.265300][ T3559] kmem_cache_alloc_trace+0x47/0x290 [ 110.270603][ T3559] ? uevent_show+0x152/0x320 [ 110.275226][ T3559] uevent_show+0x152/0x320 [ 110.279670][ T3559] dev_attr_show+0x50/0xb0 [ 110.284109][ T3559] ? device_get_ownership+0xa0/0xa0 [ 110.289340][ T3559] sysfs_kf_seq_show+0x316/0x4c0 [ 110.294299][ T3559] seq_read_iter+0x460/0xc50 [ 110.298922][ T3559] vfs_read+0x75e/0xd50 [ 110.303106][ T3559] ? kernel_read+0x1e0/0x1e0 [ 110.307732][ T3559] ? __fdget_pos+0x2c6/0x370 [ 110.312345][ T3559] ksys_read+0x153/0x260 [ 110.316610][ T3559] ? vfs_write+0xd70/0xd70 [ 110.321048][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 110.326265][ T3559] do_syscall_64+0x4c/0xa0 [ 110.330700][ T3559] ? clear_bhb_loop+0x30/0x80 [ 110.335395][ T3559] ? clear_bhb_loop+0x30/0x80 [ 110.340094][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.346012][ T3559] RIP: 0033:0x7f42e12ae407 [ 110.350446][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 110.370076][ T3559] RSP: 002b:00007ffd1d8c7b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 110.378527][ T3559] RAX: ffffffffffffffda RBX: 00007f42e11c0880 RCX: 00007f42e12ae407 [ 110.386523][ T3559] RDX: 0000000000001000 RSI: 00005654dd0e0560 RDI: 000000000000000c [ 110.394609][ T3559] RBP: 00007f42e13f6ff0 R08: 0000000000000000 R09: 0000000000000000 [ 110.402603][ T3559] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 110.410597][ T3559] R13: 00007f42e13f6ea0 R14: 0000000000000000 R15: 00005654dd0e5570 [ 110.418632][ T3559] [ 110.421672][ T4231] CPU: 0 PID: 4231 Comm: kworker/0:5 Not tainted syzkaller #0 [ 110.429166][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.439240][ T4231] Workqueue: events nsim_dev_trap_report_work [ 110.445343][ T4231] Call Trace: [ 110.448645][ T4231] [ 110.450860][ T154] FAULT_INJECTION: forcing a failure. [ 110.450860][ T154] name failslab, interval 1, probability 1, space 0, times 910 [ 110.451591][ T4231] dump_stack_lvl+0x188/0x250 [ 110.469087][ T4231] ? show_regs_print_info+0x20/0x20 [ 110.474315][ T4231] ? load_image+0x410/0x410 [ 110.478876][ T4231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.484888][ T4231] ? prandom_u32+0x217/0x250 [ 110.489539][ T4231] should_fail+0x383/0x4b0 [ 110.494007][ T4231] should_failslab+0x5/0x20 [ 110.498527][ T4231] slab_pre_alloc_hook+0x51/0xc0 [ 110.503489][ T4231] kmem_cache_alloc_node+0x47/0x2c0 [ 110.508703][ T4231] ? __alloc_skb+0xf4/0x750 [ 110.513239][ T4231] __alloc_skb+0xf4/0x750 [ 110.517594][ T4231] nsim_dev_trap_report_work+0x25c/0xab0 [ 110.523263][ T4231] process_one_work+0x867/0xff0 [ 110.528151][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 110.533808][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 110.539121][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.544183][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 110.549753][ T4231] ? wq_worker_running+0x97/0x170 [ 110.554822][ T4231] worker_thread+0xad7/0x12a0 [ 110.559561][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.565501][ T4231] kthread+0x42e/0x520 [ 110.569606][ T4231] ? rcu_lock_release+0x20/0x20 [ 110.574494][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 110.579264][ T4231] ret_from_fork+0x1f/0x30 [ 110.583735][ T4231] [ 110.586808][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 110.594332][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.595239][ T4199] 0*4096kB [ 110.604426][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 110.604457][ T154] Call Trace: [ 110.604466][ T154] [ 110.604475][ T154] dump_stack_lvl+0x188/0x250 [ 110.607617][ T4199] = 0kB [ 110.613850][ T154] ? show_regs_print_info+0x20/0x20 [ 110.613879][ T154] ? load_image+0x410/0x410 [ 110.617183][ T4199] Node 1 [ 110.620140][ T154] should_fail+0x383/0x4b0 [ 110.620199][ T154] should_failslab+0x5/0x20 [ 110.624871][ T4199] Normal: [ 110.627632][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 110.632958][ T4199] 82*4kB [ 110.637350][ T154] __kmalloc+0x6b/0x340 [ 110.640372][ T4199] (UE) [ 110.644701][ T154] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 110.649211][ T4199] 21*8kB [ 110.652249][ T154] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 110.652291][ T154] ? verify_lock_unused+0x140/0x140 [ 110.657227][ T4199] (UE) [ 110.660173][ T154] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 110.664359][ T4199] 19*16kB [ 110.667166][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 110.673559][ T4199] (UME) [ 110.676463][ T154] ieee80211_bss_info_update+0x6ba/0xa80 [ 110.682664][ T4199] 78*32kB [ 110.687792][ T154] ? ieee80211_rx_bss_put+0x60/0x60 [ 110.690635][ T4199] (UE) [ 110.696626][ T154] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 110.699763][ T4199] 34*64kB [ 110.704728][ T154] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 110.707576][ T4199] (UME) [ 110.713229][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 110.716277][ T4199] 12*128kB [ 110.721464][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 110.721490][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 110.724288][ T4199] (UME) [ 110.730087][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.730112][ T154] ? _raw_spin_unlock+0x40/0x40 [ 110.733160][ T4199] 6*256kB [ 110.739313][ T154] ? kcov_remote_start+0x6a/0x490 [ 110.742383][ T4199] (UM) [ 110.748007][ T154] ? kcov_remote_start+0xfa/0x490 [ 110.751304][ T4199] 2*512kB [ 110.757038][ T154] ieee80211_iface_work+0x714/0xc50 [ 110.762336][ T4199] (U) [ 110.765090][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 110.771128][ T4199] 0*1024kB [ 110.775886][ T154] cfg80211_wiphy_work+0x224/0x260 [ 110.779000][ T4199] 1*2048kB [ 110.784034][ T154] process_one_work+0x867/0xff0 [ 110.784094][ T154] ? worker_detach_from_pool+0x240/0x240 [ 110.786844][ T4199] (M) [ 110.791859][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 110.791889][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.794937][ T4199] 953*4096kB [ 110.800221][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 110.800249][ T154] ? wq_worker_running+0x97/0x170 [ 110.802951][ T4199] (M) [ 110.808148][ T154] worker_thread+0xad7/0x12a0 [ 110.811489][ T4199] = 3915104kB [ 110.816403][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.819501][ T4199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.824369][ T154] kthread+0x42e/0x520 [ 110.824393][ T154] ? rcu_lock_release+0x20/0x20 [ 110.830126][ T4199] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.832717][ T154] ? kthread_blkcg+0xd0/0xd0