last executing test programs: 21.819407319s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) 21.79443199s ago: executing program 0 (id=1): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='N\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r2, &(0x7f0000000140)='1000\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x8001, 0xc1) write(r3, &(0x7f00000001c0)='0\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0xa000400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resgid}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x400, &(0x7f0000000280)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b66068a37565a6a9ba7ff235fdee7d61f5bc28914df6dfd94bc86b23047a5"}, 0x3d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x44040000) 0s ago: executing program 32 (id=1): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='N\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r2, &(0x7f0000000140)='1000\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x8001, 0xc1) write(r3, &(0x7f00000001c0)='0\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0xa000400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resgid}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x400, &(0x7f0000000280)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b66068a37565a6a9ba7ff235fdee7d61f5bc28914df6dfd94bc86b23047a5"}, 0x3d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x44040000) kernel console output (not intermixed with test programs): ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.538484][ C0] ? _raw_spin_unlock+0x40/0x40 [ 99.543492][ C0] ? kcov_remote_start+0x6a/0x490 [ 99.548555][ C0] ? kcov_remote_start+0xfa/0x490 [ 99.553608][ C0] ieee80211_iface_work+0x714/0xc50 [ 99.558834][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.564073][ C0] cfg80211_wiphy_work+0x224/0x260 [ 99.569228][ C0] process_one_work+0x867/0xff0 [ 99.574206][ C0] ? worker_detach_from_pool+0x240/0x240 [ 99.579875][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 99.585195][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.590244][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.595902][ C0] ? wq_worker_running+0x97/0x170 [ 99.600952][ C0] worker_thread+0xad7/0x12a0 [ 99.605670][ C0] kthread+0x42e/0x520 [ 99.609753][ C0] ? rcu_lock_release+0x20/0x20 [ 99.614619][ C0] ? kthread_blkcg+0xd0/0xd0 [ 99.619224][ C0] ret_from_fork+0x1f/0x30 [ 99.623694][ C0] [ 99.626727][ T4229] CPU: 1 PID: 4229 Comm: kworker/1:5 Not tainted syzkaller #0 [ 99.631460][ C0] FAULT_INJECTION: forcing a failure. [ 99.631460][ C0] name failslab, interval 1, probability 1, space 0, times 920 [ 99.634236][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.657078][ T4229] Workqueue: events nsim_dev_trap_report_work [ 99.663180][ T4229] Call Trace: [ 99.666490][ T4229] [ 99.669446][ T4229] dump_stack_lvl+0x188/0x250 [ 99.674147][ T4229] ? show_regs_print_info+0x20/0x20 [ 99.679453][ T4229] ? load_image+0x410/0x410 [ 99.683974][ T4229] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.689983][ T4229] ? prandom_u32+0x217/0x250 [ 99.694600][ T4229] should_fail+0x383/0x4b0 [ 99.699040][ T4229] should_failslab+0x5/0x20 [ 99.703566][ T4229] slab_pre_alloc_hook+0x51/0xc0 [ 99.708540][ T4229] kmem_cache_alloc_node+0x47/0x2c0 [ 99.713771][ T4229] ? __alloc_skb+0xf4/0x750 [ 99.718339][ T4229] __alloc_skb+0xf4/0x750 [ 99.722710][ T4229] nsim_dev_trap_report_work+0x25c/0xab0 [ 99.728392][ T4229] process_one_work+0x867/0xff0 [ 99.733293][ T4229] ? worker_detach_from_pool+0x240/0x240 [ 99.738950][ T4229] ? lockdep_hardirqs_off+0x70/0x100 [ 99.744273][ T4229] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.749345][ T4229] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.754917][ T4229] ? wq_worker_running+0x97/0x170 [ 99.760113][ T4229] worker_thread+0xad7/0x12a0 [ 99.764854][ T4229] kthread+0x42e/0x520 [ 99.768958][ T4229] ? rcu_lock_release+0x20/0x20 [ 99.773829][ T4229] ? kthread_blkcg+0xd0/0xd0 [ 99.778443][ T4229] ret_from_fork+0x1f/0x30 [ 99.782895][ T4229] [ 99.785942][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 99.793521][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.799042][ T1195] FAULT_INJECTION: forcing a failure. [ 99.799042][ T1195] name failslab, interval 1, probability 1, space 0, times 917 [ 99.803602][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 99.803635][ C0] Call Trace: [ 99.803645][ C0] [ 99.803655][ C0] dump_stack_lvl+0x188/0x250 [ 99.833842][ C0] ? show_regs_print_info+0x20/0x20 [ 99.839073][ C0] ? load_image+0x410/0x410 [ 99.843644][ C0] ? prandom_u32+0x217/0x250 [ 99.848373][ C0] should_fail+0x383/0x4b0 [ 99.852836][ C0] should_failslab+0x5/0x20 [ 99.857379][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 99.862347][ C0] kmem_cache_alloc_trace+0x47/0x290 [ 99.867654][ C0] ? dst_cow_metrics_generic+0x52/0x1b0 [ 99.873218][ C0] dst_cow_metrics_generic+0x52/0x1b0 [ 99.878618][ C0] icmp6_dst_alloc+0x2ca/0x470 [ 99.883428][ C0] ndisc_send_skb+0x3d1/0x1410 [ 99.888232][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 99.893205][ C0] ? ndisc_send_rs+0x524/0x700 [ 99.897993][ C0] addrconf_rs_timer+0x367/0x640 [ 99.902959][ C0] ? detach_timer+0x33/0x2b0 [ 99.907584][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.913704][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.919794][ C0] call_timer_fn+0x17b/0x540 [ 99.924418][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.930908][ C0] ? __run_timers+0x810/0x810 [ 99.935625][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.940843][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 99.946063][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 99.952154][ C0] __run_timers+0x56c/0x810 [ 99.956726][ C0] ? detach_timer+0x2b0/0x2b0 [ 99.961427][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.967590][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 99.972471][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 99.978748][ C0] run_timer_softirq+0x63/0xf0 [ 99.983546][ C0] handle_softirqs+0x336/0x830 [ 99.988343][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 99.993217][ C0] ? do_softirq+0x210/0x210 [ 99.997737][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 100.002874][ C0] __irq_exit_rcu+0x13b/0x230 [ 100.007571][ C0] ? irq_exit_rcu+0x20/0x20 [ 100.012097][ C0] irq_exit_rcu+0x5/0x20 [ 100.016355][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 100.022008][ C0] [ 100.024952][ C0] [ 100.027896][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 100.033919][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 100.039402][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 100.059024][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 100.065131][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 100.073142][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.081125][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 100.089111][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 100.097101][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 100.105101][ C0] ? dump_stack_lvl+0x204/0x250 [ 100.109980][ C0] ? show_regs_print_info+0x20/0x20 [ 100.115197][ C0] ? load_image+0x410/0x410 [ 100.119728][ C0] should_fail+0x383/0x4b0 [ 100.124167][ C0] should_failslab+0x5/0x20 [ 100.128681][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 100.133634][ C0] __kmalloc+0x6b/0x340 [ 100.137802][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 100.144146][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 100.150342][ C0] ? verify_lock_unused+0x140/0x140 [ 100.155565][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 100.161663][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 100.166720][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 100.172382][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 100.177607][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 100.183446][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 100.189632][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 100.195371][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 100.201282][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 100.206492][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.212398][ C0] ? _raw_spin_unlock+0x40/0x40 [ 100.217263][ C0] ? kcov_remote_start+0x6a/0x490 [ 100.222326][ C0] ? kcov_remote_start+0xfa/0x490 [ 100.227385][ C0] ieee80211_iface_work+0x714/0xc50 [ 100.232600][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 100.237812][ C0] cfg80211_wiphy_work+0x224/0x260 [ 100.242943][ C0] process_one_work+0x867/0xff0 [ 100.247816][ C0] ? worker_detach_from_pool+0x240/0x240 [ 100.253460][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 100.258758][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.263795][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.269362][ C0] ? wq_worker_running+0x97/0x170 [ 100.274401][ C0] worker_thread+0xad7/0x12a0 [ 100.279111][ C0] kthread+0x42e/0x520 [ 100.283189][ C0] ? rcu_lock_release+0x20/0x20 [ 100.288050][ C0] ? kthread_blkcg+0xd0/0xd0 [ 100.292659][ C0] ret_from_fork+0x1f/0x30 [ 100.297105][ C0] [ 100.300142][ T1195] CPU: 1 PID: 1195 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 100.303868][ C0] FAULT_INJECTION: forcing a failure. [ 100.303868][ C0] name failslab, interval 1, probability 1, space 0, times 916 [ 100.307726][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.330554][ T1195] Workqueue: writeback wb_workfn (flush-8:0) [ 100.336565][ T1195] Call Trace: [ 100.339861][ T1195] [ 100.342810][ T1195] dump_stack_lvl+0x188/0x250 [ 100.347621][ T1195] ? show_regs_print_info+0x20/0x20 [ 100.352856][ T1195] ? load_image+0x410/0x410 [ 100.357390][ T1195] ? prandom_u32+0x217/0x250 [ 100.362018][ T1195] should_fail+0x383/0x4b0 [ 100.366507][ T1195] should_failslab+0x5/0x20 [ 100.371032][ T1195] slab_pre_alloc_hook+0x51/0xc0 [ 100.376021][ T1195] ? __debug_object_init+0x7b3/0xc80 [ 100.381352][ T1195] kmem_cache_alloc+0x3d/0x280 [ 100.386265][ T1195] __debug_object_init+0x7b3/0xc80 [ 100.391419][ T1195] ? arch_stack_walk+0x10c/0x140 [ 100.396396][ T1195] ? debug_object_init+0x10/0x10 [ 100.401373][ T1195] ? verify_lock_unused+0x140/0x140 [ 100.406609][ T1195] scsi_init_command+0x122/0x380 [ 100.411581][ T1195] scsi_queue_rq+0x13b0/0x30f0 [ 100.416415][ T1195] blk_mq_dispatch_rq_list+0xa06/0x1c50 [ 100.422004][ T1195] ? blk_mq_get_driver_tag+0x930/0x930 [ 100.427512][ T1195] blk_mq_do_dispatch_sched+0xadf/0xc90 [ 100.433106][ T1195] ? blk_mq_exit_sched+0x580/0x580 [ 100.438252][ T1195] __blk_mq_sched_dispatch_requests+0x32c/0x410 [ 100.444517][ T1195] ? read_lock_is_recursive+0x10/0x10 [ 100.449957][ T1195] ? blk_mq_sched_dispatch_requests+0x1b0/0x1b0 [ 100.456231][ T1195] ? rcu_lock_release+0x9/0x20 [ 100.461028][ T1195] blk_mq_sched_dispatch_requests+0xf4/0x1b0 [ 100.467036][ T1195] __blk_mq_run_hw_queue+0xbb/0x100 [ 100.472259][ T1195] __blk_mq_delay_run_hw_queue+0x137/0x610 [ 100.478172][ T1195] ? blk_mq_run_hw_queue+0x211/0x260 [ 100.483519][ T1195] blk_mq_sched_insert_requests+0x325/0x5c0 [ 100.489432][ T1195] blk_mq_flush_plug_list+0x59b/0x690 [ 100.494837][ T1195] ? trace_block_rq_insert+0x1c0/0x1c0 [ 100.500348][ T1195] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 100.506607][ T1195] ? ktime_get_real_ts64+0x440/0x440 [ 100.511906][ T1195] ? __blk_queue_split+0x70d/0x1680 [ 100.517121][ T1195] ? init_wait_entry+0xd0/0xd0 [ 100.521907][ T1195] blk_flush_plug_list+0x404/0x450 [ 100.527048][ T1195] ? blk_check_plugged+0x250/0x250 [ 100.532181][ T1195] ? wbt_track+0x174/0x240 [ 100.536614][ T1195] ? blk_account_io_start+0x2b3/0x2f0 [ 100.542004][ T1195] blk_mq_submit_bio+0xd1f/0x1950 [ 100.547055][ T1195] ? blk_mq_try_issue_list_directly+0x500/0x500 [ 100.553340][ T1195] ? __submit_bio+0x780/0x780 [ 100.558031][ T1195] ? kasan_set_free_info+0x1f/0x40 [ 100.563168][ T1195] ? blk_try_enter_queue+0x399/0x4d0 [ 100.568472][ T1195] ? wb_workfn+0xb15/0xf20 [ 100.572910][ T1195] ? process_one_work+0x867/0xff0 [ 100.577952][ T1195] __submit_bio+0x73e/0x780 [ 100.582497][ T1195] ? rcu_lock_release+0x20/0x20 [ 100.587366][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.593382][ T1195] submit_bio_noacct+0x735/0x800 [ 100.598341][ T1195] ? blk_put_request+0x20/0x20 [ 100.603126][ T1195] ? memset+0x1e/0x40 [ 100.607135][ T1195] ? jbd2_journal_stop+0x8db/0xd10 [ 100.612265][ T1195] submit_bio+0x2c6/0x550 [ 100.616617][ T1195] ? submit_bio_noacct+0x800/0x800 [ 100.621758][ T1195] ext4_io_submit+0x14a/0x200 [ 100.626463][ T1195] ext4_writepages+0xf2f/0x2d40 [ 100.631373][ T1195] ? ext4_readpage+0x2e0/0x2e0 [ 100.636157][ T1195] ? mark_lock+0x94/0x320 [ 100.640531][ T1195] ? writeback_sb_inodes+0x433/0x1750 [ 100.645929][ T1195] ? ext4_readpage+0x2e0/0x2e0 [ 100.650715][ T1195] do_writepages+0x493/0x700 [ 100.655427][ T1195] ? __writepage+0x130/0x130 [ 100.660038][ T1195] ? writeback_sb_inodes+0x6b7/0x1750 [ 100.665427][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 100.670477][ T1195] ? do_raw_spin_lock+0x128/0x2f0 [ 100.675529][ T1195] __writeback_single_inode+0x153/0xda0 [ 100.681096][ T1195] writeback_sb_inodes+0xaaa/0x1750 [ 100.686314][ T1195] ? locked_inode_to_wb_and_lock_list+0x207/0x300 [ 100.692772][ T1195] ? queue_io+0x530/0x530 [ 100.697129][ T1195] ? up_read+0x20/0x20 [ 100.701225][ T1195] __writeback_inodes_wb+0x12a/0x3f0 [ 100.706539][ T1195] wb_writeback+0x45e/0xbc0 [ 100.711070][ T1195] ? rcu_lock_release+0x20/0x20 [ 100.715939][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.721944][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 100.727141][ T1195] ? cpumask_next+0xb3/0xd0 [ 100.731706][ T1195] wb_workfn+0xb15/0xf20 [ 100.736002][ T1195] ? inode_wait_for_writeback+0x220/0x220 [ 100.741757][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.747767][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 100.752819][ T1195] ? read_lock_is_recursive+0x10/0x10 [ 100.758214][ T1195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.764135][ T1195] ? _raw_spin_unlock_irq+0x1f/0x40 [ 100.769363][ T1195] process_one_work+0x867/0xff0 [ 100.774253][ T1195] ? worker_detach_from_pool+0x240/0x240 [ 100.779915][ T1195] ? lockdep_hardirqs_off+0x70/0x100 [ 100.785248][ T1195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.790293][ T1195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.795857][ T1195] ? wq_worker_running+0x97/0x170 [ 100.800901][ T1195] worker_thread+0xad7/0x12a0 [ 100.805623][ T1195] kthread+0x42e/0x520 [ 100.809706][ T1195] ? rcu_lock_release+0x20/0x20 [ 100.814571][ T1195] ? kthread_blkcg+0xd0/0xd0 [ 100.819182][ T1195] ret_from_fork+0x1f/0x30 [ 100.823634][ T1195] [ 100.826698][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 100.828142][ T1195] FAULT_INJECTION: forcing a failure. [ 100.828142][ T1195] name failslab, interval 1, probability 1, space 0, times 915 [ 100.834458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.834490][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 100.863647][ C0] Call Trace: [ 100.866953][ C0] [ 100.869827][ C0] dump_stack_lvl+0x188/0x250 [ 100.874626][ C0] ? show_regs_print_info+0x20/0x20 [ 100.879860][ C0] ? load_image+0x410/0x410 [ 100.884407][ C0] ? prandom_u32+0x217/0x250 [ 100.889036][ C0] should_fail+0x383/0x4b0 [ 100.893480][ C0] should_failslab+0x5/0x20 [ 100.898002][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 100.902968][ C0] ? __debug_object_init+0x8e5/0xc80 [ 100.908292][ C0] kmem_cache_alloc+0x3d/0x280 [ 100.913102][ C0] __debug_object_init+0x8e5/0xc80 [ 100.918250][ C0] ? should_fail+0x383/0x4b0 [ 100.922856][ C0] ? should_failslab+0x5/0x20 [ 100.927556][ C0] ? process_one_work+0x867/0xff0 [ 100.932603][ C0] ? debug_object_init+0x10/0x10 [ 100.937559][ C0] ? memset+0x1e/0x40 [ 100.941565][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 100.946959][ C0] ? neigh_release+0x80/0x80 [ 100.951586][ C0] init_timer_key+0x3d/0x2a0 [ 100.956195][ C0] ___neigh_create+0x9ee/0x2210 [ 100.961083][ C0] ip6_finish_output2+0x9f5/0x1530 [ 100.966221][ C0] ? nf_hook+0x360/0x360 [ 100.970498][ C0] ? ip6_mtu+0x2fb/0x3d0 [ 100.974756][ C0] ? ip6_finish_output+0x627/0x790 [ 100.979894][ C0] ndisc_send_skb+0xb7a/0x1410 [ 100.984712][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 100.989666][ C0] ? rcu_lock_release+0x20/0x20 [ 100.994539][ C0] ? ndisc_send_rs+0x524/0x700 [ 100.999356][ C0] addrconf_rs_timer+0x367/0x640 [ 101.004337][ C0] ? detach_timer+0x33/0x2b0 [ 101.008957][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 101.015052][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 101.021142][ C0] call_timer_fn+0x17b/0x540 [ 101.025756][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 101.031848][ C0] ? __run_timers+0x810/0x810 [ 101.036592][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 101.041817][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 101.047148][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 101.053239][ C0] __run_timers+0x56c/0x810 [ 101.057774][ C0] ? detach_timer+0x2b0/0x2b0 [ 101.062474][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.068483][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 101.073354][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 101.079615][ C0] run_timer_softirq+0x63/0xf0 [ 101.084405][ C0] handle_softirqs+0x336/0x830 [ 101.089215][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 101.094084][ C0] ? do_softirq+0x210/0x210 [ 101.098602][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 101.103745][ C0] __irq_exit_rcu+0x13b/0x230 [ 101.108441][ C0] ? irq_exit_rcu+0x20/0x20 [ 101.112970][ C0] irq_exit_rcu+0x5/0x20 [ 101.117225][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 101.122988][ C0] [ 101.125929][ C0] [ 101.128878][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 101.134890][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 101.140370][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 101.159991][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 101.166079][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 101.174079][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.182065][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 101.190140][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 101.198128][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 101.206119][ C0] ? dump_stack_lvl+0x204/0x250 [ 101.211000][ C0] ? show_regs_print_info+0x20/0x20 [ 101.216218][ C0] ? load_image+0x410/0x410 [ 101.220750][ C0] should_fail+0x383/0x4b0 [ 101.225186][ C0] should_failslab+0x5/0x20 [ 101.229712][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 101.234673][ C0] __kmalloc+0x6b/0x340 [ 101.238839][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 101.245191][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 101.251372][ C0] ? verify_lock_unused+0x140/0x140 [ 101.256600][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 101.262700][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 101.267748][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 101.273420][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 101.278636][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 101.284478][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 101.290665][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 101.296408][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 101.302315][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 101.307530][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.313438][ C0] ? _raw_spin_unlock+0x40/0x40 [ 101.318302][ C0] ? kcov_remote_start+0x6a/0x490 [ 101.323350][ C0] ? kcov_remote_start+0xfa/0x490 [ 101.328409][ C0] ieee80211_iface_work+0x714/0xc50 [ 101.333630][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 101.338859][ C0] cfg80211_wiphy_work+0x224/0x260 [ 101.343982][ C0] process_one_work+0x867/0xff0 [ 101.348857][ C0] ? worker_detach_from_pool+0x240/0x240 [ 101.354503][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 101.359802][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.364843][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.370426][ C0] ? wq_worker_running+0x97/0x170 [ 101.375469][ C0] worker_thread+0xad7/0x12a0 [ 101.380189][ C0] kthread+0x42e/0x520 [ 101.384270][ C0] ? rcu_lock_release+0x20/0x20 [ 101.389135][ C0] ? kthread_blkcg+0xd0/0xd0 [ 101.393734][ C0] ret_from_fork+0x1f/0x30 [ 101.398194][ C0] [ 101.401224][ T1195] CPU: 1 PID: 1195 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 101.401783][ C0] FAULT_INJECTION: forcing a failure. [ 101.401783][ C0] name failslab, interval 1, probability 1, space 0, times 914 [ 101.408807][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.431629][ T1195] Workqueue: writeback wb_workfn (flush-8:0) [ 101.437645][ T1195] Call Trace: [ 101.440943][ T1195] [ 101.443899][ T1195] dump_stack_lvl+0x188/0x250 [ 101.448600][ T1195] ? show_regs_print_info+0x20/0x20 [ 101.453822][ T1195] ? load_image+0x410/0x410 [ 101.458355][ T1195] ? prandom_u32+0x217/0x250 [ 101.462981][ T1195] should_fail+0x383/0x4b0 [ 101.467446][ T1195] should_failslab+0x5/0x20 [ 101.471994][ T1195] slab_pre_alloc_hook+0x51/0xc0 [ 101.476971][ T1195] ? __debug_object_init+0x98f/0xc80 [ 101.482275][ T1195] kmem_cache_alloc+0x3d/0x280 [ 101.487066][ T1195] __debug_object_init+0x98f/0xc80 [ 101.492213][ T1195] ? debug_object_init+0x10/0x10 [ 101.497206][ T1195] ? verify_lock_unused+0x140/0x140 [ 101.502438][ T1195] scsi_init_command+0x1f3/0x380 [ 101.507403][ T1195] scsi_queue_rq+0x13b0/0x30f0 [ 101.512225][ T1195] blk_mq_dispatch_rq_list+0xa06/0x1c50 [ 101.517812][ T1195] ? blk_mq_get_driver_tag+0x930/0x930 [ 101.523302][ T1195] blk_mq_do_dispatch_sched+0xadf/0xc90 [ 101.528878][ T1195] ? blk_mq_exit_sched+0x580/0x580 [ 101.534028][ T1195] __blk_mq_sched_dispatch_requests+0x32c/0x410 [ 101.540292][ T1195] ? read_lock_is_recursive+0x10/0x10 [ 101.545688][ T1195] ? blk_mq_sched_dispatch_requests+0x1b0/0x1b0 [ 101.551951][ T1195] ? rcu_lock_release+0x9/0x20 [ 101.556740][ T1195] blk_mq_sched_dispatch_requests+0xf4/0x1b0 [ 101.562742][ T1195] __blk_mq_run_hw_queue+0xbb/0x100 [ 101.567962][ T1195] __blk_mq_delay_run_hw_queue+0x137/0x610 [ 101.573790][ T1195] ? blk_mq_run_hw_queue+0x211/0x260 [ 101.579094][ T1195] blk_mq_sched_insert_requests+0x325/0x5c0 [ 101.585012][ T1195] blk_mq_flush_plug_list+0x59b/0x690 [ 101.590427][ T1195] ? trace_block_rq_insert+0x1c0/0x1c0 [ 101.595907][ T1195] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 101.602167][ T1195] ? ktime_get_real_ts64+0x440/0x440 [ 101.607471][ T1195] ? __blk_queue_split+0x70d/0x1680 [ 101.612687][ T1195] ? init_wait_entry+0xd0/0xd0 [ 101.617478][ T1195] blk_flush_plug_list+0x404/0x450 [ 101.622621][ T1195] ? blk_check_plugged+0x250/0x250 [ 101.627751][ T1195] ? wbt_track+0x174/0x240 [ 101.632188][ T1195] ? blk_account_io_start+0x2b3/0x2f0 [ 101.637583][ T1195] blk_mq_submit_bio+0xd1f/0x1950 [ 101.642631][ T1195] ? blk_mq_try_issue_list_directly+0x500/0x500 [ 101.648899][ T1195] ? __submit_bio+0x780/0x780 [ 101.653599][ T1195] ? kasan_set_free_info+0x1f/0x40 [ 101.658734][ T1195] ? blk_try_enter_queue+0x399/0x4d0 [ 101.664033][ T1195] ? wb_workfn+0xb15/0xf20 [ 101.668466][ T1195] ? process_one_work+0x867/0xff0 [ 101.673509][ T1195] __submit_bio+0x73e/0x780 [ 101.678039][ T1195] ? rcu_lock_release+0x20/0x20 [ 101.682908][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.688924][ T1195] submit_bio_noacct+0x735/0x800 [ 101.693901][ T1195] ? blk_put_request+0x20/0x20 [ 101.698703][ T1195] ? memset+0x1e/0x40 [ 101.702712][ T1195] ? jbd2_journal_stop+0x8db/0xd10 [ 101.707858][ T1195] submit_bio+0x2c6/0x550 [ 101.712206][ T1195] ? submit_bio_noacct+0x800/0x800 [ 101.717353][ T1195] ext4_io_submit+0x14a/0x200 [ 101.722056][ T1195] ext4_writepages+0xf2f/0x2d40 [ 101.726954][ T1195] ? ext4_readpage+0x2e0/0x2e0 [ 101.731751][ T1195] ? mark_lock+0x94/0x320 [ 101.736137][ T1195] ? writeback_sb_inodes+0x433/0x1750 [ 101.741535][ T1195] ? ext4_readpage+0x2e0/0x2e0 [ 101.746314][ T1195] do_writepages+0x493/0x700 [ 101.750941][ T1195] ? __writepage+0x130/0x130 [ 101.755554][ T1195] ? writeback_sb_inodes+0x6b7/0x1750 [ 101.760945][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 101.765986][ T1195] ? do_raw_spin_lock+0x128/0x2f0 [ 101.771050][ T1195] __writeback_single_inode+0x153/0xda0 [ 101.776636][ T1195] writeback_sb_inodes+0xaaa/0x1750 [ 101.781854][ T1195] ? locked_inode_to_wb_and_lock_list+0x207/0x300 [ 101.788308][ T1195] ? queue_io+0x530/0x530 [ 101.792668][ T1195] ? up_read+0x20/0x20 [ 101.796784][ T1195] __writeback_inodes_wb+0x12a/0x3f0 [ 101.802108][ T1195] wb_writeback+0x45e/0xbc0 [ 101.806648][ T1195] ? rcu_lock_release+0x20/0x20 [ 101.811507][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.817529][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 101.822585][ T1195] ? cpumask_next+0xb3/0xd0 [ 101.827116][ T1195] wb_workfn+0xb15/0xf20 [ 101.831400][ T1195] ? inode_wait_for_writeback+0x220/0x220 [ 101.837151][ T1195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.843167][ T1195] ? __lock_acquire+0x7b50/0x7b50 [ 101.848224][ T1195] ? read_lock_is_recursive+0x10/0x10 [ 101.853629][ T1195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.859542][ T1195] ? _raw_spin_unlock_irq+0x1f/0x40 [ 101.864762][ T1195] process_one_work+0x867/0xff0 [ 101.869649][ T1195] ? worker_detach_from_pool+0x240/0x240 [ 101.875296][ T1195] ? lockdep_hardirqs_off+0x70/0x100 [ 101.880604][ T1195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.885774][ T1195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.891370][ T1195] ? wq_worker_running+0x97/0x170 [ 101.896444][ T1195] worker_thread+0xad7/0x12a0 [ 101.901293][ T1195] kthread+0x42e/0x520 [ 101.905388][ T1195] ? rcu_lock_release+0x20/0x20 [ 101.910253][ T1195] ? kthread_blkcg+0xd0/0xd0 [ 101.914877][ T1195] ret_from_fork+0x1f/0x30 [ 101.919344][ T1195] [ 101.922378][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 101.929979][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.933128][ T4271] FAULT_INJECTION: forcing a failure. [ 101.933128][ T4271] name failslab, interval 1, probability 1, space 0, times 913 [ 101.940058][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 101.959100][ C0] Call Trace: [ 101.962405][ C0] [ 101.965264][ C0] dump_stack_lvl+0x188/0x250 [ 101.969972][ C0] ? show_regs_print_info+0x20/0x20 [ 101.975210][ C0] ? load_image+0x410/0x410 [ 101.979742][ C0] ? prandom_u32+0x217/0x250 [ 101.980309][ C1] FAULT_INJECTION: forcing a failure. [ 101.980309][ C1] name failslab, interval 1, probability 1, space 0, times 913 [ 101.984362][ C0] should_fail+0x383/0x4b0 [ 102.001547][ C0] should_failslab+0x5/0x20 [ 102.006067][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 102.011038][ C0] __kmalloc_node+0x6d/0x3a0 [ 102.015648][ C0] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 102.021650][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 102.026697][ C0] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 102.032522][ C0] new_slab+0x100/0x4b0 [ 102.036694][ C0] ___slab_alloc+0x807/0xdd0 [ 102.041296][ C0] ? dst_alloc+0x101/0x160 [ 102.045738][ C0] ? dst_alloc+0x101/0x160 [ 102.050171][ C0] kmem_cache_alloc+0xf0/0x280 [ 102.054964][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 102.060611][ C0] dst_alloc+0x101/0x160 [ 102.064889][ C0] icmp6_dst_alloc+0x7e/0x470 [ 102.069588][ C0] ? icmpv6_flow_init+0x5e/0x120 [ 102.074543][ C0] ndisc_send_skb+0x3d1/0x1410 [ 102.079351][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 102.084329][ C0] ? ndisc_send_rs+0x524/0x700 [ 102.089115][ C0] addrconf_rs_timer+0x367/0x640 [ 102.094085][ C0] ? detach_timer+0x33/0x2b0 [ 102.098695][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.104783][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.110886][ C0] call_timer_fn+0x17b/0x540 [ 102.115488][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.121580][ C0] ? __run_timers+0x810/0x810 [ 102.126280][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.131498][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 102.136707][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.142784][ C0] __run_timers+0x56c/0x810 [ 102.147321][ C0] ? detach_timer+0x2b0/0x2b0 [ 102.152023][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.158023][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 102.162889][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 102.169165][ C0] run_timer_softirq+0x63/0xf0 [ 102.173939][ C0] handle_softirqs+0x336/0x830 [ 102.178723][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 102.183596][ C0] ? do_softirq+0x210/0x210 [ 102.188125][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 102.193263][ C0] __irq_exit_rcu+0x13b/0x230 [ 102.197962][ C0] ? irq_exit_rcu+0x20/0x20 [ 102.202485][ C0] irq_exit_rcu+0x5/0x20 [ 102.206757][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 102.212422][ C0] [ 102.215368][ C0] [ 102.218325][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 102.224331][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 102.229821][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 102.249434][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 102.255516][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 102.263504][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.271486][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 102.279485][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 102.287463][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 102.295458][ C0] ? dump_stack_lvl+0x204/0x250 [ 102.300337][ C0] ? show_regs_print_info+0x20/0x20 [ 102.305549][ C0] ? load_image+0x410/0x410 [ 102.310092][ C0] should_fail+0x383/0x4b0 [ 102.314535][ C0] should_failslab+0x5/0x20 [ 102.319055][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 102.324012][ C0] __kmalloc+0x6b/0x340 [ 102.328187][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 102.334535][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 102.340717][ C0] ? verify_lock_unused+0x140/0x140 [ 102.345945][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 102.352043][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 102.357090][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 102.362744][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 102.367965][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 102.373798][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 102.379989][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 102.385718][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 102.391629][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 102.396836][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 102.402754][ C0] ? _raw_spin_unlock+0x40/0x40 [ 102.407639][ C0] ? kcov_remote_start+0x6a/0x490 [ 102.412690][ C0] ? kcov_remote_start+0xfa/0x490 [ 102.417722][ C0] ieee80211_iface_work+0x714/0xc50 [ 102.422940][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.428153][ C0] cfg80211_wiphy_work+0x224/0x260 [ 102.433287][ C0] process_one_work+0x867/0xff0 [ 102.438167][ C0] ? worker_detach_from_pool+0x240/0x240 [ 102.443824][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 102.449162][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 102.454214][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 102.459783][ C0] ? wq_worker_running+0x97/0x170 [ 102.464855][ C0] worker_thread+0xad7/0x12a0 [ 102.469593][ C0] kthread+0x42e/0x520 [ 102.473693][ C0] ? rcu_lock_release+0x20/0x20 [ 102.478557][ C0] ? kthread_blkcg+0xd0/0xd0 [ 102.483180][ C0] ret_from_fork+0x1f/0x30 [ 102.487626][ C0] [ 102.490667][ C1] CPU: 1 PID: 4271 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 102.498252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.498510][ C0] FAULT_INJECTION: forcing a failure. [ 102.498510][ C0] name failslab, interval 1, probability 1, space 0, times 912 [ 102.508327][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 102.508356][ C1] Call Trace: [ 102.508365][ C1] [ 102.508374][ C1] dump_stack_lvl+0x188/0x250 [ 102.538180][ C1] ? show_regs_print_info+0x20/0x20 [ 102.543411][ C1] ? load_image+0x410/0x410 [ 102.547936][ C1] should_fail+0x383/0x4b0 [ 102.552364][ C1] should_failslab+0x5/0x20 [ 102.556883][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 102.561854][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 102.567588][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 102.572448][ C1] ? __alloc_skb+0xf4/0x750 [ 102.576962][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 102.581835][ C1] __alloc_skb+0x22c/0x750 [ 102.586267][ C1] ndisc_alloc_skb+0xa6/0x420 [ 102.590965][ C1] ndisc_send_rs+0x271/0x700 [ 102.595566][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 102.600528][ C1] addrconf_rs_timer+0x367/0x640 [ 102.605482][ C1] ? detach_timer+0x33/0x2b0 [ 102.610094][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.616181][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.622275][ C1] call_timer_fn+0x17b/0x540 [ 102.626903][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.632988][ C1] ? __run_timers+0x810/0x810 [ 102.637695][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.642904][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 102.648119][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 102.654200][ C1] __run_timers+0x56c/0x810 [ 102.658744][ C1] ? detach_timer+0x2b0/0x2b0 [ 102.663444][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.669437][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 102.674298][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 102.680561][ C1] run_timer_softirq+0x63/0xf0 [ 102.685343][ C1] handle_softirqs+0x336/0x830 [ 102.690132][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 102.695019][ C1] ? do_softirq+0x210/0x210 [ 102.699539][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 102.704671][ C1] __irq_exit_rcu+0x13b/0x230 [ 102.709364][ C1] ? irq_exit_rcu+0x20/0x20 [ 102.713890][ C1] irq_exit_rcu+0x5/0x20 [ 102.718196][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 102.723854][ C1] [ 102.726814][ C1] [ 102.729758][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 102.735764][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 102.741940][ C1] Code: 34 6e 89 7e 65 8b 15 35 6e 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 102.761563][ C1] RSP: 0018:ffffc9000326f470 EFLAGS: 00000246 [ 102.767648][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff8880189f8000 [ 102.775630][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 102.783613][ C1] RBP: ffffc9000326f568 R08: 0000000000000003 R09: 0000000000000004 [ 102.791597][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 102.799579][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200064de94 [ 102.807565][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 102.813215][ C1] __printk_wait_on_cpu_lock+0x28/0x30 [ 102.818697][ C1] dump_stack_lvl+0x161/0x250 [ 102.823393][ C1] ? show_regs_print_info+0x20/0x20 [ 102.828608][ C1] ? load_image+0x410/0x410 [ 102.833134][ C1] should_fail+0x383/0x4b0 [ 102.837591][ C1] should_failslab+0x5/0x20 [ 102.842105][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 102.847053][ C1] __kmalloc+0x6b/0x340 [ 102.851220][ C1] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 102.857134][ C1] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 102.862878][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 102.867915][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 102.874016][ C1] ieee80211_bss_info_update+0x74d/0xa80 [ 102.879664][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 102.884895][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 102.890746][ C1] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 102.896937][ C1] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 102.902671][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 102.908601][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 102.913947][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 102.919861][ C1] ? _raw_spin_unlock+0x40/0x40 [ 102.924719][ C1] ? kcov_remote_start+0x6a/0x490 [ 102.929769][ C1] ? kcov_remote_start+0xfa/0x490 [ 102.934822][ C1] ieee80211_iface_work+0x714/0xc50 [ 102.940090][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.945309][ C1] cfg80211_wiphy_work+0x224/0x260 [ 102.950443][ C1] process_one_work+0x867/0xff0 [ 102.955355][ C1] ? worker_detach_from_pool+0x240/0x240 [ 102.961005][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 102.966319][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 102.971359][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 102.976931][ C1] ? wq_worker_running+0x97/0x170 [ 102.981969][ C1] worker_thread+0xad7/0x12a0 [ 102.986686][ C1] kthread+0x42e/0x520 [ 102.990770][ C1] ? rcu_lock_release+0x20/0x20 [ 102.995646][ C1] ? kthread_blkcg+0xd0/0xd0 [ 103.000263][ C1] ret_from_fork+0x1f/0x30 [ 103.004702][ C1] [ 103.007738][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 103.015313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.025386][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 103.031649][ C0] Call Trace: [ 103.034951][ C0] [ 103.037809][ C0] dump_stack_lvl+0x188/0x250 [ 103.042527][ C0] ? verify_lock_unused+0x140/0x140 [ 103.047738][ C0] ? show_regs_print_info+0x20/0x20 [ 103.052959][ C0] ? load_image+0x410/0x410 [ 103.057490][ C0] should_fail+0x383/0x4b0 [ 103.061925][ C0] should_failslab+0x5/0x20 [ 103.066441][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 103.071392][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 103.076595][ C0] ? __alloc_skb+0xf4/0x750 [ 103.081106][ C0] ? neigh_remove_one+0x4d8/0x5e0 [ 103.086142][ C0] __alloc_skb+0xf4/0x750 [ 103.090484][ C0] __neigh_notify+0x142/0x2e0 [ 103.095185][ C0] neigh_cleanup_and_release+0x9d/0x250 [ 103.100751][ C0] neigh_remove_one+0x4e0/0x5e0 [ 103.105615][ C0] ___neigh_create+0x48f/0x2210 [ 103.110505][ C0] ip6_finish_output2+0x9f5/0x1530 [ 103.115638][ C0] ? nf_hook+0x360/0x360 [ 103.119891][ C0] ? ip6_mtu+0x2fb/0x3d0 [ 103.124143][ C0] ? ip6_finish_output+0x627/0x790 [ 103.129271][ C0] ndisc_send_skb+0xb7a/0x1410 [ 103.134053][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 103.139001][ C0] ? rcu_lock_release+0x20/0x20 [ 103.143873][ C0] ? ndisc_send_rs+0x524/0x700 [ 103.148654][ C0] addrconf_rs_timer+0x367/0x640 [ 103.153607][ C0] ? detach_timer+0x33/0x2b0 [ 103.158214][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.164311][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.170386][ C0] call_timer_fn+0x17b/0x540 [ 103.174997][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.181076][ C0] ? __run_timers+0x810/0x810 [ 103.185769][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.191005][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 103.196219][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.202298][ C0] __run_timers+0x56c/0x810 [ 103.206849][ C0] ? detach_timer+0x2b0/0x2b0 [ 103.211538][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.217530][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 103.222395][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 103.228649][ C0] run_timer_softirq+0x63/0xf0 [ 103.233427][ C0] handle_softirqs+0x336/0x830 [ 103.238206][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 103.243068][ C0] ? do_softirq+0x210/0x210 [ 103.247579][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 103.252723][ C0] __irq_exit_rcu+0x13b/0x230 [ 103.257411][ C0] ? irq_exit_rcu+0x20/0x20 [ 103.261933][ C0] irq_exit_rcu+0x5/0x20 [ 103.266223][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 103.271864][ C0] [ 103.274808][ C0] [ 103.277755][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.283745][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 103.289213][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 103.308838][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 103.314934][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 103.322917][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.330916][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 103.338915][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 103.346897][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 103.354887][ C0] ? dump_stack_lvl+0x204/0x250 [ 103.359760][ C0] ? show_regs_print_info+0x20/0x20 [ 103.364973][ C0] ? load_image+0x410/0x410 [ 103.369500][ C0] should_fail+0x383/0x4b0 [ 103.373952][ C0] should_failslab+0x5/0x20 [ 103.378468][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 103.383413][ C0] __kmalloc+0x6b/0x340 [ 103.387592][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 103.393952][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 103.400136][ C0] ? verify_lock_unused+0x140/0x140 [ 103.405365][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 103.411457][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 103.416503][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 103.422515][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 103.427737][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 103.433554][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 103.439734][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 103.445471][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 103.451390][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 103.456599][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.462504][ C0] ? _raw_spin_unlock+0x40/0x40 [ 103.467366][ C0] ? kcov_remote_start+0x6a/0x490 [ 103.472404][ C0] ? kcov_remote_start+0xfa/0x490 [ 103.477440][ C0] ieee80211_iface_work+0x714/0xc50 [ 103.482675][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.487900][ C0] cfg80211_wiphy_work+0x224/0x260 [ 103.493021][ C0] process_one_work+0x867/0xff0 [ 103.497891][ C0] ? worker_detach_from_pool+0x240/0x240 [ 103.503537][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 103.508844][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.513874][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.519429][ C0] ? wq_worker_running+0x97/0x170 [ 103.524464][ C0] worker_thread+0xad7/0x12a0 [ 103.529176][ C0] kthread+0x42e/0x520 [ 103.533249][ C0] ? rcu_lock_release+0x20/0x20 [ 103.538108][ C0] ? kthread_blkcg+0xd0/0xd0 [ 103.542743][ C0] ret_from_fork+0x1f/0x30 [ 103.547203][ C0] [ 103.552249][ T4271] CPU: 1 PID: 4271 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 103.557174][ C0] FAULT_INJECTION: forcing a failure. [ 103.557174][ C0] name failslab, interval 1, probability 1, space 0, times 910 [ 103.559839][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.582752][ T4271] Workqueue: events_unbound cfg80211_wiphy_work [ 103.589024][ T4271] Call Trace: [ 103.592328][ T4271] [ 103.595369][ T4271] dump_stack_lvl+0x188/0x250 [ 103.600085][ T4271] ? show_regs_print_info+0x20/0x20 [ 103.605326][ T4271] ? load_image+0x410/0x410 [ 103.609869][ T4271] should_fail+0x383/0x4b0 [ 103.614319][ T4271] should_failslab+0x5/0x20 [ 103.618853][ T4271] slab_pre_alloc_hook+0x51/0xc0 [ 103.623818][ T4271] __kmalloc+0x6b/0x340 [ 103.627995][ T4271] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 103.633919][ T4271] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 103.639677][ T4271] ? __lock_acquire+0x7b50/0x7b50 [ 103.644735][ T4271] ? ieee80211_queue_delayed_work+0x150/0x150 [ 103.650830][ T4271] ieee80211_bss_info_update+0x74d/0xa80 [ 103.656641][ T4271] ? ieee80211_rx_bss_put+0x60/0x60 [ 103.661878][ T4271] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 103.667703][ T4271] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 103.673892][ T4271] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 103.679625][ T4271] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 103.685546][ T4271] ? lockdep_hardirqs_on+0x94/0x140 [ 103.690765][ T4271] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.696675][ T4271] ? _raw_spin_unlock+0x40/0x40 [ 103.701541][ T4271] ? kcov_remote_start+0x6a/0x490 [ 103.706600][ T4271] ? kcov_remote_start+0xfa/0x490 [ 103.711648][ T4271] ieee80211_iface_work+0x714/0xc50 [ 103.716882][ T4271] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.722127][ T4271] cfg80211_wiphy_work+0x224/0x260 [ 103.727290][ T4271] process_one_work+0x867/0xff0 [ 103.732201][ T4271] ? worker_detach_from_pool+0x240/0x240 [ 103.737848][ T4271] ? lockdep_hardirqs_off+0x70/0x100 [ 103.743181][ T4271] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.748229][ T4271] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.753797][ T4271] ? wq_worker_running+0x97/0x170 [ 103.758849][ T4271] worker_thread+0xad7/0x12a0 [ 103.763573][ T4271] kthread+0x42e/0x520 [ 103.767665][ T4271] ? rcu_lock_release+0x20/0x20 [ 103.772537][ T4271] ? kthread_blkcg+0xd0/0xd0 [ 103.777144][ T4271] ret_from_fork+0x1f/0x30 [ 103.781604][ T4271] [ 103.784636][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 103.792302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.802374][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 103.802568][ T3851] FAULT_INJECTION: forcing a failure. [ 103.802568][ T3851] name failslab, interval 1, probability 1, space 0, times 910 [ 103.808640][ C0] Call Trace: [ 103.808651][ C0] [ 103.827574][ C0] dump_stack_lvl+0x188/0x250 [ 103.832301][ C0] ? verify_lock_unused+0x140/0x140 [ 103.837540][ C0] ? show_regs_print_info+0x20/0x20 [ 103.842767][ C0] ? load_image+0x410/0x410 [ 103.847318][ C0] ? __lock_acquire+0x1305/0x7b50 [ 103.852416][ C0] ? prandom_u32+0x217/0x250 [ 103.857082][ C0] should_fail+0x383/0x4b0 [ 103.861529][ C0] should_failslab+0x5/0x20 [ 103.866072][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 103.871029][ C0] ? dst_alloc+0x101/0x160 [ 103.873142][ T3547] FAULT_INJECTION: forcing a failure. [ 103.873142][ T3547] name failslab, interval 1, probability 1, space 0, times 909 [ 103.875474][ C0] kmem_cache_alloc+0x3d/0x280 [ 103.892637][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.893018][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 103.909068][ C0] dst_alloc+0x101/0x160 [ 103.913340][ C0] icmp6_dst_alloc+0x7e/0x470 [ 103.918073][ C0] ? icmpv6_flow_init+0x5e/0x120 [ 103.923057][ C0] ndisc_send_skb+0x3d1/0x1410 [ 103.927871][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 103.932843][ C0] ? ndisc_send_rs+0x524/0x700 [ 103.937657][ C0] addrconf_rs_timer+0x367/0x640 [ 103.940776][ T21] FAULT_INJECTION: forcing a failure. [ 103.940776][ T21] name failslab, interval 1, probability 1, space 0, times 909 [ 103.942619][ C0] ? detach_timer+0x33/0x2b0 [ 103.960010][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.966117][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.972211][ C0] call_timer_fn+0x17b/0x540 [ 103.976828][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 103.982916][ C0] ? __run_timers+0x810/0x810 [ 103.987631][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.991338][ C1] FAULT_INJECTION: forcing a failure. [ 103.991338][ C1] name failslab, interval 1, probability 1, space 0, times 909 [ 103.992844][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 103.992866][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 104.017248][ C0] __run_timers+0x56c/0x810 [ 104.021789][ C0] ? detach_timer+0x2b0/0x2b0 [ 104.026479][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.032482][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 104.037348][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 104.043609][ C0] run_timer_softirq+0x63/0xf0 [ 104.048387][ C0] handle_softirqs+0x336/0x830 [ 104.053175][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 104.058039][ C0] ? do_softirq+0x210/0x210 [ 104.062556][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 104.067695][ C0] __irq_exit_rcu+0x13b/0x230 [ 104.072404][ C0] ? irq_exit_rcu+0x20/0x20 [ 104.076936][ C0] irq_exit_rcu+0x5/0x20 [ 104.081193][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 104.086840][ C0] [ 104.089775][ C0] [ 104.092721][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.098720][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 104.104195][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 104.123830][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 104.129913][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 104.137913][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.145901][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 104.153891][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 104.161874][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 104.169876][ C0] ? dump_stack_lvl+0x204/0x250 [ 104.174750][ C0] ? show_regs_print_info+0x20/0x20 [ 104.179978][ C0] ? load_image+0x410/0x410 [ 104.184506][ C0] should_fail+0x383/0x4b0 [ 104.188944][ C0] should_failslab+0x5/0x20 [ 104.193475][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 104.198425][ C0] __kmalloc+0x6b/0x340 [ 104.202591][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 104.208934][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 104.215206][ C0] ? verify_lock_unused+0x140/0x140 [ 104.220442][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 104.226550][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 104.231607][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 104.237259][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 104.242482][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 104.248313][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 104.254497][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 104.260232][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 104.266156][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 104.271374][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.277367][ C0] ? _raw_spin_unlock+0x40/0x40 [ 104.282233][ C0] ? kcov_remote_start+0x6a/0x490 [ 104.287304][ C0] ? kcov_remote_start+0xfa/0x490 [ 104.292349][ C0] ieee80211_iface_work+0x714/0xc50 [ 104.297562][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.302778][ C0] cfg80211_wiphy_work+0x224/0x260 [ 104.307908][ C0] process_one_work+0x867/0xff0 [ 104.312800][ C0] ? worker_detach_from_pool+0x240/0x240 [ 104.318455][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 104.323757][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.328808][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 104.334369][ C0] ? wq_worker_running+0x97/0x170 [ 104.339421][ C0] worker_thread+0xad7/0x12a0 [ 104.344133][ C0] kthread+0x42e/0x520 [ 104.348216][ C0] ? rcu_lock_release+0x20/0x20 [ 104.353084][ C0] ? kthread_blkcg+0xd0/0xd0 [ 104.357688][ C0] ret_from_fork+0x1f/0x30 [ 104.362130][ C0] [ 104.365165][ C1] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 104.366192][ C0] FAULT_INJECTION: forcing a failure. [ 104.366192][ C0] name failslab, interval 1, probability 1, space 0, times 908 [ 104.372217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.372232][ C1] Call Trace: [ 104.372240][ C1] [ 104.372249][ C1] dump_stack_lvl+0x188/0x250 [ 104.405951][ C1] ? show_regs_print_info+0x20/0x20 [ 104.411173][ C1] ? load_image+0x410/0x410 [ 104.415692][ C1] ? prandom_u32+0x217/0x250 [ 104.420301][ C1] should_fail+0x383/0x4b0 [ 104.424752][ C1] should_failslab+0x5/0x20 [ 104.429274][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 104.434226][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 104.439960][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 104.445172][ C1] ? __alloc_skb+0xf4/0x750 [ 104.449686][ C1] ? __netdev_alloc_skb+0x110/0x4c0 [ 104.454897][ C1] __alloc_skb+0x22c/0x750 [ 104.459331][ C1] ? lock_chain_count+0x20/0x20 [ 104.464208][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 104.469247][ C1] ? __alloc_skb+0x750/0x750 [ 104.473852][ C1] hsr_init_skb+0xec/0x5a0 [ 104.478299][ C1] ? read_lock_is_recursive+0x10/0x10 [ 104.483692][ C1] send_hsr_supervision_frame+0x141/0xb90 [ 104.489435][ C1] hsr_announce+0x168/0x310 [ 104.493964][ C1] ? hsr_dev_finalize+0x870/0x870 [ 104.499382][ C1] ? hsr_dev_finalize+0x870/0x870 [ 104.504432][ C1] call_timer_fn+0x17b/0x540 [ 104.509052][ C1] ? hsr_dev_finalize+0x870/0x870 [ 104.514138][ C1] ? __run_timers+0x810/0x810 [ 104.518855][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.524099][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 104.529339][ C1] ? hsr_dev_finalize+0x870/0x870 [ 104.534392][ C1] __run_timers+0x56c/0x810 [ 104.538948][ C1] ? detach_timer+0x2b0/0x2b0 [ 104.543655][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.549691][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 104.554570][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 104.560853][ C1] run_timer_softirq+0x63/0xf0 [ 104.565647][ C1] handle_softirqs+0x336/0x830 [ 104.570442][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 104.575321][ C1] ? do_softirq+0x210/0x210 [ 104.579853][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 104.584999][ C1] __irq_exit_rcu+0x13b/0x230 [ 104.589727][ C1] ? irq_exit_rcu+0x20/0x20 [ 104.594261][ C1] irq_exit_rcu+0x5/0x20 [ 104.598525][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 104.604190][ C1] [ 104.607141][ C1] [ 104.610096][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.616117][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 104.622330][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 104.641957][ C1] RSP: 0018:ffffc9000357f6b8 EFLAGS: 00000293 [ 104.648068][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807f563b80 [ 104.656088][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 104.664076][ C1] RBP: ffffc9000357f7a8 R08: 0000000000000003 R09: 0000000000000004 [ 104.672055][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 104.680060][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006afedc [ 104.688065][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 104.693725][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 104.699366][ C1] dump_stack_lvl+0x161/0x250 [ 104.704066][ C1] ? show_regs_print_info+0x20/0x20 [ 104.709276][ C1] ? load_image+0x410/0x410 [ 104.713808][ C1] should_fail+0x383/0x4b0 [ 104.718244][ C1] should_failslab+0x5/0x20 [ 104.722761][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 104.727718][ C1] ? anon_vma_clone+0xbc/0x4d0 [ 104.732499][ C1] kmem_cache_alloc+0x3d/0x280 [ 104.737278][ C1] anon_vma_clone+0xbc/0x4d0 [ 104.741884][ C1] anon_vma_fork+0x85/0x520 [ 104.746402][ C1] ? copy_mm+0x8b6/0x13d0 [ 104.750752][ C1] ? dup_userfaultfd+0xa7/0x5e0 [ 104.755622][ C1] copy_mm+0x9df/0x13d0 [ 104.759800][ C1] ? copy_signal+0x610/0x610 [ 104.764402][ C1] ? __init_rwsem+0x11e/0x160 [ 104.769096][ C1] ? copy_signal+0x501/0x610 [ 104.773700][ C1] copy_process+0x17fb/0x3ec0 [ 104.778404][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 104.784406][ C1] ? __pidfd_prepare+0x140/0x140 [ 104.789353][ C1] ? verify_lock_unused+0x140/0x140 [ 104.794567][ C1] kernel_clone+0x23f/0x990 [ 104.799079][ C1] ? create_io_thread+0x180/0x180 [ 104.804126][ C1] __x64_sys_clone+0x19a/0x210 [ 104.808901][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 104.813943][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 104.819155][ C1] do_syscall_64+0x4c/0xa0 [ 104.823578][ C1] ? clear_bhb_loop+0x30/0x80 [ 104.828282][ C1] ? clear_bhb_loop+0x30/0x80 [ 104.832981][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.838886][ C1] RIP: 0033:0x7f5127e62636 [ 104.843314][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 104.862928][ C1] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 104.871369][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 104.879353][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 104.887343][ C1] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 104.895500][ C1] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 104.903510][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 104.911510][ C1] [ 104.914539][ C0] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 104.918402][ C1] FAULT_INJECTION: forcing a failure. [ 104.918402][ C1] name failslab, interval 1, probability 1, space 0, times 907 [ 104.922135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.922151][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 104.951252][ C0] Call Trace: [ 104.954552][ C0] [ 104.957410][ C0] dump_stack_lvl+0x188/0x250 [ 104.962114][ C0] ? show_regs_print_info+0x20/0x20 [ 104.967343][ C0] ? load_image+0x410/0x410 [ 104.971881][ C0] should_fail+0x383/0x4b0 [ 104.976338][ C0] should_failslab+0x5/0x20 [ 104.980884][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 104.985851][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 104.991591][ C0] ? ndisc_alloc_skb+0xa6/0x420 [ 104.996455][ C0] ? __alloc_skb+0xf4/0x750 [ 105.000999][ C0] ? ndisc_alloc_skb+0xa6/0x420 [ 105.005887][ C0] __alloc_skb+0x22c/0x750 [ 105.010324][ C0] ndisc_alloc_skb+0xa6/0x420 [ 105.015017][ C0] ndisc_send_rs+0x271/0x700 [ 105.019629][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 105.024585][ C0] addrconf_rs_timer+0x367/0x640 [ 105.029562][ C0] ? detach_timer+0x33/0x2b0 [ 105.034174][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.040277][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.046362][ C0] call_timer_fn+0x17b/0x540 [ 105.050966][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.057052][ C0] ? __run_timers+0x810/0x810 [ 105.061755][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.066984][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 105.072201][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.078287][ C0] __run_timers+0x56c/0x810 [ 105.082819][ C0] ? detach_timer+0x2b0/0x2b0 [ 105.087511][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.093516][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 105.098375][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 105.104636][ C0] run_timer_softirq+0x63/0xf0 [ 105.109427][ C0] handle_softirqs+0x336/0x830 [ 105.114209][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 105.119081][ C0] ? do_softirq+0x210/0x210 [ 105.123688][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 105.128825][ C0] __irq_exit_rcu+0x13b/0x230 [ 105.133519][ C0] ? irq_exit_rcu+0x20/0x20 [ 105.138056][ C0] irq_exit_rcu+0x5/0x20 [ 105.142315][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 105.147973][ C0] [ 105.150924][ C0] [ 105.153867][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 105.159877][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 105.165371][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 105.185096][ C0] RSP: 0018:ffffc900031bf380 EFLAGS: 00000293 [ 105.191179][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d801dc0 [ 105.199165][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.207145][ C0] RBP: ffffc900031bf468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 105.215130][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 105.223117][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000637e74 [ 105.231126][ C0] ? dump_stack_lvl+0x204/0x250 [ 105.236009][ C0] ? show_regs_print_info+0x20/0x20 [ 105.241221][ C0] ? load_image+0x410/0x410 [ 105.245753][ C0] should_fail+0x383/0x4b0 [ 105.250187][ C0] should_failslab+0x5/0x20 [ 105.254704][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 105.259657][ C0] __kmalloc+0x6b/0x340 [ 105.263835][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 105.270181][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 105.276368][ C0] ? verify_lock_unused+0x140/0x140 [ 105.281611][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 105.287823][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 105.292896][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 105.298564][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 105.303789][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 105.309621][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 105.315835][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 105.321579][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 105.327493][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 105.332719][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 105.338665][ C0] ? _raw_spin_unlock+0x40/0x40 [ 105.343529][ C0] ? kcov_remote_start+0x6a/0x490 [ 105.348572][ C0] ? kcov_remote_start+0xfa/0x490 [ 105.353725][ C0] ieee80211_iface_work+0x714/0xc50 [ 105.358969][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.364195][ C0] cfg80211_wiphy_work+0x224/0x260 [ 105.369325][ C0] process_one_work+0x867/0xff0 [ 105.374217][ C0] ? worker_detach_from_pool+0x240/0x240 [ 105.379873][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 105.385177][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 105.390221][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 105.395789][ C0] ? wq_worker_running+0x97/0x170 [ 105.400833][ C0] worker_thread+0xad7/0x12a0 [ 105.405550][ C0] kthread+0x42e/0x520 [ 105.409633][ C0] ? rcu_lock_release+0x20/0x20 [ 105.414587][ C0] ? kthread_blkcg+0xd0/0xd0 [ 105.419191][ C0] ret_from_fork+0x1f/0x30 [ 105.423634][ C0] [ 105.426670][ C1] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 105.433728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.443809][ C1] Call Trace: [ 105.447109][ C1] [ 105.449974][ C1] dump_stack_lvl+0x188/0x250 [ 105.454696][ C1] ? show_regs_print_info+0x20/0x20 [ 105.459926][ C1] ? load_image+0x410/0x410 [ 105.464557][ C1] should_fail+0x383/0x4b0 [ 105.469022][ C1] should_failslab+0x5/0x20 [ 105.473550][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 105.478527][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 105.484262][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 105.489136][ C1] ? __alloc_skb+0xf4/0x750 [ 105.493655][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 105.498517][ C1] __alloc_skb+0x22c/0x750 [ 105.502948][ C1] ndisc_alloc_skb+0xa6/0x420 [ 105.507641][ C1] ndisc_send_rs+0x271/0x700 [ 105.512254][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 105.517209][ C1] addrconf_rs_timer+0x367/0x640 [ 105.522275][ C1] ? detach_timer+0x33/0x2b0 [ 105.526906][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.532991][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.539069][ C1] call_timer_fn+0x17b/0x540 [ 105.543688][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.549761][ C1] ? __run_timers+0x810/0x810 [ 105.554468][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 105.559681][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 105.564906][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 105.570986][ C1] __run_timers+0x56c/0x810 [ 105.575514][ C1] ? detach_timer+0x2b0/0x2b0 [ 105.580202][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.586199][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 105.591059][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 105.597329][ C1] run_timer_softirq+0x63/0xf0 [ 105.602110][ C1] handle_softirqs+0x336/0x830 [ 105.606891][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 105.611751][ C1] ? do_softirq+0x210/0x210 [ 105.616257][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 105.621387][ C1] __irq_exit_rcu+0x13b/0x230 [ 105.626074][ C1] ? irq_exit_rcu+0x20/0x20 [ 105.630595][ C1] irq_exit_rcu+0x5/0x20 [ 105.634962][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 105.640623][ C1] [ 105.643562][ C1] [ 105.646502][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 105.652498][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 105.658670][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 105.678287][ C1] RSP: 0018:ffffc9000357f6b8 EFLAGS: 00000293 [ 105.684361][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807f563b80 [ 105.692339][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 105.700317][ C1] RBP: ffffc9000357f7a8 R08: 0000000000000003 R09: 0000000000000004 [ 105.708294][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 105.716274][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006afedc [ 105.724265][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 105.729927][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 105.735580][ C1] dump_stack_lvl+0x161/0x250 [ 105.740376][ C1] ? show_regs_print_info+0x20/0x20 [ 105.745606][ C1] ? load_image+0x410/0x410 [ 105.750161][ C1] should_fail+0x383/0x4b0 [ 105.754605][ C1] should_failslab+0x5/0x20 [ 105.759117][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 105.764085][ C1] ? anon_vma_clone+0xbc/0x4d0 [ 105.768884][ C1] kmem_cache_alloc+0x3d/0x280 [ 105.773670][ C1] anon_vma_clone+0xbc/0x4d0 [ 105.778275][ C1] anon_vma_fork+0x85/0x520 [ 105.782790][ C1] ? copy_mm+0x8b6/0x13d0 [ 105.787128][ C1] ? dup_userfaultfd+0xa7/0x5e0 [ 105.792026][ C1] copy_mm+0x9df/0x13d0 [ 105.796203][ C1] ? copy_signal+0x610/0x610 [ 105.800797][ C1] ? __init_rwsem+0x11e/0x160 [ 105.805481][ C1] ? copy_signal+0x501/0x610 [ 105.810094][ C1] copy_process+0x17fb/0x3ec0 [ 105.814796][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 105.820787][ C1] ? __pidfd_prepare+0x140/0x140 [ 105.825731][ C1] ? verify_lock_unused+0x140/0x140 [ 105.830960][ C1] kernel_clone+0x23f/0x990 [ 105.835478][ C1] ? create_io_thread+0x180/0x180 [ 105.840526][ C1] __x64_sys_clone+0x19a/0x210 [ 105.845295][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 105.850345][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 105.855562][ C1] do_syscall_64+0x4c/0xa0 [ 105.859990][ C1] ? clear_bhb_loop+0x30/0x80 [ 105.864678][ C1] ? clear_bhb_loop+0x30/0x80 [ 105.869394][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.875292][ C1] RIP: 0033:0x7f5127e62636 [ 105.879720][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 105.899337][ C1] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 105.907783][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 105.915784][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 105.923798][ C1] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 105.931810][ C1] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 105.939809][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 105.947845][ C1] [ 105.952580][ T3558] FAULT_INJECTION: forcing a failure. [ 105.952580][ T3558] name failslab, interval 1, probability 1, space 0, times 905 [ 105.954483][ C1] FAULT_INJECTION: forcing a failure. [ 105.954483][ C1] name failslab, interval 1, probability 1, space 0, times 905 [ 105.968561][ T3850] FAULT_INJECTION: forcing a failure. [ 105.968561][ T3850] name failslab, interval 1, probability 1, space 0, times 905 [ 105.978211][ C1] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 105.978236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.008078][ C1] Call Trace: [ 106.011384][ C1] [ 106.014246][ C1] dump_stack_lvl+0x188/0x250 [ 106.018952][ C1] ? show_regs_print_info+0x20/0x20 [ 106.024298][ C1] ? load_image+0x410/0x410 [ 106.028828][ C1] ? prandom_u32+0x217/0x250 [ 106.033447][ C1] should_fail+0x383/0x4b0 [ 106.037883][ C1] should_failslab+0x5/0x20 [ 106.042399][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 106.047355][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 106.052620][ C1] ? __alloc_skb+0xf4/0x750 [ 106.057146][ C1] __alloc_skb+0xf4/0x750 [ 106.061501][ C1] ndisc_alloc_skb+0xa6/0x420 [ 106.066203][ C1] ndisc_send_rs+0x271/0x700 [ 106.070814][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 106.075779][ C1] addrconf_rs_timer+0x367/0x640 [ 106.080732][ C1] ? detach_timer+0x33/0x2b0 [ 106.085348][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 106.090234][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.091442][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 106.107339][ C1] call_timer_fn+0x17b/0x540 [ 106.111954][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 106.118043][ C1] ? __run_timers+0x810/0x810 [ 106.122750][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 106.127989][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 106.133212][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 106.139299][ C1] __run_timers+0x56c/0x810 [ 106.143832][ C1] ? detach_timer+0x2b0/0x2b0 [ 106.148525][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.150252][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.154531][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 106.169803][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 106.176065][ C1] run_timer_softirq+0x63/0xf0 [ 106.180849][ C1] handle_softirqs+0x336/0x830 [ 106.185638][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 106.190512][ C1] ? do_softirq+0x210/0x210 [ 106.195030][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 106.200166][ C1] __irq_exit_rcu+0x13b/0x230 [ 106.204871][ C1] ? irq_exit_rcu+0x20/0x20 [ 106.209401][ C1] irq_exit_rcu+0x5/0x20 [ 106.213663][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 106.219320][ C1] [ 106.220242][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.222263][ C1] [ 106.222275][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.233566][ C0] FAULT_INJECTION: forcing a failure. [ 106.233566][ C0] name failslab, interval 1, probability 1, space 0, times 905 [ 106.235014][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 106.259885][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 106.279594][ C1] RSP: 0018:ffffc9000357f6b8 EFLAGS: 00000293 [ 106.285675][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807f563b80 [ 106.293663][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 106.301652][ C1] RBP: ffffc9000357f7a8 R08: 0000000000000003 R09: 0000000000000004 [ 106.309631][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 106.317616][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006afedc [ 106.325606][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 106.331263][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 106.336908][ C1] dump_stack_lvl+0x161/0x250 [ 106.341626][ C1] ? show_regs_print_info+0x20/0x20 [ 106.346843][ C1] ? load_image+0x410/0x410 [ 106.351381][ C1] should_fail+0x383/0x4b0 [ 106.355817][ C1] should_failslab+0x5/0x20 [ 106.360363][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 106.365324][ C1] ? anon_vma_clone+0xbc/0x4d0 [ 106.370106][ C1] kmem_cache_alloc+0x3d/0x280 [ 106.374905][ C1] anon_vma_clone+0xbc/0x4d0 [ 106.379525][ C1] anon_vma_fork+0x85/0x520 [ 106.384072][ C1] ? copy_mm+0x8b6/0x13d0 [ 106.388413][ C1] ? dup_userfaultfd+0xa7/0x5e0 [ 106.393279][ C1] copy_mm+0x9df/0x13d0 [ 106.397454][ C1] ? copy_signal+0x610/0x610 [ 106.402069][ C1] ? __init_rwsem+0x11e/0x160 [ 106.406762][ C1] ? copy_signal+0x501/0x610 [ 106.411369][ C1] copy_process+0x17fb/0x3ec0 [ 106.416088][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 106.422085][ C1] ? __pidfd_prepare+0x140/0x140 [ 106.427034][ C1] ? verify_lock_unused+0x140/0x140 [ 106.432267][ C1] kernel_clone+0x23f/0x990 [ 106.436787][ C1] ? create_io_thread+0x180/0x180 [ 106.441841][ C1] __x64_sys_clone+0x19a/0x210 [ 106.446622][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 106.451768][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 106.456990][ C1] do_syscall_64+0x4c/0xa0 [ 106.461418][ C1] ? clear_bhb_loop+0x30/0x80 [ 106.466127][ C1] ? clear_bhb_loop+0x30/0x80 [ 106.470825][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.476732][ C1] RIP: 0033:0x7f5127e62636 [ 106.481166][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 106.500792][ C1] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 106.509232][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 106.517219][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 106.525212][ C1] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 106.533204][ C1] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 106.541197][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 106.549204][ C1] [ 106.552324][ C0] CPU: 0 PID: 4200 Comm: syz-executor Not tainted syzkaller #0 [ 106.559909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.570000][ C0] Call Trace: [ 106.573298][ C0] [ 106.576174][ C0] dump_stack_lvl+0x188/0x250 [ 106.580884][ C0] ? __sys_sendto+0x46d/0x620 [ 106.585573][ C0] ? do_syscall_64+0x4c/0xa0 [ 106.590181][ C0] ? show_regs_print_info+0x20/0x20 [ 106.595406][ C0] ? load_image+0x410/0x410 [ 106.599926][ C0] ? prandom_u32+0x217/0x250 [ 106.604543][ C0] should_fail+0x383/0x4b0 [ 106.608990][ C0] should_failslab+0x5/0x20 [ 106.613508][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 106.618458][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 106.624215][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 106.629442][ C0] ? __alloc_skb+0xf4/0x750 [ 106.633955][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 106.639161][ C0] __alloc_skb+0x22c/0x750 [ 106.643599][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 106.648643][ C0] ? __alloc_skb+0x750/0x750 [ 106.653275][ C0] ? mark_lock+0x94/0x320 [ 106.657633][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 106.663111][ C0] ? verify_lock_unused+0x140/0x140 [ 106.668321][ C0] ? __x64_sys_sendto+0xda/0xf0 [ 106.673187][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 106.679182][ C0] ? verify_lock_unused+0x140/0x140 [ 106.684397][ C0] ? verify_lock_unused+0x140/0x140 [ 106.689611][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 106.695458][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 106.700941][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 106.706512][ C0] __iterate_interfaces+0x225/0x4c0 [ 106.711736][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.718018][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.724275][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 106.731315][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 106.736530][ C0] ? hw_scan_work+0xef0/0xef0 [ 106.741225][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 106.746462][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 106.751600][ C0] hrtimer_run_softirq+0x176/0x240 [ 106.756761][ C0] handle_softirqs+0x336/0x830 [ 106.761559][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 106.766425][ C0] ? do_softirq+0x210/0x210 [ 106.770976][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 106.776115][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 106.781337][ C0] __irq_exit_rcu+0x13b/0x230 [ 106.786054][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.790578][ C0] irq_exit_rcu+0x5/0x20 [ 106.794951][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 106.800608][ C0] [ 106.803575][ C0] [ 106.806518][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.812526][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 106.818084][ C0] Code: 75 11 e8 e3 e3 18 00 4d 85 e4 75 16 e8 d9 e3 18 00 eb 15 e8 d2 e3 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 c3 e3 18 00 fb 31 ff <89> de e8 19 e7 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 a7 [ 106.837700][ C0] RSP: 0018:ffffc90002fee780 EFLAGS: 00000246 [ 106.843808][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802c4ed940 [ 106.851800][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.859801][ C0] RBP: ffffc90002fee9f0 R08: ffffffff901ee18f R09: 1ffffffff203dc31 [ 106.867782][ C0] R10: dffffc0000000000 R11: fffffbfff203dc32 R12: 0000000000000200 [ 106.875767][ C0] R13: 000000000000006e R14: 0000000000000000 R15: dffffc0000000000 [ 106.883764][ C0] ? console_unlock+0xc8d/0x10f0 [ 106.888747][ C0] ? console_trylock_spinning+0x370/0x370 [ 106.894485][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.900497][ C0] ? read_lock_is_recursive+0x10/0x10 [ 106.905901][ C0] ? vprintk_emit+0x150/0x150 [ 106.910608][ C0] ? preempt_count_add+0x8d/0x190 [ 106.915651][ C0] vprintk_emit+0xc0/0x150 [ 106.920083][ C0] _printk+0xda/0x130 [ 106.924094][ C0] ? load_image+0x410/0x410 [ 106.928629][ C0] ? batadv_hardif_get_by_netdev+0x366/0x3a0 [ 106.934633][ C0] batadv_check_known_mac_addr+0x287/0x3c0 [ 106.940462][ C0] batadv_hard_if_event+0x49f/0x17f0 [ 106.945772][ C0] ? dcbnl_netdevice_event+0x254/0x290 [ 106.951250][ C0] ? lockdep_rtnl_is_held+0x22/0x30 [ 106.956484][ C0] raw_notifier_call_chain+0xcb/0x160 [ 106.961896][ C0] dev_set_mac_address+0x2ed/0x400 [ 106.967046][ C0] ? dev_pre_changeaddr_notify+0x120/0x120 [ 106.972869][ C0] ? rwsem_write_trylock+0x135/0x1c0 [ 106.978206][ C0] ? clear_nonspinnable+0x60/0x60 [ 106.983267][ C0] dev_set_mac_address_user+0x2d/0x50 [ 106.988653][ C0] do_setlink+0x842/0x29d0 [ 106.993091][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 106.999269][ C0] ? __nla_validate_parse+0x1e0a/0x27b0 [ 107.005144][ C0] ? __nla_validate+0x50/0x50 [ 107.009862][ C0] ? validate_linkmsg+0x3db/0x4c0 [ 107.014920][ C0] rtnl_newlink+0x15bb/0x1920 [ 107.019671][ C0] ? rtnl_setlink+0x500/0x500 [ 107.024371][ C0] ? mark_lock+0x94/0x320 [ 107.028719][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 107.033804][ C0] ? __lock_acquire+0x1305/0x7b50 [ 107.038892][ C0] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 107.044044][ C0] ? rtnl_setlink+0x500/0x500 [ 107.048750][ C0] rtnetlink_rcv_msg+0x7f1/0xf10 [ 107.053726][ C0] ? lock_chain_count+0x20/0x20 [ 107.058610][ C0] ? rtnetlink_bind+0x80/0x80 [ 107.063319][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 107.068738][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 107.073961][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 107.079355][ C0] ? _local_bh_enable+0xa0/0xa0 [ 107.084227][ C0] ? __dev_queue_xmit+0x1b64/0x2e50 [ 107.089461][ C0] ? dev_queue_xmit+0x20/0x20 [ 107.094156][ C0] ? memcpy+0x3c/0x60 [ 107.098149][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 107.103298][ C0] netlink_rcv_skb+0x1e9/0x430 [ 107.108097][ C0] ? rtnetlink_bind+0x80/0x80 [ 107.112796][ C0] ? netlink_ack+0xb10/0xb10 [ 107.117416][ C0] netlink_unicast+0x78f/0x940 [ 107.122211][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 107.127010][ C0] ? netlink_getsockopt+0x570/0x570 [ 107.132249][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 107.137213][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 107.142783][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 107.148092][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 107.153578][ C0] __sys_sendto+0x46d/0x620 [ 107.158106][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 107.163517][ C0] ? lock_chain_count+0x20/0x20 [ 107.168391][ C0] __x64_sys_sendto+0xda/0xf0 [ 107.173086][ C0] do_syscall_64+0x4c/0xa0 [ 107.177514][ C0] ? clear_bhb_loop+0x30/0x80 [ 107.182201][ C0] ? clear_bhb_loop+0x30/0x80 [ 107.186893][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.192805][ C0] RIP: 0033:0x7fb7dad806ce [ 107.197235][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.216875][ C0] RSP: 002b:00007ffcfb95af98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.225314][ C0] RAX: ffffffffffffffda RBX: 0000555579e6a500 RCX: 00007fb7dad806ce [ 107.233300][ C0] RDX: 000000000000002c RSI: 00007fb7dbb76670 RDI: 0000000000000003 [ 107.241290][ C0] RBP: 0000000000000001 R08: 00007ffcfb95b014 R09: 000000000000000c [ 107.249272][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 107.257264][ C0] R13: 0000000000000000 R14: 00007fb7dbb76670 R15: 0000000000000000 [ 107.265267][ C0] [ 107.268306][ T15] CPU: 1 PID: 15 Comm: rcu_preempt Not tainted syzkaller #0 [ 107.275624][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.285700][ T15] Call Trace: [ 107.288988][ T15] [ 107.291933][ T15] dump_stack_lvl+0x188/0x250 [ 107.296642][ T15] ? show_regs_print_info+0x20/0x20 [ 107.301863][ T15] ? load_image+0x410/0x410 [ 107.306394][ T15] ? prandom_u32+0x217/0x250 [ 107.311029][ T15] should_fail+0x383/0x4b0 [ 107.315476][ T15] should_failslab+0x5/0x20 [ 107.319994][ T15] slab_pre_alloc_hook+0x51/0xc0 [ 107.324940][ T15] ? __debug_object_init+0x7f7/0xc80 [ 107.330246][ T15] kmem_cache_alloc+0x3d/0x280 [ 107.335034][ T15] __debug_object_init+0x7f7/0xc80 [ 107.340169][ T15] ? debug_object_init+0x10/0x10 [ 107.345139][ T15] schedule_timeout+0x12d/0x2d0 [ 107.350008][ T15] ? console_conditional_schedule+0x40/0x40 [ 107.355917][ T15] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 107.361837][ T15] ? prepare_to_swait_event+0x33d/0x360 [ 107.367425][ T15] rcu_gp_fqs_loop+0x2be/0x11f0 [ 107.372302][ T15] ? dyntick_save_progress_counter+0x230/0x230 [ 107.378472][ T15] ? rcu_gp_init+0x10f0/0x10f0 [ 107.383250][ T15] ? _raw_spin_unlock_irq+0x1f/0x40 [ 107.388494][ T15] ? lockdep_hardirqs_on+0x94/0x140 [ 107.393712][ T15] rcu_gp_kthread+0x9a/0x370 [ 107.398317][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 107.403439][ T15] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.409352][ T15] ? __kthread_parkme+0x14e/0x1b0 [ 107.414394][ T15] kthread+0x42e/0x520 [ 107.418472][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 107.423598][ T15] ? kthread_blkcg+0xd0/0xd0 [ 107.428205][ T15] ret_from_fork+0x1f/0x30 [ 107.432645][ T15] [ 107.435677][ T3558] CPU: 0 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 107.442647][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.452733][ T3558] Call Trace: [ 107.456036][ T3558] [ 107.459080][ T3558] dump_stack_lvl+0x188/0x250 [ 107.463783][ T3558] ? show_regs_print_info+0x20/0x20 [ 107.469002][ T3558] ? load_image+0x410/0x410 [ 107.473521][ T3558] ? prandom_u32+0x217/0x250 [ 107.478152][ T3558] should_fail+0x383/0x4b0 [ 107.482584][ T3558] should_failslab+0x5/0x20 [ 107.487095][ T3558] slab_pre_alloc_hook+0x51/0xc0 [ 107.492049][ T3558] __kmalloc+0x6b/0x340 [ 107.496217][ T3558] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 107.501957][ T3558] tomoyo_realpath_from_path+0xed/0x5e0 [ 107.507536][ T3558] ? kasan_set_free_info+0x1f/0x40 [ 107.512689][ T3558] ? slab_free_freelist_hook+0xec/0x170 [ 107.518267][ T3558] tomoyo_path_perm+0x23f/0x5d0 [ 107.523139][ T3558] ? tomoyo_path_permission+0x3a0/0x3a0 [ 107.526282][ T4227] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 107.528751][ T3558] ? lockdep_hardirqs_on+0x94/0x140 [ 107.542254][ T3558] ? rcu_is_watching+0x11/0xa0 [ 107.547046][ T3558] security_inode_getattr+0xcf/0x120 [ 107.552349][ T3558] vfs_getattr+0x26/0x3a0 [ 107.556701][ T3558] ? user_path_at_empty+0x13e/0x190 [ 107.561924][ T3558] vfs_statx+0x146/0x4c0 [ 107.566193][ T3558] ? vfs_fstatat+0x40/0x40 [ 107.570636][ T3558] __x64_sys_newfstatat+0x15f/0x200 [ 107.575856][ T3558] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 107.581177][ T3558] ? lock_chain_count+0x20/0x20 [ 107.586062][ T3558] ? lockdep_hardirqs_on+0x94/0x140 [ 107.591289][ T3558] do_syscall_64+0x4c/0xa0 [ 107.595770][ T3558] ? clear_bhb_loop+0x30/0x80 [ 107.600508][ T3558] ? clear_bhb_loop+0x30/0x80 [ 107.605220][ T3558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.611144][ T3558] RIP: 0033:0x7f54747acb0a [ 107.615594][ T3558] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 107.635226][ T3558] RSP: 002b:00007fffcf4c4258 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 107.643677][ T3558] RAX: ffffffffffffffda RBX: 0000565228314420 RCX: 00007f54747acb0a [ 107.651666][ T3558] RDX: 00007fffcf4c4260 RSI: 0000565228302ef3 RDI: 00000000ffffff9c [ 107.659671][ T3558] RBP: 000056525616a148 R08: 00063478c1c69200 R09: 0035ceabed5fb112 [ 107.667683][ T3558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.675681][ T3558] R13: 00007fffcf4c4260 R14: 0000000000000000 R15: 00063478c1c69200 [ 107.683685][ T3558] [ 107.686729][ T4172] CPU: 1 PID: 4172 Comm: syz-executor Not tainted syzkaller #0 [ 107.694312][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.694721][ T3558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.704393][ T4172] Call Trace: [ 107.704403][ T4172] [ 107.704413][ T4172] dump_stack_lvl+0x188/0x250 [ 107.704446][ T4172] ? show_regs_print_info+0x20/0x20 [ 107.711532][ T3558] FAULT_INJECTION: forcing a failure. [ 107.711532][ T3558] name failslab, interval 1, probability 1, space 0, times 901 [ 107.714442][ T4172] ? load_image+0x410/0x410 [ 107.744581][ T4172] should_fail+0x383/0x4b0 [ 107.749027][ T4172] should_failslab+0x5/0x20 [ 107.753548][ T4172] slab_pre_alloc_hook+0x51/0xc0 [ 107.758507][ T4172] ? new_inode_pseudo+0x77/0x210 [ 107.763474][ T4172] kmem_cache_alloc+0x3d/0x280 [ 107.768284][ T4172] new_inode_pseudo+0x77/0x210 [ 107.773072][ T4172] create_pipe_files+0x4c/0x6b0 [ 107.777933][ T4172] ? __context_tracking_exit+0x4c/0x80 [ 107.780535][ T31] FAULT_INJECTION: forcing a failure. [ 107.780535][ T31] name failslab, interval 1, probability 1, space 0, times 901 [ 107.783409][ T4172] __do_pipe_flags+0x46/0x1f0 [ 107.800866][ T4172] do_pipe2+0xa7/0x190 [ 107.804955][ T4172] ? pipe_fcntl+0x530/0x530 [ 107.809480][ T4172] ? lock_chain_count+0x20/0x20 [ 107.814358][ T4172] ? syscall_enter_from_user_mode+0x21/0x70 [ 107.820275][ T4172] __x64_sys_pipe2+0x56/0x60 [ 107.824903][ T4172] do_syscall_64+0x4c/0xa0 [ 107.829335][ T4172] ? clear_bhb_loop+0x30/0x80 [ 107.834020][ T4172] ? clear_bhb_loop+0x30/0x80 [ 107.838739][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.844648][ T4172] RIP: 0033:0x7fb2b48deec9 [ 107.849092][ T4172] Code: 38 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 eb aa e8 ea 34 00 00 66 2e 0f 1f 84 00 00 00 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff [ 107.868720][ T4172] RSP: 002b:00007fff55db20b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 107.877142][ T4172] RAX: ffffffffffffffda RBX: 0000555559aac920 RCX: 00007fb2b48deec9 [ 107.885247][ T4172] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007fff55db20c8 [ 107.893233][ T4172] RBP: 00007fff55db2690 R08: 0000000000000820 R09: 0000000000000000 [ 107.901221][ T4172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff55db24d0 [ 107.909232][ T4172] R13: 0000555559aab8f0 R14: 0000555559aacb40 R15: 00007fff55db2210 [ 107.917235][ T4172] [ 107.920280][ T3851] CPU: 0 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 107.927326][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.937395][ T3851] Call Trace: [ 107.940707][ T3851] [ 107.943673][ T3851] dump_stack_lvl+0x188/0x250 [ 107.948398][ T3851] ? show_regs_print_info+0x20/0x20 [ 107.953624][ T3851] ? load_image+0x410/0x410 [ 107.958162][ T3851] should_fail+0x383/0x4b0 [ 107.962599][ T3851] should_failslab+0x5/0x20 [ 107.967121][ T3851] slab_pre_alloc_hook+0x51/0xc0 [ 107.972098][ T3851] ? anon_vma_clone+0xbc/0x4d0 [ 107.976912][ T3851] kmem_cache_alloc+0x3d/0x280 [ 107.981711][ T3851] anon_vma_clone+0xbc/0x4d0 [ 107.986355][ T3851] anon_vma_fork+0x85/0x520 [ 107.990878][ T3851] ? copy_mm+0x8b6/0x13d0 [ 107.995237][ T3851] ? dup_userfaultfd+0xa7/0x5e0 [ 107.998092][ T4227] FAULT_INJECTION: forcing a failure. [ 107.998092][ T4227] name failslab, interval 1, probability 1, space 0, times 901 [ 108.000121][ T3851] copy_mm+0x9df/0x13d0 [ 108.000158][ T3851] ? copy_signal+0x610/0x610 [ 108.022048][ T3851] ? __init_rwsem+0x11e/0x160 [ 108.026751][ T3851] ? copy_signal+0x501/0x610 [ 108.031359][ T3851] copy_process+0x17fb/0x3ec0 [ 108.036201][ T3851] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 108.042215][ T3851] ? __pidfd_prepare+0x140/0x140 [ 108.047186][ T3851] ? verify_lock_unused+0x140/0x140 [ 108.052415][ T3851] kernel_clone+0x23f/0x990 [ 108.056940][ T3851] ? create_io_thread+0x180/0x180 [ 108.062002][ T3851] __x64_sys_clone+0x19a/0x210 [ 108.066831][ T3851] ? __ia32_sys_vfork+0x130/0x130 [ 108.071885][ T3851] ? lockdep_hardirqs_on+0x94/0x140 [ 108.077106][ T3851] do_syscall_64+0x4c/0xa0 [ 108.081534][ T3851] ? clear_bhb_loop+0x30/0x80 [ 108.086230][ T3851] ? clear_bhb_loop+0x30/0x80 [ 108.090944][ T3851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.096855][ T3851] RIP: 0033:0x7f5127e62636 [ 108.101287][ T3851] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 108.120915][ T3851] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 108.129378][ T3851] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 108.137375][ T3851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 108.145357][ T3851] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 108.153353][ T3851] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 108.161349][ T3851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 108.169349][ T3851] [ 108.172386][ T4195] CPU: 1 PID: 4195 Comm: syz-executor Not tainted syzkaller #0 [ 108.179982][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.190078][ T4195] Call Trace: [ 108.193463][ T4195] [ 108.196411][ T4195] dump_stack_lvl+0x188/0x250 [ 108.201112][ T4195] ? show_regs_print_info+0x20/0x20 [ 108.206330][ T4195] ? load_image+0x410/0x410 [ 108.210857][ T4195] ? prandom_u32+0x217/0x250 [ 108.215473][ T4195] should_fail+0x383/0x4b0 [ 108.219916][ T4195] should_failslab+0x5/0x20 [ 108.224437][ T4195] slab_pre_alloc_hook+0x51/0xc0 [ 108.229395][ T4195] __kmalloc+0x6b/0x340 [ 108.233574][ T4195] ? tomoyo_encode+0x28a/0x550 [ 108.238378][ T4195] tomoyo_encode+0x28a/0x550 [ 108.243008][ T4195] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 108.248670][ T4195] tomoyo_path_perm+0x23f/0x5d0 [ 108.253541][ T4195] ? tomoyo_path_permission+0x3a0/0x3a0 [ 108.259125][ T4195] ? lock_chain_count+0x20/0x20 [ 108.260399][ T15] FAULT_INJECTION: forcing a failure. [ 108.260399][ T15] name failslab, interval 1, probability 1, space 0, times 900 [ 108.264003][ T4195] security_inode_getattr+0xcf/0x120 [ 108.282038][ T4195] vfs_getattr+0x26/0x3a0 [ 108.286411][ T4195] __x64_sys_newfstat+0x137/0x210 [ 108.291483][ T4195] ? __context_tracking_exit+0x4c/0x80 [ 108.296952][ T4195] ? __ia32_sys_newfstatat+0x200/0x200 [ 108.302434][ T4195] ? lock_chain_count+0x20/0x20 [ 108.307309][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 108.312524][ T4195] do_syscall_64+0x4c/0xa0 [ 108.316957][ T4195] ? clear_bhb_loop+0x30/0x80 [ 108.321643][ T4195] ? clear_bhb_loop+0x30/0x80 [ 108.326362][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.332290][ T4195] RIP: 0033:0x7f2b378b54a7 [ 108.336727][ T4195] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.356345][ T4195] RSP: 002b:00007ffe89f66468 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 108.364775][ T4195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2b378b54a7 [ 108.372785][ T4195] RDX: 0000000000000000 RSI: 00007ffe89f66470 RDI: 0000000000000003 [ 108.376912][ C0] FAULT_INJECTION: forcing a failure. [ 108.376912][ C0] name failslab, interval 1, probability 1, space 0, times 899 [ 108.380769][ T4195] RBP: 00007ffe89f6656c R08: 0000000000000000 R09: 0000000000000000 [ 108.380786][ T4195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 108.380799][ T4195] R13: 0000000000000000 R14: 0000000000011ce2 R15: 00007ffe89f665c0 [ 108.380854][ T4195] [ 108.420501][ C0] CPU: 0 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 108.423683][ C1] FAULT_INJECTION: forcing a failure. [ 108.423683][ C1] name failslab, interval 1, probability 1, space 0, times 899 [ 108.427453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.450272][ C0] Call Trace: [ 108.453586][ C0] [ 108.456445][ C0] dump_stack_lvl+0x188/0x250 [ 108.461145][ C0] ? show_regs_print_info+0x20/0x20 [ 108.466366][ C0] ? load_image+0x410/0x410 [ 108.470879][ C0] ? __lock_acquire+0x1305/0x7b50 [ 108.475920][ C0] ? prandom_u32+0x217/0x250 [ 108.480539][ C0] should_fail+0x383/0x4b0 [ 108.484975][ C0] should_failslab+0x5/0x20 [ 108.489491][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 108.494450][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 108.499666][ C0] ? __alloc_skb+0xf4/0x750 [ 108.504180][ C0] __alloc_skb+0xf4/0x750 [ 108.508525][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 108.513568][ C0] ? __alloc_skb+0x750/0x750 [ 108.518168][ C0] ? mark_lock+0x94/0x320 [ 108.522515][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 108.527998][ C0] ? verify_lock_unused+0x140/0x140 [ 108.533214][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 108.539213][ C0] ? verify_lock_unused+0x140/0x140 [ 108.544430][ C0] ? verify_lock_unused+0x140/0x140 [ 108.549650][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 108.555519][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 108.561006][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 108.566576][ C0] __iterate_interfaces+0x225/0x4c0 [ 108.571802][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 108.578115][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 108.584388][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 108.591432][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 108.596730][ C0] ? hw_scan_work+0xef0/0xef0 [ 108.601428][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 108.606663][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 108.611803][ C0] hrtimer_run_softirq+0x176/0x240 [ 108.616936][ C0] handle_softirqs+0x336/0x830 [ 108.621723][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 108.626595][ C0] ? do_softirq+0x210/0x210 [ 108.631114][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 108.636254][ C0] __irq_exit_rcu+0x13b/0x230 [ 108.640951][ C0] ? irq_exit_rcu+0x20/0x20 [ 108.645507][ C0] irq_exit_rcu+0x5/0x20 [ 108.649771][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 108.655427][ C0] [ 108.658374][ C0] [ 108.661327][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 108.667335][ C0] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 108.673514][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 108.693139][ C0] RSP: 0018:ffffc90002e7fa38 EFLAGS: 00000293 [ 108.699226][ C0] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807d4d9dc0 [ 108.707221][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 108.715209][ C0] RBP: ffffc90002e7fb30 R08: 0000000000000003 R09: 0000000000000004 [ 108.723195][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 108.731269][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cff4c [ 108.739257][ C0] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 108.744920][ C0] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 108.750572][ C0] dump_stack_lvl+0x161/0x250 [ 108.755296][ C0] ? show_regs_print_info+0x20/0x20 [ 108.760512][ C0] ? load_image+0x410/0x410 [ 108.765048][ C0] ? prandom_u32+0x217/0x250 [ 108.769661][ C0] should_fail+0x383/0x4b0 [ 108.774092][ C0] should_failslab+0x5/0x20 [ 108.778633][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 108.783602][ C0] ? getname_flags+0xb7/0x4f0 [ 108.788298][ C0] kmem_cache_alloc+0x3d/0x280 [ 108.793103][ C0] getname_flags+0xb7/0x4f0 [ 108.797622][ C0] user_path_at_empty+0x2a/0x190 [ 108.802611][ C0] vfs_statx+0x107/0x4c0 [ 108.806887][ C0] ? vfs_fstatat+0x40/0x40 [ 108.811327][ C0] __x64_sys_newfstatat+0x15f/0x200 [ 108.816543][ C0] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 108.821852][ C0] ? lock_chain_count+0x20/0x20 [ 108.826722][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 108.831939][ C0] do_syscall_64+0x4c/0xa0 [ 108.836400][ C0] ? clear_bhb_loop+0x30/0x80 [ 108.841085][ C0] ? clear_bhb_loop+0x30/0x80 [ 108.845777][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.851690][ C0] RIP: 0033:0x7f54747acb0a [ 108.856120][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 108.875750][ C0] RSP: 002b:00007fffcf4c4258 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 108.884199][ C0] RAX: ffffffffffffffda RBX: 0000565228314428 RCX: 00007f54747acb0a [ 108.892184][ C0] RDX: 00007fffcf4c4260 RSI: 0000565228302ed3 RDI: 00000000ffffff9c [ 108.900174][ C0] RBP: 000056525616a148 R08: 00063478c1c69200 R09: 0035ceabed5fb112 [ 108.908163][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.916149][ C0] R13: 00007fffcf4c4260 R14: 0000000000000000 R15: 00063478c1c69200 [ 108.924148][ C0] [ 108.927174][ C1] CPU: 1 PID: 4195 Comm: syz-executor Not tainted syzkaller #0 [ 108.929250][ T30] FAULT_INJECTION: forcing a failure. [ 108.929250][ T30] name failslab, interval 1, probability 1, space 0, times 898 [ 108.934777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.934793][ C1] Call Trace: [ 108.934801][ C1] [ 108.934812][ C1] dump_stack_lvl+0x188/0x250 [ 108.968472][ C1] ? show_regs_print_info+0x20/0x20 [ 108.973688][ C1] ? load_image+0x410/0x410 [ 108.978223][ C1] should_fail+0x383/0x4b0 [ 108.982757][ C1] should_failslab+0x5/0x20 [ 108.987286][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 108.992247][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 108.997989][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 109.002855][ C1] ? __alloc_skb+0xf4/0x750 [ 109.007399][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 109.012270][ C1] __alloc_skb+0x22c/0x750 [ 109.016720][ C1] ndisc_alloc_skb+0xa6/0x420 [ 109.021424][ C1] ndisc_send_rs+0x271/0x700 [ 109.026051][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 109.031030][ C1] addrconf_rs_timer+0x367/0x640 [ 109.035987][ C1] ? detach_timer+0x33/0x2b0 [ 109.040601][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.046694][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.052780][ C1] call_timer_fn+0x17b/0x540 [ 109.053986][ T4236] FAULT_INJECTION: forcing a failure. [ 109.053986][ T4236] name failslab, interval 1, probability 1, space 0, times 897 [ 109.057394][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.076248][ C1] ? __run_timers+0x810/0x810 [ 109.080955][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 109.086189][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 109.091395][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 109.097472][ C1] __run_timers+0x56c/0x810 [ 109.102003][ C1] ? detach_timer+0x2b0/0x2b0 [ 109.106695][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.112780][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 109.117636][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 109.123890][ C1] run_timer_softirq+0x63/0xf0 [ 109.128679][ C1] handle_softirqs+0x336/0x830 [ 109.133454][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 109.138311][ C1] ? do_softirq+0x210/0x210 [ 109.142820][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 109.147954][ C1] __irq_exit_rcu+0x13b/0x230 [ 109.152640][ C1] ? irq_exit_rcu+0x20/0x20 [ 109.157160][ C1] irq_exit_rcu+0x5/0x20 [ 109.161407][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 109.167055][ C1] [ 109.170093][ C1] [ 109.173037][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.179034][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 109.184530][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 109.196050][ C0] FAULT_INJECTION: forcing a failure. [ 109.196050][ C0] name failslab, interval 1, probability 1, space 0, times 897 [ 109.204162][ C1] RSP: 0018:ffffc90002f6f7e0 EFLAGS: 00000293 [ 109.204186][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff8880790fbb80 [ 109.204205][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.239089][ C1] RBP: ffffc90002f6f8e0 R08: 0000000000000003 R09: 0000000000000004 [ 109.247084][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 109.255071][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005edf00 [ 109.263071][ C1] ? dump_stack_lvl+0x204/0x250 [ 109.267952][ C1] ? show_regs_print_info+0x20/0x20 [ 109.273177][ C1] ? load_image+0x410/0x410 [ 109.277696][ C1] ? prandom_u32+0x217/0x250 [ 109.282303][ C1] should_fail+0x383/0x4b0 [ 109.286739][ C1] should_failslab+0x5/0x20 [ 109.291257][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 109.296297][ C1] __kmalloc+0x6b/0x340 [ 109.300464][ C1] ? tomoyo_encode+0x28a/0x550 [ 109.305260][ C1] tomoyo_encode+0x28a/0x550 [ 109.309877][ C1] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 109.315544][ C1] tomoyo_path_perm+0x23f/0x5d0 [ 109.320429][ C1] ? tomoyo_path_permission+0x3a0/0x3a0 [ 109.326011][ C1] ? lock_chain_count+0x20/0x20 [ 109.330909][ C1] security_inode_getattr+0xcf/0x120 [ 109.336208][ C1] vfs_getattr+0x26/0x3a0 [ 109.340565][ C1] __x64_sys_newfstat+0x137/0x210 [ 109.345625][ C1] ? __context_tracking_exit+0x4c/0x80 [ 109.351105][ C1] ? __ia32_sys_newfstatat+0x200/0x200 [ 109.356588][ C1] ? lock_chain_count+0x20/0x20 [ 109.361466][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 109.366685][ C1] do_syscall_64+0x4c/0xa0 [ 109.371128][ C1] ? clear_bhb_loop+0x30/0x80 [ 109.375817][ C1] ? clear_bhb_loop+0x30/0x80 [ 109.380511][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.386413][ C1] RIP: 0033:0x7f2b378b54a7 [ 109.390944][ C1] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 109.410661][ C1] RSP: 002b:00007ffe89f66468 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 109.419105][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2b378b54a7 [ 109.427098][ C1] RDX: 0000000000000000 RSI: 00007ffe89f66470 RDI: 0000000000000003 [ 109.435092][ C1] RBP: 00007ffe89f6656c R08: 0000000000000000 R09: 0000000000000000 [ 109.443093][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.451092][ C1] R13: 0000000000000000 R14: 0000000000011ce2 R15: 00007ffe89f665c0 [ 109.459101][ C1] [ 109.462146][ C0] CPU: 0 PID: 4175 Comm: kworker/0:3 Not tainted syzkaller #0 [ 109.469628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.479692][ C0] Workqueue: events once_deferred [ 109.484730][ C0] Call Trace: [ 109.488037][ C0] [ 109.490886][ C0] dump_stack_lvl+0x188/0x250 [ 109.495576][ C0] ? show_regs_print_info+0x20/0x20 [ 109.500790][ C0] ? load_image+0x410/0x410 [ 109.505311][ C0] ? prandom_u32+0x217/0x250 [ 109.509936][ C0] should_fail+0x383/0x4b0 [ 109.514365][ C0] should_failslab+0x5/0x20 [ 109.518877][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 109.523822][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 109.529045][ C0] ? __alloc_skb+0xf4/0x750 [ 109.533567][ C0] __alloc_skb+0xf4/0x750 [ 109.537907][ C0] skb_copy+0x122/0x6f0 [ 109.542079][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 109.548170][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 109.554328][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 109.560263][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 109.565737][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 109.571299][ C0] __iterate_interfaces+0x225/0x4c0 [ 109.576507][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 109.582753][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 109.589016][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 109.596053][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 109.601264][ C0] ? hw_scan_work+0xef0/0xef0 [ 109.605952][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 109.611170][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 109.616304][ C0] hrtimer_run_softirq+0x176/0x240 [ 109.621427][ C0] handle_softirqs+0x336/0x830 [ 109.626200][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 109.631055][ C0] ? do_softirq+0x210/0x210 [ 109.635564][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 109.640691][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 109.645901][ C0] __irq_exit_rcu+0x13b/0x230 [ 109.650585][ C0] ? irq_exit_rcu+0x20/0x20 [ 109.655112][ C0] irq_exit_rcu+0x5/0x20 [ 109.659356][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 109.664991][ C0] [ 109.667948][ C0] [ 109.670880][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.676867][ C0] RIP: 0010:smp_call_function_many_cond+0xba3/0xd80 [ 109.683464][ C0] Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 fb 73 0b 00 83 e3 01 75 07 e8 91 70 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 109.703087][ C0] RSP: 0018:ffffc900011df900 EFLAGS: 00000293 [ 109.709174][ C0] RAX: ffffffff816d9115 RBX: 0000000000000001 RCX: ffff88807a110000 [ 109.717148][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 109.725172][ C0] RBP: ffffc900011dfa40 R08: ffffffff901ee0c7 R09: 1ffffffff203dc18 [ 109.733160][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffff8880b903b3c0 [ 109.741148][ C0] R13: 1ffff110172280b9 R14: ffff8880b91405c8 R15: 0000000000000001 [ 109.749142][ C0] ? smp_call_function_many_cond+0xbc5/0xd80 [ 109.755145][ C0] ? text_poke_sync+0x20/0x20 [ 109.759838][ C0] ? smp_call_function_many+0x30/0x30 [ 109.765218][ C0] ? hash_by_src+0xa1/0x2c0 [ 109.769736][ C0] ? perf_event_bpf_output+0x320/0x320 [ 109.775202][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 109.780587][ C0] ? text_poke_sync+0x20/0x20 [ 109.785271][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 109.790403][ C0] text_poke_bp_batch+0x5a0/0x830 [ 109.795452][ C0] ? text_poke_loc_init+0x560/0x560 [ 109.800666][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 109.806821][ C0] ? __jump_label_update+0x39a/0x3c0 [ 109.812109][ C0] text_poke_finish+0x16/0x30 [ 109.816812][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 109.822798][ C0] static_key_disable_cpuslocked+0xbd/0x1a0 [ 109.828705][ C0] static_key_disable+0x16/0x20 [ 109.833556][ C0] once_deferred+0x6b/0xb0 [ 109.837999][ C0] process_one_work+0x867/0xff0 [ 109.842869][ C0] ? worker_detach_from_pool+0x240/0x240 [ 109.848512][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 109.853802][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.858864][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.864414][ C0] ? wq_worker_running+0x97/0x170 [ 109.869445][ C0] worker_thread+0xad7/0x12a0 [ 109.874136][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.880052][ C0] kthread+0x42e/0x520 [ 109.884152][ C0] ? rcu_lock_release+0x20/0x20 [ 109.889034][ C0] ? kthread_blkcg+0xd0/0xd0 [ 109.893638][ C0] ret_from_fork+0x1f/0x30 [ 109.898085][ C0] [ 109.902374][ T31] CPU: 0 PID: 31 Comm: kcompactd1 Not tainted syzkaller #0 [ 109.909616][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.914257][ C1] FAULT_INJECTION: forcing a failure. [ 109.914257][ C1] name failslab, interval 1, probability 1, space 0, times 895 [ 109.919703][ T31] Call Trace: [ 109.919715][ T31] [ 109.938710][ T31] dump_stack_lvl+0x188/0x250 [ 109.943422][ T31] ? show_regs_print_info+0x20/0x20 [ 109.948652][ T31] ? load_image+0x410/0x410 [ 109.953209][ T31] ? prandom_u32+0x217/0x250 [ 109.957858][ T31] should_fail+0x383/0x4b0 [ 109.962301][ T31] should_failslab+0x5/0x20 [ 109.966822][ T31] slab_pre_alloc_hook+0x51/0xc0 [ 109.971786][ T31] ? __debug_object_init+0x9b1/0xc80 [ 109.977092][ T31] kmem_cache_alloc+0x3d/0x280 [ 109.981880][ T31] __debug_object_init+0x9b1/0xc80 [ 109.987129][ T31] ? debug_object_init+0x10/0x10 [ 109.992113][ T31] schedule_timeout+0x12d/0x2d0 [ 109.997006][ T31] ? console_conditional_schedule+0x40/0x40 [ 110.002935][ T31] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 110.008867][ T31] ? prepare_to_wait_event+0x42c/0x460 [ 110.014370][ T31] kcompactd+0x87b/0x1ff0 [ 110.018754][ T31] ? finish_task_switch+0x12f/0x650 [ 110.023994][ T31] ? kcompactd_run+0x110/0x110 [ 110.028822][ T31] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.034838][ T31] ? lock_chain_count+0x20/0x20 [ 110.039721][ T31] ? __rwlock_init+0x140/0x140 [ 110.044517][ T31] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 110.050437][ T31] ? lockdep_hardirqs_on+0x94/0x140 [ 110.055661][ T31] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.061604][ T31] ? _raw_spin_unlock+0x40/0x40 [ 110.066477][ T31] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 110.072398][ T31] ? init_wait_entry+0xd0/0xd0 [ 110.077194][ T31] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.083117][ T31] ? __kthread_parkme+0x14e/0x1b0 [ 110.088169][ T31] kthread+0x42e/0x520 [ 110.092270][ T31] ? kcompactd_run+0x110/0x110 [ 110.097089][ T31] ? kthread_blkcg+0xd0/0xd0 [ 110.101702][ T31] ret_from_fork+0x1f/0x30 [ 110.106183][ T31] [ 110.109227][ C1] CPU: 1 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 110.116247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.126338][ C1] Call Trace: [ 110.129640][ C1] [ 110.131907][ T4195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.132513][ C1] dump_stack_lvl+0x188/0x250 [ 110.143929][ C1] ? do_syscall_64+0x4c/0xa0 [ 110.148546][ C1] ? show_regs_print_info+0x20/0x20 [ 110.153776][ C1] ? load_image+0x410/0x410 [ 110.158318][ C1] ? prandom_u32+0x217/0x250 [ 110.162942][ C1] should_fail+0x383/0x4b0 [ 110.167385][ C1] should_failslab+0x5/0x20 [ 110.171918][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 110.176878][ C1] kmem_cache_alloc_trace+0x47/0x290 [ 110.182190][ C1] ? dst_cow_metrics_generic+0x52/0x1b0 [ 110.187785][ C1] dst_cow_metrics_generic+0x52/0x1b0 [ 110.193186][ C1] icmp6_dst_alloc+0x2ca/0x470 [ 110.197988][ C1] ndisc_send_skb+0x3d1/0x1410 [ 110.202797][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 110.207788][ C1] ? ndisc_send_rs+0x524/0x700 [ 110.212584][ C1] addrconf_rs_timer+0x367/0x640 [ 110.217556][ C1] ? detach_timer+0x33/0x2b0 [ 110.222178][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.228281][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.234371][ C1] call_timer_fn+0x17b/0x540 [ 110.238987][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.245104][ C1] ? __run_timers+0x810/0x810 [ 110.249823][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 110.255044][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 110.260273][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 110.266370][ C1] __run_timers+0x56c/0x810 [ 110.270920][ C1] ? detach_timer+0x2b0/0x2b0 [ 110.275624][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.281637][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 110.286515][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 110.292785][ C1] run_timer_softirq+0x63/0xf0 [ 110.297577][ C1] handle_softirqs+0x336/0x830 [ 110.302373][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 110.307253][ C1] ? do_softirq+0x210/0x210 [ 110.311784][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 110.316946][ C1] __irq_exit_rcu+0x13b/0x230 [ 110.321649][ C1] ? irq_exit_rcu+0x20/0x20 [ 110.326195][ C1] irq_exit_rcu+0x5/0x20 [ 110.330472][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 110.336132][ C1] [ 110.339085][ C1] [ 110.342039][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.348053][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 110.353366][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 110.372993][ C1] RSP: 0018:ffffc90002e3f4e0 EFLAGS: 00000206 [ 110.379089][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3e7a647717016000 [ 110.387184][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 110.395181][ C1] RBP: ffffc90002e3f600 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 110.403176][ C1] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 110.411172][ C1] R13: 1ffff920005c7ea8 R14: 0000000000000246 R15: dffffc0000000000 [ 110.419202][ C1] ? read_lock_is_recursive+0x10/0x10 [ 110.424619][ C1] ? unwind_next_frame+0x11ec/0x1cf0 [ 110.429948][ C1] ? deref_stack_reg+0xd0/0x120 [ 110.434841][ C1] rcu_lock_acquire+0x2a/0x30 [ 110.439564][ C1] ? rcu_lock_acquire+0x5/0x30 [ 110.444357][ C1] is_bpf_text_address+0x1d/0x270 [ 110.449408][ C1] __kernel_text_address+0x9a/0x100 [ 110.454641][ C1] unwind_get_return_address+0x49/0x80 [ 110.460131][ C1] ? stack_trace_save+0xf0/0xf0 [ 110.465014][ C1] arch_stack_walk+0xf2/0x140 [ 110.469742][ C1] stack_trace_save+0xa6/0xf0 [ 110.474445][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 110.479598][ C1] save_stack+0x121/0x230 [ 110.483951][ C1] ? __reset_page_owner+0x180/0x180 [ 110.489170][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 110.494253][ C1] ? free_unref_page_prepare+0x637/0x6c0 [ 110.499913][ C1] ? free_unref_page_list+0x119/0x830 [ 110.505309][ C1] ? release_pages+0x185f/0x1bd0 [ 110.510281][ C1] ? tlb_finish_mmu+0x1b4/0x370 [ 110.515156][ C1] ? unmap_region+0x344/0x3b0 [ 110.519857][ C1] ? __do_munmap+0xa29/0xe10 [ 110.524472][ C1] ? __vm_munmap+0x13f/0x240 [ 110.529091][ C1] ? __x64_sys_munmap+0x67/0x70 [ 110.533970][ C1] ? do_syscall_64+0x4c/0xa0 [ 110.538582][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.544686][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 110.549558][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.555588][ C1] __reset_page_owner+0x51/0x180 [ 110.560568][ C1] free_unref_page_prepare+0x637/0x6c0 [ 110.566090][ C1] free_unref_page_list+0x119/0x830 [ 110.571328][ C1] ? uncharge_page+0x490/0x490 [ 110.576129][ C1] ? free_unref_page_commit+0x4c0/0x4c0 [ 110.581712][ C1] ? uncharge_page+0x246/0x490 [ 110.586512][ C1] release_pages+0x185f/0x1bd0 [ 110.591314][ C1] ? lru_cache_disable+0x30/0x30 [ 110.596276][ C1] ? free_swap_cache+0x1a1/0x2c0 [ 110.601259][ C1] tlb_finish_mmu+0x1b4/0x370 [ 110.605965][ C1] unmap_region+0x344/0x3b0 [ 110.610521][ C1] ? mmap_write_downgrade+0x40/0x40 [ 110.615759][ C1] ? vmacache_find+0x4f0/0x590 [ 110.620725][ C1] ? vmacache_update+0xa0/0x100 [ 110.625688][ C1] ? __vma_rb_erase+0xa1b/0xa30 [ 110.630571][ C1] ? validate_mm_rb+0x201/0x230 [ 110.635464][ C1] __do_munmap+0xa29/0xe10 [ 110.639916][ C1] __vm_munmap+0x13f/0x240 [ 110.644359][ C1] ? vm_munmap+0x20/0x20 [ 110.648641][ C1] ? blocking_notifier_call_chain+0x16a/0x1b0 [ 110.654738][ C1] __x64_sys_munmap+0x67/0x70 [ 110.659444][ C1] do_syscall_64+0x4c/0xa0 [ 110.663891][ C1] ? clear_bhb_loop+0x30/0x80 [ 110.668591][ C1] ? clear_bhb_loop+0x30/0x80 [ 110.673283][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.679191][ C1] RIP: 0033:0x7f54747b9097 [ 110.683629][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 110.703267][ C1] RSP: 002b:00007fffcf4bedd8 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 110.711713][ C1] RAX: ffffffffffffffda RBX: 00005652561891b0 RCX: 00007f54747b9097 [ 110.719707][ C1] RDX: 00005652561891f8 RSI: 0000000000000200 RDI: 00007f5473d02000 [ 110.727705][ C1] RBP: 0000000000000009 R08: 0000565256181110 R09: 0000000000000003 [ 110.735698][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00005652561650b0 [ 110.743695][ C1] R13: 00007f5474e9839c R14: 0000000000001200 R15: 0000000000000009 [ 110.751708][ C1] [ 110.754746][ T2] CPU: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 [ 110.761730][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.771823][ T2] Call Trace: [ 110.775133][ T2] [ 110.778094][ T2] dump_stack_lvl+0x188/0x250 [ 110.782815][ T2] ? show_regs_print_info+0x20/0x20 [ 110.788050][ T2] ? load_image+0x410/0x410 [ 110.792607][ T2] ? prandom_u32+0x217/0x250 [ 110.797234][ T2] should_fail+0x383/0x4b0 [ 110.801683][ T2] should_failslab+0x5/0x20 [ 110.806206][ T2] slab_pre_alloc_hook+0x51/0xc0 [ 110.811172][ T2] __kmalloc+0x6b/0x340 [ 110.815370][ T2] ? security_prepare_creds+0x47/0x130 [ 110.820853][ T2] ? prepare_creds+0x3c/0x610 [ 110.825567][ T2] security_prepare_creds+0x47/0x130 [ 110.830883][ T2] prepare_creds+0x450/0x610 [ 110.835513][ T2] copy_creds+0x146/0xce0 [ 110.839878][ T2] copy_process+0x8d7/0x3ec0 [ 110.844506][ T2] ? mark_lock+0x94/0x320 [ 110.848872][ T2] ? __pidfd_prepare+0x140/0x140 [ 110.853841][ T2] ? finish_lock_switch+0x12d/0x290 [ 110.859071][ T2] kernel_clone+0x23f/0x990 [ 110.863614][ T2] ? finish_task_switch+0x12f/0x650 [ 110.868853][ T2] ? create_io_thread+0x180/0x180 [ 110.873912][ T2] ? __schedule+0x11cb/0x4350 [ 110.878641][ T2] kernel_thread+0xfa/0x160 [ 110.883184][ T2] ? kthread_blkcg+0xd0/0xd0 [ 110.887806][ T2] ? ptrace_event_pid+0x310/0x310 [ 110.892864][ T2] ? kthread_blkcg+0xd0/0xd0 [ 110.897513][ T2] ? __rwlock_init+0x140/0x140 [ 110.902306][ T2] ? do_raw_spin_unlock+0x11d/0x230 [ 110.907643][ T2] kthreadd+0x539/0x700 [ 110.911827][ T2] ? kthread_stop+0x540/0x540 [ 110.916528][ T2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 110.921762][ T2] ? lockdep_hardirqs_on+0x94/0x140 [ 110.926997][ T2] ? kthread_stop+0x540/0x540 [ 110.931710][ T2] ret_from_fork+0x1f/0x30 [ 110.936275][ T2] [ 110.939348][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 110.946666][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.956740][ T21] Workqueue: events nsim_fib_event_work [ 110.962314][ T21] Call Trace: [ 110.965747][ T21] [ 110.968709][ T21] dump_stack_lvl+0x188/0x250 [ 110.973421][ T21] ? show_regs_print_info+0x20/0x20 [ 110.978653][ T21] ? load_image+0x410/0x410 [ 110.983203][ T21] ? prandom_u32+0x217/0x250 [ 110.987830][ T21] should_fail+0x383/0x4b0 [ 110.992278][ T21] should_failslab+0x5/0x20 [ 110.996830][ T21] slab_pre_alloc_hook+0x51/0xc0 [ 111.001793][ T21] kmem_cache_alloc_trace+0x47/0x290 [ 111.007092][ T21] ? nsim_fib_event_work+0x1171/0x3380 [ 111.012579][ T21] nsim_fib_event_work+0x1171/0x3380 [ 111.017908][ T21] ? verify_lock_unused+0x140/0x140 [ 111.023131][ T21] ? nsim_fib_create+0xac0/0xac0 [ 111.028101][ T21] ? verify_lock_unused+0x140/0x140 [ 111.033345][ T21] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.039349][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 111.044420][ T21] ? read_lock_is_recursive+0x10/0x10 [ 111.049806][ T21] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 111.055726][ T21] ? _raw_spin_unlock+0x40/0x40 [ 111.060597][ T21] ? _raw_spin_unlock_irq+0x1f/0x40 [ 111.065820][ T21] process_one_work+0x867/0xff0 [ 111.070702][ T21] ? worker_detach_from_pool+0x240/0x240 [ 111.076349][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 111.081693][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 111.086749][ T21] ? _raw_spin_lock_irqsave+0x100/0x100 [ 111.092309][ T21] ? wq_worker_running+0x97/0x170 [ 111.097357][ T21] worker_thread+0xd93/0x12a0 [ 111.102072][ T21] kthread+0x42e/0x520 [ 111.106157][ T21] ? rcu_lock_release+0x20/0x20 [ 111.111026][ T21] ? kthread_blkcg+0xd0/0xd0 [ 111.115631][ T21] ret_from_fork+0x1f/0x30 [ 111.120081][ T21] [ 111.123214][ T30] CPU: 0 PID: 30 Comm: kcompactd0 Not tainted syzkaller #0 [ 111.130445][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.131461][ T4229] FAULT_INJECTION: forcing a failure. [ 111.131461][ T4229] name failslab, interval 1, probability 1, space 0, times 892 [ 111.140516][ T30] Call Trace: [ 111.140525][ T30] [ 111.140534][ T30] dump_stack_lvl+0x188/0x250 [ 111.164254][ T30] ? show_regs_print_info+0x20/0x20 [ 111.169475][ T30] ? load_image+0x410/0x410 [ 111.174006][ T30] ? prandom_u32+0x217/0x250 [ 111.178622][ T30] should_fail+0x383/0x4b0 [ 111.183062][ T30] should_failslab+0x5/0x20 [ 111.187578][ T30] slab_pre_alloc_hook+0x51/0xc0 [ 111.192535][ T30] ? __debug_object_init+0x8e5/0xc80 [ 111.197841][ T30] kmem_cache_alloc+0x3d/0x280 [ 111.202626][ T30] __debug_object_init+0x8e5/0xc80 [ 111.207766][ T30] ? debug_object_init+0x10/0x10 [ 111.212740][ T30] schedule_timeout+0x12d/0x2d0 [ 111.217608][ T30] ? console_conditional_schedule+0x40/0x40 [ 111.223515][ T30] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 111.229432][ T30] ? prepare_to_wait_event+0x42c/0x460 [ 111.234928][ T30] kcompactd+0x87b/0x1ff0 [ 111.239301][ T30] ? finish_task_switch+0x12f/0x650 [ 111.244519][ T30] ? kcompactd_run+0x110/0x110 [ 111.249305][ T30] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.255303][ T30] ? lock_chain_count+0x20/0x20 [ 111.260171][ T30] ? __rwlock_init+0x140/0x140 [ 111.264956][ T30] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 111.270861][ T30] ? lockdep_hardirqs_on+0x94/0x140 [ 111.276071][ T30] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 111.281985][ T30] ? _raw_spin_unlock+0x40/0x40 [ 111.286846][ T30] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 111.292752][ T30] ? init_wait_entry+0xd0/0xd0 [ 111.297537][ T30] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 111.303445][ T30] ? __kthread_parkme+0x14e/0x1b0 [ 111.308495][ T30] kthread+0x42e/0x520 [ 111.312597][ T30] ? kcompactd_run+0x110/0x110 [ 111.317376][ T30] ? kthread_blkcg+0xd0/0xd0 [ 111.321983][ T30] ret_from_fork+0x1f/0x30 [ 111.326426][ T30] [ 111.329461][ T4229] CPU: 1 PID: 4229 Comm: kworker/1:5 Not tainted syzkaller #0 [ 111.336987][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.347067][ T4229] Workqueue: events nsim_dev_trap_report_work [ 111.353174][ T4229] Call Trace: [ 111.356462][ T4229] [ 111.359405][ T4229] dump_stack_lvl+0x188/0x250 [ 111.364187][ T4229] ? show_regs_print_info+0x20/0x20 [ 111.369410][ T4229] ? load_image+0x410/0x410 [ 111.373958][ T4229] ? prandom_u32+0x217/0x250 [ 111.378578][ T4229] should_fail+0x383/0x4b0 [ 111.383014][ T4229] should_failslab+0x5/0x20 [ 111.387536][ T4229] slab_pre_alloc_hook+0x51/0xc0 [ 111.392490][ T4229] __kmalloc_node_track_caller+0x68/0x3a0 [ 111.398233][ T4229] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 111.404057][ T4229] ? __alloc_skb+0xf4/0x750 [ 111.408624][ T4229] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 111.414456][ T4229] __alloc_skb+0x22c/0x750 [ 111.418897][ T4229] nsim_dev_trap_report_work+0x25c/0xab0 [ 111.424562][ T4229] process_one_work+0x867/0xff0 [ 111.429441][ T4229] ? worker_detach_from_pool+0x240/0x240 [ 111.435087][ T4229] ? lockdep_hardirqs_off+0x70/0x100 [ 111.440394][ T4229] ? _raw_spin_lock_irq+0xb7/0xf0 [ 111.445442][ T4229] ? _raw_spin_lock_irqsave+0x100/0x100 [ 111.451101][ T4229] ? wq_worker_running+0x97/0x170 [ 111.456225][ T4229] worker_thread+0xad7/0x12a0 [ 111.460980][ T4229] kthread+0x42e/0x520 [ 111.465067][ T4229] ? rcu_lock_release+0x20/0x20 [ 111.469942][ T4229] ? kthread_blkcg+0xd0/0xd0 [ 111.474549][ T4229] ret_from_fork+0x1f/0x30 [ 111.479001][ T4229] [ 111.482044][ T3547] CPU: 0 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 111.489017][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.499098][ T3547] Call Trace: [ 111.500275][ T3851] FAULT_INJECTION: forcing a failure. [ 111.500275][ T3851] name failslab, interval 1, probability 1, space 0, times 889 [ 111.502398][ T3547] [ 111.518115][ T3547] dump_stack_lvl+0x188/0x250 SYZFAIL: pipe failed (errno 23: Too many open files in system) [ 111.522861][ T3547] ? show_regs_print_info+0x20/0x20 [ 111.528113][ T3547] ? load_image+0x410/0x410 [ 111.532699][ T3547] ? prandom_u32+0x217/0x250 [ 111.537320][ T3547] should_fail+0x383/0x4b0 [ 111.541768][ T3547] should_failslab+0x5/0x20 [ 111.546292][ T3547] slab_pre_alloc_hook+0x51/0xc0 [ 111.550983][ C1] FAULT_INJECTION: forcing a failure. [ 111.550983][ C1] name failslab, interval 1, probability 1, space 0, times 889 [ 111.551253][ T3547] kmem_cache_alloc_trace+0x47/0x290 [ 111.569323][ T3547] ? syslog_print+0x108/0x8d0 [ 111.574043][ T3547] ? __lock_acquire+0x13dc/0x7b50 [ 111.579125][ T3547] syslog_print+0x108/0x8d0 [ 111.583668][ T3547] ? do_syslog+0x930/0x930 [ 111.588100][ T3547] ? aa_get_newest_label+0xf5/0x5a0 [ 111.593313][ T3547] ? verify_lock_unused+0x140/0x140 [ 111.598534][ T3547] ? end_current_label_crit_section+0x170/0x170 [ 111.604792][ T3547] ? __might_sleep+0xf0/0xf0 [ 111.609398][ T3547] ? apparmor_capable+0x12c/0x190 [ 111.614440][ T3547] ? bpf_lsm_capable+0x5/0x10 [ 111.619129][ T3547] ? security_capable+0x85/0xb0 [ 111.623997][ T3547] do_syslog+0x83f/0x930 [ 111.628272][ T3547] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 111.634006][ T3547] ? __lock_acquire+0x7b50/0x7b50 [ 111.639061][ T3547] ? lock_chain_count+0x20/0x20 [ 111.643933][ T3547] __x64_sys_syslog+0x78/0x90 [ 111.648624][ T3547] do_syscall_64+0x4c/0xa0 [ 111.653059][ T3547] ? clear_bhb_loop+0x30/0x80 [ 111.657750][ T3547] ? clear_bhb_loop+0x30/0x80 [ 111.662442][ T3547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.668357][ T3547] RIP: 0033:0x7f0f7905ca37 [ 111.672791][ T3547] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 111.692431][ T3547] RSP: 002b:00007ffeeb756618 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 111.700853][ T3547] RAX: ffffffffffffffda RBX: 00007f0f791fc490 RCX: 00007f0f7905ca37 [ 111.708843][ T3547] RDX: 00000000000003ff RSI: 00007f0f791fc490 RDI: 0000000000000002 [ 111.716832][ T3547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.724815][ T3547] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f0f791fc490 [ 111.732824][ T3547] R13: 00007f0f791d9dfe R14: 00007f0f791fc86b R15: 00007f0f791fc86b [ 111.740827][ T3547] [ 111.743862][ C1] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 111.750929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.760995][ C1] Call Trace: [ 111.764287][ C1] [ 111.767136][ C1] dump_stack_lvl+0x188/0x250 [ 111.771819][ C1] ? show_regs_print_info+0x20/0x20 [ 111.777077][ C1] ? load_image+0x410/0x410 [ 111.781590][ C1] ? prandom_u32+0x217/0x250 [ 111.786193][ C1] should_fail+0x383/0x4b0 [ 111.790612][ C1] should_failslab+0x5/0x20 [ 111.795132][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 111.800097][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 111.805314][ C1] ? __alloc_skb+0xf4/0x750 [ 111.809834][ C1] __alloc_skb+0xf4/0x750 [ 111.814172][ C1] skb_copy+0x122/0x6f0 [ 111.818342][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 111.824441][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 111.830611][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 111.836528][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 111.842011][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 111.847592][ C1] __iterate_interfaces+0x225/0x4c0 [ 111.852790][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 111.859044][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 111.865294][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 111.872454][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 111.877669][ C1] ? hw_scan_work+0xef0/0xef0 [ 111.882361][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 111.887594][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 111.892720][ C1] hrtimer_run_softirq+0x176/0x240 [ 111.897851][ C1] handle_softirqs+0x336/0x830 [ 111.902622][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 111.907493][ C1] ? do_softirq+0x210/0x210 [ 111.912010][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 111.917147][ C1] __irq_exit_rcu+0x13b/0x230 [ 111.921865][ C1] ? irq_exit_rcu+0x20/0x20 [ 111.926382][ C1] irq_exit_rcu+0x5/0x20 [ 111.930624][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 111.936271][ C1] [ 111.939204][ C1] [ 111.942138][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 111.948130][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 111.954376][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 111.973994][ C1] RSP: 0018:ffffc9000357f738 EFLAGS: 00000293 [ 111.980090][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88807f563b80 [ 111.988097][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 111.996086][ C1] RBP: ffffc9000357f830 R08: 0000000000000003 R09: 0000000000000004 [ 112.004057][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 112.012037][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006afeec [ 112.020027][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 112.025691][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 112.031341][ C1] dump_stack_lvl+0x161/0x250 [ 112.036031][ C1] ? show_regs_print_info+0x20/0x20 [ 112.041247][ C1] ? load_image+0x410/0x410 [ 112.045757][ C1] ? prandom_u32+0x217/0x250 [ 112.050356][ C1] should_fail+0x383/0x4b0 [ 112.054783][ C1] should_failslab+0x5/0x20 [ 112.059299][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 112.064256][ C1] ? anon_vma_fork+0xea/0x520 [ 112.068944][ C1] kmem_cache_alloc+0x3d/0x280 [ 112.073716][ C1] anon_vma_fork+0xea/0x520 [ 112.078230][ C1] ? copy_mm+0x8b6/0x13d0 [ 112.082560][ C1] ? dup_userfaultfd+0xa7/0x5e0 [ 112.087423][ C1] copy_mm+0x9df/0x13d0 [ 112.091587][ C1] ? copy_signal+0x610/0x610 [ 112.096183][ C1] ? __init_rwsem+0x11e/0x160 [ 112.100867][ C1] ? copy_signal+0x501/0x610 [ 112.105474][ C1] copy_process+0x17fb/0x3ec0 [ 112.110181][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 112.116178][ C1] ? __pidfd_prepare+0x140/0x140 [ 112.121139][ C1] ? verify_lock_unused+0x140/0x140 [ 112.126354][ C1] kernel_clone+0x23f/0x990 [ 112.130867][ C1] ? create_io_thread+0x180/0x180 [ 112.135908][ C1] __x64_sys_clone+0x19a/0x210 [ 112.140674][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 112.145730][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 112.150939][ C1] do_syscall_64+0x4c/0xa0 [ 112.155368][ C1] ? clear_bhb_loop+0x30/0x80 [ 112.160083][ C1] ? clear_bhb_loop+0x30/0x80 [ 112.164782][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.170694][ C1] RIP: 0033:0x7f5127e62636 [ 112.175122][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 112.194772][ C1] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.203213][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 112.211203][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 112.219215][ C1] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 112.227209][ C1] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 112.235202][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 112.243203][ C1] [ 112.246469][ C0] FAULT_INJECTION: forcing a failure. [ 112.246469][ C0] name failslab, interval 1, probability 1, space 0, times 888 [ 112.259298][ C0] CPU: 0 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 112.266251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.276313][ C0] Call Trace: [ 112.279606][ C0] [ 112.282450][ C0] dump_stack_lvl+0x188/0x250 [ 112.287143][ C0] ? show_regs_print_info+0x20/0x20 [ 112.292350][ C0] ? load_image+0x410/0x410 [ 112.296893][ C0] ? prandom_u32+0x217/0x250 [ 112.301496][ C0] should_fail+0x383/0x4b0 [ 112.305928][ C0] should_failslab+0x5/0x20 [ 112.310431][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 112.315386][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 112.320599][ C0] ? __alloc_skb+0xf4/0x750 [ 112.325157][ C0] __alloc_skb+0xf4/0x750 [ 112.329503][ C0] skb_copy+0x122/0x6f0 [ 112.333669][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 112.339764][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 112.345932][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 112.351841][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 112.357334][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 112.362888][ C0] __iterate_interfaces+0x225/0x4c0 [ 112.368122][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 112.374372][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 112.380652][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 112.387686][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 112.392889][ C0] ? hw_scan_work+0xef0/0xef0 [ 112.397610][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 112.402842][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 112.408003][ C0] hrtimer_run_softirq+0x176/0x240 [ 112.413138][ C0] handle_softirqs+0x336/0x830 [ 112.417933][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 112.422792][ C0] ? do_softirq+0x210/0x210 [ 112.427322][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 112.432446][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 112.437668][ C0] __irq_exit_rcu+0x13b/0x230 [ 112.442358][ C0] ? irq_exit_rcu+0x20/0x20 [ 112.446881][ C0] irq_exit_rcu+0x5/0x20 [ 112.451124][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 112.456799][ C0] [ 112.459736][ C0] [ 112.462679][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.468674][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 112.474579][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 112.494234][ C0] RSP: 0018:ffffc90002e6f800 EFLAGS: 00000286 [ 112.500323][ C0] RAX: d06f53cae69a7200 RBX: 0000000000000000 RCX: d06f53cae69a7200 [ 112.508304][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 112.516299][ C0] RBP: ffffc90002e6f8a0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 112.524285][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 112.532408][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cdf00 [ 112.540429][ C0] ? __cond_resched+0xd0/0xd0 [ 112.545136][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 112.550977][ C0] irqentry_exit+0x63/0x70 [ 112.555413][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.560890][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 112.566364][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 112.585982][ C0] RSP: 0018:ffffc90002e6f960 EFLAGS: 00000293 [ 112.592075][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d803b80 [ 112.600053][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.608048][ C0] RBP: ffffc90002e6fa50 R08: 0000000000000003 R09: 0000000000000004 [ 112.616113][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 112.624091][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cdf30 [ 112.632080][ C0] ? dump_stack_lvl+0x204/0x250 [ 112.636975][ C0] ? show_regs_print_info+0x20/0x20 [ 112.642197][ C0] ? load_image+0x410/0x410 [ 112.646720][ C0] ? prandom_u32+0x217/0x250 [ 112.651329][ C0] should_fail+0x383/0x4b0 [ 112.655764][ C0] should_failslab+0x5/0x20 [ 112.660270][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 112.665228][ C0] kmem_cache_alloc_trace+0x47/0x290 [ 112.670524][ C0] ? syslog_print+0x108/0x8d0 [ 112.675216][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 112.680266][ C0] syslog_print+0x108/0x8d0 [ 112.684781][ C0] ? do_syslog+0x930/0x930 [ 112.689209][ C0] ? aa_get_newest_label+0xf5/0x5a0 [ 112.694413][ C0] ? verify_lock_unused+0x140/0x140 [ 112.699625][ C0] ? end_current_label_crit_section+0x170/0x170 [ 112.705872][ C0] ? __might_sleep+0xf0/0xf0 [ 112.710479][ C0] ? apparmor_capable+0x12c/0x190 [ 112.715532][ C0] ? bpf_lsm_capable+0x5/0x10 [ 112.720223][ C0] ? security_capable+0x85/0xb0 [ 112.725096][ C0] do_syslog+0x83f/0x930 [ 112.729350][ C0] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 112.735077][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 112.740126][ C0] ? lock_chain_count+0x20/0x20 [ 112.745031][ C0] __x64_sys_syslog+0x78/0x90 [ 112.749720][ C0] do_syscall_64+0x4c/0xa0 [ 112.754140][ C0] ? clear_bhb_loop+0x30/0x80 [ 112.758823][ C0] ? clear_bhb_loop+0x30/0x80 [ 112.763504][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.769407][ C0] RIP: 0033:0x7f0f7905ca37 [ 112.773829][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 112.793440][ C0] RSP: 002b:00007ffeeb756618 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 112.801875][ C0] RAX: ffffffffffffffda RBX: 00007f0f791fc490 RCX: 00007f0f7905ca37 [ 112.809869][ C0] RDX: 00000000000003ff RSI: 00007f0f791fc490 RDI: 0000000000000002 [ 112.817835][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.825800][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f0f791fc490 [ 112.833772][ C0] R13: 00007f0f791d9dfe R14: 00007f0f791fc86b R15: 00007f0f791fc86b [ 112.841763][ C0] [ 112.845002][ T3851] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 112.845147][ C0] FAULT_INJECTION: forcing a failure. [ 112.845147][ C0] name failslab, interval 1, probability 1, space 0, times 887 [ 112.852062][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.852077][ T3851] Call Trace: [ 112.852085][ T3851] [ 112.852095][ T3851] dump_stack_lvl+0x188/0x250 [ 112.885814][ T3851] ? show_regs_print_info+0x20/0x20 [ 112.891173][ T3851] ? load_image+0x410/0x410 [ 112.895711][ T3851] ? prandom_u32+0x217/0x250 [ 112.900347][ T3851] should_fail+0x383/0x4b0 [ 112.904820][ T3851] should_failslab+0x5/0x20 [ 112.909349][ T3851] slab_pre_alloc_hook+0x51/0xc0 [ 112.914303][ T3851] ? anon_vma_fork+0xea/0x520 [ 112.918996][ T3851] kmem_cache_alloc+0x3d/0x280 [ 112.923791][ T3851] anon_vma_fork+0xea/0x520 [ 112.928326][ T3851] ? copy_mm+0x8b6/0x13d0 [ 112.932667][ T3851] ? dup_userfaultfd+0xa7/0x5e0 [ 112.937564][ T3851] copy_mm+0x9df/0x13d0 [ 112.941763][ T3851] ? copy_signal+0x610/0x610 [ 112.946369][ T3851] ? __init_rwsem+0x11e/0x160 [ 112.951069][ T3851] ? copy_signal+0x501/0x610 [ 112.955677][ T3851] copy_process+0x17fb/0x3ec0 [ 112.960391][ T3851] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 112.966408][ T3851] ? __pidfd_prepare+0x140/0x140 [ 112.971364][ T3851] ? verify_lock_unused+0x140/0x140 [ 112.976605][ T3851] kernel_clone+0x23f/0x990 [ 112.981136][ T3851] ? create_io_thread+0x180/0x180 [ 112.986189][ T3851] __x64_sys_clone+0x19a/0x210 [ 112.990968][ T3851] ? __ia32_sys_vfork+0x130/0x130 [ 112.996027][ T3851] ? lockdep_hardirqs_on+0x94/0x140 [ 113.001247][ T3851] do_syscall_64+0x4c/0xa0 [ 113.005687][ T3851] ? clear_bhb_loop+0x30/0x80 [ 113.010388][ T3851] ? clear_bhb_loop+0x30/0x80 [ 113.015080][ T3851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.020994][ T3851] RIP: 0033:0x7f5127e62636 [ 113.025424][ T3851] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 113.045047][ T3851] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 113.053478][ T3851] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 113.061472][ T3851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 113.069456][ T3851] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 113.077441][ T3851] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 113.085427][ T3851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 113.093425][ T3851] [ 113.096489][ C0] CPU: 0 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 113.097666][ C1] FAULT_INJECTION: forcing a failure. [ 113.097666][ C1] name failslab, interval 1, probability 1, space 0, times 887 [ 113.103455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.103470][ C0] Call Trace: [ 113.103484][ C0] [ 113.103493][ C0] dump_stack_lvl+0x188/0x250 [ 113.137120][ C0] ? show_regs_print_info+0x20/0x20 [ 113.142339][ C0] ? load_image+0x410/0x410 [ 113.146856][ C0] ? __lock_acquire+0x1305/0x7b50 [ 113.151899][ C0] ? prandom_u32+0x217/0x250 [ 113.156535][ C0] should_fail+0x383/0x4b0 [ 113.160979][ C0] should_failslab+0x5/0x20 [ 113.165499][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 113.170454][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 113.175662][ C0] ? __alloc_skb+0xf4/0x750 [ 113.180188][ C0] __alloc_skb+0xf4/0x750 [ 113.184534][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 113.189581][ C0] ? __alloc_skb+0x750/0x750 [ 113.194193][ C0] ? mark_lock+0x94/0x320 [ 113.198543][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 113.204025][ C0] ? verify_lock_unused+0x140/0x140 [ 113.209254][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 113.215260][ C0] ? verify_lock_unused+0x140/0x140 [ 113.220486][ C0] ? verify_lock_unused+0x140/0x140 [ 113.225717][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 113.231572][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 113.237049][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 113.242613][ C0] __iterate_interfaces+0x225/0x4c0 [ 113.247858][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.254119][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.260410][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 113.267465][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 113.272686][ C0] ? hw_scan_work+0xef0/0xef0 [ 113.277385][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 113.282642][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 113.287787][ C0] hrtimer_run_softirq+0x176/0x240 [ 113.292927][ C0] handle_softirqs+0x336/0x830 [ 113.297712][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 113.302584][ C0] ? do_softirq+0x210/0x210 [ 113.307122][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 113.312264][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 113.317477][ C0] __irq_exit_rcu+0x13b/0x230 [ 113.322165][ C0] ? irq_exit_rcu+0x20/0x20 [ 113.326695][ C0] irq_exit_rcu+0x5/0x20 [ 113.330953][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.336635][ C0] [ 113.339584][ C0] [ 113.342526][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.348645][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 113.354569][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 113.374219][ C0] RSP: 0018:ffffc90002e6f800 EFLAGS: 00000286 [ 113.380308][ C0] RAX: d06f53cae69a7200 RBX: 0000000000000000 RCX: d06f53cae69a7200 [ 113.388319][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 113.396305][ C0] RBP: ffffc90002e6f8a0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 113.404291][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 113.412284][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cdf00 [ 113.420310][ C0] ? __cond_resched+0xd0/0xd0 [ 113.425018][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 113.431090][ C0] irqentry_exit+0x63/0x70 [ 113.435549][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 113.441036][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 113.446523][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 113.466152][ C0] RSP: 0018:ffffc90002e6f960 EFLAGS: 00000293 [ 113.472245][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807d803b80 [ 113.480235][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.488217][ C0] RBP: ffffc90002e6fa50 R08: 0000000000000003 R09: 0000000000000004 [ 113.496225][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 113.504219][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cdf30 [ 113.512328][ C0] ? dump_stack_lvl+0x204/0x250 [ 113.517225][ C0] ? show_regs_print_info+0x20/0x20 [ 113.522445][ C0] ? load_image+0x410/0x410 [ 113.526975][ C0] ? prandom_u32+0x217/0x250 [ 113.531592][ C0] should_fail+0x383/0x4b0 [ 113.536036][ C0] should_failslab+0x5/0x20 [ 113.540585][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 113.545555][ C0] kmem_cache_alloc_trace+0x47/0x290 [ 113.550857][ C0] ? syslog_print+0x108/0x8d0 [ 113.555566][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 113.560612][ C0] syslog_print+0x108/0x8d0 [ 113.565172][ C0] ? do_syslog+0x930/0x930 [ 113.569782][ C0] ? aa_get_newest_label+0xf5/0x5a0 [ 113.574995][ C0] ? verify_lock_unused+0x140/0x140 [ 113.580211][ C0] ? end_current_label_crit_section+0x170/0x170 [ 113.586465][ C0] ? __might_sleep+0xf0/0xf0 [ 113.591078][ C0] ? apparmor_capable+0x12c/0x190 [ 113.596121][ C0] ? bpf_lsm_capable+0x5/0x10 [ 113.600815][ C0] ? security_capable+0x85/0xb0 [ 113.605682][ C0] do_syslog+0x83f/0x930 [ 113.609943][ C0] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 113.615682][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 113.620753][ C0] ? lock_chain_count+0x20/0x20 [ 113.625636][ C0] __x64_sys_syslog+0x78/0x90 [ 113.630331][ C0] do_syscall_64+0x4c/0xa0 [ 113.634784][ C0] ? clear_bhb_loop+0x30/0x80 [ 113.639478][ C0] ? clear_bhb_loop+0x30/0x80 [ 113.644171][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.650082][ C0] RIP: 0033:0x7f0f7905ca37 [ 113.654523][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 113.674237][ C0] RSP: 002b:00007ffeeb756618 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 113.682666][ C0] RAX: ffffffffffffffda RBX: 00007f0f791fc490 RCX: 00007f0f7905ca37 [ 113.690648][ C0] RDX: 00000000000003ff RSI: 00007f0f791fc490 RDI: 0000000000000002 [ 113.698662][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.706650][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f0f791fc490 [ 113.714634][ C0] R13: 00007f0f791d9dfe R14: 00007f0f791fc86b R15: 00007f0f791fc86b [ 113.722641][ C0] [ 113.725676][ C1] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 113.728530][ C0] FAULT_INJECTION: forcing a failure. [ 113.728530][ C0] name failslab, interval 1, probability 1, space 0, times 886 [ 113.732732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.732747][ C1] Call Trace: [ 113.732756][ C1] [ 113.732765][ C1] dump_stack_lvl+0x188/0x250 [ 113.766397][ C1] ? show_regs_print_info+0x20/0x20 [ 113.771615][ C1] ? load_image+0x410/0x410 [ 113.776138][ C1] ? __lock_acquire+0x1305/0x7b50 [ 113.781196][ C1] ? prandom_u32+0x217/0x250 [ 113.785813][ C1] should_fail+0x383/0x4b0 [ 113.790253][ C1] should_failslab+0x5/0x20 [ 113.794771][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 113.799724][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 113.804936][ C1] ? __alloc_skb+0xf4/0x750 [ 113.809461][ C1] __alloc_skb+0xf4/0x750 [ 113.813823][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 113.818866][ C1] ? __alloc_skb+0x750/0x750 [ 113.823550][ C1] ? mark_lock+0x94/0x320 [ 113.827904][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 113.833390][ C1] ? verify_lock_unused+0x140/0x140 [ 113.838628][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 113.844626][ C1] ? verify_lock_unused+0x140/0x140 [ 113.849839][ C1] ? verify_lock_unused+0x140/0x140 [ 113.855053][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 113.860894][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 113.866368][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 113.871934][ C1] __iterate_interfaces+0x225/0x4c0 [ 113.877171][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.883431][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.889688][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 113.896718][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 113.901929][ C1] ? hw_scan_work+0xef0/0xef0 [ 113.906621][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 113.911868][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 113.917150][ C1] hrtimer_run_softirq+0x176/0x240 [ 113.922312][ C1] handle_softirqs+0x336/0x830 [ 113.927104][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 113.932085][ C1] ? do_softirq+0x210/0x210 [ 113.936627][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 113.941763][ C1] __irq_exit_rcu+0x13b/0x230 [ 113.946467][ C1] ? irq_exit_rcu+0x20/0x20 [ 113.950998][ C1] irq_exit_rcu+0x5/0x20 [ 113.955291][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.960945][ C1] [ 113.963901][ C1] [ 113.966854][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.972854][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 113.978334][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 113.997969][ C1] RSP: 0018:ffffc9000357f740 EFLAGS: 00000293 [ 114.004070][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807f563b80 [ 114.012080][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.020088][ C1] RBP: ffffc9000357f830 R08: ffffffff901ee177 R09: 1ffffffff203dc2e [ 114.028086][ C1] R10: dffffc0000000000 R11: fffffbfff203dc2f R12: dffffc0000000004 [ 114.036086][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920006afeec [ 114.044091][ C1] ? dump_stack_lvl+0x204/0x250 [ 114.048971][ C1] ? show_regs_print_info+0x20/0x20 [ 114.054188][ C1] ? load_image+0x410/0x410 [ 114.058715][ C1] ? prandom_u32+0x217/0x250 [ 114.063329][ C1] should_fail+0x383/0x4b0 [ 114.067770][ C1] should_failslab+0x5/0x20 [ 114.072286][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 114.077241][ C1] ? anon_vma_fork+0xea/0x520 [ 114.081949][ C1] kmem_cache_alloc+0x3d/0x280 [ 114.086721][ C1] anon_vma_fork+0xea/0x520 [ 114.091231][ C1] ? copy_mm+0x8b6/0x13d0 [ 114.095576][ C1] ? dup_userfaultfd+0xa7/0x5e0 [ 114.100467][ C1] copy_mm+0x9df/0x13d0 [ 114.104649][ C1] ? copy_signal+0x610/0x610 [ 114.109256][ C1] ? __init_rwsem+0x11e/0x160 [ 114.113948][ C1] ? copy_signal+0x501/0x610 [ 114.118562][ C1] copy_process+0x17fb/0x3ec0 [ 114.123280][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 114.129285][ C1] ? __pidfd_prepare+0x140/0x140 [ 114.134240][ C1] ? verify_lock_unused+0x140/0x140 [ 114.139464][ C1] kernel_clone+0x23f/0x990 [ 114.143988][ C1] ? create_io_thread+0x180/0x180 [ 114.149042][ C1] __x64_sys_clone+0x19a/0x210 [ 114.153833][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 114.158884][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 114.164101][ C1] do_syscall_64+0x4c/0xa0 [ 114.168531][ C1] ? clear_bhb_loop+0x30/0x80 [ 114.173229][ C1] ? clear_bhb_loop+0x30/0x80 [ 114.177940][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.183873][ C1] RIP: 0033:0x7f5127e62636 [ 114.188310][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 114.207939][ C1] RSP: 002b:00007ffeb2e27fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.216380][ C1] RAX: ffffffffffffffda RBX: 00007ffeb2e27fe8 RCX: 00007f5127e62636 [ 114.224385][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 114.232376][ C1] RBP: 00007ffeb2e48530 R08: 0000000000000000 R09: 0000000000000001 [ 114.240361][ C1] R10: 00007f5127d8ea10 R11: 0000000000000246 R12: 00007ffeb2e28120 [ 114.248348][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000562b55ebdac0 [ 114.256348][ C1] [ 114.259387][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 114.266705][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.276778][ C0] Call Trace: [ 114.280051][ C0] [ 114.283029][ C0] dump_stack_lvl+0x188/0x250 [ 114.287720][ C0] ? show_regs_print_info+0x20/0x20 [ 114.292927][ C0] ? load_image+0x410/0x410 [ 114.297459][ C0] ? prandom_u32+0x217/0x250 [ 114.302059][ C0] should_fail+0x383/0x4b0 [ 114.306505][ C0] should_failslab+0x5/0x20 [ 114.311021][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 114.315980][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 114.321191][ C0] ? __alloc_skb+0xf4/0x750 [ 114.325715][ C0] __alloc_skb+0xf4/0x750 [ 114.330082][ C0] skb_copy+0x122/0x6f0 [ 114.334268][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 114.340362][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 114.346530][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 114.352446][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 114.357924][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 114.363475][ C0] __iterate_interfaces+0x225/0x4c0 [ 114.368708][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 114.374963][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 114.381244][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 114.388285][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 114.393665][ C0] ? hw_scan_work+0xef0/0xef0 [ 114.398406][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 114.403635][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 114.408800][ C0] hrtimer_run_softirq+0x176/0x240 [ 114.413944][ C0] handle_softirqs+0x336/0x830 [ 114.418735][ C0] ? run_ksoftirqd+0xa4/0x100 [ 114.423452][ C0] ? do_softirq+0x210/0x210 [ 114.427964][ C0] ? run_ksoftirqd+0x81/0x100 [ 114.432650][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 114.437854][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 114.443145][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 114.448403][ C0] run_ksoftirqd+0xa4/0x100 [ 114.452918][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 114.458140][ C0] smpboot_thread_fn+0x520/0x990 [ 114.463088][ C0] kthread+0x42e/0x520 [ 114.467157][ C0] ? cpu_report_death+0x180/0x180 [ 114.472185][ C0] ? kthread_blkcg+0xd0/0xd0 [ 114.476795][ C0] ret_from_fork+0x1f/0x30 [ 114.481220][ C0] [ 114.484572][ T3558] CPU: 0 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 114.491546][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.501628][ T3558] Call Trace: [ 114.504929][ T3558] [ 114.507874][ T3558] dump_stack_lvl+0x188/0x250 [ 114.512612][ T3558] ? show_regs_print_info+0x20/0x20 [ 114.517829][ T3558] ? load_image+0x410/0x410 [ 114.522361][ T3558] ? prandom_u32+0x217/0x250 [ 114.526981][ T3558] should_fail+0x383/0x4b0 [ 114.531434][ T3558] should_failslab+0x5/0x20 [ 114.535959][ T3558] slab_pre_alloc_hook+0x51/0xc0 [ 114.540929][ T3558] ? getname_flags+0xb7/0x4f0 [ 114.545627][ T3558] kmem_cache_alloc+0x3d/0x280 [ 114.550415][ T3558] getname_flags+0xb7/0x4f0 [ 114.554988][ T3558] user_path_at_empty+0x2a/0x190 [ 114.559972][ T3558] vfs_statx+0x107/0x4c0 [ 114.564262][ T3558] ? vfs_fstatat+0x40/0x40 [ 114.567709][ T4231] FAULT_INJECTION: forcing a failure. [ 114.567709][ T4231] name failslab, interval 1, probability 1, space 0, times 884 [ 114.568715][ T3558] __x64_sys_newfstatat+0x15f/0x200 [ 114.586672][ T3558] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 114.591986][ T3558] ? lock_chain_count+0x20/0x20 [ 114.596872][ T3558] ? lockdep_hardirqs_on+0x94/0x140 [ 114.602093][ T3558] do_syscall_64+0x4c/0xa0 [ 114.606534][ T3558] ? clear_bhb_loop+0x30/0x80 [ 114.611232][ T3558] ? clear_bhb_loop+0x30/0x80 [ 114.615931][ T3558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.621842][ T3558] RIP: 0033:0x7f54747acb0a [ 114.626277][ T3558] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 114.645904][ T3558] RSP: 002b:00007fffcf4c4258 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 114.654352][ T3558] RAX: ffffffffffffffda RBX: 0000565228314428 RCX: 00007f54747acb0a [ 114.662362][ T3558] RDX: 00007fffcf4c4260 RSI: 0000565228302ed3 RDI: 00000000ffffff9c [ 114.670354][ T3558] RBP: 000056525616a148 R08: 00063478c1c69200 R09: 0035ceabed5fb112 [ 114.678336][ T3558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.686437][ T3558] R13: 00007fffcf4c4260 R14: 0000000000000000 R15: 00063478c1c69200 [ 114.694445][ T3558] [ 114.697478][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 114.704997][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.715086][ T4231] Workqueue: events nsim_dev_trap_report_work [ 114.721201][ T4231] Call Trace: [ 114.724501][ T4231] [ 114.727458][ T4231] dump_stack_lvl+0x188/0x250 [ 114.732191][ T4231] ? show_regs_print_info+0x20/0x20 [ 114.737430][ T4231] ? load_image+0x410/0x410 [ 114.741964][ T4231] ? prandom_u32+0x217/0x250 [ 114.746644][ T4231] should_fail+0x383/0x4b0 [ 114.751090][ T4231] should_failslab+0x5/0x20 [ 114.755616][ T4231] slab_pre_alloc_hook+0x51/0xc0 [ 114.760578][ T4231] __kmalloc_node_track_caller+0x68/0x3a0 [ 114.766317][ T4231] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 114.772143][ T4231] ? __alloc_skb+0xf4/0x750 [ 114.776667][ T4231] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 114.782491][ T4231] __alloc_skb+0x22c/0x750 [ 114.786942][ T4231] nsim_dev_trap_report_work+0x25c/0xab0 [ 114.792617][ T4231] process_one_work+0x867/0xff0 [ 114.797501][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 114.803152][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 114.808457][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 114.813500][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 114.819075][ T4231] ? wq_worker_running+0x97/0x170 [ 114.824118][ T4231] worker_thread+0xad7/0x12a0 [ 114.828842][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 114.834759][ T4231] kthread+0x42e/0x520 [ 114.838840][ T4231] ? rcu_lock_release+0x20/0x20 [ 114.843711][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 114.848343][ T4231] ret_from_fork+0x1f/0x30 [ 114.852789][ T4231] [ 114.855828][ T4227] CPU: 0 PID: 4227 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 114.863402][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.864326][ T4171] FAULT_INJECTION: forcing a failure. [ 114.864326][ T4171] name failslab, interval 1, probability 1, space 0, times 883 [ 114.873476][ T4227] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 114.873507][ T4227] Call Trace: [ 114.899439][ T4227] [ 114.902399][ T4227] dump_stack_lvl+0x188/0x250 [ 114.907115][ T4227] ? show_regs_print_info+0x20/0x20 [ 114.912369][ T4227] ? load_image+0x410/0x410 [ 114.916921][ T4227] ? mark_lock+0x94/0x320 [ 114.921282][ T4227] ? prandom_u32+0x217/0x250 [ 114.925900][ T4227] should_fail+0x383/0x4b0 [ 114.930348][ T4227] should_failslab+0x5/0x20 [ 114.934901][ T4227] slab_pre_alloc_hook+0x51/0xc0 [ 114.939866][ T4227] kmem_cache_alloc_node+0x47/0x2c0 [ 114.945109][ T4227] ? __alloc_skb+0xf4/0x750 [ 114.949636][ T4227] __alloc_skb+0xf4/0x750 [ 114.953995][ T4227] wg_socket_send_buffer_to_peer+0x34/0x170 [ 114.959906][ T4227] ? ktime_get_coarse_with_offset+0x141/0x190 [ 114.966002][ T4227] wg_packet_handshake_send_worker+0x203/0x360 [ 114.972208][ T4227] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 114.977691][ T4227] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 114.983593][ T4227] ? _raw_spin_unlock+0x40/0x40 [ 114.988457][ T4227] ? _raw_spin_unlock_irq+0x1f/0x40 [ 114.993716][ T4227] process_one_work+0x867/0xff0 [ 114.998605][ T4227] ? worker_detach_from_pool+0x240/0x240 [ 115.004283][ T4227] ? lockdep_hardirqs_off+0x70/0x100 [ 115.009612][ T4227] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.014665][ T4227] ? _raw_spin_lock_irqsave+0x100/0x100 [ 115.020248][ T4227] ? wq_worker_running+0x97/0x170 [ 115.025296][ T4227] worker_thread+0xad7/0x12a0 [ 115.030018][ T4227] kthread+0x42e/0x520 [ 115.034111][ T4227] ? rcu_lock_release+0x20/0x20 [ 115.038983][ T4227] ? kthread_blkcg+0xd0/0xd0 [ 115.043599][ T4227] ret_from_fork+0x1f/0x30 [ 115.048058][ T4227] [ 115.051095][ T3850] CPU: 1 PID: 3850 Comm: dhcpcd Not tainted syzkaller #0 [ 115.058157][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.068243][ T3850] Call Trace: [ 115.071562][ T3850] [ 115.074512][ T3850] dump_stack_lvl+0x188/0x250 [ 115.079217][ T3850] ? show_regs_print_info+0x20/0x20 [ 115.084442][ T3850] ? load_image+0x410/0x410 [ 115.088978][ T3850] ? prandom_u32+0x217/0x250 [ 115.093593][ T3850] should_fail+0x383/0x4b0 [ 115.098042][ T3850] should_failslab+0x5/0x20 [ 115.102566][ T3850] slab_pre_alloc_hook+0x51/0xc0 [ 115.107524][ T3850] __kmalloc+0x6b/0x340 [ 115.111706][ T3850] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 115.117446][ T3850] tomoyo_realpath_from_path+0xed/0x5e0 [ 115.123021][ T3850] tomoyo_path_number_perm+0x251/0x6b0 [ 115.128497][ T3850] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 115.133980][ T3850] ? __seccomp_filter+0x842/0x1a00 [ 115.139116][ T3850] ? file_end_write+0xd8/0x250 [ 115.143924][ T3850] ? __secure_computing+0x2f0/0x2f0 [ 115.149171][ T3850] ? __lock_acquire+0x7b50/0x7b50 [ 115.154224][ T3850] ? lock_chain_count+0x20/0x20 [ 115.159101][ T3850] security_file_ioctl+0x6c/0xa0 [ 115.164072][ T3850] __se_sys_ioctl+0x48/0x170 [ 115.168707][ T3850] do_syscall_64+0x4c/0xa0 [ 115.173148][ T3850] ? clear_bhb_loop+0x30/0x80 [ 115.177844][ T3850] ? clear_bhb_loop+0x30/0x80 [ 115.182552][ T3850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.188463][ T3850] RIP: 0033:0x7f5127e8e378 [ 115.192921][ T3850] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 115.212661][ T3850] RSP: 002b:00007ffeb2e48168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.221101][ T3850] RAX: ffffffffffffffda RBX: 0000562b6806e850 RCX: 00007f5127e8e378 [ 115.229098][ T3850] RDX: 00007ffeb2e48170 RSI: 0000000000008921 RDI: 000000000000000f [ 115.237095][ T3850] RBP: 00007ffeb2e48170 R08: 0000000000000000 R09: 0000000000000000 [ 115.245086][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000562b68072310 [ 115.253080][ T3850] R13: 0000562b6806e850 R14: 0000562b68072310 R15: 00007ffeb2e483c0 [ 115.261170][ T3850] [ 115.264202][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 115.271689][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.281761][ T144] Workqueue: events_unbound cfg80211_wiphy_work [ 115.288021][ T144] Call Trace: [ 115.291310][ T144] [ 115.297126][ T144] dump_stack_lvl+0x188/0x250 [ 115.301836][ T144] ? show_regs_print_info+0x20/0x20 [ 115.307061][ T144] ? load_image+0x410/0x410 [ 115.317097][ T144] should_fail+0x383/0x4b0 [ 115.323906][ T144] should_failslab+0x5/0x20 [ 115.328445][ T144] slab_pre_alloc_hook+0x51/0xc0 [ 115.333408][ T144] __kmalloc+0x6b/0x340 [ 115.337586][ T144] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 115.343953][ T144] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 115.350160][ T144] ? verify_lock_unused+0x140/0x140 [ 115.355407][ T144] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 115.361515][ T144] ? __lock_acquire+0x7b50/0x7b50 [ 115.366579][ T144] ieee80211_bss_info_update+0x6ba/0xa80 [ 115.372268][ T144] ? ieee80211_rx_bss_put+0x60/0x60 [ 115.377504][ T144] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 115.383339][ T144] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 115.389540][ T144] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 115.395275][ T144] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 115.401198][ T144] ? lockdep_hardirqs_on+0x94/0x140 [ 115.406421][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 115.412357][ T144] ? _raw_spin_unlock+0x40/0x40 [ 115.417231][ T144] ? kcov_remote_start+0x6a/0x490 [ 115.422285][ T144] ? kcov_remote_start+0xfa/0x490 [ 115.427345][ T144] ieee80211_iface_work+0x714/0xc50 [ 115.432575][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 115.437798][ T144] cfg80211_wiphy_work+0x224/0x260 [ 115.442956][ T144] process_one_work+0x867/0xff0 [ 115.447859][ T144] ? worker_detach_from_pool+0x240/0x240 [ 115.453524][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 115.458836][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.463880][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 115.469447][ T144] ? wq_worker_running+0x97/0x170 [ 115.472812][ T4231] FAULT_INJECTION: forcing a failure. [ 115.472812][ T4231] name failslab, interval 1, probability 1, space 0, times 882 [ 115.474520][ T144] worker_thread+0xad7/0x12a0 [ 115.492078][ T144] kthread+0x42e/0x520 [ 115.496166][ T144] ? rcu_lock_release+0x20/0x20 [ 115.501032][ T144] ? kthread_blkcg+0xd0/0xd0 [ 115.505656][ T144] ret_from_fork+0x1f/0x30 [ 115.510108][ T144] [ 115.513145][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 115.520630][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.530706][ T4231] Workqueue: events nsim_dev_trap_report_work [ 115.536813][ T4231] Call Trace: [ 115.540116][ T4231] [ 115.543069][ T4231] dump_stack_lvl+0x188/0x250 [ 115.547771][ T4231] ? show_regs_print_info+0x20/0x20 [ 115.552991][ T4231] ? load_image+0x410/0x410 [ 115.557514][ T4231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.563513][ T4231] ? prandom_u32+0x217/0x250 [ 115.568128][ T4231] should_fail+0x383/0x4b0 [ 115.572557][ T4231] should_failslab+0x5/0x20 [ 115.577088][ T4231] slab_pre_alloc_hook+0x51/0xc0 [ 115.582043][ T4231] kmem_cache_alloc_node+0x47/0x2c0 [ 115.587251][ T4231] ? __alloc_skb+0xf4/0x750 [ 115.591804][ T4231] __alloc_skb+0xf4/0x750 [ 115.596156][ T4231] nsim_dev_trap_report_work+0x25c/0xab0 [ 115.601830][ T4231] process_one_work+0x867/0xff0 [ 115.606709][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 115.612358][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 115.617673][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.622719][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 115.628280][ T4231] ? wq_worker_running+0x97/0x170 [ 115.633371][ T4231] worker_thread+0xad7/0x12a0 [ 115.638078][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 115.643993][ T4231] kthread+0x42e/0x520 [ 115.648075][ T4231] ? rcu_lock_release+0x20/0x20 [ 115.652930][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 115.657566][ T4231] ret_from_fork+0x1f/0x30 [ 115.662026][ T4231] [ 115.665069][ T4236] CPU: 0 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 115.672644][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.680166][ T3850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.682709][ T4236] Workqueue: events_unbound cfg80211_wiphy_work [ 115.695621][ T4236] Call Trace: [ 115.698929][ T4236] [ 115.701882][ T4236] dump_stack_lvl+0x188/0x250 [ 115.702332][ T3850] FAULT_INJECTION: forcing a failure. [ 115.702332][ T3850] name failslab, interval 1, probability 1, space 0, times 880 [ 115.706594][ T4236] ? show_regs_print_info+0x20/0x20 [ 115.724568][ T4236] ? load_image+0x410/0x410 [ 115.729102][ T4236] ? prandom_u32+0x217/0x250 [ 115.733722][ T4236] should_fail+0x383/0x4b0 [ 115.738162][ T4236] should_failslab+0x5/0x20 [ 115.742684][ T4236] slab_pre_alloc_hook+0x51/0xc0 [ 115.747640][ T4236] ? __debug_object_init+0x929/0xc80 [ 115.752953][ T4236] kmem_cache_alloc+0x3d/0x280 [ 115.757739][ T4236] __debug_object_init+0x929/0xc80 [ 115.762871][ T4236] ? lockdep_init_map_type+0x98/0x900 [ 115.768264][ T4236] ? debug_object_init+0x10/0x10 [ 115.773238][ T4236] ? __raw_spin_lock_init+0x41/0x100 [ 115.778546][ T4236] sta_info_alloc+0x1a4/0x1d30 [ 115.783353][ T4236] ieee80211_ibss_add_sta+0x568/0x810 [ 115.788750][ T4236] ieee80211_ibss_rx_queued_mgmt+0x13ad/0x2b50 [ 115.794965][ T4236] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 115.800701][ T4236] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 115.806614][ T4236] ? lockdep_hardirqs_on+0x94/0x140 [ 115.811832][ T4236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 115.817744][ T4236] ? _raw_spin_unlock+0x40/0x40 [ 115.822635][ T4236] ? kcov_remote_start+0x6a/0x490 [ 115.827678][ T4236] ? kcov_remote_start+0xfa/0x490 [ 115.832726][ T4236] ieee80211_iface_work+0x714/0xc50 [ 115.837948][ T4236] ? _raw_spin_unlock_irq+0x1f/0x40 [ 115.843163][ T4236] cfg80211_wiphy_work+0x224/0x260 [ 115.848297][ T4236] process_one_work+0x867/0xff0 [ 115.853177][ T4236] ? worker_detach_from_pool+0x240/0x240 [ 115.858830][ T4236] ? lockdep_hardirqs_off+0x70/0x100 [ 115.864150][ T4236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.869194][ T4236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 115.874773][ T4236] ? wq_worker_running+0x97/0x170 [ 115.879903][ T4236] worker_thread+0xad7/0x12a0 [ 115.884614][ T4236] kthread+0x42e/0x520 [ 115.888695][ T4236] ? rcu_lock_release+0x20/0x20 [ 115.893556][ T4236] ? kthread_blkcg+0xd0/0xd0 [ 115.898301][ T4236] ret_from_fork+0x1f/0x30 [ 115.902774][ T4236] [ 115.905816][ T4171] CPU: 1 PID: 4171 Comm: sshd-session Not tainted syzkaller #0 [ 115.910201][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.913407][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.933901][ T4171] Call Trace: [ 115.937241][ T4171] [ 115.940197][ T4171] dump_stack_lvl+0x188/0x250 [ 115.944925][ T4171] ? show_regs_print_info+0x20/0x20 [ 115.950152][ T4171] ? load_image+0x410/0x410 [ 115.954687][ T4171] ? prandom_u32+0x217/0x250 [ 115.959313][ T4171] should_fail+0x383/0x4b0 [ 115.963769][ T4171] should_failslab+0x5/0x20 [ 115.968306][ T4171] slab_pre_alloc_hook+0x51/0xc0 [ 115.973364][ T4171] ? __debug_object_init+0x8c3/0xc80 [ 115.978683][ T4171] kmem_cache_alloc+0x3d/0x280 [ 115.980200][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.983477][ T4171] __debug_object_init+0x8c3/0xc80 [ 115.998422][ T4171] ? debug_object_init+0x10/0x10 [ 116.003405][ T4171] ? lock_chain_count+0x20/0x20 [ 116.008286][ T4171] ? lockdep_hardirqs_off+0x70/0x100 [ 116.013603][ T4171] schedule_hrtimeout_range_clock+0x14c/0x590 [ 116.019692][ T4171] ? lockdep_hardirqs_on+0x94/0x140 [ 116.024926][ T4171] ? hrtimer_nanosleep_restart+0x300/0x300 [ 116.030890][ T4171] ? tcp_poll+0x961/0xe20 [ 116.033286][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.035258][ T4171] poll_schedule_timeout+0x10b/0x150 [ 116.047747][ T4171] do_sys_poll+0x7d1/0x11a0 [ 116.052287][ T4171] ? poll_select_finish+0x5d0/0x5d0 [ 116.057504][ T4171] ? __lock_acquire+0x13dc/0x7b50 [ 116.062562][ T4171] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 116.068968][ T4171] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 116.075314][ T4171] ? set_user_sigmask+0x15d/0x1c0 [ 116.080379][ T4171] ? sigprocmask+0x190/0x190 [ 116.084996][ T4171] ? __context_tracking_exit+0x4c/0x80 [ 116.090490][ T4171] __se_sys_ppoll+0x206/0x2a0 [ 116.095195][ T4171] ? __x64_sys_ppoll+0xc0/0xc0 [ 116.100001][ T4171] ? lockdep_hardirqs_on+0x94/0x140 [ 116.105224][ T4171] ? __x64_sys_ppoll+0x1c/0xc0 [ 116.110011][ T4171] do_syscall_64+0x4c/0xa0 [ 116.114437][ T4171] ? clear_bhb_loop+0x30/0x80 [ 116.119134][ T4171] ? clear_bhb_loop+0x30/0x80 [ 116.123845][ T4171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.129772][ T4171] RIP: 0033:0x7f03b6405407 [ 116.134215][ T4171] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 116.153847][ T4171] RSP: 002b:00007fff46c08c10 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 116.162305][ T4171] RAX: ffffffffffffffda RBX: 00007f03b6311300 RCX: 00007f03b6405407 [ 116.170313][ T4171] RDX: 00007fff46c08c50 RSI: 0000000000000002 RDI: 000055a0a2a91180 [ 116.178334][ T4171] RBP: 00007fff46c08cc0 R08: 0000000000000008 R09: 0000000000000000 [ 116.186356][ T4171] R10: 00007fff46c08d50 R11: 0000000000000202 R12: 0000000000000001 [ 116.194352][ T4171] R13: 00007fff46c08d50 R14: 0000000000000072 R15: 0000000000000004 [ 116.202477][ T4171] [ 116.206065][ T3850] CPU: 1 PID: 3850 Comm: dhcpcd Not tainted syzkaller #0 [ 116.210404][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.213124][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.230394][ T3850] Call Trace: [ 116.233812][ T3850] [ 116.236769][ T3850] dump_stack_lvl+0x188/0x250 [ 116.241477][ T3850] ? show_regs_print_info+0x20/0x20 [ 116.246710][ T3850] ? load_image+0x410/0x410 [ 116.251247][ T3850] ? prandom_u32+0x217/0x250 [ 116.252410][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.255884][ T3850] should_fail+0x383/0x4b0 [ 116.268311][ T3850] should_failslab+0x5/0x20 [ 116.272850][ T3850] slab_pre_alloc_hook+0x51/0xc0 [ 116.277818][ T3850] __kmalloc+0x6b/0x340 [ 116.281996][ T3850] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 116.287748][ T3850] tomoyo_realpath_from_path+0xed/0x5e0 [ 116.293324][ T3850] tomoyo_path_number_perm+0x251/0x6b0 [ 116.298815][ T3850] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 116.304292][ T3850] ? __seccomp_filter+0x842/0x1a00 [ 116.309564][ T3850] ? file_end_write+0xd8/0x250 [ 116.314375][ T3850] ? __secure_computing+0x2f0/0x2f0 [ 116.319635][ T3850] ? __lock_acquire+0x7b50/0x7b50 [ 116.324189][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.324704][ T3850] ? lock_chain_count+0x20/0x20 [ 116.337632][ T3850] security_file_ioctl+0x6c/0xa0 [ 116.342598][ T3850] __se_sys_ioctl+0x48/0x170 [ 116.347211][ T3850] do_syscall_64+0x4c/0xa0 [ 116.351651][ T3850] ? clear_bhb_loop+0x30/0x80 [ 116.356356][ T3850] ? clear_bhb_loop+0x30/0x80 [ 116.361061][ T3850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.366984][ T3850] RIP: 0033:0x7f5127e8e378 [ 116.371426][ T3850] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 116.391051][ T3850] RSP: 002b:00007ffeb2e48168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.398148][ T4176] FAULT_INJECTION: forcing a failure. [ 116.398148][ T4176] name failslab, interval 1, probability 1, space 0, times 878 [ 116.399495][ T3850] RAX: ffffffffffffffda RBX: 0000562b68070df0 RCX: 00007f5127e8e378 [ 116.399517][ T3850] RDX: 00007ffeb2e48170 RSI: 0000000000008921 RDI: 000000000000000f [ 116.414920][ T13] FAULT_INJECTION: forcing a failure. [ 116.414920][ T13] name failslab, interval 1, probability 1, space 0, times 878 [ 116.420469][ T3850] RBP: 00007ffeb2e48170 R08: 0000000000000000 R09: 0000000000000000 [ 116.420488][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000562b68072d80 [ 116.420504][ T3850] R13: 0000562b68070df0 R14: 0000562b68072d80 R15: 00007ffeb2e483c0 [ 116.465178][ T3850] [ 116.468216][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0 [ 116.475527][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.485608][ T13] Workqueue: events nsim_dev_trap_report_work [ 116.491716][ T13] Call Trace: [ 116.495016][ T13] [ 116.497973][ T13] dump_stack_lvl+0x188/0x250 [ 116.502679][ T13] ? show_regs_print_info+0x20/0x20 [ 116.507904][ T13] ? load_image+0x410/0x410 [ 116.512440][ T13] ? prandom_u32+0x217/0x250 [ 116.517075][ T13] should_fail+0x383/0x4b0 [ 116.521522][ T13] should_failslab+0x5/0x20 [ 116.526054][ T13] slab_pre_alloc_hook+0x51/0xc0 [ 116.531031][ T13] __kmalloc_node_track_caller+0x68/0x3a0 [ 116.536771][ T13] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 116.542601][ T13] ? __alloc_skb+0xf4/0x750 [ 116.547129][ T13] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 116.552960][ T13] __alloc_skb+0x22c/0x750 [ 116.557408][ T13] nsim_dev_trap_report_work+0x25c/0xab0 [ 116.563085][ T13] process_one_work+0x867/0xff0 [ 116.567980][ T13] ? worker_detach_from_pool+0x240/0x240 [ 116.573647][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 116.578963][ T13] ? _raw_spin_lock_irq+0xb7/0xf0 [ 116.584035][ T13] ? _raw_spin_lock_irqsave+0x100/0x100 [ 116.589614][ T13] ? wq_worker_running+0x97/0x170 [ 116.592897][ C1] FAULT_INJECTION: forcing a failure. [ 116.592897][ C1] name failslab, interval 1, probability 1, space 0, times 878 [ 116.594668][ T13] worker_thread+0xad7/0x12a0 [ 116.594725][ T13] kthread+0x42e/0x520 [ 116.616573][ T13] ? rcu_lock_release+0x20/0x20 [ 116.621449][ T13] ? kthread_blkcg+0xd0/0xd0 [ 116.626059][ T13] ret_from_fork+0x1f/0x30 [ 116.630503][ T13] [ 116.633537][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 116.640860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.650941][ C1] Call Trace: [ 116.654243][ C1] [ 116.657195][ C1] dump_stack_lvl+0x188/0x250 [ 116.657920][ T4271] FAULT_INJECTION: forcing a failure. [ 116.657920][ T4271] name failslab, interval 1, probability 1, space 0, times 876 [ 116.661899][ C1] ? show_regs_print_info+0x20/0x20 [ 116.661927][ C1] ? load_image+0x410/0x410 [ 116.684398][ C1] ? prandom_u32+0x217/0x250 [ 116.689019][ C1] should_fail+0x383/0x4b0 [ 116.693453][ C1] should_failslab+0x5/0x20 [ 116.697972][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 116.702928][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 116.708669][ C1] ? lapb_send_control+0x34/0x3e0 [ 116.713720][ C1] ? __alloc_skb+0xf4/0x750 [ 116.718274][ C1] ? lapb_send_control+0x34/0x3e0 [ 116.723331][ C1] __alloc_skb+0x22c/0x750 [ 116.727785][ C1] lapb_send_control+0x34/0x3e0 [ 116.732683][ C1] ? lapb_t1timer_expiry+0x2f/0xa50 [ 116.737916][ C1] lapb_t1timer_expiry+0x65b/0xa50 [ 116.743053][ C1] ? lapb_start_t1timer+0xf0/0xf0 [ 116.748103][ C1] call_timer_fn+0x17b/0x540 [ 116.752731][ C1] ? lapb_start_t1timer+0xf0/0xf0 [ 116.757798][ C1] ? __run_timers+0x810/0x810 [ 116.762537][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 116.767763][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 116.772989][ C1] ? lapb_start_t1timer+0xf0/0xf0 [ 116.778039][ C1] __run_timers+0x56c/0x810 [ 116.782607][ C1] ? detach_timer+0x2b0/0x2b0 [ 116.787302][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.793307][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 116.798185][ C1] run_timer_softirq+0x63/0xf0 [ 116.802973][ C1] handle_softirqs+0x336/0x830 [ 116.807761][ C1] ? run_ksoftirqd+0xa4/0x100 [ 116.812463][ C1] ? do_softirq+0x210/0x210 [ 116.817000][ C1] ? run_ksoftirqd+0x81/0x100 [ 116.821703][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 116.826923][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 116.832231][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 116.837456][ C1] run_ksoftirqd+0xa4/0x100 [ 116.841981][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 116.847200][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 116.852595][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 116.857730][ C1] smpboot_thread_fn+0x520/0x990 [ 116.862695][ C1] kthread+0x42e/0x520 [ 116.866780][ C1] ? cpu_report_death+0x180/0x180 [ 116.871827][ C1] ? kthread_blkcg+0xd0/0xd0 [ 116.876433][ C1] ret_from_fork+0x1f/0x30 [ 116.880882][ C1] [ 116.887188][ T4271] CPU: 0 PID: 4271 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 116.894802][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.898141][ T4231] FAULT_INJECTION: forcing a failure. [ 116.898141][ T4231] name failslab, interval 1, probability 1, space 0, times 873 [ 116.904896][ T4271] Workqueue: events_unbound cfg80211_wiphy_work [ 116.904927][ T4271] Call Trace: [ 116.904936][ T4271] [ 116.930161][ T4271] dump_stack_lvl+0x188/0x250 [ 116.934865][ T4271] ? show_regs_print_info+0x20/0x20 [ 116.940081][ T4271] ? load_image+0x410/0x410 [ 116.944613][ T4271] should_fail+0x383/0x4b0 [ 116.949055][ T4271] should_failslab+0x5/0x20 [ 116.953580][ T4271] slab_pre_alloc_hook+0x51/0xc0 [ 116.958535][ T4271] __kmalloc+0x6b/0x340 [ 116.962716][ T4271] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 116.968631][ T4271] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 116.974418][ T4271] ? __lock_acquire+0x7b50/0x7b50 [ 116.979463][ T4271] ? ieee80211_queue_delayed_work+0x150/0x150 [ 116.985568][ T4271] ieee80211_bss_info_update+0x74d/0xa80 [ 116.991361][ T4271] ? ieee80211_rx_bss_put+0x60/0x60 [ 116.996587][ T4271] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 117.002418][ T4271] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 117.008607][ T4271] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 117.014356][ T4271] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.020273][ T4271] ? lockdep_hardirqs_on+0x94/0x140 [ 117.025489][ T4271] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.031402][ T4271] ? _raw_spin_unlock+0x40/0x40 [ 117.036279][ T4271] ? kcov_remote_start+0x6a/0x490 [ 117.041325][ T4271] ? kcov_remote_start+0xfa/0x490 [ 117.046387][ T4271] ieee80211_iface_work+0x714/0xc50 [ 117.051609][ T4271] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.056825][ T4271] cfg80211_wiphy_work+0x224/0x260 [ 117.061958][ T4271] process_one_work+0x867/0xff0 [ 117.066839][ T4271] ? worker_detach_from_pool+0x240/0x240 [ 117.072501][ T4271] ? lockdep_hardirqs_off+0x70/0x100 [ 117.077821][ T4271] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.082856][ T4271] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.088437][ T4271] ? wq_worker_running+0x97/0x170 [ 117.093476][ T4271] worker_thread+0xad7/0x12a0 [ 117.098195][ T4271] kthread+0x42e/0x520 [ 117.102277][ T4271] ? rcu_lock_release+0x20/0x20 [ 117.107149][ T4271] ? kthread_blkcg+0xd0/0xd0 [ 117.111773][ T4271] ret_from_fork+0x1f/0x30 [ 117.116216][ T4271] [ 117.119266][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 117.119912][ T1] FAULT_INJECTION: forcing a failure. [ 117.119912][ T1] name failslab, interval 1, probability 1, space 0, times 873 [ 117.126748][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.126769][ T4231] Workqueue: events nsim_dev_trap_report_work [ 117.126795][ T4231] Call Trace: [ 117.126803][ T4231] [ 117.161876][ T4231] dump_stack_lvl+0x188/0x250 [ 117.166573][ T4231] ? show_regs_print_info+0x20/0x20 [ 117.171797][ T4231] ? load_image+0x410/0x410 [ 117.176330][ T4231] ? prandom_u32+0x217/0x250 [ 117.180936][ T4231] should_fail+0x383/0x4b0 [ 117.185369][ T4231] should_failslab+0x5/0x20 [ 117.189883][ T4231] slab_pre_alloc_hook+0x51/0xc0 [ 117.194837][ T4231] __kmalloc_node_track_caller+0x68/0x3a0 [ 117.200590][ T4231] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 117.206409][ T4231] ? __alloc_skb+0xf4/0x750 [ 117.210929][ T4231] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 117.216755][ T4231] __alloc_skb+0x22c/0x750 [ 117.221190][ T4231] nsim_dev_trap_report_work+0x25c/0xab0 [ 117.226849][ T4231] process_one_work+0x867/0xff0 [ 117.231728][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 117.237379][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 117.242679][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.247721][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.253284][ T4231] ? wq_worker_running+0x97/0x170 [ 117.258324][ T4231] worker_thread+0xad7/0x12a0 [ 117.263023][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.268947][ T4231] kthread+0x42e/0x520 [ 117.273033][ T4231] ? rcu_lock_release+0x20/0x20 [ 117.277897][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 117.282498][ T4231] ret_from_fork+0x1f/0x30 [ 117.286942][ T4231] [ 117.289982][ T4176] CPU: 0 PID: 4176 Comm: udevd Not tainted syzkaller #0 [ 117.294173][ T3851] FAULT_INJECTION: forcing a failure. [ 117.294173][ T3851] name failslab, interval 1, probability 1, space 0, times 871 [ 117.296958][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.319778][ T4176] Call Trace: [ 117.323070][ T4176] [ 117.326016][ T4176] dump_stack_lvl+0x188/0x250 [ 117.330755][ T4176] ? show_regs_print_info+0x20/0x20 [ 117.335971][ T4176] ? load_image+0x410/0x410 [ 117.340501][ T4176] ? prandom_u32+0x217/0x250 [ 117.345117][ T4176] should_fail+0x383/0x4b0 [ 117.349560][ T4176] should_failslab+0x5/0x20 [ 117.351436][ T144] FAULT_INJECTION: forcing a failure. [ 117.351436][ T144] name failslab, interval 1, probability 1, space 0, times 870 [ 117.354069][ T4176] slab_pre_alloc_hook+0x51/0xc0 [ 117.371761][ T4176] kmem_cache_alloc_trace+0x47/0x290 [ 117.377063][ T4176] ? kernfs_fop_open+0x887/0xba0 [ 117.382021][ T4176] kernfs_fop_open+0x887/0xba0 [ 117.386810][ T4176] ? kernfs_fop_mmap+0x4a0/0x4a0 [ 117.391764][ T4176] do_dentry_open+0x7f7/0xf90 [ 117.396462][ T4176] ? vfs_open+0x2b/0x80 [ 117.400638][ T4176] path_openat+0x2718/0x2fb0 [ 117.402222][ T3850] FAULT_INJECTION: forcing a failure. [ 117.402222][ T3850] name failslab, interval 1, probability 1, space 0, times 869 [ 117.405300][ T4176] ? __kasan_slab_alloc+0xa9/0xc0 [ 117.423042][ T4176] ? do_filp_open+0x400/0x400 [ 117.427751][ T4176] do_filp_open+0x1df/0x400 [ 117.432272][ T4176] ? vfs_tmpfile+0x300/0x300 [ 117.436910][ T4176] ? _raw_spin_unlock+0x24/0x40 [ 117.441771][ T4176] ? alloc_fd+0x59e/0x650 [ 117.446116][ T4176] do_sys_openat2+0x14b/0x500 [ 117.450805][ T4176] ? __lock_acquire+0x7b50/0x7b50 [ 117.455848][ T4176] ? do_sys_open+0xe0/0xe0 [ 117.460280][ T4176] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.466276][ T4176] ? lock_chain_count+0x20/0x20 [ 117.471143][ T4176] __x64_sys_openat+0x135/0x160 [ 117.476010][ T4176] do_syscall_64+0x4c/0xa0 [ 117.480439][ T4176] ? clear_bhb_loop+0x30/0x80 [ 117.485128][ T4176] ? clear_bhb_loop+0x30/0x80 [ 117.489842][ T4176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.495750][ T4176] RIP: 0033:0x7f5474742407 [ 117.500183][ T4176] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 117.519808][ T4176] RSP: 002b:00007fffcf4bb670 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 117.528240][ T4176] RAX: ffffffffffffffda RBX: 00007f5474654880 RCX: 00007f5474742407 [ 117.536229][ T4176] RDX: 0000000000080000 RSI: 00007fffcf4bb7f0 RDI: ffffffffffffff9c [ 117.544234][ T4176] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 117.552218][ T4176] R10: 0000000000000000 R11: 0000000000000202 R12: 00005652283027f5 [ 117.560197][ T4176] R13: 00005652283027f5 R14: 0000000000000001 R15: 000056522831d140 [ 117.568223][ T4176] [ 117.571292][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 117.578781][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.588845][ T144] Workqueue: events_unbound cfg80211_wiphy_work [ 117.595120][ T144] Call Trace: [ 117.598415][ T144] [ 117.601361][ T144] dump_stack_lvl+0x188/0x250 [ 117.606064][ T144] ? show_regs_print_info+0x20/0x20 [ 117.611287][ T144] ? load_image+0x410/0x410 [ 117.615833][ T144] should_fail+0x383/0x4b0 [ 117.620278][ T144] should_failslab+0x5/0x20 [ 117.624800][ T144] slab_pre_alloc_hook+0x51/0xc0 [ 117.629760][ T144] __kmalloc+0x6b/0x340 [ 117.633937][ T144] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 117.639872][ T144] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 117.645640][ T144] ? cfg80211_wiphy_work+0x224/0x260 [ 117.650947][ T144] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 117.657117][ T144] ? verify_lock_unused+0x140/0x140 [ 117.662335][ T144] ? kasan_set_track+0x62/0x70 [ 117.667121][ T144] ? mutex_lock_io_nested+0x60/0x60 [ 117.672342][ T144] ? ieee80211_iface_work+0x781/0xc50 [ 117.677830][ T144] ? verify_lock_unused+0x140/0x140 [ 117.683063][ T144] ? ieee80211_queue_delayed_work+0x150/0x150 [ 117.689151][ T144] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 117.695240][ T144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.701244][ T144] ? __rwlock_init+0x140/0x140 [ 117.706038][ T144] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 117.711774][ T144] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.717687][ T144] ? lockdep_hardirqs_on+0x94/0x140 [ 117.722931][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.728839][ T144] ? _raw_spin_unlock+0x40/0x40 [ 117.733717][ T144] ? kcov_remote_start+0x6a/0x490 [ 117.738782][ T144] ? kcov_remote_start+0xfa/0x490 [ 117.743854][ T144] ieee80211_iface_work+0x714/0xc50 [ 117.749076][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.754398][ T144] cfg80211_wiphy_work+0x224/0x260 [ 117.759546][ T144] process_one_work+0x867/0xff0 [ 117.760310][ T4236] FAULT_INJECTION: forcing a failure. [ 117.760310][ T4236] name failslab, interval 1, probability 1, space 0, times 868 [ 117.764448][ T144] ? worker_detach_from_pool+0x240/0x240 [ 117.782833][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 117.788134][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.793168][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.798746][ T144] ? wq_worker_running+0x97/0x170 [ 117.803787][ T144] worker_thread+0xad7/0x12a0 [ 117.808501][ T144] kthread+0x42e/0x520 [ 117.812582][ T144] ? rcu_lock_release+0x20/0x20 [ 117.817455][ T144] ? kthread_blkcg+0xd0/0xd0 [ 117.822068][ T144] ret_from_fork+0x1f/0x30 [ 117.826518][ T144] [ 117.829556][ T15] CPU: 0 PID: 15 Comm: rcu_preempt Not tainted syzkaller #0 [ 117.836912][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.846977][ T15] Call Trace: [ 117.850288][ T15] [ 117.853233][ T15] dump_stack_lvl+0x188/0x250 [ 117.857945][ T15] ? show_regs_print_info+0x20/0x20 [ 117.863155][ T15] ? load_image+0x410/0x410 [ 117.867683][ T15] ? prandom_u32+0x217/0x250 [ 117.872296][ T15] should_fail+0x383/0x4b0 [ 117.876739][ T15] should_failslab+0x5/0x20 [ 117.881332][ T15] slab_pre_alloc_hook+0x51/0xc0 [ 117.886320][ T15] ? __debug_object_init+0x929/0xc80 [ 117.891635][ T15] kmem_cache_alloc+0x3d/0x280 [ 117.896423][ T15] __debug_object_init+0x929/0xc80 [ 117.901588][ T15] ? debug_object_init+0x10/0x10 [ 117.906563][ T15] schedule_timeout+0x12d/0x2d0 [ 117.911446][ T15] ? console_conditional_schedule+0x40/0x40 [ 117.917360][ T15] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.923299][ T15] ? prepare_to_swait_event+0x33d/0x360 [ 117.928873][ T15] rcu_gp_fqs_loop+0x2be/0x11f0 [ 117.933755][ T15] ? dyntick_save_progress_counter+0x230/0x230 [ 117.939931][ T15] ? rcu_gp_init+0x10f0/0x10f0 [ 117.944734][ T15] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.949948][ T15] ? lockdep_hardirqs_on+0x94/0x140 [ 117.955167][ T15] rcu_gp_kthread+0x9a/0x370 [ 117.959782][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 117.964940][ T15] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.970855][ T15] ? __kthread_parkme+0x14e/0x1b0 [ 117.975898][ T15] kthread+0x42e/0x520 [ 117.979984][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 117.985119][ T15] ? kthread_blkcg+0xd0/0xd0 [ 117.989728][ T15] ret_from_fork+0x1f/0x30 [ 117.994171][ T15] [ 117.997222][ T3851] CPU: 1 PID: 3851 Comm: dhcpcd Not tainted syzkaller #0 [ 118.004272][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.014472][ T3851] Call Trace: [ 118.017784][ T3851] [ 118.020742][ T3851] dump_stack_lvl+0x188/0x250 [ 118.025451][ T3851] ? show_regs_print_info+0x20/0x20 [ 118.030667][ T3851] ? load_image+0x410/0x410 [ 118.035194][ T3851] ? prandom_u32+0x217/0x250 [ 118.039810][ T3851] should_fail+0x383/0x4b0 [ 118.044249][ T3851] should_failslab+0x5/0x20 [ 118.048771][ T3851] slab_pre_alloc_hook+0x51/0xc0 [ 118.053742][ T3851] kmem_cache_alloc_node+0x47/0x2c0 [ 118.058984][ T3851] ? __alloc_skb+0xf4/0x750 [ 118.063513][ T3851] __alloc_skb+0xf4/0x750 [ 118.067863][ T3851] alloc_skb_with_frags+0xa7/0x720 [ 118.073692][ T3851] sock_alloc_send_pskb+0x87f/0x9a0 [ 118.078927][ T3851] ? sock_kzfree_s+0x50/0x50 [ 118.083527][ T3851] ? do_raw_spin_lock+0x128/0x2f0 [ 118.088593][ T3851] ? __rwlock_init+0x140/0x140 [ 118.093372][ T3851] ? mark_lock+0x94/0x320 [ 118.097767][ T3851] ? do_raw_spin_unlock+0x11d/0x230 [ 118.102982][ T3851] unix_dgram_sendmsg+0x6f8/0x19c0 [ 118.108119][ T3851] ? aa_sk_perm+0x7dc/0x910 [ 118.112641][ T3851] ? aa_af_perm+0x340/0x340 [ 118.117164][ T3851] ? unix_dgram_poll+0x680/0x680 [ 118.122114][ T3851] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 118.128549][ T3851] ? apparmor_socket_sendmsg+0x88/0x230 [ 118.134115][ T3851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.139413][ T3851] ? security_socket_sendmsg+0x7c/0xa0 [ 118.144904][ T3851] __sys_sendto+0x46d/0x620 [ 118.149429][ T3851] ? __ia32_sys_getpeername+0x80/0x80 [ 118.154828][ T3851] ? lock_chain_count+0x20/0x20 [ 118.159716][ T3851] __x64_sys_sendto+0xda/0xf0 [ 118.164411][ T3851] do_syscall_64+0x4c/0xa0 [ 118.168844][ T3851] ? clear_bhb_loop+0x30/0x80 [ 118.173534][ T3851] ? clear_bhb_loop+0x30/0x80 [ 118.178231][ T3851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.184169][ T3851] RIP: 0033:0x7f5127e18407 [ 118.188599][ T3851] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 118.208217][ T3851] RSP: 002b:00007ffeb2e27140 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 118.216656][ T3851] RAX: ffffffffffffffda RBX: 00007f5127d8e740 RCX: 00007f5127e18407 [ 118.224658][ T3851] RDX: 000000000000003e RSI: 00007ffeb2e27280 RDI: 0000000000000003 [ 118.232643][ T3851] RBP: 00007ffeb2e276b0 R08: 0000000000000000 R09: 0000000000000000 [ 118.240638][ T3851] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffeb2e27b00 [ 118.248629][ T3851] R13: 00007ffeb2e27280 R14: 000000000000001c R15: 00007ffeb2e27280 [ 118.256629][ T3851] [ 118.259661][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 118.266278][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.276348][ T1] Call Trace: [ 118.279646][ T1] [ 118.282590][ T1] dump_stack_lvl+0x188/0x250 [ 118.287327][ T1] ? show_regs_print_info+0x20/0x20 [ 118.292546][ T1] ? load_image+0x410/0x410 [ 118.297082][ T1] ? prandom_u32+0x217/0x250 [ 118.297423][ T4179] FAULT_INJECTION: forcing a failure. [ 118.297423][ T4179] name failslab, interval 1, probability 1, space 0, times 867 [ 118.301702][ T1] should_fail+0x383/0x4b0 [ 118.301731][ T1] should_failslab+0x5/0x20 [ 118.301753][ T1] slab_pre_alloc_hook+0x51/0xc0 [ 118.328383][ T1] ? prepare_creds+0x3c/0x610 [ 118.333108][ T1] kmem_cache_alloc+0x3d/0x280 [ 118.337891][ T1] prepare_creds+0x3c/0x610 [ 118.342434][ T1] do_faccessat+0xe8/0x9e0 [ 118.346873][ T1] ? __sb_end_write+0x1c0/0x1c0 [ 118.351742][ T1] ? lockdep_hardirqs_on+0x94/0x140 [ 118.356961][ T1] do_syscall_64+0x4c/0xa0 [ 118.361068][ C1] FAULT_INJECTION: forcing a failure. [ 118.361068][ C1] name failslab, interval 1, probability 1, space 0, times 867 [ 118.361393][ T1] ? clear_bhb_loop+0x30/0x80 [ 118.378847][ T1] ? clear_bhb_loop+0x30/0x80 [ 118.383574][ T1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.389480][ T1] RIP: 0033:0x7f7f9369f2c7 [ 118.393906][ T1] Code: 0f 1f 00 8b 87 10 01 00 00 89 06 31 c0 c3 0f 1f 44 00 00 89 b7 10 01 00 00 31 c0 c3 0f 1f 80 00 00 00 00 b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 fb 0d 00 f7 d8 64 89 02 b8 [ 118.413526][ T1] RSP: 002b:00007fff04f88768 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 118.421958][ T1] RAX: ffffffffffffffda RBX: 00007f7f938357a9 RCX: 00007f7f9369f2c7 [ 118.429941][ T1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 00007f7f938357a9 [ 118.437920][ T1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.445901][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.453885][ T1] R13: 0000000000000000 R14: 0000000000000ddb R15: 000055f18bdaad98 [ 118.461875][ T1] [ 118.464909][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 118.472222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.482298][ C1] Call Trace: [ 118.485595][ C1] [ 118.488536][ C1] dump_stack_lvl+0x188/0x250 [ 118.493231][ C1] ? show_regs_print_info+0x20/0x20 [ 118.498467][ C1] ? load_image+0x410/0x410 [ 118.502992][ C1] ? prandom_u32+0x217/0x250 [ 118.507607][ C1] should_fail+0x383/0x4b0 [ 118.512039][ C1] should_failslab+0x5/0x20 [ 118.516554][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 118.521509][ C1] ? skb_clone+0x1bd/0x350 [ 118.525954][ C1] kmem_cache_alloc+0x3d/0x280 [ 118.530736][ C1] skb_clone+0x1bd/0x350 [ 118.534993][ C1] macvlan_handle_frame+0x77d/0x1110 [ 118.540298][ C1] ? macvlan_process_broadcast+0x620/0x620 [ 118.546134][ C1] __netif_receive_skb_core+0xfd5/0x3670 [ 118.551819][ C1] ? verify_lock_unused+0x140/0x140 [ 118.557063][ C1] ? set_rps_cpu+0x660/0x660 [ 118.561677][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.567677][ C1] ? read_lock_is_recursive+0x10/0x10 [ 118.573065][ C1] ? lock_chain_count+0x20/0x20 [ 118.577937][ C1] __netif_receive_skb+0x74/0x290 [ 118.582995][ C1] process_backlog+0x366/0x770 [ 118.587786][ C1] ? rps_trigger_softirq+0x210/0x210 [ 118.593086][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.599078][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.604641][ C1] ? lock_chain_count+0x20/0x20 [ 118.609529][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 118.614740][ C1] __napi_poll+0xbb/0x430 [ 118.619087][ C1] net_rx_action+0x522/0xa80 [ 118.623703][ C1] ? net_tx_action+0x880/0x880 [ 118.628479][ C1] ? detach_timer+0x2b0/0x2b0 [ 118.633207][ C1] handle_softirqs+0x336/0x830 [ 118.637988][ C1] ? run_ksoftirqd+0xa4/0x100 [ 118.642681][ C1] ? do_softirq+0x210/0x210 [ 118.647202][ C1] ? run_ksoftirqd+0x81/0x100 [ 118.651904][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.657108][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 118.662403][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.667614][ C1] run_ksoftirqd+0xa4/0x100 [ 118.672156][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.677374][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 118.682762][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 118.687889][ C1] smpboot_thread_fn+0x520/0x990 [ 118.692846][ C1] kthread+0x42e/0x520 [ 118.696932][ C1] ? cpu_report_death+0x180/0x180 [ 118.701969][ C1] ? kthread_blkcg+0xd0/0xd0 [ 118.706571][ C1] ret_from_fork+0x1f/0x30 [ 118.711015][ C1] [ 118.714055][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 118.721380][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.731461][ T9] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 118.739296][ T9] Call Trace: [ 118.742596][ T9] [ 118.745543][ T9] dump_stack_lvl+0x188/0x250 [ 118.750255][ T9] ? show_regs_print_info+0x20/0x20 [ 118.755479][ T9] ? load_image+0x410/0x410 [ 118.760001][ T9] ? prandom_u32+0x217/0x250 [ 118.764618][ T9] should_fail+0x383/0x4b0 [ 118.769067][ T9] should_failslab+0x5/0x20 [ 118.773593][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 118.778545][ T9] ? __debug_object_init+0x85d/0xc80 [ 118.783853][ T9] kmem_cache_alloc+0x3d/0x280 [ 118.788642][ T9] __debug_object_init+0x85d/0xc80 [ 118.793779][ T9] ? debug_object_init+0x10/0x10 [ 118.798746][ T9] ? batadv_iv_ogm_queue_add+0x954/0xdb0 [ 118.804400][ T9] batadv_iv_ogm_queue_add+0xa2c/0xdb0 [ 118.809893][ T9] batadv_iv_ogm_schedule+0xb35/0x1000 [ 118.815373][ T9] ? pskb_expand_head+0xb45/0x1100 [ 118.820520][ T9] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 118.827748][ T9] ? batadv_send_skb_packet+0x36e/0x580 [ 118.833328][ T9] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 118.840383][ T9] process_one_work+0x867/0xff0 [ 118.845265][ T9] ? worker_detach_from_pool+0x240/0x240 [ 118.850914][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 118.856225][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.861262][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.866827][ T9] ? wq_worker_running+0x97/0x170 [ 118.871868][ T9] worker_thread+0xad7/0x12a0 [ 118.876594][ T9] kthread+0x42e/0x520 [ 118.880678][ T9] ? rcu_lock_release+0x20/0x20 [ 118.885545][ T9] ? kthread_blkcg+0xd0/0xd0 [ 118.890172][ T9] ret_from_fork+0x1f/0x30 [ 118.894638][ T9] [ 118.897669][ T3850] CPU: 1 PID: 3850 Comm: dhcpcd Not tainted syzkaller #0 [ 118.904726][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.914949][ T3850] Call Trace: [ 118.918383][ T3850] [ 118.921342][ T3850] dump_stack_lvl+0x188/0x250 [ 118.926049][ T3850] ? show_regs_print_info+0x20/0x20 [ 118.931285][ T3850] ? load_image+0x410/0x410 [ 118.932384][ T4176] FAULT_INJECTION: forcing a failure. [ 118.932384][ T4176] name failslab, interval 1, probability 1, space 0, times 863 [ 118.935822][ T3850] ? prandom_u32+0x217/0x250 [ 118.935857][ T3850] should_fail+0x383/0x4b0 [ 118.958029][ T3850] should_failslab+0x5/0x20 [ 118.962556][ T3850] slab_pre_alloc_hook+0x51/0xc0 [ 118.967517][ T3850] ? __debug_object_init+0x8c3/0xc80 [ 118.972820][ T3850] kmem_cache_alloc+0x3d/0x280 [ 118.977617][ T3850] __debug_object_init+0x8c3/0xc80 [ 118.982768][ T3850] ? debug_object_init+0x10/0x10 [ 118.987734][ T3850] ? lock_chain_count+0x20/0x20 [ 118.992625][ T3850] ? lockdep_hardirqs_off+0x70/0x100 [ 118.997929][ T3850] schedule_hrtimeout_range_clock+0x14c/0x590 [ 119.004016][ T3850] ? lockdep_hardirqs_on+0x94/0x140 [ 119.009233][ T3850] ? hrtimer_nanosleep_restart+0x300/0x300 [ 119.015069][ T3850] ? unix_dgram_poll+0x446/0x680 [ 119.020032][ T3850] poll_schedule_timeout+0x10b/0x150 [ 119.025336][ T3850] do_sys_poll+0x7d1/0x11a0 [ 119.029871][ T3850] ? poll_select_finish+0x5d0/0x5d0 [ 119.035103][ T3850] ? __lock_acquire+0x13dc/0x7b50 [ 119.040154][ T3850] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 119.046415][ T3850] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 119.052705][ T3850] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 119.058966][ T3850] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 119.065257][ T3850] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 119.071555][ T3850] ? set_user_sigmask+0x15d/0x1c0 [ 119.076608][ T3850] ? sigprocmask+0x190/0x190 [ 119.081210][ T3850] ? __context_tracking_exit+0x4c/0x80 [ 119.086702][ T3850] __se_sys_ppoll+0x206/0x2a0 [ 119.091417][ T3850] ? __x64_sys_ppoll+0xc0/0xc0 [ 119.096210][ T3850] ? __x64_sys_ppoll+0x1c/0xc0 [ 119.100986][ T3850] do_syscall_64+0x4c/0xa0 [ 119.105433][ T3850] ? clear_bhb_loop+0x30/0x80 [ 119.110129][ T3850] ? clear_bhb_loop+0x30/0x80 [ 119.114825][ T3850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.120772][ T3850] RIP: 0033:0x7f5127e18407 [ 119.125209][ T3850] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.144829][ T3850] RSP: 002b:00007ffeb2e48430 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 119.153285][ T3850] RAX: ffffffffffffffda RBX: 00007f5127d8e740 RCX: 00007f5127e18407 [ 119.161282][ T3850] RDX: 00007ffeb2e48470 RSI: 0000000000000005 RDI: 0000562b6806dbd0 [ 119.169265][ T3850] RBP: 00007ffeb2e48770 R08: 0000000000000008 R09: 0000000000000000 [ 119.177246][ T3850] R10: 00007ffeb2e48770 R11: 0000000000000202 R12: 0000562b55eda5e0 [ 119.185256][ T3850] R13: 0000562b68085d90 R14: 0000000000000000 R15: 00007ffeb2e48520 [ 119.193262][ T3850] [ 119.196365][ T4179] CPU: 1 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 119.197793][ T4175] FAULT_INJECTION: forcing a failure. [ 119.197793][ T4175] name failslab, interval 1, probability 1, space 0, times 862 [ 119.203344][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.203360][ T4179] Call Trace: [ 119.203368][ T4179] [ 119.203377][ T4179] dump_stack_lvl+0x188/0x250 [ 119.203431][ T4179] ? show_regs_print_info+0x20/0x20 [ 119.203466][ T4179] ? load_image+0x410/0x410 [ 119.246877][ T4179] ? prandom_u32+0x217/0x250 [ 119.251504][ T4179] should_fail+0x383/0x4b0 [ 119.255951][ T4179] should_failslab+0x5/0x20 [ 119.260474][ T4179] slab_pre_alloc_hook+0x51/0xc0 [ 119.265432][ T4179] ? getname_flags+0xb7/0x4f0 [ 119.270128][ T4179] kmem_cache_alloc+0x3d/0x280 [ 119.274971][ T4179] ? __lock_acquire+0x7b50/0x7b50 [ 119.280022][ T4179] getname_flags+0xb7/0x4f0 [ 119.284581][ T4179] user_path_at_empty+0x2a/0x190 [ 119.289554][ T4179] do_utimes+0x12e/0x2a0 [ 119.293820][ T4179] ? vfs_utimes+0x5b0/0x5b0 [ 119.298339][ T4179] __x64_sys_utimensat+0x15b/0x240 [ 119.303467][ T4179] ? do_utimes+0x2a0/0x2a0 [ 119.307907][ T4179] ? lockdep_hardirqs_on+0x94/0x140 [ 119.313123][ T4179] do_syscall_64+0x4c/0xa0 [ 119.317558][ T4179] ? clear_bhb_loop+0x30/0x80 [ 119.322250][ T4179] ? clear_bhb_loop+0x30/0x80 [ 119.326944][ T4179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.332855][ T4179] RIP: 0033:0x7f54747b0a1a [ 119.337282][ T4179] Code: 77 06 c3 0f 1f 44 00 00 48 8b 15 d9 b3 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 41 89 ca b8 18 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 8b 15 a9 b3 0d 00 f7 [ 119.357015][ T4179] RSP: 002b:00007fffcf4c32d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 119.365450][ T4179] RAX: ffffffffffffffda RBX: 00007fffcf4c3cb0 RCX: 00007f54747b0a1a [ 119.373439][ T4179] RDX: 0000000000000000 RSI: 00007fffcf4c3cb0 RDI: 00000000ffffff9c [ 119.381425][ T4179] RBP: 00007fffcf4c3cbf R08: 0000000000000075 R09: 0000000000000000 [ 119.389419][ T4179] R10: 0000000000000100 R11: 0000000000000246 R12: 00007fffcf4c3790 [ 119.397419][ T4179] R13: 00007fffcf4c3390 R14: 00005652283026d7 R15: 0000565256178d50 [ 119.405415][ T4179] [ 119.408477][ T4175] CPU: 0 PID: 4175 Comm: kworker/0:3 Not tainted syzkaller #0 [ 119.415965][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.426060][ T4175] Workqueue: events nsim_dev_trap_report_work [ 119.430983][ T144] FAULT_INJECTION: forcing a failure. [ 119.430983][ T144] name failslab, interval 1, probability 1, space 0, times 861 [ 119.432169][ T4175] Call Trace: [ 119.432181][ T4175] [ 119.451186][ T4175] dump_stack_lvl+0x188/0x250 [ 119.455905][ T4175] ? show_regs_print_info+0x20/0x20 [ 119.461137][ T4175] ? load_image+0x410/0x410 [ 119.465669][ T4175] ? prandom_u32+0x217/0x250 [ 119.470294][ T4175] should_fail+0x383/0x4b0 [ 119.474749][ T4175] should_failslab+0x5/0x20 [ 119.479280][ T4175] slab_pre_alloc_hook+0x51/0xc0 [ 119.484251][ T4175] kmem_cache_alloc_node+0x47/0x2c0 [ 119.489475][ T4175] ? __alloc_skb+0xf4/0x750 [ 119.494013][ T4175] __alloc_skb+0xf4/0x750 [ 119.498369][ T4175] nsim_dev_trap_report_work+0x25c/0xab0 [ 119.504042][ T4175] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.509978][ T4175] process_one_work+0x867/0xff0 [ 119.514877][ T4175] ? worker_detach_from_pool+0x240/0x240 [ 119.520530][ T4175] ? lockdep_hardirqs_off+0x70/0x100 [ 119.525837][ T4175] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.530878][ T4175] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.536456][ T4175] ? wq_worker_running+0x97/0x170 [ 119.541507][ T4175] worker_thread+0xad7/0x12a0 [ 119.546219][ T4175] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.552133][ T4175] kthread+0x42e/0x520 [ 119.556212][ T4175] ? rcu_lock_release+0x20/0x20 [ 119.561078][ T4175] ? kthread_blkcg+0xd0/0xd0 [ 119.565698][ T4175] ret_from_fork+0x1f/0x30 [ 119.570167][ T4175] [ 119.573363][ T4175] FAULT_INJECTION: forcing a failure. [ 119.573363][ T4175] name failslab, interval 1, probability 1, space 0, times 860 [ 119.580156][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 119.593606][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.603675][ T144] Workqueue: events_unbound cfg80211_wiphy_work [ 119.609940][ T144] Call Trace: [ 119.613233][ T144] [ 119.616182][ T144] dump_stack_lvl+0x188/0x250 [ 119.620888][ T144] ? show_regs_print_info+0x20/0x20 [ 119.626102][ T144] ? load_image+0x410/0x410 [ 119.630631][ T144] should_fail+0x383/0x4b0 [ 119.635070][ T144] should_failslab+0x5/0x20 [ 119.639590][ T144] slab_pre_alloc_hook+0x51/0xc0 [ 119.644548][ T144] __kmalloc+0x6b/0x340 [ 119.648720][ T144] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 119.654635][ T144] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 119.660409][ T144] ? __lock_acquire+0x7b50/0x7b50 [ 119.665451][ T144] ? ieee80211_queue_delayed_work+0x150/0x150 [ 119.671545][ T144] ieee80211_bss_info_update+0x74d/0xa80 [ 119.677207][ T144] ? ieee80211_rx_bss_put+0x60/0x60 [ 119.682434][ T144] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 119.688262][ T144] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 119.694466][ T144] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 119.700207][ T144] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 119.706130][ T144] ? lockdep_hardirqs_on+0x94/0x140 [ 119.711344][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.717249][ T144] ? _raw_spin_unlock+0x40/0x40 [ 119.722112][ T144] ? kcov_remote_start+0x6a/0x490 [ 119.727160][ T144] ? kcov_remote_start+0xfa/0x490 [ 119.732211][ T144] ieee80211_iface_work+0x714/0xc50 [ 119.737436][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 119.742659][ T144] cfg80211_wiphy_work+0x224/0x260 [ 119.747797][ T144] process_one_work+0x867/0xff0 [ 119.752693][ T144] ? worker_detach_from_pool+0x240/0x240 [ 119.758347][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 119.763672][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.768711][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.774285][ T144] ? wq_worker_running+0x97/0x170 [ 119.779331][ T144] worker_thread+0xad7/0x12a0 [ 119.784047][ T144] kthread+0x42e/0x520 [ 119.788156][ T144] ? rcu_lock_release+0x20/0x20 [ 119.793029][ T144] ? kthread_blkcg+0xd0/0xd0 [ 119.797655][ T144] ret_from_fork+0x1f/0x30 [ 119.802103][ T144] [ 119.805146][ T4175] CPU: 0 PID: 4175 Comm: kworker/0:3 Not tainted syzkaller #0 [ 119.812638][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.822723][ T4175] Workqueue: events nsim_dev_trap_report_work [ 119.828823][ T4175] Call Trace: [ 119.832123][ T4175] [ 119.835076][ T4175] dump_stack_lvl+0x188/0x250 [ 119.839806][ T4175] ? show_regs_print_info+0x20/0x20 [ 119.845023][ T4175] ? load_image+0x410/0x410 [ 119.849548][ T4175] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.855551][ T4175] ? prandom_u32+0x217/0x250 [ 119.860204][ T4175] should_fail+0x383/0x4b0 [ 119.864692][ T4175] should_failslab+0x5/0x20 [ 119.869208][ T4175] slab_pre_alloc_hook+0x51/0xc0 [ 119.874159][ T4175] kmem_cache_alloc_node+0x47/0x2c0 [ 119.879397][ T4175] ? __alloc_skb+0xf4/0x750 [ 119.883924][ T4175] __alloc_skb+0xf4/0x750 [ 119.888322][ T4175] nsim_dev_trap_report_work+0x25c/0xab0 [ 119.893997][ T4175] process_one_work+0x867/0xff0 [ 119.898884][ T4175] ? worker_detach_from_pool+0x240/0x240 [ 119.904543][ T4175] ? lockdep_hardirqs_off+0x70/0x100 [ 119.909905][ T4175] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.914966][ T4175] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.920544][ T4175] ? wq_worker_running+0x97/0x170 [ 119.925597][ T4175] worker_thread+0xad7/0x12a0 [ 119.930353][ T4175] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.936289][ T4175] kthread+0x42e/0x520 [ 119.940384][ T4175] ? rcu_lock_release+0x20/0x20 [ 119.945252][ T4175] ? kthread_blkcg+0xd0/0xd0 [ 119.949859][ T4175] ret_from_fork+0x1f/0x30 [ 119.954308][ T4175] [ 119.990113][ T4236] CPU: 1 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 119.997734][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.007813][ T4236] Workqueue: events_unbound cfg80211_wiphy_work [ 120.014098][ T4236] Call Trace: [ 120.017398][ T4236] [ 120.020358][ T4236] dump_stack_lvl+0x188/0x250 [ 120.025072][ T4236] ? show_regs_print_info+0x20/0x20 [ 120.030309][ T4236] ? load_image+0x410/0x410 [ 120.034853][ T4236] ? prandom_u32+0x217/0x250 [ 120.039488][ T4236] should_fail+0x383/0x4b0 [ 120.043942][ T4236] should_failslab+0x5/0x20 [ 120.044773][ T3851] FAULT_INJECTION: forcing a failure. [ 120.044773][ T3851] name failslab, interval 1, probability 1, space 0, times 857 [ 120.048485][ T4236] slab_pre_alloc_hook+0x51/0xc0 [ 120.066195][ T4236] ? __debug_object_init+0x8a1/0xc80 [ 120.071599][ T4236] kmem_cache_alloc+0x3d/0x280 [ 120.076398][ T4236] __debug_object_init+0x8a1/0xc80 [ 120.081558][ T4236] ? lockdep_init_map_type+0x98/0x900 [ 120.086974][ T4236] ? debug_object_init+0x10/0x10 [ 120.091952][ T4236] ? __raw_spin_lock_init+0x41/0x100 [ 120.097292][ T4236] sta_info_alloc+0x1a4/0x1d30 [ 120.102100][ T4236] ieee80211_ibss_add_sta+0x568/0x810 [ 120.107504][ T4236] ieee80211_ibss_rx_queued_mgmt+0x13ad/0x2b50 [ 120.113708][ T4236] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 120.119448][ T4236] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 120.125370][ T4236] ? lockdep_hardirqs_on+0x94/0x140 [ 120.130602][ T4236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 120.136537][ T4236] ? _raw_spin_unlock+0x40/0x40 [ 120.141408][ T4236] ? kcov_remote_start+0x6a/0x490 [ 120.146491][ T4236] ? kcov_remote_start+0xfa/0x490 [ 120.151563][ T4236] ieee80211_iface_work+0x714/0xc50 [ 120.156795][ T4236] ? _raw_spin_unlock_irq+0x1f/0x40 [ 120.162023][ T4236] cfg80211_wiphy_work+0x224/0x260 [ 120.167172][ T4236] process_one_work+0x867/0xff0 [ 120.172065][ T4236] ? worker_detach_from_pool+0x240/0x240 [ 120.177716][ T4236] ? lockdep_hardirqs_off+0x70/0x100 [ 120.183024][ T4236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.188103][ T4236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 120.193672][ T4236] ? wq_worker_running+0x97/0x170 [ 120.198723][ T4236] worker_thread+0xad7/0x12a0 [ 120.203454][ T4236] kthread+0x42e/0x520 [ 120.207541][ T4236] ? rcu_lock_release+0x20/0x20 [ 120.212407][ T4236] ? kthread_blkcg+0xd0/0xd0 [ 120.217009][ T4236] ret_from_fork+0x1f/0x30 [ 120.221453][ T4236] [ 120.224535][ T4176] CPU: 1 PID: 4176 Comm: udevd Not tainted syzkaller #0 [ 120.231482][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.241557][ T4176] Call Trace: [ 120.244864][ T4176] [ 120.247814][ T4176] dump_stack_lvl+0x188/0x250 [ 120.252532][ T4176] ? show_regs_print_info+0x20/0x20 [ 120.257754][ T4176] ? load_image+0x410/0x410 [ 120.262280][ T4176] ? prandom_u32+0x217/0x250 [ 120.266902][ T4176] should_fail+0x383/0x4b0 [ 120.271379][ T4176] should_failslab+0x5/0x20 [ 120.275910][ T4176] slab_pre_alloc_hook+0x51/0xc0 [ 120.280872][ T4176] ? ptlock_alloc+0x1c/0x60 [ 120.285390][ T4176] kmem_cache_alloc+0x3d/0x280 [ 120.290175][ T4176] ptlock_alloc+0x1c/0x60 [ 120.294534][ T4176] pte_alloc_one+0xc0/0x310 [ 120.299064][ T4176] ? rcu_lock_release+0x20/0x20 [ 120.303938][ T4176] ? verify_lock_unused+0x140/0x140 [ 120.309173][ T4176] handle_mm_fault+0x2553/0x4440 [ 120.314174][ T4176] ? get_page+0xe0/0xe0 [ 120.318364][ T4176] ? vmacache_find+0x53c/0x590 [ 120.323163][ T4176] ? vmacache_update+0xa0/0x100 [ 120.328057][ T4176] ? find_vma+0x1df/0x230 [ 120.332408][ T4176] do_user_addr_fault+0x494/0xc90 [ 120.337487][ T4176] exc_page_fault+0x60/0x100 [ 120.342104][ T4176] asm_exc_page_fault+0x22/0x30 [ 120.346992][ T4176] RIP: 0033:0x5652282fddaa [ 120.351422][ T4176] Code: 9f b0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 28 08 00 00 31 c0 48 8d 44 24 10 0f 29 84 24 10 08 00 00 48 89 44 24 08 <48> 03 5b 38 48 8b 0b 48 85 c9 0f 85 c6 01 00 00 4c 8b b5 b0 00 00 [ 120.360643][ C0] FAULT_INJECTION: forcing a failure. [ 120.360643][ C0] name failslab, interval 1, probability 1, space 0, times 857 [ 120.371038][ T4176] RSP: 002b:00007fffcf4be610 EFLAGS: 00010246 [ 120.371063][ T4176] RAX: 00007fffcf4be620 RBX: 00007f5473d0b000 RCX: 0000000000000000 [ 120.371079][ T4176] RDX: 0000000000000000 RSI: 0000565256158520 RDI: 0000565256157bf0 [ 120.405853][ T4176] RBP: 0000565256157bf0 R08: 0000000000000000 R09: 0000000000000000 [ 120.413842][ T4176] R10: 0000565228314480 R11: 0000000000000000 R12: 0000000000000000 [ 120.421831][ T4176] R13: 0000565256158520 R14: 000056525616c830 R15: 000056522830300c [ 120.429833][ T4176] [ 120.432866][ C0] CPU: 0 PID: 4200 Comm: syz-executor Not tainted syzkaller #0 [ 120.440470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.450552][ C0] Call Trace: [ 120.453880][ C0] [ 120.456752][ C0] dump_stack_lvl+0x188/0x250 [ 120.461481][ C0] ? show_regs_print_info+0x20/0x20 [ 120.466705][ C0] ? load_image+0x410/0x410 [ 120.471248][ C0] ? prandom_u32+0x217/0x250 [ 120.475872][ C0] should_fail+0x383/0x4b0 [ 120.480325][ C0] should_failslab+0x5/0x20 [ 120.484865][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 120.489839][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 120.495070][ C0] ? __alloc_skb+0xf4/0x750 [ 120.499604][ C0] __alloc_skb+0xf4/0x750 [ 120.503986][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 120.509038][ C0] ? __alloc_skb+0x750/0x750 [ 120.513648][ C0] ? mark_lock+0x94/0x320 [ 120.518008][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 120.523499][ C0] ? verify_lock_unused+0x140/0x140 [ 120.528735][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 120.534751][ C0] ? verify_lock_unused+0x140/0x140 [ 120.540027][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 120.545532][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 120.551114][ C0] __iterate_interfaces+0x225/0x4c0 [ 120.556336][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 120.562630][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 120.568889][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 120.575937][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 120.581159][ C0] ? hw_scan_work+0xef0/0xef0 [ 120.585865][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 120.591120][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 120.596266][ C0] hrtimer_run_softirq+0x176/0x240 [ 120.601407][ C0] handle_softirqs+0x336/0x830 [ 120.606216][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 120.611095][ C0] ? do_softirq+0x210/0x210 [ 120.615623][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 120.620766][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 120.626087][ C0] __irq_exit_rcu+0x13b/0x230 [ 120.630804][ C0] ? irq_exit_rcu+0x20/0x20 [ 120.635357][ C0] irq_exit_rcu+0x5/0x20 [ 120.639622][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 120.645280][ C0] [ 120.648233][ C0] [ 120.651193][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 120.657208][ C0] RIP: 0010:smp_call_function_many_cond+0xba3/0xd80 [ 120.663833][ C0] Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 fb 73 0b 00 83 e3 01 75 07 e8 91 70 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 120.683500][ C0] RSP: 0018:ffffc90002fef5a0 EFLAGS: 00000293 [ 120.689601][ C0] RAX: ffffffff816d9115 RBX: 0000000000000001 RCX: ffff88802c4ed940 [ 120.697737][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 120.705744][ C0] RBP: ffffc90002fef6d0 R08: ffffffff901ee0c7 R09: 1ffffffff203dc18 [ 120.708385][ T4231] FAULT_INJECTION: forcing a failure. [ 120.708385][ T4231] name failslab, interval 1, probability 1, space 0, times 857 [ 120.713746][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffff8880b903b3c0 [ 120.713765][ C0] R13: 1ffff110172280b9 R14: ffff8880b91405c8 R15: 0000000000000001 [ 120.713790][ C0] ? smp_call_function_many_cond+0xbc5/0xd80 [ 120.713833][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 120.713861][ C0] ? smp_call_function_many+0x30/0x30 [ 120.713884][ C0] ? kasan_depopulate_vmalloc_pte+0x73/0x80 [ 120.713914][ C0] ? __apply_to_page_range+0xc3a/0xd10 [ 120.713945][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 120.713967][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 120.781676][ C0] flush_tlb_kernel_range+0x1b5/0x260 [ 120.787068][ C0] __purge_vmap_area_lazy+0xaf6/0x1940 [ 120.792539][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 120.797589][ C0] ? purge_fragmented_blocks_allcpus+0x9c0/0x9c0 [ 120.803940][ C0] try_purge_vmap_area_lazy+0x34/0x50 [ 120.809324][ C0] remove_vm_area+0x1ac/0x1d0 [ 120.814018][ C0] __vunmap+0x31d/0xa80 [ 120.818211][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 120.824120][ C0] ? _raw_spin_unlock+0x40/0x40 [ 120.829021][ C0] ? kcov_open+0x80/0x80 [ 120.833279][ C0] kcov_close+0x27/0x50 [ 120.837457][ C0] __fput+0x212/0x8c0 [ 120.841460][ C0] task_work_run+0x125/0x1a0 [ 120.846069][ C0] do_exit+0x635/0x2110 [ 120.850250][ C0] ? put_task_struct+0x80/0x80 [ 120.855041][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.861044][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.866093][ C0] do_group_exit+0x12c/0x2f0 [ 120.870706][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 120.875920][ C0] get_signal+0x7eb/0x12e0 [ 120.880361][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 120.886024][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 120.891431][ C0] ? get_sigframe_size+0x10/0x10 [ 120.896407][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 120.901907][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 120.907210][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 120.912774][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 120.918252][ C0] do_syscall_64+0x58/0xa0 [ 120.922680][ C0] ? clear_bhb_loop+0x30/0x80 [ 120.927368][ C0] ? clear_bhb_loop+0x30/0x80 [ 120.932057][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.938063][ C0] RIP: 0033:0x7fb7dad806ce [ 120.942505][ C0] Code: Unable to access opcode bytes at RIP 0x7fb7dad806a4. [ 120.949900][ C0] RSP: 002b:00007ffcfb95af98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.958338][ C0] RAX: 000000000000002c RBX: 0000555579e6a500 RCX: 00007fb7dad806ce [ 120.967474][ C0] RDX: 000000000000002c RSI: 00007fb7dbb76670 RDI: 0000000000000003 [ 120.975474][ C0] RBP: 0000000000000001 R08: 00007ffcfb95b014 R09: 000000000000000c [ 120.983474][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 120.991473][ C0] R13: 0000000000000000 R14: 00007fb7dbb76670 R15: 0000000000000000 [ 120.999484][ C0] [ 121.002528][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 121.010145][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.020222][ T4231] Workqueue: events nsim_dev_trap_report_work [ 121.026351][ T4231] Call Trace: [ 121.029662][ T4231] [ 121.032628][ T4231] dump_stack_lvl+0x188/0x250 [ 121.037355][ T4231] ? show_regs_print_info+0x20/0x20 [ 121.042599][ T4231] ? load_image+0x410/0x410 [ 121.047152][ T4231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.053300][ T4231] ? prandom_u32+0x217/0x250 [ 121.057936][ T4231] should_fail+0x383/0x4b0 [ 121.062405][ T4231] should_failslab+0x5/0x20 [ 121.066947][ T4231] slab_pre_alloc_hook+0x51/0xc0 [ 121.071934][ T4231] kmem_cache_alloc_node+0x47/0x2c0 [ 121.075439][ C0] FAULT_INJECTION: forcing a failure. [ 121.075439][ C0] name failslab, interval 1, probability 1, space 0, times 856 [ 121.077163][ T4231] ? __alloc_skb+0xf4/0x750 [ 121.094580][ T4231] __alloc_skb+0xf4/0x750 [ 121.098947][ T4231] nsim_dev_trap_report_work+0x25c/0xab0 [ 121.104627][ T4231] process_one_work+0x867/0xff0 [ 121.109522][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 121.115179][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 121.120510][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.125564][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.131135][ T4231] ? wq_worker_running+0x97/0x170 [ 121.136188][ T4231] worker_thread+0xad7/0x12a0 [ 121.141256][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.147211][ T4231] kthread+0x42e/0x520 [ 121.151303][ T4231] ? rcu_lock_release+0x20/0x20 [ 121.156198][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 121.160809][ T4231] ret_from_fork+0x1f/0x30 [ 121.165271][ T4231] [ 121.168309][ C0] CPU: 0 PID: 4186 Comm: syz-executor Not tainted syzkaller #0 [ 121.175895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.185962][ T154] FAULT_INJECTION: forcing a failure. [ 121.185962][ T154] name failslab, interval 1, probability 1, space 0, times 855 [ 121.185982][ C0] Call Trace: [ 121.186000][ C0] [ 121.186013][ C0] dump_stack_lvl+0x188/0x250 [ 121.209661][ C0] ? show_regs_print_info+0x20/0x20 [ 121.214942][ C0] ? load_image+0x410/0x410 [ 121.219503][ C0] ? prandom_u32+0x217/0x250 [ 121.224147][ C0] should_fail+0x383/0x4b0 [ 121.228629][ C0] should_failslab+0x5/0x20 [ 121.233163][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 121.238135][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 121.243371][ C0] ? __alloc_skb+0xf4/0x750 [ 121.247910][ C0] __alloc_skb+0xf4/0x750 [ 121.252266][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 121.257333][ C0] ? __alloc_skb+0x750/0x750 [ 121.261965][ C0] ? mark_lock+0x94/0x320 [ 121.266371][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 121.271885][ C0] ? verify_lock_unused+0x140/0x140 [ 121.277118][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 121.283152][ C0] ? verify_lock_unused+0x140/0x140 [ 121.288431][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 121.293929][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 121.299508][ C0] __iterate_interfaces+0x225/0x4c0 [ 121.304729][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.311005][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.317301][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 121.324355][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 121.329585][ C0] ? hw_scan_work+0xef0/0xef0 [ 121.334295][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 121.339531][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 121.344667][ C0] hrtimer_run_softirq+0x176/0x240 [ 121.349804][ C0] handle_softirqs+0x336/0x830 [ 121.354599][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 121.359473][ C0] ? do_softirq+0x210/0x210 [ 121.363993][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 121.369123][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 121.374334][ C0] __irq_exit_rcu+0x13b/0x230 [ 121.379023][ C0] ? irq_exit_rcu+0x20/0x20 [ 121.383547][ C0] irq_exit_rcu+0x5/0x20 [ 121.387806][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 121.393476][ C0] [ 121.396422][ C0] [ 121.399363][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 121.405365][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 121.411901][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1f c1 88 f7 65 8b 05 90 e8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 121.431528][ C0] RSP: 0018:ffffc90002ecf7a0 EFLAGS: 00000206 [ 121.437627][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 4a9e940f7ff7cc00 [ 121.445617][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 121.453718][ C0] RBP: ffffc90002ecf838 R08: ffffffff965ab78b R09: 1ffffffff2cb56f1 [ 121.461800][ C0] R10: dffffc0000000000 R11: fffffbfff2cb56f2 R12: dffffc0000000000 [ 121.469785][ C0] R13: ffffc90010b71000 R14: ffffffff965ab788 R15: 1ffff920005d9ef4 [ 121.477813][ C0] ? _raw_spin_unlock+0x40/0x40 [ 121.482692][ C0] ? __vunmap+0x14b/0xa80 [ 121.487041][ C0] ? free_zapped_rcu+0x1f0/0x1f0