last executing test programs: 45.096918851s ago: executing program 0 (id=8): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x9, 0xf2, 0x2, 0x4, 0x9, 0xa, 0x9, 0x9, 0x7, 0x0, 0x40, 0xfb, 0x4d360286}, {0x5, 0x8, 0x22, 0x5, 0x81, 0x1, 0x4, 0x9, 0x0, 0x1, 0x8, 0xf, 0x6}, {0x2, 0x2651, 0x9, 0x68, 0x9, 0xe, 0x6e, 0x1, 0x1, 0x0, 0x80, 0x2, 0xe}], 0x9}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f0000000200)=0xf7f2) accept4(r0, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x0, 0x800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_cmd={0x51}}) 44.783772909s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0x0, 0x50c, &(0x7f0000002680)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='10', 0x2) close(r1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x80fe8e, 0x1f) 44.74153639s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000000a000a000000010005000c"], 0x6a) 36.262131818s ago: executing program 1 (id=12): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 36.060475754s ago: executing program 1 (id=13): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 35.986180895s ago: executing program 0 (id=14): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 35.867841568s ago: executing program 1 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 35.697128932s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r0, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) 35.314766872s ago: executing program 2 (id=3): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) close_range(r0, 0xffffffffffffffff, 0x0) 35.229645374s ago: executing program 1 (id=16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x7}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) write$char_usb(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x89c, 0x4) sendto$inet(r1, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r3 = socket(0x27, 0x800, 0xffff6959) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty, 0x57}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d", @ANYRES8=r6, @ANYBLOB="79a9"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 35.063648278s ago: executing program 2 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 34.915887442s ago: executing program 3 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) 34.537803511s ago: executing program 2 (id=19): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1000}, &(0x7f00000000c0)=0x8) 34.524082381s ago: executing program 3 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002600090122bd20b6b2a5158866790000080003004700"], 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 34.350007915s ago: executing program 3 (id=21): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000340)={0x40, 0x11, 0x6, {0x6, 0x4, "2660d9f0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 33.517863756s ago: executing program 2 (id=25): preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffbd, 0x10000000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) clock_nanosleep(0xb, 0x0, 0x0, 0xfffffffffffffffe) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) 33.309303211s ago: executing program 0 (id=26): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) connect(r0, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) 33.210341104s ago: executing program 0 (id=27): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000340)={0x40, 0x11, 0x8, {0x8, 0x4, "2660d9f0722b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 32.828275682s ago: executing program 4 (id=28): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a1b8100004d110000000000000000000000000000000000ff0200000000000000000000000000014e254e20004d90"], 0x0) 32.753400655s ago: executing program 4 (id=29): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)="5dfc96424a", 0x5) 32.723525916s ago: executing program 4 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c2d5c3ecd45036a2762bb626c65640a", 0x10) 32.629369318s ago: executing program 4 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c7d3ecd45036a2762bb626c65640a", 0x10) 32.575098729s ago: executing program 4 (id=32): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, 0x0, 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[], 0x14) 32.305233526s ago: executing program 3 (id=33): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)}, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r1, &(0x7f0000000140)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x8001, 0xc1) write(r2, &(0x7f00000001c0)='0\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0xa000400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resgid}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x400, &(0x7f0000000280)="$eJzs3c1uG0UcAPD/br7atDSpxIGPSwRIREIkTdoClUAi4sKhPdEDR6zYLVGdBiVGolXEh0DcQALxAHAAHoEjHHgHOAMHqBShHEi5Ga2965jYTpvUqaPk95NGntlZe2Y9nvV6MjsJ4NiaiohXI2IoIs5FxES+Pc1DfNgM2X5bm+uL/26uLyZRr7/xdxJJvq14rSR/PJW/wHQakX6SxJNdyl27dftGqVqtrObp2dryO7Nrt24/v7Rcul65Xrk5/8L5CxcvvnRp/sW+HevGcvLZM99d/uOLT8tf/vLXj5NZfU/nee3H0S9TMdV6T3a61O/CBuxEWzwZHmBFAADYVZpf+w83rv8nYii2L94m4vOfB1o5AAAAoC/q9eIRAAAAOLoSv/0BAADgiCvmAWxtri8WYYDTEXjINhYiYrLZ/nfz0MwZbt3TO7Lj/t5+moqI109cmc9C9LgPe+SAygYAAAA4Dn5aaC781zn+l8ZjbfudjIjxYm2/Pprake4c/0nv9LlI2mwsRLwcEXc7xv/SYpfJoTz1SGOocCS5tlStnIuIMxExHSNjWXpulzLef+rG973y2sf/vv79zbms/Oxxe4/0zvDY/59TLtVKD3LMbNv4KOKJ4W7tn7TGfNvXydyPt5a2XumVl7V/1t5F6Gx/DlL9m4hnu/b/7ZVLk93XZ51tnA9m87PCWGcZv53+9uNe5bf3/yxk5Rd/C+DgZf1/fPf2b6yT21qvd23vZfzwz5Vfe+Xdu/27n/9Hk6uNCo7m294r1WqrcxGjyeXO7T5NLcX7UbxfWftPP939+7+4/kvy7/4zbetD78VrH5y92itP/x+srP3Le+r/e4+8Pf74dK/y76//X2hUpngR13/3dr8NNOh6AgAAAAAAANAfaWNuX5LOtOJpOjPTnOf7aIyn1ZW12nPXVt69WW7OAZyMkbSY/znRNh90rnkbeSs9vyN9PiLORsRXEycb6ZnFlWp50AcPAAAAx8SpHr//M3/u52YPAAAA4HCaHHQFAAAAgAPn9z8AAAAcaQ+yrn+1slr8i6B9Pv2hRepDEYegGiL9igzlH7zDUp+jFxngSQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+C8AAP//yJG7iA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x44040000) 27.962299962s ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) 27.962086132s ago: executing program 0 (id=35): r0 = socket(0x2d, 0x2, 0x0) unshare(0x2c020400) setsockopt(r0, 0x11d, 0x1, 0x0, 0x0) 21.482910312s ago: executing program 4 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, 0x1}]}, 0x3c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x0, 0xd6, [], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'syzkaller0\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10}}]}]}, 0x14e) syz_emit_ethernet(0x34, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 21.482527152s ago: executing program 2 (id=37): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000005c0)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636682cfdeaadb60000693d547de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f2519f7ec703f937cd8530410f370000000000008ee9dadacbafb2c3623a4622721dbc52328b63971ca6ab0ad6202bed3b42ed59e2651896cca9f6eba99ae5c75c255913db2dc43f03f7d1e778546230fd", 0xcb, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000080000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 17.943191278s ago: executing program 3 (id=38): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) connect(r0, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) 12.496662092s ago: executing program 32 (id=35): r0 = socket(0x2d, 0x2, 0x0) unshare(0x2c020400) setsockopt(r0, 0x11d, 0x1, 0x0, 0x0) 0s ago: executing program 33 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) kernel console output (not intermixed with test programs): [ 115.912732][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.920722][ C1] RBP: ffffc9000e0774d0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 115.928710][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 115.936703][ C1] R13: 000000000000008f R14: 0000000000000000 R15: dffffc0000000000 [ 115.944702][ C1] ? console_unlock+0xc8d/0x10f0 [ 115.949678][ C1] ? console_trylock_spinning+0x370/0x370 [ 115.955417][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.961415][ C1] ? read_lock_is_recursive+0x10/0x10 [ 115.966816][ C1] ? vprintk_emit+0x150/0x150 [ 115.971646][ C1] ? rcu_irq_enter_irqson+0xe1/0x120 [ 115.976961][ C1] ? submit_bio_checks+0xd40/0x1990 [ 115.982193][ C1] vprintk_emit+0xc0/0x150 [ 115.986640][ C1] _printk+0xda/0x130 [ 115.990659][ C1] ? load_image+0x410/0x410 [ 115.995193][ C1] ? prandom_u32+0x217/0x250 [ 115.999818][ C1] should_fail+0x364/0x4b0 [ 116.004260][ C1] should_failslab+0x5/0x20 [ 116.008779][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 116.013733][ C1] ? mempool_alloc+0x19d/0x510 [ 116.018507][ C1] kmem_cache_alloc+0x3d/0x280 [ 116.023290][ C1] ? mempool_free+0x320/0x320 [ 116.027985][ C1] mempool_alloc+0x19d/0x510 [ 116.032591][ C1] ? submit_bio_noacct+0x75c/0x800 [ 116.037735][ C1] ? mempool_resize+0x860/0x860 [ 116.042625][ C1] bio_alloc_bioset+0x121/0x870 [ 116.047504][ C1] ? submit_bio+0x2c6/0x550 [ 116.052028][ C1] submit_bh_wbc+0x1c0/0x670 [ 116.056651][ C1] submit_bh+0x23/0x30 [ 116.060736][ C1] jbd2_journal_commit_transaction+0x252c/0x5c30 [ 116.067232][ C1] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 116.074024][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 116.079495][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 116.084808][ C1] ? _raw_spin_unlock+0x40/0x40 [ 116.089686][ C1] ? __timer_delete_sync+0x1f5/0x290 [ 116.094986][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 116.100028][ C1] ? timer_delete_sync+0x20/0x20 [ 116.104980][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 116.110980][ C1] ? _raw_spin_unlock+0x40/0x40 [ 116.115845][ C1] ? finish_wait+0xc3/0x1c0 [ 116.120368][ C1] kjournald2+0x45a/0x900 [ 116.124731][ C1] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 116.129944][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 116.135856][ C1] ? init_wait_entry+0xd0/0xd0 [ 116.140642][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 116.146554][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 116.151602][ C1] kthread+0x42e/0x520 [ 116.155693][ C1] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 116.160908][ C1] ? kthread_blkcg+0xd0/0xd0 [ 116.165511][ C1] ret_from_fork+0x1f/0x30 [ 116.169953][ C1] [ 116.172995][ C0] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 116.179972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.190046][ C0] Call Trace: [ 116.193333][ C0] [ 116.196209][ C0] dump_stack_lvl+0x188/0x250 [ 116.200895][ C0] ? show_regs_print_info+0x20/0x20 [ 116.206149][ C0] ? load_image+0x410/0x410 [ 116.210666][ C0] ? prandom_u32+0x217/0x250 [ 116.215268][ C0] should_fail+0x383/0x4b0 [ 116.219690][ C0] should_failslab+0x5/0x20 [ 116.224201][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 116.229168][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 116.234370][ C0] ? __alloc_skb+0xf4/0x750 [ 116.238895][ C0] __alloc_skb+0xf4/0x750 [ 116.243250][ C0] skb_copy+0x122/0x6f0 [ 116.247423][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 116.253518][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 116.259684][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 116.265596][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 116.271062][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 116.276629][ C0] __iterate_interfaces+0x225/0x4c0 [ 116.281829][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 116.288170][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 116.294415][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 116.301456][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 116.306664][ C0] ? hw_scan_work+0xef0/0xef0 [ 116.311352][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 116.316578][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 116.321701][ C0] hrtimer_run_softirq+0x176/0x240 [ 116.326844][ C0] handle_softirqs+0x336/0x830 [ 116.331620][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 116.336485][ C0] ? do_softirq+0x210/0x210 [ 116.340990][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 116.346128][ C0] __irq_exit_rcu+0x13b/0x230 [ 116.350813][ C0] ? irq_exit_rcu+0x20/0x20 [ 116.355331][ C0] irq_exit_rcu+0x5/0x20 [ 116.359600][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 116.365244][ C0] [ 116.368171][ C0] [ 116.371109][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.377116][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 116.382580][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 116.402562][ C0] RSP: 0018:ffffc9000302f6e0 EFLAGS: 00000293 [ 116.408657][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807424d940 [ 116.416657][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.424643][ C0] RBP: ffffc9000302f7e0 R08: 0000000000000003 R09: 0000000000000004 [ 116.432638][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 116.440635][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000605ee0 [ 116.448634][ C0] ? dump_stack_lvl+0x204/0x250 [ 116.453511][ C0] ? show_regs_print_info+0x20/0x20 [ 116.458721][ C0] ? load_image+0x410/0x410 [ 116.463238][ C0] ? prandom_u32+0x217/0x250 [ 116.467886][ C0] should_fail+0x383/0x4b0 [ 116.472321][ C0] should_failslab+0x5/0x20 [ 116.476854][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 116.481803][ C0] __kmalloc+0x6b/0x340 [ 116.485988][ C0] ? tomoyo_encode+0x28a/0x550 [ 116.490797][ C0] tomoyo_encode+0x28a/0x550 [ 116.495412][ C0] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 116.501082][ C0] tomoyo_path_perm+0x23f/0x5d0 [ 116.505948][ C0] ? tomoyo_path_permission+0x3a0/0x3a0 [ 116.511522][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 116.516744][ C0] ? rcu_is_watching+0x11/0xa0 [ 116.521527][ C0] security_inode_getattr+0xcf/0x120 [ 116.526831][ C0] vfs_getattr+0x26/0x3a0 [ 116.531187][ C0] ? user_path_at_empty+0x13e/0x190 [ 116.536446][ C0] vfs_statx+0x146/0x4c0 [ 116.540706][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 116.545760][ C0] ? vfs_fstatat+0x40/0x40 [ 116.550193][ C0] __x64_sys_newfstatat+0x15f/0x200 [ 116.555501][ C0] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 116.560813][ C0] ? lock_chain_count+0x20/0x20 [ 116.565695][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 116.570918][ C0] do_syscall_64+0x4c/0xa0 [ 116.575354][ C0] ? clear_bhb_loop+0x30/0x80 [ 116.580052][ C0] ? clear_bhb_loop+0x30/0x80 [ 116.584754][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.590671][ C0] RIP: 0033:0x7f9ec9f98b0a [ 116.595110][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 116.614832][ C0] RSP: 002b:00007ffc94dd6ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 116.623270][ C0] RAX: ffffffffffffffda RBX: 00007ffc94dd7370 RCX: 00007f9ec9f98b0a [ 116.631281][ C0] RDX: 00007ffc94dd6ee0 RSI: 00007ffc94dd7370 RDI: 00000000ffffff9c [ 116.639270][ C0] RBP: 000056238112e910 R08: 0000000000000000 R09: 0000000000000020 [ 116.647279][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94dd6f70 [ 116.655260][ C0] R13: 00007ffc94dd77a5 R14: 0000562342abfca4 R15: 0000562342abfbcc [ 116.663266][ C0] [ 116.666970][ C1] FAULT_INJECTION: forcing a failure. [ 116.666970][ C1] name failslab, interval 1, probability 1, space 0, times 912 [ 116.679874][ C1] CPU: 1 PID: 3521 Comm: jbd2/sda1-8 Not tainted syzkaller #0 [ 116.687379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.691790][ T4176] usb 1-1: USB disconnect, device number 3 [ 116.697465][ C1] Call Trace: [ 116.706603][ C1] [ 116.709482][ C1] dump_stack_lvl+0x188/0x250 [ 116.711639][ T4350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.714204][ C1] ? jbd2_journal_commit_transaction+0x252c/0x5c30 [ 116.727427][ C1] ? kthread+0x42e/0x520 [ 116.731731][ C1] ? show_regs_print_info+0x20/0x20 [ 116.735616][ T4350] FAULT_INJECTION: forcing a failure. [ 116.735616][ T4350] name failslab, interval 1, probability 1, space 0, times 910 [ 116.736979][ C1] ? load_image+0x410/0x410 [ 116.754269][ C1] ? prandom_u32+0x217/0x250 [ 116.758906][ C1] should_fail+0x383/0x4b0 [ 116.763346][ C1] should_failslab+0x5/0x20 [ 116.767873][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 116.772979][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 116.778833][ C1] ? __neigh_notify+0x142/0x2e0 [ 116.783724][ C1] ? __alloc_skb+0xf4/0x750 [ 116.788282][ C1] ? __neigh_notify+0x142/0x2e0 [ 116.793169][ C1] __alloc_skb+0x22c/0x750 [ 116.797622][ C1] __neigh_notify+0x142/0x2e0 [ 116.802354][ C1] neigh_cleanup_and_release+0x9d/0x250 [ 116.807943][ C1] neigh_remove_one+0x4e0/0x5e0 [ 116.812833][ C1] ___neigh_create+0x48f/0x2210 [ 116.817766][ C1] ip6_finish_output2+0x9f5/0x1530 [ 116.822917][ C1] ? nf_hook+0x360/0x360 [ 116.827186][ C1] ? ip6_mtu+0x2fb/0x3d0 [ 116.831452][ C1] ? ip6_finish_output+0x627/0x790 [ 116.836592][ C1] ndisc_send_skb+0xb7a/0x1410 [ 116.841396][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 116.846380][ C1] ? rcu_lock_release+0x20/0x20 [ 116.849298][ T3559] FAULT_INJECTION: forcing a failure. [ 116.849298][ T3559] name failslab, interval 1, probability 1, space 0, times 910 [ 116.851281][ C1] ? ndisc_send_rs+0x524/0x700 [ 116.868831][ C1] addrconf_rs_timer+0x367/0x640 [ 116.873799][ C1] ? detach_timer+0x33/0x2b0 [ 116.878414][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 116.884510][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 116.890607][ C1] call_timer_fn+0x17b/0x540 [ 116.895250][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 116.901337][ C1] ? __run_timers+0x810/0x810 [ 116.906046][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 116.911294][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 116.916508][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 116.922612][ C1] __run_timers+0x56c/0x810 [ 116.927146][ C1] ? detach_timer+0x2b0/0x2b0 [ 116.931847][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.937846][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 116.942724][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 116.948988][ C1] run_timer_softirq+0x63/0xf0 [ 116.953767][ C1] handle_softirqs+0x336/0x830 [ 116.958558][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 116.963424][ C1] ? do_softirq+0x210/0x210 [ 116.967954][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 116.973092][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 116.978306][ C1] __irq_exit_rcu+0x13b/0x230 [ 116.982991][ C1] ? irq_exit_rcu+0x20/0x20 [ 116.987513][ C1] irq_exit_rcu+0x5/0x20 [ 116.991781][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 116.997432][ C1] [ 117.000395][ C1] [ 117.003365][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 117.009411][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 117.014994][ C1] Code: 75 11 e8 e3 e3 18 00 4d 85 e4 75 16 e8 d9 e3 18 00 eb 15 e8 d2 e3 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 c3 e3 18 00 fb 31 ff <89> de e8 19 e7 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 a7 [ 117.034631][ C1] RSP: 0018:ffffc9000e077260 EFLAGS: 00000246 [ 117.040745][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88802bfd5940 [ 117.048744][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.056735][ C1] RBP: ffffc9000e0774d0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 117.064729][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 117.072721][ C1] R13: 000000000000008f R14: 0000000000000000 R15: dffffc0000000000 [ 117.080723][ C1] ? console_unlock+0xc8d/0x10f0 [ 117.085724][ C1] ? console_trylock_spinning+0x370/0x370 [ 117.091469][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.097510][ C1] ? read_lock_is_recursive+0x10/0x10 [ 117.102926][ C1] ? vprintk_emit+0x150/0x150 [ 117.107629][ C1] ? rcu_irq_enter_irqson+0xe1/0x120 [ 117.112939][ C1] ? submit_bio_checks+0xd40/0x1990 [ 117.118162][ C1] vprintk_emit+0xc0/0x150 [ 117.122609][ C1] _printk+0xda/0x130 [ 117.126638][ C1] ? load_image+0x410/0x410 [ 117.131170][ C1] ? prandom_u32+0x217/0x250 [ 117.135792][ C1] should_fail+0x364/0x4b0 [ 117.140243][ C1] should_failslab+0x5/0x20 [ 117.144777][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 117.149855][ C1] ? mempool_alloc+0x19d/0x510 [ 117.154642][ C1] kmem_cache_alloc+0x3d/0x280 [ 117.159432][ C1] ? mempool_free+0x320/0x320 [ 117.164135][ C1] mempool_alloc+0x19d/0x510 [ 117.168750][ C1] ? submit_bio_noacct+0x75c/0x800 [ 117.173891][ C1] ? mempool_resize+0x860/0x860 [ 117.178784][ C1] bio_alloc_bioset+0x121/0x870 [ 117.183667][ C1] ? submit_bio+0x2c6/0x550 [ 117.188220][ C1] submit_bh_wbc+0x1c0/0x670 [ 117.192844][ C1] submit_bh+0x23/0x30 [ 117.196941][ C1] jbd2_journal_commit_transaction+0x252c/0x5c30 [ 117.203330][ C1] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 117.210118][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 117.215603][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 117.220931][ C1] ? _raw_spin_unlock+0x40/0x40 [ 117.225844][ C1] ? __timer_delete_sync+0x1f5/0x290 [ 117.231195][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 117.236249][ C1] ? timer_delete_sync+0x20/0x20 [ 117.241208][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.247126][ C1] ? _raw_spin_unlock+0x40/0x40 [ 117.252004][ C1] ? finish_wait+0xc3/0x1c0 [ 117.256538][ C1] kjournald2+0x45a/0x900 [ 117.260943][ C1] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 117.266172][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.272085][ C1] ? init_wait_entry+0xd0/0xd0 [ 117.276898][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.282851][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 117.287906][ C1] kthread+0x42e/0x520 [ 117.291996][ C1] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 117.297216][ C1] ? kthread_blkcg+0xd0/0xd0 [ 117.301841][ C1] ret_from_fork+0x1f/0x30 [ 117.306297][ C1] [ 117.312073][ T4243] FAULT_INJECTION: forcing a failure. [ 117.312073][ T4243] name failslab, interval 1, probability 1, space 0, times 909 [ 117.325050][ T3559] CPU: 0 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 117.332044][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.336797][ T4284] FAULT_INJECTION: forcing a failure. [ 117.336797][ T4284] name failslab, interval 1, probability 1, space 0, times 909 [ 117.342130][ T3559] Call Trace: [ 117.342141][ T3559] [ 117.342152][ T3559] dump_stack_lvl+0x188/0x250 [ 117.342188][ T3559] ? show_regs_print_info+0x20/0x20 [ 117.371193][ T3559] ? load_image+0x410/0x410 [ 117.375726][ T3559] ? prandom_u32+0x217/0x250 [ 117.380353][ T3559] should_fail+0x383/0x4b0 [ 117.384804][ T3559] should_failslab+0x5/0x20 [ 117.389333][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 117.394306][ T3559] __kmalloc+0x6b/0x340 [ 117.398499][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 117.404260][ T3559] tomoyo_realpath_from_path+0xed/0x5e0 [ 117.409868][ T3559] tomoyo_check_open_permission+0x1eb/0x410 [ 117.415795][ T3559] ? tomoyo_check_path_number_acl+0x280/0x280 [ 117.421923][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 117.426984][ T3559] ? __rwlock_init+0x140/0x140 [ 117.431775][ T3559] ? memcpy+0x3c/0x60 [ 117.435771][ T3559] ? preempt_count_add+0x8d/0x190 [ 117.440842][ T3559] ? hook_file_open+0xf1/0x230 [ 117.445629][ T3559] ? tomoyo_file_open+0xe9/0x170 [ 117.450599][ T3559] security_file_open+0x5e/0xa0 [ 117.455479][ T3559] do_dentry_open+0x321/0xf90 [ 117.460182][ T3559] ? vfs_open+0x2b/0x80 [ 117.464370][ T3559] path_openat+0x2718/0x2fb0 [ 117.469015][ T3559] ? do_filp_open+0x400/0x400 [ 117.473727][ T3559] do_filp_open+0x1df/0x400 [ 117.478254][ T3559] ? vfs_tmpfile+0x300/0x300 [ 117.482894][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 117.487769][ T3559] ? alloc_fd+0x59e/0x650 [ 117.492270][ T3559] do_sys_openat2+0x14b/0x500 [ 117.496967][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 117.502023][ T3559] ? do_sys_open+0xe0/0xe0 [ 117.506464][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.512475][ T3559] ? lock_chain_count+0x20/0x20 [ 117.517379][ T3559] __x64_sys_openat+0x135/0x160 [ 117.522249][ T3559] do_syscall_64+0x4c/0xa0 [ 117.526693][ T3559] ? clear_bhb_loop+0x30/0x80 [ 117.531394][ T3559] ? clear_bhb_loop+0x30/0x80 [ 117.536113][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.542064][ T3559] RIP: 0033:0x7f9ec9f2e407 [ 117.546506][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 117.566229][ T3559] RSP: 002b:00007ffc94ddc650 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 117.574676][ T3559] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 117.582666][ T3559] RDX: 0000000000080141 RSI: 0000562342ab802e RDI: ffffffffffffff9c [ 117.590659][ T3559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.598665][ T3559] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 117.606654][ T3559] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 117.614662][ T3559] [ 117.617700][ T4284] CPU: 1 PID: 4284 Comm: kworker/1:7 Not tainted syzkaller #0 [ 117.625193][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.635272][ T4284] Workqueue: events nsim_dev_trap_report_work [ 117.641375][ T4284] Call Trace: [ 117.644673][ T4284] [ 117.647636][ T4284] dump_stack_lvl+0x188/0x250 [ 117.652339][ T4284] ? show_regs_print_info+0x20/0x20 [ 117.657558][ T4284] ? load_image+0x410/0x410 [ 117.662088][ T4284] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.664205][ T4176] FAULT_INJECTION: forcing a failure. [ 117.664205][ T4176] name failslab, interval 1, probability 1, space 0, times 909 [ 117.668109][ T4284] ? prandom_u32+0x217/0x250 [ 117.668144][ T4284] should_fail+0x383/0x4b0 [ 117.690112][ T4284] should_failslab+0x5/0x20 [ 117.694645][ T4284] slab_pre_alloc_hook+0x51/0xc0 [ 117.699612][ T4284] kmem_cache_alloc_node+0x47/0x2c0 [ 117.704836][ T4284] ? __alloc_skb+0xf4/0x750 [ 117.709380][ T4284] __alloc_skb+0xf4/0x750 [ 117.713750][ T4284] nsim_dev_trap_report_work+0x25c/0xab0 [ 117.719422][ T4284] process_one_work+0x867/0xff0 [ 117.724315][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 117.729965][ T4284] ? lockdep_hardirqs_off+0x70/0x100 [ 117.735276][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.740317][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.745883][ T4284] ? wq_worker_running+0x97/0x170 [ 117.750926][ T4284] worker_thread+0xad7/0x12a0 [ 117.755640][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.761566][ T4284] kthread+0x42e/0x520 [ 117.765655][ T4284] ? rcu_lock_release+0x20/0x20 [ 117.770531][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 117.775140][ T4284] ret_from_fork+0x1f/0x30 [ 117.779587][ T4284] [ 117.782620][ T4243] CPU: 0 PID: 4243 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 117.784712][ C1] FAULT_INJECTION: forcing a failure. [ 117.784712][ C1] name failslab, interval 1, probability 1, space 0, times 908 [ 117.790205][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.790222][ T4243] Workqueue: events_unbound cfg80211_wiphy_work [ 117.790252][ T4243] Call Trace: [ 117.822597][ T4243] [ 117.825554][ T4243] dump_stack_lvl+0x188/0x250 [ 117.830255][ T4243] ? show_regs_print_info+0x20/0x20 [ 117.835492][ T4243] ? load_image+0x410/0x410 [ 117.840025][ T4243] should_fail+0x383/0x4b0 [ 117.844482][ T4243] should_failslab+0x5/0x20 [ 117.849024][ T4243] slab_pre_alloc_hook+0x51/0xc0 [ 117.853986][ T4243] __kmalloc+0x6b/0x340 [ 117.858154][ T4243] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 117.864509][ T4243] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 117.870693][ T4243] ? verify_lock_unused+0x140/0x140 [ 117.875917][ T4243] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 117.882014][ T4243] ? __lock_acquire+0x7b50/0x7b50 [ 117.887091][ T4243] ieee80211_bss_info_update+0x6ba/0xa80 [ 117.892924][ T4243] ? ieee80211_rx_bss_put+0x60/0x60 [ 117.898160][ T4243] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 117.903997][ T4243] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 117.910196][ T4243] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 117.915938][ T4243] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.921856][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 117.927099][ T4243] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.933029][ T4243] ? _raw_spin_unlock+0x40/0x40 [ 117.937895][ T4243] ? kcov_remote_start+0x6a/0x490 [ 117.942940][ T4243] ? kcov_remote_start+0xfa/0x490 [ 117.947981][ T4243] ieee80211_iface_work+0x714/0xc50 [ 117.953203][ T4243] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.958440][ T4243] cfg80211_wiphy_work+0x224/0x260 [ 117.963578][ T4243] process_one_work+0x867/0xff0 [ 117.968474][ T4243] ? worker_detach_from_pool+0x240/0x240 [ 117.974124][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 117.979433][ T4243] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.984469][ T4243] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.990042][ T4243] ? wq_worker_running+0x97/0x170 [ 117.995086][ T4243] worker_thread+0xad7/0x12a0 [ 117.999818][ T4243] kthread+0x42e/0x520 [ 118.003899][ T4243] ? rcu_lock_release+0x20/0x20 [ 118.008768][ T4243] ? kthread_blkcg+0xd0/0xd0 [ 118.013380][ T4243] ret_from_fork+0x1f/0x30 [ 118.017837][ T4243] [ 118.020872][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 118.028193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.038285][ C1] Call Trace: [ 118.041566][ C1] [ 118.044523][ C1] dump_stack_lvl+0x188/0x250 [ 118.049216][ C1] ? show_regs_print_info+0x20/0x20 [ 118.054415][ C1] ? load_image+0x410/0x410 [ 118.058942][ C1] should_fail+0x383/0x4b0 [ 118.063368][ C1] should_failslab+0x5/0x20 [ 118.067893][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 118.072839][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 118.078572][ C1] ? skb_copy+0x122/0x6f0 [ 118.082905][ C1] ? __alloc_skb+0xf4/0x750 [ 118.087426][ C1] ? skb_copy+0x122/0x6f0 [ 118.091769][ C1] __alloc_skb+0x22c/0x750 [ 118.096199][ C1] skb_copy+0x122/0x6f0 [ 118.100372][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 118.106463][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 118.112621][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 118.118539][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 118.124004][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 118.129569][ C1] __iterate_interfaces+0x225/0x4c0 [ 118.134776][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 118.141032][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 118.147296][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 118.154333][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 118.159549][ C1] ? hw_scan_work+0xef0/0xef0 [ 118.164236][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 118.169467][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 118.174595][ C1] hrtimer_run_softirq+0x176/0x240 [ 118.179727][ C1] handle_softirqs+0x336/0x830 [ 118.184507][ C1] ? run_ksoftirqd+0xa4/0x100 [ 118.189193][ C1] ? do_softirq+0x210/0x210 [ 118.193812][ C1] ? run_ksoftirqd+0x81/0x100 [ 118.198511][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.203706][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 118.208999][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.214201][ C1] run_ksoftirqd+0xa4/0x100 [ 118.218709][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 118.223918][ C1] smpboot_thread_fn+0x520/0x990 [ 118.228874][ C1] kthread+0x42e/0x520 [ 118.232963][ C1] ? cpu_report_death+0x180/0x180 [ 118.238010][ C1] ? kthread_blkcg+0xd0/0xd0 [ 118.242602][ C1] ret_from_fork+0x1f/0x30 [ 118.247036][ C1] [ 118.250210][ C0] FAULT_INJECTION: forcing a failure. [ 118.250210][ C0] name failslab, interval 1, probability 1, space 0, times 907 [ 118.263034][ C0] CPU: 0 PID: 4243 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 118.266763][ T21] FAULT_INJECTION: forcing a failure. [ 118.266763][ T21] name failslab, interval 1, probability 1, space 0, times 907 [ 118.270605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.270622][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 118.270653][ C0] Call Trace: [ 118.270662][ C0] [ 118.270672][ C0] dump_stack_lvl+0x188/0x250 [ 118.289256][ T1325] FAULT_INJECTION: forcing a failure. [ 118.289256][ T1325] name failslab, interval 1, probability 1, space 0, times 907 [ 118.293690][ C0] ? show_regs_print_info+0x20/0x20 [ 118.328720][ C0] ? load_image+0x410/0x410 [ 118.333244][ C0] ? prandom_u32+0x217/0x250 [ 118.337859][ C0] should_fail+0x383/0x4b0 [ 118.342293][ C0] should_failslab+0x5/0x20 [ 118.346814][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 118.351771][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 118.357506][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 118.362720][ C0] ? __alloc_skb+0xf4/0x750 [ 118.367244][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 118.372471][ C0] __alloc_skb+0x22c/0x750 [ 118.377079][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 118.382128][ C0] ? __alloc_skb+0x750/0x750 [ 118.386731][ C0] ? mark_lock+0x94/0x320 [ 118.391085][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 118.396571][ C0] ? verify_lock_unused+0x140/0x140 [ 118.401822][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 118.407838][ C0] ? verify_lock_unused+0x140/0x140 [ 118.413070][ C0] ? verify_lock_unused+0x140/0x140 [ 118.418293][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 118.424145][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 118.429643][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 118.435230][ C0] __iterate_interfaces+0x225/0x4c0 [ 118.440466][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 118.446733][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 118.452989][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 118.460025][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 118.465764][ C0] ? hw_scan_work+0xef0/0xef0 [ 118.470461][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 118.475693][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 118.480826][ C0] hrtimer_run_softirq+0x176/0x240 [ 118.485957][ C0] handle_softirqs+0x336/0x830 [ 118.490741][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 118.495610][ C0] ? do_softirq+0x210/0x210 [ 118.500132][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 118.505266][ C0] __irq_exit_rcu+0x13b/0x230 [ 118.509962][ C0] ? irq_exit_rcu+0x20/0x20 [ 118.514511][ C0] irq_exit_rcu+0x5/0x20 [ 118.518767][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 118.524420][ C0] [ 118.527370][ C0] [ 118.530320][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 118.536319][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 118.541794][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 118.561418][ C0] RSP: 0018:ffffc90003dff380 EFLAGS: 00000293 [ 118.567521][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88802b079dc0 [ 118.575506][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.583494][ C0] RBP: ffffc90003dff468 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 118.591479][ C0] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: dffffc0000000004 [ 118.599468][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920007bfe74 [ 118.607496][ C0] ? dump_stack_lvl+0x204/0x250 [ 118.612388][ C0] ? show_regs_print_info+0x20/0x20 [ 118.617609][ C0] ? load_image+0x410/0x410 [ 118.622136][ C0] should_fail+0x383/0x4b0 [ 118.626570][ C0] should_failslab+0x5/0x20 [ 118.631088][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 118.636063][ C0] __kmalloc+0x6b/0x340 [ 118.640269][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 118.646627][ C0] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 118.652810][ C0] ? verify_lock_unused+0x140/0x140 [ 118.658032][ C0] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 118.664153][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 118.669212][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 118.674870][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 118.680093][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 118.685919][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 118.692106][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 118.697837][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 118.703741][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 118.708954][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.714857][ C0] ? _raw_spin_unlock+0x40/0x40 [ 118.719719][ C0] ? kcov_remote_start+0x6a/0x490 [ 118.724851][ C0] ? kcov_remote_start+0xfa/0x490 [ 118.729890][ C0] ieee80211_iface_work+0x714/0xc50 [ 118.735116][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 118.740419][ C0] cfg80211_wiphy_work+0x224/0x260 [ 118.745549][ C0] process_one_work+0x867/0xff0 [ 118.750427][ C0] ? worker_detach_from_pool+0x240/0x240 [ 118.756071][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 118.761408][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.766448][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.772013][ C0] ? wq_worker_running+0x97/0x170 [ 118.777053][ C0] worker_thread+0xad7/0x12a0 [ 118.781769][ C0] kthread+0x42e/0x520 [ 118.785853][ C0] ? rcu_lock_release+0x20/0x20 [ 118.790751][ C0] ? kthread_blkcg+0xd0/0xd0 [ 118.795354][ C0] ret_from_fork+0x1f/0x30 [ 118.799913][ C0] [ 118.802952][ T1325] CPU: 1 PID: 1325 Comm: kworker/1:3 Not tainted syzkaller #0 [ 118.810458][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.820549][ T1325] Workqueue: events nsim_dev_trap_report_work [ 118.826654][ T1325] Call Trace: [ 118.829953][ T1325] [ 118.832911][ T1325] dump_stack_lvl+0x188/0x250 [ 118.837612][ T1325] ? show_regs_print_info+0x20/0x20 [ 118.842835][ T1325] ? load_image+0x410/0x410 [ 118.847364][ T1325] ? prandom_u32+0x217/0x250 [ 118.851979][ T1325] should_fail+0x383/0x4b0 [ 118.856430][ T1325] should_failslab+0x5/0x20 [ 118.861070][ T1325] slab_pre_alloc_hook+0x51/0xc0 [ 118.866026][ T1325] __kmalloc_node_track_caller+0x68/0x3a0 [ 118.871778][ T1325] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 118.877608][ T1325] ? __alloc_skb+0xf4/0x750 [ 118.882130][ T1325] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 118.887954][ T1325] __alloc_skb+0x22c/0x750 [ 118.892391][ T1325] nsim_dev_trap_report_work+0x25c/0xab0 [ 118.898056][ T1325] process_one_work+0x867/0xff0 [ 118.902936][ T1325] ? worker_detach_from_pool+0x240/0x240 [ 118.908589][ T1325] ? lockdep_hardirqs_off+0x70/0x100 [ 118.913916][ T1325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.918986][ T1325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.924565][ T1325] ? wq_worker_running+0x97/0x170 [ 118.929627][ T1325] worker_thread+0xad7/0x12a0 [ 118.934357][ T1325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.940282][ T1325] kthread+0x42e/0x520 [ 118.944369][ T1325] ? rcu_lock_release+0x20/0x20 [ 118.949230][ T1325] ? kthread_blkcg+0xd0/0xd0 [ 118.953860][ T1325] ret_from_fork+0x1f/0x30 [ 118.958305][ T1325] [ 118.961486][ T4176] CPU: 0 PID: 4176 Comm: kworker/0:3 Not tainted syzkaller #0 [ 118.968977][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.979066][ T4176] Workqueue: usb_hub_wq hub_event [ 118.984125][ T4176] Call Trace: [ 118.987433][ T4176] [ 118.990391][ T4176] dump_stack_lvl+0x188/0x250 [ 118.995110][ T4176] ? show_regs_print_info+0x20/0x20 [ 119.000349][ T4176] ? load_image+0x410/0x410 [ 119.004894][ T4176] ? prandom_u32+0x217/0x250 [ 119.009522][ T4176] should_fail+0x383/0x4b0 [ 119.013973][ T4176] should_failslab+0x5/0x20 [ 119.018499][ T4176] slab_pre_alloc_hook+0x51/0xc0 [ 119.023463][ T4176] __kmalloc+0x6b/0x340 [ 119.027646][ T4176] ? usb_hcd_submit_urb+0x795/0x1970 [ 119.032956][ T4176] ? _raw_spin_unlock_irq+0x1f/0x40 [ 119.038195][ T4176] usb_hcd_submit_urb+0x795/0x1970 [ 119.043342][ T4176] usb_start_wait_urb+0x13c/0x580 [ 119.048400][ T4176] ? usb_api_blocking_completion+0xb0/0xb0 [ 119.049457][ T3559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.054244][ T4176] usb_control_msg+0x231/0x3e0 [ 119.065687][ T4176] hub_ext_port_status+0x103/0x6c0 [ 119.070972][ T4176] hub_port_debounce+0x21b/0x300 [ 119.075948][ T4176] hub_event+0x1dea/0x5260 [ 119.080432][ T4176] ? hub_post_resume+0x120/0x120 [ 119.085395][ T4176] ? read_lock_is_recursive+0x10/0x10 [ 119.090795][ T4176] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.096716][ T4176] ? _raw_spin_unlock+0x40/0x40 [ 119.101589][ T4176] ? _raw_spin_unlock_irq+0x1f/0x40 [ 119.106813][ T4176] process_one_work+0x867/0xff0 [ 119.111700][ T4176] ? worker_detach_from_pool+0x240/0x240 [ 119.117353][ T4176] ? lockdep_hardirqs_off+0x70/0x100 [ 119.122658][ T4176] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.127726][ T4176] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.133290][ T4176] ? wq_worker_running+0x97/0x170 [ 119.138349][ T4176] worker_thread+0xd93/0x12a0 [ 119.143074][ T4176] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.148994][ T4176] kthread+0x42e/0x520 [ 119.153078][ T4176] ? rcu_lock_release+0x20/0x20 [ 119.157946][ T4176] ? kthread_blkcg+0xd0/0xd0 [ 119.162558][ T4176] ret_from_fork+0x1f/0x30 [ 119.167007][ T4176] [ 119.170044][ T3521] CPU: 1 PID: 3521 Comm: jbd2/sda1-8 Not tainted syzkaller #0 [ 119.177548][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.187622][ T3521] Call Trace: [ 119.190924][ T3521] [ 119.193871][ T3521] dump_stack_lvl+0x188/0x250 [ 119.198572][ T3521] ? show_regs_print_info+0x20/0x20 [ 119.203787][ T3521] ? load_image+0x410/0x410 [ 119.208311][ T3521] ? prandom_u32+0x217/0x250 [ 119.212924][ T3521] should_fail+0x383/0x4b0 [ 119.217362][ T3521] should_failslab+0x5/0x20 [ 119.221879][ T3521] slab_pre_alloc_hook+0x51/0xc0 [ 119.226839][ T3521] ? mempool_alloc+0x19d/0x510 [ 119.231625][ T3521] kmem_cache_alloc+0x3d/0x280 [ 119.236406][ T3521] ? mempool_free+0x320/0x320 [ 119.241102][ T3521] mempool_alloc+0x19d/0x510 [ 119.245714][ T3521] ? submit_bio_noacct+0x75c/0x800 [ 119.250848][ T3521] ? mempool_resize+0x860/0x860 [ 119.255732][ T3521] bio_alloc_bioset+0x121/0x870 [ 119.260611][ T3521] ? submit_bio+0x2c6/0x550 [ 119.265163][ T3521] submit_bh_wbc+0x1c0/0x670 [ 119.269787][ T3521] submit_bh+0x23/0x30 [ 119.273880][ T3521] jbd2_journal_commit_transaction+0x252c/0x5c30 [ 119.280256][ T3521] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 119.287035][ T3521] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 119.292522][ T3521] ? lockdep_hardirqs_off+0x70/0x100 [ 119.297837][ T3521] ? _raw_spin_unlock+0x40/0x40 [ 119.302721][ T3521] ? __timer_delete_sync+0x1f5/0x290 [ 119.308034][ T3521] ? __lock_acquire+0x7b50/0x7b50 [ 119.313104][ T3521] ? timer_delete_sync+0x20/0x20 [ 119.318066][ T3521] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.324105][ T3521] ? _raw_spin_unlock+0x40/0x40 [ 119.328998][ T3521] ? finish_wait+0xc3/0x1c0 [ 119.333534][ T3521] kjournald2+0x45a/0x900 [ 119.337898][ T3521] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 119.343122][ T3521] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 119.349038][ T3521] ? init_wait_entry+0xd0/0xd0 [ 119.353822][ T3521] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.359735][ T3521] ? __kthread_parkme+0x14e/0x1b0 [ 119.364781][ T3521] kthread+0x42e/0x520 [ 119.368872][ T3521] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 119.374090][ T3521] ? kthread_blkcg+0xd0/0xd0 [ 119.378713][ T3521] ret_from_fork+0x1f/0x30 [ 119.383153][ T3521] [ 119.386183][ T4350] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 119.393169][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.403265][ T4350] Call Trace: [ 119.406569][ T4350] [ 119.409516][ T4350] dump_stack_lvl+0x188/0x250 [ 119.414212][ T4350] ? show_regs_print_info+0x20/0x20 [ 119.419429][ T4350] ? load_image+0x410/0x410 [ 119.423951][ T4350] ? prandom_u32+0x217/0x250 [ 119.428576][ T4350] should_fail+0x383/0x4b0 [ 119.433015][ T4350] should_failslab+0x5/0x20 [ 119.437533][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 119.442487][ T4350] ? __alloc_file+0x25/0x240 [ 119.447097][ T4350] kmem_cache_alloc+0x3d/0x280 [ 119.451876][ T4350] ? mark_lock+0x94/0x320 [ 119.456223][ T4350] __alloc_file+0x25/0x240 [ 119.460662][ T4350] alloc_empty_file+0x90/0x180 [ 119.465450][ T4350] path_openat+0x11c/0x2fb0 [ 119.469983][ T4350] ? __lock_acquire+0x13dc/0x7b50 [ 119.475037][ T4350] ? stack_trace_snprint+0xe0/0xe0 [ 119.480168][ T4350] ? verify_lock_unused+0x140/0x140 [ 119.485389][ T4350] ? verify_lock_unused+0x140/0x140 [ 119.490607][ T4350] ? __kasan_slab_alloc+0xa9/0xc0 [ 119.495651][ T4350] ? __kasan_slab_alloc+0x92/0xc0 [ 119.500697][ T4350] ? slab_post_alloc_hook+0x4c/0x380 [ 119.506005][ T4350] ? verify_lock_unused+0x140/0x140 [ 119.511238][ T4350] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.517329][ T4350] ? do_filp_open+0x400/0x400 [ 119.522054][ T4350] do_filp_open+0x1df/0x400 [ 119.526580][ T4350] ? vfs_tmpfile+0x300/0x300 [ 119.531216][ T4350] ? _raw_spin_unlock+0x24/0x40 [ 119.535707][ C1] FAULT_INJECTION: forcing a failure. [ 119.535707][ C1] name failslab, interval 1, probability 1, space 0, times 904 [ 119.536091][ T4350] ? alloc_fd+0x59e/0x650 [ 119.553202][ T4350] do_sys_openat2+0x14b/0x500 [ 119.557899][ T4350] ? __lock_acquire+0x7b50/0x7b50 [ 119.562971][ T4350] ? do_sys_open+0xe0/0xe0 [ 119.567405][ T4350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.573408][ T4350] ? lock_chain_count+0x20/0x20 [ 119.578302][ T4350] __x64_sys_openat+0x135/0x160 [ 119.583177][ T4350] do_syscall_64+0x4c/0xa0 [ 119.587610][ T4350] ? clear_bhb_loop+0x30/0x80 [ 119.592309][ T4350] ? clear_bhb_loop+0x30/0x80 [ 119.597001][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.602915][ T4350] RIP: 0033:0x7f9ec9f2e407 [ 119.607350][ T4350] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.627004][ T4350] RSP: 002b:00007ffc94dd7f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 119.635442][ T4350] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 119.643430][ T4350] RDX: 0000000000080000 RSI: 00007ffc94dd80d0 RDI: ffffffffffffff9c [ 119.651515][ T4350] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 119.659500][ T4350] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 119.667493][ T4350] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 119.675490][ T4350] [ 119.678534][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 119.685844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.695907][ C1] Call Trace: [ 119.699202][ C1] [ 119.702137][ C1] dump_stack_lvl+0x188/0x250 [ 119.706835][ C1] ? show_regs_print_info+0x20/0x20 [ 119.712040][ C1] ? load_image+0x410/0x410 [ 119.716568][ C1] should_fail+0x383/0x4b0 [ 119.720996][ C1] should_failslab+0x5/0x20 [ 119.725504][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 119.730445][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 119.736177][ C1] ? skb_copy+0x122/0x6f0 [ 119.740513][ C1] ? __alloc_skb+0xf4/0x750 [ 119.745030][ C1] ? skb_copy+0x122/0x6f0 [ 119.749366][ C1] __alloc_skb+0x22c/0x750 [ 119.753809][ C1] skb_copy+0x122/0x6f0 [ 119.757985][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 119.764125][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 119.770305][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 119.776252][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 119.781732][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 119.787302][ C1] __iterate_interfaces+0x225/0x4c0 [ 119.792521][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.798777][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.805057][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 119.812128][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 119.817366][ C1] ? hw_scan_work+0xef0/0xef0 [ 119.822052][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 119.827276][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 119.832408][ C1] hrtimer_run_softirq+0x176/0x240 [ 119.837555][ C1] handle_softirqs+0x336/0x830 [ 119.842333][ C1] ? run_ksoftirqd+0xa4/0x100 [ 119.847033][ C1] ? do_softirq+0x210/0x210 [ 119.851539][ C1] ? run_ksoftirqd+0x81/0x100 [ 119.856223][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 119.861422][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 119.866718][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 119.871942][ C1] run_ksoftirqd+0xa4/0x100 [ 119.876456][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 119.881657][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 119.887041][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 119.892166][ C1] smpboot_thread_fn+0x520/0x990 [ 119.897124][ C1] kthread+0x42e/0x520 [ 119.901193][ C1] ? cpu_report_death+0x180/0x180 [ 119.906224][ C1] ? kthread_blkcg+0xd0/0xd0 [ 119.910817][ C1] ret_from_fork+0x1f/0x30 [ 119.915256][ C1] [ 119.918540][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 119.925859][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.935940][ T21] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 119.943204][ T21] Call Trace: [ 119.946513][ T21] [ 119.949465][ T21] dump_stack_lvl+0x188/0x250 [ 119.949976][ T4381] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 119.954175][ T21] ? show_regs_print_info+0x20/0x20 [ 119.954204][ T21] ? load_image+0x410/0x410 [ 119.954223][ T21] ? mark_lock+0x94/0x320 [ 119.954239][ C0] FAULT_INJECTION: forcing a failure. [ 119.954239][ C0] name failslab, interval 1, probability 1, space 0, times 902 [ 119.954244][ T21] ? prandom_u32+0x217/0x250 [ 119.954350][ T21] should_fail+0x383/0x4b0 [ 119.954374][ T21] should_failslab+0x5/0x20 [ 119.954391][ T21] slab_pre_alloc_hook+0x51/0xc0 [ 119.954410][ T21] kmem_cache_alloc_node+0x47/0x2c0 [ 119.954427][ T21] ? __alloc_skb+0xf4/0x750 [ 119.954449][ T21] __alloc_skb+0xf4/0x750 [ 119.954469][ T21] wg_socket_send_buffer_to_peer+0x34/0x170 [ 119.954488][ T21] ? ktime_get_coarse_with_offset+0x141/0x190 [ 119.954533][ T21] wg_packet_send_handshake_response+0x1a9/0x2c0 [ 119.954556][ T21] ? wg_packet_send_queued_handshake_initiation+0x300/0x300 [ 119.954615][ T21] wg_packet_handshake_receive_worker+0x6b2/0xf60 [ 119.954649][ T21] ? local_bh_enable+0x20/0x20 [ 119.954680][ T21] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.954704][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 119.954726][ T21] ? read_lock_is_recursive+0x10/0x10 [ 119.954746][ T21] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.954770][ T21] ? _raw_spin_unlock_irq+0x1f/0x40 [ 119.954793][ T21] process_one_work+0x867/0xff0 [ 119.954827][ T21] ? worker_detach_from_pool+0x240/0x240 [ 119.954847][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 119.954871][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.954889][ T21] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.954910][ T21] ? wq_worker_running+0x97/0x170 [ 119.954931][ T21] worker_thread+0xad7/0x12a0 [ 119.954974][ T21] kthread+0x42e/0x520 [ 119.954992][ T21] ? rcu_lock_release+0x20/0x20 [ 119.955018][ T21] ? kthread_blkcg+0xd0/0xd0 [ 119.955038][ T21] ret_from_fork+0x1f/0x30 [ 119.955070][ T21] [ 119.955079][ C0] CPU: 0 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 119.955102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.955115][ C0] Call Trace: [ 119.955122][ C0] [ 119.955132][ C0] dump_stack_lvl+0x188/0x250 [ 119.955159][ C0] ? show_regs_print_info+0x20/0x20 [ 119.955182][ C0] ? load_image+0x410/0x410 [ 119.955209][ C0] ? prandom_u32+0x217/0x250 [ 119.955240][ C0] should_fail+0x383/0x4b0 [ 119.955265][ C0] should_failslab+0x5/0x20 [ 119.955284][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 119.955307][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 119.955325][ C0] ? __alloc_skb+0xf4/0x750 [ 119.955358][ C0] __alloc_skb+0xf4/0x750 [ 119.955384][ C0] skb_copy+0x122/0x6f0 [ 119.955415][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 119.955455][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 119.955477][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 119.955515][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 119.955543][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 119.955572][ C0] __iterate_interfaces+0x225/0x4c0 [ 119.955594][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.955621][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.955647][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 119.955674][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 119.955699][ C0] ? hw_scan_work+0xef0/0xef0 [ 119.955723][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 119.955763][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 119.955795][ C0] hrtimer_run_softirq+0x176/0x240 [ 119.955843][ C0] handle_softirqs+0x336/0x830 [ 119.955868][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 119.955892][ C0] ? do_softirq+0x210/0x210 [ 119.955912][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 119.955938][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 119.955963][ C0] __irq_exit_rcu+0x13b/0x230 [ 119.955982][ C0] ? irq_exit_rcu+0x20/0x20 [ 119.956012][ C0] irq_exit_rcu+0x5/0x20 [ 119.956030][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 119.956053][ C0] [ 119.956061][ C0] [ 119.956070][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 119.956106][ C0] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 119.956125][ C0] Code: 85 db 74 89 e8 e0 f0 18 00 fb 31 c0 eb 48 e8 d6 f0 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 c7 f0 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 119.956139][ C0] RSP: 0018:ffffc9000336fd00 EFLAGS: 00000293 [ 119.956155][ C0] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff8880206b3b80 [ 119.956167][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 119.956178][ C0] RBP: ffffc9000336fdd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 119.956190][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: dffffc0000000000 [ 119.956210][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff9200066dfa0 [ 119.956226][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 119.956248][ C0] ? vprintk_emit+0x150/0x150 [ 119.956262][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 119.956278][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 119.956295][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.956318][ C0] ? _raw_spin_unlock+0x40/0x40 [ 119.956333][ C0] ? ___ratelimit+0x14e/0x610 [ 119.956352][ C0] vprintk_emit+0xa7/0x150 [ 119.956369][ C0] _printk+0xda/0x130 [ 119.956390][ C0] ? load_image+0x410/0x410 [ 119.956406][ C0] ? do_user_addr_fault+0xab7/0xc90 [ 119.956434][ C0] exc_page_fault+0x60/0x100 [ 119.956452][ C0] asm_exc_page_fault+0x22/0x30 [ 119.956467][ C0] RIP: 0033:0x7fc7ba221d00 [ 119.956488][ C0] Code: Unable to access opcode bytes at RIP 0x7fc7ba221cd6. [ 119.956497][ C0] RSP: 002b:00007ffcd588b9e8 EFLAGS: 00010246 [ 119.956511][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.956521][ C0] RDX: 00007ffcd588ba08 RSI: 0000000000000002 RDI: 00007fc7ba144e50 [ 119.956532][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.956542][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 119.956552][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.956572][ C0] [ 119.956619][ C0] FAULT_INJECTION: forcing a failure. [ 119.956619][ C0] name failslab, interval 1, probability 1, space 0, times 901 [ 119.956644][ C0] CPU: 0 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 119.956665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.956678][ C0] Call Trace: [ 119.956685][ C0] [ 119.956694][ C0] dump_stack_lvl+0x188/0x250 [ 119.956723][ C0] ? show_regs_print_info+0x20/0x20 [ 119.956749][ C0] ? load_image+0x410/0x410 [ 119.956771][ C0] ? __lock_acquire+0x1305/0x7b50 [ 119.956800][ C0] ? prandom_u32+0x217/0x250 [ 119.956841][ C0] should_fail+0x383/0x4b0 [ 119.956869][ C0] should_failslab+0x5/0x20 [ 119.956889][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 119.956913][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 119.956934][ C0] ? __alloc_skb+0xf4/0x750 [ 119.956968][ C0] __alloc_skb+0xf4/0x750 [ 119.956995][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 119.957021][ C0] ? __alloc_skb+0x750/0x750 [ 119.957041][ C0] ? mark_lock+0x94/0x320 [ 119.957069][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 119.957100][ C0] ? verify_lock_unused+0x140/0x140 [ 119.957126][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 119.957153][ C0] ? verify_lock_unused+0x140/0x140 [ 119.957177][ C0] ? verify_lock_unused+0x140/0x140 [ 119.957201][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 119.957251][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 119.957279][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 119.957309][ C0] __iterate_interfaces+0x225/0x4c0 [ 119.957329][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.957358][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 119.957385][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 119.957413][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 119.957437][ C0] ? hw_scan_work+0xef0/0xef0 [ 119.957462][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 119.957467][ T154] FAULT_INJECTION: forcing a failure. [ 119.957467][ T154] name failslab, interval 1, probability 1, space 0, times 901 [ 119.957517][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 119.957545][ C0] hrtimer_run_softirq+0x176/0x240 [ 119.957569][ C0] handle_softirqs+0x336/0x830 [ 119.957591][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 119.957612][ C0] ? do_softirq+0x210/0x210 [ 119.957628][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 119.957651][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 119.957672][ C0] __irq_exit_rcu+0x13b/0x230 [ 119.957690][ C0] ? irq_exit_rcu+0x20/0x20 [ 119.957715][ C0] irq_exit_rcu+0x5/0x20 [ 119.957731][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 119.957751][ C0] [ 119.957757][ C0] [ 119.957764][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 119.957783][ C0] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 119.957802][ C0] Code: 85 db 74 89 e8 e0 f0 18 00 fb 31 c0 eb 48 e8 d6 f0 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 c7 f0 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 119.957825][ C0] RSP: 0018:ffffc9000336fd00 EFLAGS: 00000293 [ 119.957841][ C0] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff8880206b3b80 [ 119.957855][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 119.957867][ C0] RBP: ffffc9000336fdd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 119.957881][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: dffffc0000000000 [ 119.957895][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff9200066dfa0 [ 119.957913][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 119.957937][ C0] ? vprintk_emit+0x150/0x150 [ 119.957953][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 119.957971][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 119.957996][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.958014][ C0] ? _raw_spin_unlock+0x40/0x40 [ 119.958050][ C0] ? ___ratelimit+0x14e/0x610 [ 119.958070][ C0] vprintk_emit+0xa7/0x150 [ 119.958091][ C0] _printk+0xda/0x130 [ 119.958115][ C0] ? load_image+0x410/0x410 [ 119.958134][ C0] ? do_user_addr_fault+0xab7/0xc90 [ 119.958166][ C0] exc_page_fault+0x60/0x100 [ 119.958187][ C0] asm_exc_page_fault+0x22/0x30 [ 119.958204][ C0] RIP: 0033:0x7fc7ba221d00 [ 119.958224][ C0] Code: Unable to access opcode bytes at RIP 0x7fc7ba221cd6. [ 119.958234][ C0] RSP: 002b:00007ffcd588b9e8 EFLAGS: 00010246 [ 119.958250][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.958262][ C0] RDX: 00007ffcd588ba08 RSI: 0000000000000002 RDI: 00007fc7ba144e50 [ 119.958275][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.958287][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 119.958298][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.958323][ C0] [ 119.958331][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 119.958354][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.958369][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 119.958397][ T154] Call Trace: [ 119.958405][ T154] [ 119.958415][ T154] dump_stack_lvl+0x188/0x250 [ 119.958445][ T154] ? show_regs_print_info+0x20/0x20 [ 119.958472][ T154] ? load_image+0x410/0x410 [ 119.958510][ T154] should_fail+0x383/0x4b0 [ 119.958538][ T154] should_failslab+0x5/0x20 [ 120.005760][ T4176] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 120.006508][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 120.014428][ T4176] usb usb1-port1: connect-debounce failed [ 120.016670][ T154] __kmalloc+0x6b/0x340 [ 120.119186][ T3559] FAULT_INJECTION: forcing a failure. [ 120.119186][ T3559] name failslab, interval 1, probability 1, space 0, times 897 [ 120.121265][ T154] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 120.121302][ T154] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 120.158703][ C0] FAULT_INJECTION: forcing a failure. [ 120.158703][ C0] name failslab, interval 1, probability 1, space 0, times 897 [ 120.164569][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 121.132302][ T154] ? ieee80211_queue_delayed_work+0x150/0x150 [ 121.138405][ T154] ieee80211_bss_info_update+0x74d/0xa80 [ 121.144072][ T154] ? ieee80211_rx_bss_put+0x60/0x60 [ 121.149295][ T154] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 121.155127][ T154] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 121.161326][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 121.167062][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 121.172974][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 121.178191][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.184096][ T154] ? _raw_spin_unlock+0x40/0x40 [ 121.188962][ T154] ? kcov_remote_start+0x6a/0x490 [ 121.194006][ T154] ? kcov_remote_start+0xfa/0x490 [ 121.199048][ T154] ieee80211_iface_work+0x714/0xc50 [ 121.204289][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 121.209506][ T154] cfg80211_wiphy_work+0x224/0x260 [ 121.214644][ T154] process_one_work+0x867/0xff0 [ 121.219530][ T154] ? worker_detach_from_pool+0x240/0x240 [ 121.225180][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 121.230483][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.235523][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.241083][ T154] ? wq_worker_running+0x97/0x170 [ 121.246130][ T154] worker_thread+0xad7/0x12a0 [ 121.250867][ T154] kthread+0x42e/0x520 [ 121.254966][ T154] ? rcu_lock_release+0x20/0x20 [ 121.259843][ T154] ? kthread_blkcg+0xd0/0xd0 [ 121.264482][ T154] ret_from_fork+0x1f/0x30 [ 121.268941][ T154] [ 121.271983][ C0] CPU: 0 PID: 501 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 121.279473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.283643][ T4350] FAULT_INJECTION: forcing a failure. [ 121.283643][ T4350] name failslab, interval 1, probability 1, space 0, times 894 [ 121.289567][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 121.289600][ C0] Call Trace: [ 121.289608][ C0] [ 121.289618][ C0] dump_stack_lvl+0x188/0x250 [ 121.320995][ C0] ? show_regs_print_info+0x20/0x20 [ 121.326221][ C0] ? load_image+0x410/0x410 [ 121.330745][ C0] ? prandom_u32+0x217/0x250 [ 121.335365][ C0] should_fail+0x383/0x4b0 [ 121.339798][ C0] should_failslab+0x5/0x20 [ 121.341390][ C1] FAULT_INJECTION: forcing a failure. [ 121.341390][ C1] name failslab, interval 1, probability 1, space 0, times 894 [ 121.344323][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 121.362022][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 121.367758][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 121.372988][ C0] ? __alloc_skb+0xf4/0x750 [ 121.377545][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 121.382765][ C0] __alloc_skb+0x22c/0x750 [ 121.387203][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 121.392251][ C0] ? __alloc_skb+0x750/0x750 [ 121.396853][ C0] ? mark_lock+0x94/0x320 [ 121.401306][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 121.406786][ C0] ? verify_lock_unused+0x140/0x140 [ 121.412005][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 121.418004][ C0] ? verify_lock_unused+0x140/0x140 [ 121.423331][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 121.428812][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 121.434410][ C0] __iterate_interfaces+0x225/0x4c0 [ 121.439621][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.445885][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.452164][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 121.459206][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 121.464423][ C0] ? hw_scan_work+0xef0/0xef0 [ 121.469115][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 121.474347][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 121.479481][ C0] hrtimer_run_softirq+0x176/0x240 [ 121.484611][ C0] handle_softirqs+0x336/0x830 [ 121.489400][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 121.494269][ C0] ? do_softirq+0x210/0x210 [ 121.498783][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 121.503914][ C0] __irq_exit_rcu+0x13b/0x230 [ 121.508605][ C0] ? irq_exit_rcu+0x20/0x20 [ 121.513134][ C0] irq_exit_rcu+0x5/0x20 [ 121.517390][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 121.523042][ C0] [ 121.525988][ C0] [ 121.528950][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 121.534968][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 121.540269][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 121.559887][ C0] RSP: 0018:ffffc90002f2f900 EFLAGS: 00000206 [ 121.565972][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 447682c0b8ee7b00 [ 121.573956][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 121.581949][ C0] RBP: ffffc90002f2fa20 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 121.589927][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 121.597908][ C0] R13: 1ffff920005e5f2c R14: 0000000000000246 R15: dffffc0000000000 [ 121.605914][ C0] ? rcu_lock_release+0x5/0x20 [ 121.610696][ C0] ? read_lock_is_recursive+0x10/0x10 [ 121.616085][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 121.621126][ C0] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 121.626785][ C0] rcu_lock_acquire+0x2a/0x30 [ 121.631477][ C0] ? rcu_lock_acquire+0x5/0x30 [ 121.636258][ C0] batadv_iv_ogm_schedule+0x434/0x1000 [ 121.641735][ C0] ? pskb_expand_head+0xb45/0x1100 [ 121.646873][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 121.654091][ C0] ? batadv_send_skb_packet+0x36e/0x580 [ 121.659660][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 121.666725][ C0] process_one_work+0x867/0xff0 [ 121.671607][ C0] ? worker_detach_from_pool+0x240/0x240 [ 121.677271][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 121.682572][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.687618][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.693190][ C0] ? wq_worker_running+0x97/0x170 [ 121.698234][ C0] worker_thread+0xad7/0x12a0 [ 121.702952][ C0] kthread+0x42e/0x520 [ 121.707042][ C0] ? rcu_lock_release+0x20/0x20 [ 121.711905][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.716529][ C0] ret_from_fork+0x1f/0x30 [ 121.720971][ C0] [ 121.724020][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 121.731331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.741386][ C1] Call Trace: [ 121.744702][ C1] [ 121.747661][ C1] dump_stack_lvl+0x188/0x250 [ 121.752477][ C1] ? show_regs_print_info+0x20/0x20 [ 121.757687][ C1] ? load_image+0x410/0x410 [ 121.762201][ C1] ? prandom_u32+0x217/0x250 [ 121.766805][ C1] should_fail+0x383/0x4b0 [ 121.771231][ C1] should_failslab+0x5/0x20 [ 121.775748][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 121.780687][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 121.785911][ C1] ? __alloc_skb+0xf4/0x750 [ 121.790422][ C1] __alloc_skb+0xf4/0x750 [ 121.794768][ C1] skb_copy+0x122/0x6f0 [ 121.798943][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 121.805031][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 121.811236][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 121.817233][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 121.822728][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 121.828301][ C1] __iterate_interfaces+0x225/0x4c0 [ 121.833511][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.839775][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 121.846035][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 121.853071][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 121.858285][ C1] ? hw_scan_work+0xef0/0xef0 [ 121.862974][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 121.868209][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 121.873334][ C1] hrtimer_run_softirq+0x176/0x240 [ 121.878461][ C1] handle_softirqs+0x336/0x830 [ 121.883231][ C1] ? run_ksoftirqd+0xa4/0x100 [ 121.887918][ C1] ? do_softirq+0x210/0x210 [ 121.892426][ C1] ? run_ksoftirqd+0x81/0x100 [ 121.897111][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 121.902311][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 121.907613][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 121.912819][ C1] run_ksoftirqd+0xa4/0x100 [ 121.917339][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 121.922546][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 121.927935][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 121.933071][ C1] smpboot_thread_fn+0x520/0x990 [ 121.938034][ C1] kthread+0x42e/0x520 [ 121.942113][ C1] ? cpu_report_death+0x180/0x180 [ 121.947152][ C1] ? kthread_blkcg+0xd0/0xd0 [ 121.951753][ C1] ret_from_fork+0x1f/0x30 [ 121.956192][ C1] [ 121.959457][ C0] FAULT_INJECTION: forcing a failure. [ 121.959457][ C0] name failslab, interval 1, probability 1, space 0, times 892 [ 121.971226][ T4381] FAULT_INJECTION: forcing a failure. [ 121.971226][ T4381] name failslab, interval 1, probability 1, space 0, times 892 [ 121.972287][ C0] CPU: 0 PID: 501 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 121.992782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.002873][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 122.010710][ C0] Call Trace: [ 122.014016][ C0] [ 122.016883][ C0] dump_stack_lvl+0x188/0x250 [ 122.021592][ C0] ? show_regs_print_info+0x20/0x20 [ 122.026811][ C0] ? load_image+0x410/0x410 [ 122.031331][ C0] ? __lock_acquire+0x1305/0x7b50 [ 122.036389][ C0] ? prandom_u32+0x217/0x250 [ 122.041010][ C0] should_fail+0x383/0x4b0 [ 122.045449][ C0] should_failslab+0x5/0x20 [ 122.049970][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 122.054938][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 122.060158][ C0] ? __alloc_skb+0xf4/0x750 [ 122.064693][ C0] __alloc_skb+0xf4/0x750 [ 122.069044][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 122.074090][ C0] ? __alloc_skb+0x750/0x750 [ 122.078705][ C0] ? mark_lock+0x94/0x320 [ 122.083059][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 122.088551][ C0] ? verify_lock_unused+0x140/0x140 [ 122.093772][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 122.099778][ C0] ? verify_lock_unused+0x140/0x140 [ 122.104997][ C0] ? verify_lock_unused+0x140/0x140 [ 122.110216][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 122.116066][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 122.121560][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 122.127135][ C0] __iterate_interfaces+0x225/0x4c0 [ 122.132355][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.138617][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.144883][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 122.151953][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 122.157179][ C0] ? hw_scan_work+0xef0/0xef0 [ 122.161888][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 122.167128][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 122.172268][ C0] hrtimer_run_softirq+0x176/0x240 [ 122.177406][ C0] handle_softirqs+0x336/0x830 [ 122.182297][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 122.187172][ C0] ? do_softirq+0x210/0x210 [ 122.191694][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 122.196832][ C0] __irq_exit_rcu+0x13b/0x230 [ 122.201524][ C0] ? irq_exit_rcu+0x20/0x20 [ 122.206069][ C0] irq_exit_rcu+0x5/0x20 [ 122.210335][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 122.215992][ C0] [ 122.218963][ C0] [ 122.221914][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.227915][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 122.233223][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 122.252844][ C0] RSP: 0018:ffffc90002f2f900 EFLAGS: 00000206 [ 122.258948][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 447682c0b8ee7b00 [ 122.266937][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 122.274921][ C0] RBP: ffffc90002f2fa20 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 122.282910][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 122.290903][ C0] R13: 1ffff920005e5f2c R14: 0000000000000246 R15: dffffc0000000000 [ 122.298915][ C0] ? rcu_lock_release+0x5/0x20 [ 122.303702][ C0] ? read_lock_is_recursive+0x10/0x10 [ 122.309092][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 122.314146][ C0] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 122.319802][ C0] rcu_lock_acquire+0x2a/0x30 [ 122.324492][ C0] ? rcu_lock_acquire+0x5/0x30 [ 122.329271][ C0] batadv_iv_ogm_schedule+0x434/0x1000 [ 122.334756][ C0] ? pskb_expand_head+0xb45/0x1100 [ 122.339895][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 122.347121][ C0] ? batadv_send_skb_packet+0x36e/0x580 [ 122.352701][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 122.359844][ C0] process_one_work+0x867/0xff0 [ 122.364737][ C0] ? worker_detach_from_pool+0x240/0x240 [ 122.370387][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 122.375698][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.380742][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 122.386310][ C0] ? wq_worker_running+0x97/0x170 [ 122.391357][ C0] worker_thread+0xad7/0x12a0 [ 122.396075][ C0] kthread+0x42e/0x520 [ 122.400206][ C0] ? rcu_lock_release+0x20/0x20 [ 122.405165][ C0] ? kthread_blkcg+0xd0/0xd0 [ 122.409771][ C0] ret_from_fork+0x1f/0x30 [ 122.414214][ C0] [ 122.417251][ T4381] CPU: 1 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 122.424852][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.434939][ T4381] Call Trace: [ 122.438241][ T4381] [ 122.441195][ T4381] dump_stack_lvl+0x188/0x250 [ 122.445905][ T4381] ? show_regs_print_info+0x20/0x20 [ 122.449952][ T4293] FAULT_INJECTION: forcing a failure. [ 122.449952][ T4293] name failslab, interval 1, probability 1, space 0, times 891 [ 122.451130][ T4381] ? load_image+0x410/0x410 [ 122.468397][ T4381] ? __lock_acquire+0x13dc/0x7b50 [ 122.473452][ T4381] ? prandom_u32+0x217/0x250 [ 122.478072][ T4381] should_fail+0x383/0x4b0 [ 122.482519][ T4381] should_failslab+0x5/0x20 [ 122.487041][ T4381] slab_pre_alloc_hook+0x51/0xc0 [ 122.491994][ T4381] ? __es_insert_extent+0x706/0x17b0 [ 122.497302][ T4381] kmem_cache_alloc+0x3d/0x280 [ 122.502093][ T4381] __es_insert_extent+0x706/0x17b0 [ 122.507247][ T4381] ? do_raw_write_lock+0x11a/0x260 [ 122.512391][ T4381] ? ext4_es_insert_extent+0x2dd0/0x2dd0 [ 122.518065][ T4381] ? do_raw_read_unlock+0x70/0x70 [ 122.523132][ T4381] ext4_es_insert_extent+0x5ac/0x2dd0 [ 122.528533][ T4381] ? ext4_es_find_extent_range+0x15e/0x460 [ 122.530702][ C0] FAULT_INJECTION: forcing a failure. [ 122.530702][ C0] name failslab, interval 1, probability 1, space 0, times 891 [ 122.534391][ T4381] ? ext4_es_scan_clu+0x230/0x230 [ 122.552184][ T4381] ? rcu_is_watching+0x11/0xa0 [ 122.556971][ T4381] ? ext4_es_find_extent_range+0x1ca/0x460 [ 122.562801][ T4381] ext4_ext_map_blocks+0x2023/0x63d0 [ 122.568138][ T4381] ? ext4_ext_release+0x10/0x10 [ 122.573013][ T4381] ? __might_sleep+0xf0/0xf0 [ 122.577634][ T4381] ? down_read+0x1aa/0x2e0 [ 122.582074][ T4381] ext4_map_blocks+0x3d1/0x1a50 [ 122.586960][ T4381] ? ext4_issue_zeroout+0x250/0x250 [ 122.592182][ T4381] ? __brelse+0x55/0x90 [ 122.596364][ T4381] ? __ext4_new_inode+0x3247/0x3ad0 [ 122.601593][ T4381] ext4_append+0x22d/0x560 [ 122.606043][ T4381] ? ext4_init_new_dir+0x910/0x910 [ 122.611174][ T4381] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 122.616918][ T4381] ext4_init_new_dir+0x2a7/0x910 [ 122.621886][ T4381] ext4_mkdir+0x4c3/0xc90 [ 122.626242][ T4381] ? ext4_symlink+0xcd0/0xcd0 [ 122.630938][ T4381] ? inode_permission+0xef/0x480 [ 122.635895][ T4381] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 122.640935][ T4381] ? security_inode_mkdir+0xb3/0x100 [ 122.646242][ T4381] vfs_mkdir+0x386/0x570 [ 122.650510][ T4381] do_mkdirat+0x1dd/0x5c0 [ 122.654865][ T4381] ? vfs_mkdir+0x570/0x570 [ 122.659298][ T4381] ? getname_flags+0x1f9/0x4f0 [ 122.664090][ T4381] __x64_sys_mkdir+0x6a/0x80 [ 122.668705][ T4381] do_syscall_64+0x4c/0xa0 [ 122.673145][ T4381] ? clear_bhb_loop+0x30/0x80 [ 122.677836][ T4381] ? clear_bhb_loop+0x30/0x80 [ 122.682530][ T4381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.688452][ T4381] RIP: 0033:0x7fc7ba2c0267 [ 122.692886][ T4381] Code: 94 c0 48 8b 54 24 48 64 48 2b 14 25 28 00 00 00 75 08 0f b6 c0 48 83 c4 58 c3 e8 44 51 fd ff 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 122.712506][ T4381] RSP: 002b:00007ffcd588b708 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 122.720941][ T4381] RAX: ffffffffffffffda RBX: 00007ffcd588b832 RCX: 00007fc7ba2c0267 [ 122.728930][ T4381] RDX: 000000000b971f3c RSI: 00000000000001c0 RDI: 00007ffcd588b820 [ 122.736918][ T4381] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 122.744911][ T4381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000b971f3c [ 122.753593][ T4381] R13: 00007ffcd588b832 R14: 0000000000000004 R15: 00007fc7ba34f080 [ 122.761595][ T4381] [ 122.764631][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 122.771954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.782075][ C0] Call Trace: [ 122.785389][ C0] [ 122.788068][ T4284] FAULT_INJECTION: forcing a failure. [ 122.788068][ T4284] name failslab, interval 1, probability 1, space 0, times 890 [ 122.788380][ C0] dump_stack_lvl+0x188/0x250 [ 122.805836][ C0] ? show_regs_print_info+0x20/0x20 [ 122.811068][ C0] ? load_image+0x410/0x410 [ 122.815592][ C0] ? __lock_acquire+0x1305/0x7b50 [ 122.820642][ C0] ? prandom_u32+0x217/0x250 [ 122.825265][ C0] should_fail+0x383/0x4b0 [ 122.829705][ C0] should_failslab+0x5/0x20 [ 122.834229][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 122.839184][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 122.844403][ C0] ? __alloc_skb+0xf4/0x750 [ 122.848939][ C0] __alloc_skb+0xf4/0x750 [ 122.853307][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 122.858355][ C0] ? __alloc_skb+0x750/0x750 [ 122.862967][ C0] ? mark_lock+0x94/0x320 [ 122.867325][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 122.872810][ C0] ? verify_lock_unused+0x140/0x140 [ 122.878045][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 122.884063][ C0] ? verify_lock_unused+0x140/0x140 [ 122.889291][ C0] ? verify_lock_unused+0x140/0x140 [ 122.894560][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 122.900412][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 122.905910][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 122.911896][ C0] __iterate_interfaces+0x225/0x4c0 [ 122.917131][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.923407][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 122.929688][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 122.936755][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 122.941985][ C0] ? hw_scan_work+0xef0/0xef0 [ 122.946710][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 122.951947][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 122.957087][ C0] hrtimer_run_softirq+0x176/0x240 [ 122.962253][ C0] handle_softirqs+0x336/0x830 [ 122.967045][ C0] ? run_ksoftirqd+0xa4/0x100 [ 122.971747][ C0] ? do_softirq+0x210/0x210 [ 122.976271][ C0] ? run_ksoftirqd+0x81/0x100 [ 122.980970][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 122.986216][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 122.991524][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 122.996843][ C0] run_ksoftirqd+0xa4/0x100 [ 123.001390][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 123.006614][ C0] smpboot_thread_fn+0x520/0x990 [ 123.011590][ C0] kthread+0x42e/0x520 [ 123.015691][ C0] ? cpu_report_death+0x180/0x180 [ 123.020754][ C0] ? kthread_blkcg+0xd0/0xd0 [ 123.025385][ C0] ret_from_fork+0x1f/0x30 [ 123.029838][ C0] [ 123.032883][ T4284] CPU: 1 PID: 4284 Comm: kworker/1:7 Not tainted syzkaller #0 [ 123.040382][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.050473][ T4284] Workqueue: events nsim_dev_trap_report_work [ 123.056590][ T4284] Call Trace: [ 123.059904][ T4284] [ 123.062868][ T4284] dump_stack_lvl+0x188/0x250 [ 123.067590][ T4284] ? show_regs_print_info+0x20/0x20 [ 123.072821][ T4284] ? load_image+0x410/0x410 [ 123.077358][ T4284] ? prandom_u32+0x217/0x250 [ 123.082012][ T4284] should_fail+0x383/0x4b0 [ 123.086484][ T4284] should_failslab+0x5/0x20 [ 123.091008][ T4284] slab_pre_alloc_hook+0x51/0xc0 [ 123.096002][ T4284] __kmalloc_node_track_caller+0x68/0x3a0 [ 123.101773][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 123.107599][ T4284] ? __alloc_skb+0xf4/0x750 [ 123.112120][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 123.117945][ T4284] __alloc_skb+0x22c/0x750 [ 123.122384][ T4284] nsim_dev_trap_report_work+0x25c/0xab0 [ 123.128079][ T4284] process_one_work+0x867/0xff0 [ 123.133063][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 123.138731][ T4284] ? lockdep_hardirqs_off+0x70/0x100 [ 123.144061][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 123.149121][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 123.154704][ T4284] ? wq_worker_running+0x97/0x170 [ 123.159767][ T4284] worker_thread+0xad7/0x12a0 [ 123.164482][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.170407][ T4284] kthread+0x42e/0x520 [ 123.174521][ T4284] ? rcu_lock_release+0x20/0x20 [ 123.179426][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 123.184041][ T4284] ret_from_fork+0x1f/0x30 [ 123.188492][ T4284] [ 123.191528][ T4293] CPU: 0 PID: 4293 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 123.199161][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.209261][ T4293] Workqueue: events_unbound cfg80211_wiphy_work [ 123.215549][ T4293] Call Trace: [ 123.218865][ T4293] [ 123.221831][ T4293] dump_stack_lvl+0x188/0x250 [ 123.226539][ T4293] ? show_regs_print_info+0x20/0x20 [ 123.231758][ T4293] ? load_image+0x410/0x410 [ 123.236290][ T4293] should_fail+0x383/0x4b0 [ 123.240734][ T4293] should_failslab+0x5/0x20 [ 123.245254][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 123.250205][ T4293] __kmalloc+0x6b/0x340 [ 123.254379][ T4293] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 123.260766][ T4293] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 123.266968][ T4293] ? verify_lock_unused+0x140/0x140 [ 123.272197][ T4293] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 123.278299][ T4293] ? __lock_acquire+0x7b50/0x7b50 [ 123.283355][ T4293] ieee80211_bss_info_update+0x6ba/0xa80 [ 123.289020][ T4293] ? ieee80211_rx_bss_put+0x60/0x60 [ 123.294245][ T4293] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 123.300085][ T4293] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 123.306274][ T4293] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 123.312008][ T4293] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 123.317969][ T4293] ? lockdep_hardirqs_on+0x94/0x140 [ 123.323186][ T4293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.329099][ T4293] ? _raw_spin_unlock+0x40/0x40 [ 123.333968][ T4293] ? kcov_remote_start+0x6a/0x490 [ 123.339029][ T4293] ? kcov_remote_start+0xfa/0x490 [ 123.344086][ T4293] ieee80211_iface_work+0x714/0xc50 [ 123.349329][ T4293] ? _raw_spin_unlock_irq+0x1f/0x40 [ 123.354550][ T4293] cfg80211_wiphy_work+0x224/0x260 [ 123.359691][ T4293] process_one_work+0x867/0xff0 [ 123.364573][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 123.370226][ T4293] ? lockdep_hardirqs_off+0x70/0x100 [ 123.375535][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 123.380582][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 123.386187][ T4293] ? wq_worker_running+0x97/0x170 [ 123.391230][ T4293] worker_thread+0xad7/0x12a0 [ 123.395939][ T4293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.401860][ T4293] kthread+0x42e/0x520 [ 123.405959][ T4293] ? rcu_lock_release+0x20/0x20 [ 123.410832][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 123.415445][ T4293] ret_from_fork+0x1f/0x30 [ 123.419926][ T4293] [ 123.422966][ T4350] CPU: 1 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 123.429949][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.440047][ T4350] Call Trace: [ 123.443343][ T4350] [ 123.446287][ T4350] dump_stack_lvl+0x188/0x250 [ 123.450991][ T4350] ? show_regs_print_info+0x20/0x20 [ 123.456219][ T4350] ? load_image+0x410/0x410 [ 123.460745][ T4350] ? prandom_u32+0x217/0x250 [ 123.465367][ T4350] should_fail+0x383/0x4b0 [ 123.469800][ T4350] should_failslab+0x5/0x20 [ 123.474449][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 123.479408][ T4350] kmem_cache_alloc_trace+0x47/0x290 [ 123.484734][ T4350] ? kernfs_iop_get_link+0x63/0x530 [ 123.489957][ T4350] kernfs_iop_get_link+0x63/0x530 [ 123.495025][ T4350] vfs_readlink+0x16f/0x3e0 [ 123.499549][ T4350] ? readlink_copy+0xb0/0xb0 [ 123.504168][ T4350] ? bpf_lsm_inode_readlink+0x5/0x10 [ 123.509586][ T4350] do_readlinkat+0x251/0x490 [ 123.514206][ T4350] ? cp_new_stat+0x540/0x540 [ 123.518826][ T4350] ? lock_chain_count+0x20/0x20 [ 123.523719][ T4350] __x64_sys_readlink+0x7b/0x90 [ 123.528599][ T4350] do_syscall_64+0x4c/0xa0 [ 123.533037][ T4350] ? clear_bhb_loop+0x30/0x80 [ 123.537743][ T4350] ? clear_bhb_loop+0x30/0x80 [ 123.542456][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.548373][ T4350] RIP: 0033:0x7f9ec9f9c3a7 [ 123.552863][ T4350] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 123.572485][ T4350] RSP: 002b:00007ffc94dd7168 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 123.580946][ T4350] RAX: ffffffffffffffda RBX: 00007ffc94dd79b0 RCX: 00007f9ec9f9c3a7 [ 123.588943][ T4350] RDX: 0000000000000400 RSI: 00007ffc94dd7570 RDI: 00007ffc94dd7170 [ 123.597110][ T4350] RBP: 0000000000000200 R08: 0000562342abcc29 R09: 0000000000000000 [ 123.605112][ T4350] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc94dd7170 [ 123.613103][ T4350] R13: 00007ffc94dd7570 R14: 0000562342abfca4 R15: 0000562342abfbcc [ 123.621109][ T4350] [ 123.625974][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 123.632971][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.643063][ T3559] Call Trace: [ 123.646364][ T3559] [ 123.649325][ T3559] dump_stack_lvl+0x188/0x250 [ 123.654039][ T3559] ? show_regs_print_info+0x20/0x20 [ 123.659277][ T3559] ? load_image+0x410/0x410 [ 123.663830][ T3559] should_fail+0x383/0x4b0 [ 123.668278][ T3559] should_failslab+0x5/0x20 [ 123.672804][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 123.677762][ T3559] ? security_file_alloc+0x30/0x110 [ 123.682987][ T3559] kmem_cache_alloc+0x3d/0x280 [ 123.687780][ T3559] ? rcu_is_watching+0x11/0xa0 [ 123.692637][ T3559] security_file_alloc+0x30/0x110 [ 123.697717][ T3559] __alloc_file+0xc2/0x240 [ 123.702166][ T3559] alloc_empty_file+0x90/0x180 [ 123.706955][ T3559] path_openat+0x11c/0x2fb0 [ 123.711483][ T3559] ? __lock_acquire+0x13dc/0x7b50 [ 123.716529][ T3559] ? stack_trace_snprint+0xe0/0xe0 [ 123.721664][ T3559] ? verify_lock_unused+0x140/0x140 [ 123.726900][ T3559] ? verify_lock_unused+0x140/0x140 [ 123.732134][ T3559] ? __kasan_slab_alloc+0xa9/0xc0 [ 123.737191][ T3559] ? __kasan_slab_alloc+0x92/0xc0 [ 123.742259][ T3559] ? slab_post_alloc_hook+0x4c/0x380 [ 123.747586][ T3559] ? verify_lock_unused+0x140/0x140 [ 123.752819][ T3559] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.758925][ T3559] ? do_filp_open+0x400/0x400 [ 123.763656][ T3559] do_filp_open+0x1df/0x400 [ 123.768184][ T3559] ? vfs_tmpfile+0x300/0x300 [ 123.772812][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 123.777679][ T3559] ? alloc_fd+0x59e/0x650 [ 123.782031][ T3559] do_sys_openat2+0x14b/0x500 [ 123.786732][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 123.791802][ T3559] ? do_sys_open+0xe0/0xe0 [ 123.796246][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.802256][ T3559] ? lock_chain_count+0x20/0x20 [ 123.807151][ T3559] __x64_sys_openat+0x135/0x160 [ 123.812472][ T3559] do_syscall_64+0x4c/0xa0 [ 123.816924][ T3559] ? clear_bhb_loop+0x30/0x80 [ 123.821649][ T3559] ? clear_bhb_loop+0x30/0x80 [ 123.826374][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.832298][ T3559] RIP: 0033:0x7f9ec9f2e407 [ 123.836732][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 123.856361][ T3559] RSP: 002b:00007ffc94ddc650 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 123.864807][ T3559] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 123.872815][ T3559] RDX: 0000000000080141 RSI: 0000562342ab802e RDI: ffffffffffffff9c [ 123.880822][ T3559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.888827][ T3559] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 123.896826][ T3559] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 123.904856][ T3559] [ 123.908162][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 123.915491][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.925601][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 123.931894][ T9] Call Trace: [ 123.935201][ T9] [ 123.938163][ T9] dump_stack_lvl+0x188/0x250 [ 123.941338][ T4382] FAULT_INJECTION: forcing a failure. [ 123.941338][ T4382] name failslab, interval 1, probability 1, space 0, times 888 [ 123.942880][ T9] ? show_regs_print_info+0x20/0x20 [ 123.942911][ T9] ? load_image+0x410/0x410 [ 123.965636][ T9] should_fail+0x383/0x4b0 [ 123.970092][ T9] should_failslab+0x5/0x20 [ 123.974641][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 123.979603][ T9] __kmalloc+0x6b/0x340 [ 123.983786][ T9] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 123.989889][ T9] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 123.995668][ T9] ? __lock_acquire+0x7b50/0x7b50 [ 124.000724][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 124.006822][ T9] ieee80211_bss_info_update+0x74d/0xa80 [ 124.012499][ T9] ? ieee80211_rx_bss_put+0x60/0x60 [ 124.017730][ T9] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 124.023566][ T9] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 124.029786][ T9] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 124.035528][ T9] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 124.041446][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 124.046666][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.052576][ T9] ? _raw_spin_unlock+0x40/0x40 [ 124.057438][ T9] ? kcov_remote_start+0x6a/0x490 [ 124.062491][ T9] ? kcov_remote_start+0xfa/0x490 [ 124.067541][ T9] ieee80211_iface_work+0x714/0xc50 [ 124.072759][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.077986][ T9] cfg80211_wiphy_work+0x224/0x260 [ 124.083120][ T9] process_one_work+0x867/0xff0 [ 124.088007][ T9] ? worker_detach_from_pool+0x240/0x240 [ 124.093662][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 124.098984][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.104032][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.109604][ T9] ? wq_worker_running+0x97/0x170 [ 124.110404][ T4350] FAULT_INJECTION: forcing a failure. [ 124.110404][ T4350] name failslab, interval 1, probability 1, space 0, times 887 [ 124.114658][ T9] worker_thread+0xad7/0x12a0 [ 124.132272][ T9] kthread+0x42e/0x520 [ 124.136371][ T9] ? rcu_lock_release+0x20/0x20 [ 124.141244][ T9] ? kthread_blkcg+0xd0/0xd0 [ 124.145856][ T9] ret_from_fork+0x1f/0x30 [ 124.150311][ T9] [ 124.153352][ T4350] CPU: 1 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 124.160327][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.170407][ T4350] Call Trace: [ 124.173712][ T4350] [ 124.176654][ T4350] dump_stack_lvl+0x188/0x250 [ 124.181358][ T4350] ? show_regs_print_info+0x20/0x20 [ 124.186585][ T4350] ? load_image+0x410/0x410 [ 124.191121][ T4350] ? prandom_u32+0x217/0x250 [ 124.195743][ T4350] should_fail+0x383/0x4b0 [ 124.200212][ T4350] should_failslab+0x5/0x20 [ 124.204759][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 124.209728][ T4350] ? getname_flags+0xb7/0x4f0 [ 124.214569][ T4350] kmem_cache_alloc+0x3d/0x280 [ 124.219372][ T4350] getname_flags+0xb7/0x4f0 [ 124.223912][ T4350] user_path_at_empty+0x2a/0x190 [ 124.228876][ T4350] do_readlinkat+0xd9/0x490 [ 124.233431][ T4350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.239470][ T4350] ? cp_new_stat+0x540/0x540 [ 124.244089][ T4350] ? lock_chain_count+0x20/0x20 [ 124.248979][ T4350] __x64_sys_readlink+0x7b/0x90 [ 124.253860][ T4350] do_syscall_64+0x4c/0xa0 [ 124.258295][ T4350] ? clear_bhb_loop+0x30/0x80 [ 124.262997][ T4350] ? clear_bhb_loop+0x30/0x80 [ 124.267707][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.273629][ T4350] RIP: 0033:0x7f9ec9f9c3a7 [ 124.278068][ T4350] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 124.297692][ T4350] RSP: 002b:00007ffc94dd6a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 124.306136][ T4350] RAX: ffffffffffffffda RBX: 00007ffc94dd6f70 RCX: 00007f9ec9f9c3a7 [ 124.314139][ T4350] RDX: 0000000000000400 RSI: 00007ffc94dd6aa0 RDI: 00007ffc94dd6f70 [ 124.322132][ T4350] RBP: 00007ffc94dd6aa0 R08: 0000562381146ec0 R09: 0000000000000020 [ 124.330134][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 124.338123][ T4350] R13: 00007ffc94dd77a5 R14: 0000562342abfca4 R15: 0000562342abfbcc [ 124.346148][ T4350] [ 124.349267][ T4382] CPU: 1 PID: 4382 Comm: syz-executor Not tainted syzkaller #0 [ 124.356856][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.366939][ T4382] Call Trace: [ 124.370254][ T4382] [ 124.373198][ T4382] dump_stack_lvl+0x188/0x250 [ 124.377897][ T4382] ? show_regs_print_info+0x20/0x20 [ 124.383111][ T4382] ? load_image+0x410/0x410 [ 124.387638][ T4382] should_fail+0x383/0x4b0 [ 124.392074][ T4382] should_failslab+0x5/0x20 [ 124.396593][ T4382] slab_pre_alloc_hook+0x51/0xc0 [ 124.401546][ T4382] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 124.407890][ T4382] ? proc_alloc_inode+0x19/0xa0 [ 124.412755][ T4382] kmem_cache_alloc+0x3d/0x280 [ 124.417531][ T4382] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 124.423874][ T4382] proc_alloc_inode+0x19/0xa0 [ 124.428606][ T4382] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 124.434950][ T4382] new_inode_pseudo+0x5f/0x210 [ 124.439730][ T4382] new_inode+0x25/0x1d0 [ 124.443926][ T4382] proc_pid_make_inode+0x20/0x1a0 [ 124.448979][ T4382] proc_pident_instantiate+0x69/0x2a0 [ 124.454366][ T4382] proc_pident_lookup+0x1cb/0x270 [ 124.459414][ T4382] __lookup_slow+0x29d/0x410 [ 124.464023][ T4382] ? lookup_one_len+0x2d0/0x2d0 [ 124.468897][ T4382] ? down_read+0x1aa/0x2e0 [ 124.473336][ T4382] lookup_slow+0x53/0x70 [ 124.477614][ T4382] walk_component+0x314/0x460 [ 124.482321][ T4382] path_lookupat+0x148/0x420 [ 124.486929][ T4382] filename_lookup+0x21e/0x550 [ 124.491716][ T4382] ? __lock_acquire+0x7b50/0x7b50 [ 124.496766][ T4382] ? hashlen_string+0x110/0x110 [ 124.501666][ T4382] ? noop_direct_IO+0x10/0x10 [ 124.506372][ T4382] ? strncpy_from_user+0x1f4/0x350 [ 124.511507][ T4382] ? getname_flags+0x1f9/0x4f0 [ 124.516291][ T4382] user_path_at_empty+0x40/0x190 [ 124.521249][ T4382] do_readlinkat+0xd9/0x490 [ 124.525765][ T4382] ? cp_new_stat+0x540/0x540 [ 124.530365][ T4382] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.536368][ T4382] ? lock_chain_count+0x20/0x20 [ 124.541265][ T4382] __x64_sys_readlinkat+0x96/0xb0 [ 124.546309][ T4382] do_syscall_64+0x4c/0xa0 [ 124.550744][ T4382] ? clear_bhb_loop+0x30/0x80 [ 124.555440][ T4382] ? clear_bhb_loop+0x30/0x80 [ 124.560128][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.566140][ T4382] RIP: 0033:0x7f29030fa607 [ 124.570572][ T4382] Code: 00 00 00 41 54 41 ba 00 10 00 00 bf 9c ff ff ff 48 8d 35 28 8e 07 00 55 b8 0b 01 00 00 53 48 81 ec 00 10 00 00 48 89 e2 0f 05 <85> c0 7e 7d 0f b6 14 24 80 fa 5b 74 74 80 fa 2f 0f 85 2d 01 00 00 [ 124.590190][ T4382] RSP: 002b:00007ffe91614990 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 124.598626][ T4382] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f29030fa607 [ 124.606610][ T4382] RDX: 00007ffe91614990 RSI: 00007f290317341c RDI: 00000000ffffff9c [ 124.614597][ T4382] RBP: 00007ffe91615aa8 R08: 00007f29033096d8 R09: 0000000000000000 [ 124.622584][ T4382] R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffe91615ac0 [ 124.630570][ T4382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.638563][ T4382] [ 124.642070][ T3852] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 124.648091][ T3559] udevd[3559]: could not touch /run/udev/queue: Cannot allocate memory [ 124.649125][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.663878][ T3559] FAULT_INJECTION: forcing a failure. [ 124.663878][ T3559] name failslab, interval 1, probability 1, space 0, times 886 [ 124.667423][ T3852] Call Trace: [ 124.667433][ T3852] [ 124.667443][ T3852] dump_stack_lvl+0x188/0x250 [ 124.691310][ T3852] ? show_regs_print_info+0x20/0x20 [ 124.696536][ T3852] ? load_image+0x410/0x410 [ 124.701068][ T3852] ? prandom_u32+0x217/0x250 [ 124.705686][ T3852] should_fail+0x383/0x4b0 [ 124.710123][ T3852] should_failslab+0x5/0x20 [ 124.714642][ T3852] slab_pre_alloc_hook+0x51/0xc0 [ 124.719605][ T3852] __kmalloc_node_track_caller+0x68/0x3a0 [ 124.725350][ T3852] ? alloc_skb_with_frags+0xa7/0x720 [ 124.730653][ T3852] ? __alloc_skb+0xf4/0x750 [ 124.735172][ T3852] ? alloc_skb_with_frags+0xa7/0x720 [ 124.740478][ T3852] __alloc_skb+0x22c/0x750 [ 124.744921][ T3852] alloc_skb_with_frags+0xa7/0x720 [ 124.750061][ T3852] sock_alloc_send_pskb+0x87f/0x9a0 [ 124.755283][ T3852] ? sock_kzfree_s+0x50/0x50 [ 124.759880][ T3852] ? do_raw_spin_lock+0x128/0x2f0 [ 124.764927][ T3852] ? __rwlock_init+0x140/0x140 [ 124.769706][ T3852] ? do_raw_spin_unlock+0x11d/0x230 [ 124.774925][ T3852] unix_dgram_sendmsg+0x6f8/0x19c0 [ 124.780062][ T3852] ? aa_sk_perm+0x7dc/0x910 [ 124.784588][ T3852] ? aa_af_perm+0x340/0x340 [ 124.789109][ T3852] ? unix_dgram_poll+0x680/0x680 [ 124.794067][ T3852] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 124.800510][ T3852] ? apparmor_socket_sendmsg+0x88/0x230 [ 124.806074][ T3852] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 124.811663][ T3852] sock_write_iter+0x2a6/0x3a0 [ 124.816455][ T3852] ? sock_read_iter+0x380/0x380 [ 124.821336][ T3852] do_iter_readv_writev+0x47d/0x5f0 [ 124.826554][ T3852] ? aa_path_link+0x8a0/0x8a0 [ 124.831252][ T3852] ? generic_file_rw_checks+0x280/0x280 [ 124.836822][ T3852] ? common_file_perm+0x171/0x1c0 [ 124.841868][ T3852] ? fsnotify_perm+0x5d/0x560 [ 124.846569][ T3852] ? security_file_permission+0x75/0xa0 [ 124.852159][ T3852] do_iter_write+0x1f8/0x7a0 [ 124.856777][ T3852] ? import_iovec+0x6f/0xa0 [ 124.861304][ T3852] do_writev+0x281/0x480 [ 124.865568][ T3852] ? do_readv+0x460/0x460 [ 124.869922][ T3852] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.875925][ T3852] ? lock_chain_count+0x20/0x20 [ 124.880800][ T3852] ? lockdep_hardirqs_on+0x94/0x140 [ 124.881973][ C1] FAULT_INJECTION: forcing a failure. [ 124.881973][ C1] name failslab, interval 1, probability 1, space 0, times 885 [ 124.886026][ T3852] do_syscall_64+0x4c/0xa0 [ 124.903272][ T3852] ? clear_bhb_loop+0x30/0x80 [ 124.907975][ T3852] ? clear_bhb_loop+0x30/0x80 [ 124.912673][ T3852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.918590][ T3852] RIP: 0033:0x7f1f8352e407 [ 124.923038][ T3852] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 124.942681][ T3852] RSP: 002b:00007ffc086229c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 124.951113][ T3852] RAX: ffffffffffffffda RBX: 00007f1f834a4740 RCX: 00007f1f8352e407 [ 124.959099][ T3852] RDX: 0000000000000005 RSI: 00007ffc08622a20 RDI: 0000000000000013 [ 124.967098][ T3852] RBP: 00005601fd4428b0 R08: 0000000000000000 R09: 0000000000000000 [ 124.975088][ T3852] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc08642e40 [ 124.983076][ T3852] R13: 0000000000000004 R14: 0000000000000148 R15: 00007ffc08632c10 [ 124.991082][ T3852] [ 124.994117][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 125.001644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.011745][ C1] Call Trace: [ 125.015057][ C1] [ 125.018021][ C1] dump_stack_lvl+0x188/0x250 [ 125.022772][ C1] ? show_regs_print_info+0x20/0x20 [ 125.028022][ C1] ? load_image+0x410/0x410 [ 125.032570][ C1] should_fail+0x383/0x4b0 [ 125.037023][ C1] should_failslab+0x5/0x20 [ 125.041559][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 125.041581][ C0] FAULT_INJECTION: forcing a failure. [ 125.041581][ C0] name failslab, interval 1, probability 1, space 0, times 883 [ 125.046534][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 125.065020][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 125.069890][ C1] ? __alloc_skb+0xf4/0x750 [ 125.074409][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 125.079283][ C1] __alloc_skb+0x22c/0x750 [ 125.083726][ C1] ndisc_alloc_skb+0xa6/0x420 [ 125.088435][ C1] ndisc_send_rs+0x271/0x700 [ 125.093063][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 125.098023][ C1] addrconf_rs_timer+0x367/0x640 [ 125.102980][ C1] ? detach_timer+0x33/0x2b0 [ 125.107590][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 125.113680][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 125.119767][ C1] call_timer_fn+0x17b/0x540 [ 125.124376][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 125.130459][ C1] ? __run_timers+0x810/0x810 [ 125.135162][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.140374][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 125.145596][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 125.151680][ C1] __run_timers+0x56c/0x810 [ 125.156217][ C1] ? detach_timer+0x2b0/0x2b0 [ 125.160913][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.166922][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 125.171803][ C1] run_timer_softirq+0x63/0xf0 [ 125.176586][ C1] handle_softirqs+0x336/0x830 [ 125.181375][ C1] ? run_ksoftirqd+0xa4/0x100 [ 125.186169][ C1] ? do_softirq+0x210/0x210 [ 125.190687][ C1] ? run_ksoftirqd+0x81/0x100 [ 125.195377][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 125.200591][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 125.205893][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 125.211115][ C1] run_ksoftirqd+0xa4/0x100 [ 125.215637][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 125.220847][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 125.226241][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 125.231372][ C1] smpboot_thread_fn+0x520/0x990 [ 125.236345][ C1] kthread+0x42e/0x520 [ 125.240436][ C1] ? cpu_report_death+0x180/0x180 [ 125.245474][ C1] ? kthread_blkcg+0xd0/0xd0 [ 125.250081][ C1] ret_from_fork+0x1f/0x30 [ 125.254524][ C1] [ 125.257554][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 125.264869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.274956][ C0] Call Trace: [ 125.278259][ C0] [ 125.281213][ C0] dump_stack_lvl+0x188/0x250 [ 125.285914][ C0] ? verify_lock_unused+0x140/0x140 [ 125.291141][ C0] ? show_regs_print_info+0x20/0x20 [ 125.296374][ C0] ? load_image+0x410/0x410 [ 125.300914][ C0] ? prandom_u32+0x217/0x250 [ 125.305573][ C0] should_fail+0x383/0x4b0 [ 125.310014][ C0] should_failslab+0x5/0x20 [ 125.314535][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 125.319493][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 125.324709][ C0] ? __alloc_skb+0xf4/0x750 [ 125.329252][ C0] __alloc_skb+0xf4/0x750 [ 125.333597][ C0] ? wg_expired_zero_key_material+0x250/0x250 [ 125.339689][ C0] wg_packet_send_keepalive+0x61/0x2b0 [ 125.345174][ C0] ? wg_expired_zero_key_material+0x250/0x250 [ 125.351265][ C0] call_timer_fn+0x17b/0x540 [ 125.355879][ C0] ? wg_expired_zero_key_material+0x250/0x250 [ 125.361967][ C0] ? __run_timers+0x810/0x810 [ 125.366667][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.371886][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 125.377106][ C0] ? wg_expired_zero_key_material+0x250/0x250 [ 125.383217][ C0] __run_timers+0x56c/0x810 [ 125.387759][ C0] ? detach_timer+0x2b0/0x2b0 [ 125.392460][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.398464][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 125.403332][ C0] run_timer_softirq+0x63/0xf0 [ 125.408112][ C0] handle_softirqs+0x336/0x830 [ 125.412897][ C0] ? run_ksoftirqd+0xa4/0x100 [ 125.417595][ C0] ? do_softirq+0x210/0x210 [ 125.422117][ C0] ? run_ksoftirqd+0x81/0x100 [ 125.426805][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 125.432017][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 125.437343][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 125.442555][ C0] run_ksoftirqd+0xa4/0x100 [ 125.447085][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 125.452320][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 125.457742][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 125.462879][ C0] smpboot_thread_fn+0x520/0x990 [ 125.467866][ C0] kthread+0x42e/0x520 [ 125.471965][ C0] ? cpu_report_death+0x180/0x180 [ 125.477025][ C0] ? kthread_blkcg+0xd0/0xd0 [ 125.481648][ C0] ret_from_fork+0x1f/0x30 [ 125.486111][ C0] [ 125.489156][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 125.491996][ C0] FAULT_INJECTION: forcing a failure. [ 125.491996][ C0] name failslab, interval 1, probability 1, space 0, times 880 [ 125.496122][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.518954][ T3559] Call Trace: [ 125.522255][ T3559] [ 125.525206][ T3559] dump_stack_lvl+0x188/0x250 [ 125.529931][ T3559] ? show_regs_print_info+0x20/0x20 [ 125.535239][ T3559] ? load_image+0x410/0x410 [ 125.539764][ T3559] ? prandom_u32+0x217/0x250 [ 125.544411][ T3559] should_fail+0x383/0x4b0 [ 125.548849][ T3559] should_failslab+0x5/0x20 [ 125.553367][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 125.558332][ T3559] ? __d_alloc+0x27/0x6d0 [ 125.562684][ T3559] kmem_cache_alloc+0x3d/0x280 [ 125.567473][ T3559] __d_alloc+0x27/0x6d0 [ 125.571681][ T3559] d_alloc_parallel+0x7b/0x1320 [ 125.576572][ T3559] ? __init_waitqueue_head+0xa4/0x140 [ 125.581971][ T3559] __lookup_slow+0x134/0x410 [ 125.586587][ T3559] ? lookup_one_len+0x2d0/0x2d0 [ 125.591462][ T3559] ? up_read+0x20/0x20 [ 125.595550][ T3559] ? step_into+0x363/0xcd0 [ 125.599987][ T3559] ? down_read+0x1aa/0x2e0 [ 125.604422][ T3559] lookup_slow+0x53/0x70 [ 125.608713][ T3559] walk_component+0x314/0x460 [ 125.613415][ T3559] link_path_walk+0x688/0xde0 [ 125.618125][ T3559] ? handle_lookup_down+0x130/0x130 [ 125.623352][ T3559] path_openat+0x28e/0x2fb0 [ 125.627899][ T3559] ? __kasan_slab_alloc+0xa9/0xc0 [ 125.632970][ T3559] ? do_filp_open+0x400/0x400 [ 125.637693][ T3559] do_filp_open+0x1df/0x400 [ 125.642217][ T3559] ? vfs_tmpfile+0x300/0x300 [ 125.646841][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 125.651722][ T3559] ? alloc_fd+0x59e/0x650 [ 125.656119][ T3559] do_sys_openat2+0x14b/0x500 [ 125.660821][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 125.665868][ T3559] ? do_sys_open+0xe0/0xe0 [ 125.670303][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.676313][ T3559] ? lock_chain_count+0x20/0x20 [ 125.681190][ T3559] __x64_sys_openat+0x135/0x160 [ 125.686059][ T3559] do_syscall_64+0x4c/0xa0 [ 125.690509][ T3559] ? clear_bhb_loop+0x30/0x80 [ 125.695206][ T3559] ? clear_bhb_loop+0x30/0x80 [ 125.699904][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.705811][ T3559] RIP: 0033:0x7f9ec9f2e407 [ 125.710243][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 125.729879][ T3559] RSP: 002b:00007ffc94dd80c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 125.738306][ T3559] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 125.746294][ T3559] RDX: 0000000000080000 RSI: 00007ffc94dd8240 RDI: ffffffffffffff9c [ 125.754280][ T3559] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 125.762279][ T3559] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 125.770289][ T3559] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000000000000000 [ 125.778331][ T3559] [ 125.781390][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 125.788729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.798819][ C0] Call Trace: [ 125.802136][ C0] [ 125.805103][ C0] dump_stack_lvl+0x188/0x250 [ 125.809827][ C0] ? show_regs_print_info+0x20/0x20 [ 125.815067][ C0] ? load_image+0x410/0x410 [ 125.819626][ C0] ? prandom_u32+0x217/0x250 [ 125.824299][ C0] should_fail+0x383/0x4b0 [ 125.828805][ C0] should_failslab+0x5/0x20 [ 125.833350][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 125.838328][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 125.844089][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 125.849333][ C0] ? __alloc_skb+0xf4/0x750 [ 125.853887][ C0] ? __netdev_alloc_skb+0x110/0x4c0 [ 125.859129][ C0] __alloc_skb+0x22c/0x750 [ 125.863585][ C0] ? lock_chain_count+0x20/0x20 [ 125.868483][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 125.873549][ C0] ? __alloc_skb+0x750/0x750 [ 125.878196][ C0] hsr_init_skb+0xec/0x5a0 [ 125.882651][ C0] ? read_lock_is_recursive+0x10/0x10 [ 125.888069][ C0] send_hsr_supervision_frame+0x141/0xb90 [ 125.893838][ C0] hsr_announce+0x168/0x310 [ 125.898377][ C0] ? hsr_dev_finalize+0x870/0x870 [ 125.903452][ C0] ? hsr_dev_finalize+0x870/0x870 [ 125.908519][ C0] call_timer_fn+0x17b/0x540 [ 125.913150][ C0] ? hsr_dev_finalize+0x870/0x870 [ 125.918219][ C0] ? __run_timers+0x810/0x810 [ 125.922955][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.928188][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 125.933427][ C0] ? hsr_dev_finalize+0x870/0x870 [ 125.938490][ C0] __run_timers+0x56c/0x810 [ 125.943056][ C0] ? detach_timer+0x2b0/0x2b0 [ 125.947797][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.953828][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 125.958961][ C0] run_timer_softirq+0x63/0xf0 [ 125.963775][ C0] handle_softirqs+0x336/0x830 [ 125.968603][ C0] ? run_ksoftirqd+0xa4/0x100 [ 125.973325][ C0] ? do_softirq+0x210/0x210 [ 125.977868][ C0] ? run_ksoftirqd+0x81/0x100 [ 125.982576][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 125.987809][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 125.993126][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 125.998374][ C0] run_ksoftirqd+0xa4/0x100 [ 126.002911][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 126.008153][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 126.013557][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 126.018703][ C0] smpboot_thread_fn+0x520/0x990 [ 126.023683][ C0] kthread+0x42e/0x520 [ 126.027774][ C0] ? cpu_report_death+0x180/0x180 [ 126.032824][ C0] ? kthread_blkcg+0xd0/0xd0 [ 126.037440][ C0] ret_from_fork+0x1f/0x30 [ 126.037467][ T4381] FAULT_INJECTION: forcing a failure. [ 126.037467][ T4381] name failslab, interval 1, probability 1, space 0, times 880 [ 126.041894][ C0] [ 126.079390][ T4381] CPU: 1 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 126.087054][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.096657][ T9] FAULT_INJECTION: forcing a failure. [ 126.096657][ T9] name failslab, interval 1, probability 1, space 0, times 879 [ 126.097182][ T4381] Call Trace: [ 126.097193][ T4381] [ 126.116203][ T4381] dump_stack_lvl+0x188/0x250 [ 126.120928][ T4381] ? show_regs_print_info+0x20/0x20 [ 126.126173][ T4381] ? load_image+0x410/0x410 [ 126.130720][ T4381] ? prandom_u32+0x217/0x250 [ 126.135357][ T4381] should_fail+0x383/0x4b0 [ 126.139809][ T4381] should_failslab+0x5/0x20 [ 126.144329][ T4381] slab_pre_alloc_hook+0x51/0xc0 [ 126.149309][ T4381] ? ptlock_alloc+0x1c/0x60 [ 126.153834][ T4381] kmem_cache_alloc+0x3d/0x280 [ 126.158614][ T4381] ptlock_alloc+0x1c/0x60 [ 126.162956][ T4381] pte_alloc_one+0xc0/0x310 [ 126.167482][ T4381] ? rcu_lock_release+0x20/0x20 [ 126.172342][ T4381] ? down_read_trylock+0x1ea/0x3b0 [ 126.177492][ T4381] ? __init_rwsem+0x160/0x160 [ 126.182188][ T4381] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 126.188099][ T4381] __pte_alloc+0x21/0x150 [ 126.192441][ T4381] ? walk_to_pmd+0x19c/0x240 [ 126.197077][ T4381] vm_insert_page+0x3ee/0x480 [ 126.201778][ T4381] ? vmalloc_to_page+0x2e4/0x3d0 [ 126.206740][ T4381] kcov_mmap+0xea/0x120 [ 126.210920][ T4381] mmap_file+0x5d/0xb0 [ 126.215005][ T4381] mmap_region+0x1048/0x1730 [ 126.219649][ T4381] do_mmap+0x801/0xe30 [ 126.223739][ T4381] vm_mmap_pgoff+0x1c1/0x2d0 [ 126.228354][ T4381] ? account_locked_vm+0xe0/0xe0 [ 126.233316][ T4381] ksys_mmap_pgoff+0x4e2/0x790 [ 126.238122][ T4381] ? mmap_region+0x1730/0x1730 [ 126.242905][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 126.248120][ T4381] do_syscall_64+0x4c/0xa0 [ 126.252548][ T4381] ? clear_bhb_loop+0x30/0x80 [ 126.257247][ T4381] ? clear_bhb_loop+0x30/0x80 [ 126.261942][ T4381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.267856][ T4381] RIP: 0033:0x7fc7ba292c02 [ 126.272281][ T4381] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 126.291932][ T4381] RSP: 002b:00007ffcd588b798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 126.300359][ T4381] RAX: ffffffffffffffda RBX: 00007fc7b94f0000 RCX: 00007fc7ba292c02 [ 126.308344][ T4381] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fc7b94f0000 [ 126.316426][ T4381] RBP: 0000000000000011 R08: 00000000000000da R09: 0000000000000000 [ 126.324420][ T4381] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 126.332408][ T4381] R13: 0000000000000003 R14: 00007ffcd588ba08 R15: 0000000000000000 [ 126.340412][ T4381] [ 126.343564][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 126.350884][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.360964][ T9] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 126.368801][ T9] Call Trace: [ 126.372099][ T9] [ 126.375054][ T9] dump_stack_lvl+0x188/0x250 [ 126.379773][ T9] ? show_regs_print_info+0x20/0x20 [ 126.385003][ T9] ? load_image+0x410/0x410 [ 126.389539][ T9] ? prandom_u32+0x217/0x250 [ 126.390545][ T4382] FAULT_INJECTION: forcing a failure. [ 126.390545][ T4382] name failslab, interval 1, probability 1, space 0, times 879 [ 126.394172][ T9] should_fail+0x383/0x4b0 [ 126.408564][ C1] FAULT_INJECTION: forcing a failure. [ 126.408564][ C1] name failslab, interval 1, probability 1, space 0, times 879 [ 126.411355][ T9] should_failslab+0x5/0x20 [ 126.411381][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 126.433581][ T9] kmem_cache_alloc_node+0x47/0x2c0 [ 126.438803][ T9] ? __alloc_skb+0xf4/0x750 [ 126.443332][ T9] __alloc_skb+0xf4/0x750 [ 126.447683][ T9] __netdev_alloc_skb+0x110/0x4c0 [ 126.452755][ T9] ? __alloc_skb+0x750/0x750 [ 126.457366][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 126.462594][ T9] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 126.468080][ T9] batadv_iv_ogm_schedule+0xb35/0x1000 [ 126.473561][ T9] ? pskb_expand_head+0xb45/0x1100 [ 126.478701][ T9] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 126.485915][ T9] ? batadv_send_skb_packet+0x36e/0x580 [ 126.491489][ T9] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 126.498541][ T9] process_one_work+0x867/0xff0 [ 126.503428][ T9] ? worker_detach_from_pool+0x240/0x240 [ 126.509083][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 126.514390][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 126.519442][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 126.525043][ T9] ? wq_worker_running+0x97/0x170 [ 126.530089][ T9] worker_thread+0xad7/0x12a0 [ 126.534808][ T9] kthread+0x42e/0x520 [ 126.538888][ T9] ? rcu_lock_release+0x20/0x20 [ 126.543753][ T9] ? kthread_blkcg+0xd0/0xd0 [ 126.548359][ T9] ret_from_fork+0x1f/0x30 [ 126.552812][ T9] [ 126.555849][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 126.559725][ T3852] FAULT_INJECTION: forcing a failure. [ 126.559725][ T3852] name failslab, interval 1, probability 1, space 0, times 878 [ 126.563163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.585988][ C1] Call Trace: [ 126.589294][ C1] [ 126.592245][ C1] dump_stack_lvl+0x188/0x250 [ 126.596949][ C1] ? show_regs_print_info+0x20/0x20 [ 126.602166][ C1] ? load_image+0x410/0x410 [ 126.606696][ C1] should_fail+0x383/0x4b0 [ 126.611140][ C1] should_failslab+0x5/0x20 [ 126.615657][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 126.620610][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 126.626348][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 126.631241][ C1] ? __alloc_skb+0xf4/0x750 [ 126.635762][ C1] ? ndisc_alloc_skb+0xa6/0x420 [ 126.640632][ C1] __alloc_skb+0x22c/0x750 [ 126.645066][ C1] ndisc_alloc_skb+0xa6/0x420 [ 126.649762][ C1] ndisc_send_rs+0x271/0x700 [ 126.654367][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 126.659357][ C1] addrconf_rs_timer+0x367/0x640 [ 126.664310][ C1] ? detach_timer+0x33/0x2b0 [ 126.668922][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 126.675006][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 126.681104][ C1] call_timer_fn+0x17b/0x540 [ 126.685709][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 126.691791][ C1] ? __run_timers+0x810/0x810 [ 126.696486][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 126.701705][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 126.706939][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 126.713023][ C1] __run_timers+0x56c/0x810 [ 126.717549][ C1] ? detach_timer+0x2b0/0x2b0 [ 126.722239][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.728247][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 126.733113][ C1] run_timer_softirq+0x63/0xf0 [ 126.737892][ C1] handle_softirqs+0x336/0x830 [ 126.742710][ C1] ? run_ksoftirqd+0xa4/0x100 [ 126.747405][ C1] ? do_softirq+0x210/0x210 [ 126.751919][ C1] ? run_ksoftirqd+0x81/0x100 [ 126.756605][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 126.761838][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 126.767143][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 126.772355][ C1] run_ksoftirqd+0xa4/0x100 [ 126.776871][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 126.782084][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 126.787469][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 126.792599][ C1] smpboot_thread_fn+0x520/0x990 [ 126.797563][ C1] kthread+0x42e/0x520 [ 126.801644][ C1] ? cpu_report_death+0x180/0x180 [ 126.806692][ C1] ? kthread_blkcg+0xd0/0xd0 [ 126.811301][ C1] ret_from_fork+0x1f/0x30 [ 126.815744][ C1] [ 126.818802][ T3852] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 126.825862][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.829572][ T4284] FAULT_INJECTION: forcing a failure. [ 126.829572][ T4284] name failslab, interval 1, probability 1, space 0, times 877 [ 126.835945][ T3852] Call Trace: [ 126.835956][ T3852] [ 126.854943][ T3852] dump_stack_lvl+0x188/0x250 [ 126.859646][ T3852] ? show_regs_print_info+0x20/0x20 [ 126.864868][ T3852] ? load_image+0x410/0x410 [ 126.869391][ T3852] ? prandom_u32+0x217/0x250 [ 126.874046][ T3852] should_fail+0x383/0x4b0 [ 126.878493][ T3852] should_failslab+0x5/0x20 [ 126.883013][ T3852] slab_pre_alloc_hook+0x51/0xc0 [ 126.887973][ T3852] ? security_file_alloc+0x30/0x110 [ 126.893187][ T3852] kmem_cache_alloc+0x3d/0x280 [ 126.897969][ T3852] ? rcu_is_watching+0x11/0xa0 [ 126.902766][ T3852] security_file_alloc+0x30/0x110 [ 126.907813][ T3852] __alloc_file+0xc2/0x240 [ 126.912245][ T3852] alloc_empty_file+0x90/0x180 [ 126.917049][ T3852] alloc_file+0x5c/0x510 [ 126.921311][ T3852] ? do_raw_spin_unlock+0x11d/0x230 [ 126.926529][ T3852] alloc_file_pseudo+0x180/0x200 [ 126.931491][ T3852] ? alloc_empty_file_noaccount+0x80/0x80 [ 126.937230][ T3852] ? do_raw_spin_unlock+0x11d/0x230 [ 126.942448][ T3852] ? put_pid+0xc3/0x120 [ 126.946658][ T3852] sock_alloc_file+0xb3/0x240 [ 126.951360][ T3852] __sys_socketpair+0x372/0x540 [ 126.956237][ T3852] __x64_sys_socketpair+0x97/0xb0 [ 126.961384][ T3852] do_syscall_64+0x4c/0xa0 [ 126.965820][ T3852] ? clear_bhb_loop+0x30/0x80 [ 126.970512][ T3852] ? clear_bhb_loop+0x30/0x80 [ 126.975217][ T3852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.981297][ T3852] RIP: 0033:0x7f1f835a973a [ 126.985747][ T3852] Code: 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8e e6 0c 00 f7 d8 64 89 01 48 [ 127.005393][ T3852] RSP: 002b:00007ffc08622a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 127.013854][ T3852] RAX: ffffffffffffffda RBX: 00005601fd4428b0 RCX: 00007f1f835a973a [ 127.021930][ T3852] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 127.029925][ T3852] RBP: 00007ffc08642e40 R08: 0000000000000000 R09: 0000000000000001 [ 127.037914][ T3852] R10: 00007ffc08622a30 R11: 0000000000000246 R12: 00007ffc08622a30 [ 127.045901][ T3852] R13: 0000000000000001 R14: 0000000000000000 R15: 00005601f9893ac0 [ 127.053899][ T3852] [ 127.056937][ T4284] CPU: 1 PID: 4284 Comm: kworker/1:7 Not tainted syzkaller #0 [ 127.064455][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.074541][ T4284] Workqueue: events nsim_dev_trap_report_work [ 127.080640][ T4284] Call Trace: [ 127.083933][ T4284] [ 127.086879][ T4284] dump_stack_lvl+0x188/0x250 [ 127.091597][ T4284] ? show_regs_print_info+0x20/0x20 [ 127.096815][ T4284] ? load_image+0x410/0x410 [ 127.101341][ T4284] ? prandom_u32+0x217/0x250 [ 127.105980][ T4284] should_fail+0x383/0x4b0 [ 127.110428][ T4284] should_failslab+0x5/0x20 [ 127.114953][ T4284] slab_pre_alloc_hook+0x51/0xc0 [ 127.119907][ T4284] __kmalloc_node_track_caller+0x68/0x3a0 [ 127.125675][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 127.131498][ T4284] ? __alloc_skb+0xf4/0x750 [ 127.136016][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 127.141867][ T4284] __alloc_skb+0x22c/0x750 [ 127.146307][ T4284] nsim_dev_trap_report_work+0x25c/0xab0 [ 127.151971][ T4284] process_one_work+0x867/0xff0 [ 127.156855][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 127.162508][ T4284] ? lockdep_hardirqs_off+0x70/0x100 [ 127.167813][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.172874][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.178436][ T4284] ? wq_worker_running+0x97/0x170 [ 127.183477][ T4284] worker_thread+0xad7/0x12a0 [ 127.188192][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.194110][ T4284] kthread+0x42e/0x520 [ 127.198190][ T4284] ? rcu_lock_release+0x20/0x20 [ 127.203053][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 127.207668][ T4284] ret_from_fork+0x1f/0x30 [ 127.212108][ T4284] [ 127.216518][ T4382] CPU: 1 PID: 4382 Comm: syz-executor Not tainted syzkaller #0 [ 127.224117][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.234243][ T4382] Call Trace: [ 127.237556][ T4382] [ 127.240516][ T4382] dump_stack_lvl+0x188/0x250 [ 127.245248][ T4382] ? show_regs_print_info+0x20/0x20 [ 127.248570][ T4383] FAULT_INJECTION: forcing a failure. [ 127.248570][ T4383] name failslab, interval 1, probability 1, space 0, times 873 [ 127.250479][ T4382] ? load_image+0x410/0x410 [ 127.250509][ T4382] ? prandom_u32+0x217/0x250 [ 127.272384][ T4382] should_fail+0x383/0x4b0 [ 127.276841][ T4382] should_failslab+0x5/0x20 [ 127.281365][ T4382] slab_pre_alloc_hook+0x51/0xc0 [ 127.286330][ T4382] ? copy_mm+0x8b6/0x13d0 [ 127.290696][ T4382] kmem_cache_alloc+0x3d/0x280 [ 127.295482][ T4382] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 127.301218][ T4382] copy_mm+0x8b6/0x13d0 [ 127.305397][ T4382] ? copy_signal+0x610/0x610 [ 127.310003][ T4382] ? __init_rwsem+0x11e/0x160 [ 127.314734][ T4382] ? copy_signal+0x501/0x610 [ 127.319366][ T4382] copy_process+0x17fb/0x3ec0 [ 127.324083][ T4382] ? __pidfd_prepare+0x140/0x140 [ 127.329038][ T4382] ? verify_lock_unused+0x140/0x140 [ 127.334261][ T4382] kernel_clone+0x23f/0x990 [ 127.338781][ T4382] ? create_io_thread+0x180/0x180 [ 127.343833][ T4382] __x64_sys_clone+0x19a/0x210 [ 127.348617][ T4382] ? __ia32_sys_vfork+0x130/0x130 [ 127.353675][ T4382] ? lockdep_hardirqs_on+0x94/0x140 [ 127.358887][ T4382] do_syscall_64+0x4c/0xa0 [ 127.363313][ T4382] ? clear_bhb_loop+0x30/0x80 [ 127.368009][ T4382] ? clear_bhb_loop+0x30/0x80 [ 127.372699][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.378608][ T4382] RIP: 0033:0x7f29030e7912 [ 127.383042][ T4382] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 127.402666][ T4382] RSP: 002b:00007ffe91615720 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 127.411096][ T4382] RAX: ffffffffffffffda RBX: 00007ffe91615720 RCX: 00007f29030e7912 [ 127.419085][ T4382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 127.427076][ T4382] RBP: 00007f29033477b8 R08: 0000000000000000 R09: 0000000000000000 [ 127.435069][ T4382] R10: 000055556d46e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 127.443076][ T4382] R13: 0000000000000003 R14: 00007ffe91615aa8 R15: 0000000000000000 [ 127.451082][ T4382] [ 127.454253][ T4383] CPU: 0 PID: 4383 Comm: dhcpcd Not tainted syzkaller #0 [ 127.461307][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.465786][ T4350] FAULT_INJECTION: forcing a failure. [ 127.465786][ T4350] name failslab, interval 1, probability 1, space 0, times 872 [ 127.471388][ T4383] Call Trace: [ 127.471398][ T4383] [ 127.471407][ T4383] dump_stack_lvl+0x188/0x250 [ 127.471439][ T4383] ? show_regs_print_info+0x20/0x20 [ 127.486447][ T3559] FAULT_INJECTION: forcing a failure. [ 127.486447][ T3559] name failslab, interval 1, probability 1, space 0, times 872 [ 127.487495][ T4383] ? load_image+0x410/0x410 [ 127.517563][ T4383] ? prandom_u32+0x217/0x250 [ 127.522216][ T4383] should_fail+0x383/0x4b0 [ 127.526660][ T4383] should_failslab+0x5/0x20 [ 127.531190][ T4383] slab_pre_alloc_hook+0x51/0xc0 [ 127.536148][ T4383] ? security_inode_alloc+0x30/0x110 [ 127.541449][ T4383] kmem_cache_alloc+0x3d/0x280 [ 127.546234][ T4383] security_inode_alloc+0x30/0x110 [ 127.551365][ T4383] inode_init_always+0x8e5/0xc90 [ 127.556324][ T4383] new_inode_pseudo+0x8e/0x210 [ 127.561140][ T4383] __sock_create+0x128/0x910 [ 127.565775][ T4383] __sys_socket+0xe2/0x170 [ 127.570213][ T4383] __x64_sys_socket+0x76/0x80 [ 127.574899][ T4383] do_syscall_64+0x4c/0xa0 [ 127.579328][ T4383] ? clear_bhb_loop+0x30/0x80 [ 127.584032][ T4383] ? clear_bhb_loop+0x30/0x80 [ 127.588721][ T4383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.594658][ T4383] RIP: 0033:0x7f1f835a9707 [ 127.599091][ T4383] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 127.618720][ T4383] RSP: 002b:00007ffc08622918 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 127.627153][ T4383] RAX: ffffffffffffffda RBX: 00005601fd449e10 RCX: 00007f1f835a9707 [ 127.635142][ T4383] RDX: 0000000000000300 RSI: 0000000000080803 RDI: 0000000000000011 [ 127.643124][ T4383] RBP: 00005601f987e4b0 R08: 00007f1f83678ac0 R09: 0000000000000000 [ 127.651109][ T4383] R10: 0000000000000003 R11: 0000000000000202 R12: 0000000000000000 [ 127.659097][ T4383] R13: 00005601fd442970 R14: 0000000000000000 R15: 00005601f9893ac0 [ 127.667097][ T4383] [ 127.670132][ T4350] CPU: 1 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 127.671098][ T4300] FAULT_INJECTION: forcing a failure. [ 127.671098][ T4300] name failslab, interval 1, probability 1, space 0, times 872 [ 127.677103][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.699919][ T4350] Call Trace: [ 127.703219][ T4350] [ 127.706161][ T4350] dump_stack_lvl+0x188/0x250 [ 127.710876][ T4350] ? show_regs_print_info+0x20/0x20 [ 127.716097][ T4350] ? load_image+0x410/0x410 [ 127.720706][ T4350] ? prandom_u32+0x217/0x250 [ 127.725342][ T4350] should_fail+0x383/0x4b0 [ 127.729797][ T4350] should_failslab+0x5/0x20 [ 127.734327][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 127.739293][ T4350] ? getname_flags+0xb7/0x4f0 [ 127.744002][ T4350] kmem_cache_alloc+0x3d/0x280 [ 127.748823][ T4350] getname_flags+0xb7/0x4f0 [ 127.753355][ T4350] user_path_at_empty+0x2a/0x190 [ 127.758320][ T4350] vfs_statx+0x107/0x4c0 [ 127.762619][ T4350] ? __lock_acquire+0x7b50/0x7b50 [ 127.767669][ T4350] ? vfs_fstatat+0x40/0x40 [ 127.772115][ T4350] __x64_sys_newfstatat+0x15f/0x200 [ 127.777341][ T4350] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 127.782658][ T4350] ? lock_chain_count+0x20/0x20 [ 127.787532][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 127.792775][ T4350] do_syscall_64+0x4c/0xa0 [ 127.797214][ T4350] ? clear_bhb_loop+0x30/0x80 [ 127.801922][ T4350] ? clear_bhb_loop+0x30/0x80 [ 127.806620][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.812541][ T4350] RIP: 0033:0x7f9ec9f98b0a [ 127.817028][ T4350] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 127.836681][ T4350] RSP: 002b:00007ffc94ddaba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 127.845120][ T4350] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007f9ec9f98b0a [ 127.853111][ T4350] RDX: 00007ffc94ddabb0 RSI: 00007ffc94ddac80 RDI: 00000000ffffff9c [ 127.861100][ T4350] RBP: 00007ffc94ddbcc0 R08: 0000000000000000 R09: 0000000000000001 [ 127.869087][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94ddc0e0 [ 127.877075][ T4350] R13: 0000000000000000 R14: 0000562342ad3100 R15: 0000562342ad3140 [ 127.885079][ T4350] [ 127.888139][ T4300] CPU: 0 PID: 4300 Comm: udevd Not tainted syzkaller #0 [ 127.895112][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.899513][ T4381] ------------[ cut here ]------------ [ 127.905179][ T4300] Call Trace: [ 127.905190][ T4300] [ 127.916904][ T4300] dump_stack_lvl+0x188/0x250 [ 127.919406][ T4381] vm_insert_page() failed [ 127.921619][ T4300] ? show_regs_print_info+0x20/0x20 [ 127.921842][ T4381] WARNING: CPU: 1 PID: 4381 at kernel/kcov.c:492 kcov_mmap+0x10a/0x120 [ 127.925974][ T4300] ? load_image+0x410/0x410 [ 127.939521][ T4381] Modules linked in: [ 127.943989][ T4300] should_fail+0x383/0x4b0 [ 127.947892][ T4381] CPU: 1 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 127.952320][ T4300] should_failslab+0x5/0x20 [ 127.952344][ T4300] slab_pre_alloc_hook+0x51/0xc0 [ 127.952367][ T4300] ? __d_alloc+0x27/0x6d0 [ 127.973735][ T4300] kmem_cache_alloc+0x3d/0x280 [ 127.978540][ T4300] __d_alloc+0x27/0x6d0 [ 127.982726][ T4300] d_alloc+0x46/0x250 [ 127.986751][ T4300] lookup_one_qstr_excl+0xc6/0x240 [ 127.989478][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.991895][ T4300] do_unlinkat+0x1dd/0x710 [ 128.006560][ T4300] ? fsnotify_link_count+0xf0/0xf0 [ 128.011720][ T4300] ? getname_flags+0x1f9/0x4f0 [ 128.016532][ T4300] __x64_sys_unlink+0x45/0x50 [ 128.021246][ T4300] do_syscall_64+0x4c/0xa0 [ 128.025685][ T4300] ? clear_bhb_loop+0x30/0x80 [ 128.029433][ T4381] RIP: 0010:kcov_mmap+0x10a/0x120 [ 128.030382][ T4300] ? clear_bhb_loop+0x30/0x80 [ 128.035422][ T4381] Code: 89 df 48 89 c2 e8 56 7a 34 00 85 c0 74 d0 80 3d 29 39 fe 0b 00 75 c7 c6 05 20 39 fe 0b 01 48 c7 c7 b2 02 c8 8b e8 16 0f 3c 08 <0f> 0b eb b0 31 ed e9 7b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 [ 128.040107][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.040133][ T4300] RIP: 0033:0x7f9ec9f9c937 [ 128.040155][ T4300] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 128.089712][ T4300] RSP: 002b:00007ffc94ddc108 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 128.098144][ T4300] RAX: ffffffffffffffda RBX: 00007ffc94ddc110 RCX: 00007f9ec9f9c937 [ 128.106141][ T4300] RDX: 0000000000000000 RSI: 00000000000003de RDI: 00007ffc94ddc110 [ 128.114137][ T4300] RBP: 00005623811514d0 R08: 0000000000000000 R09: 0000000000000000 [ 128.119408][ T4381] RSP: 0018:ffffc9000336fb50 EFLAGS: 00010246 [ 128.122122][ T4300] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000aba9500 [ 128.122140][ T4300] R13: 0000000003938700 R14: 0000562342ad3100 R15: 0000562342ad3140 [ 128.128211][ T4381] RAX: c8dc56a0466be500 RBX: ffff88802a21d630 RCX: ffff8880206b3b80 [ 128.136205][ T4300] [ 128.136402][ T4383] socket: no more sockets [ 128.149439][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 128.166625][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.176707][ T3559] Call Trace: [ 128.180022][ T3559] [ 128.182963][ T3559] dump_stack_lvl+0x188/0x250 [ 128.187675][ T3559] ? show_regs_print_info+0x20/0x20 [ 128.192890][ T3559] ? load_image+0x410/0x410 [ 128.197413][ T3559] should_fail+0x383/0x4b0 [ 128.201852][ T3559] should_failslab+0x5/0x20 [ 128.206367][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 128.211318][ T3559] ? getname_flags+0xb7/0x4f0 [ 128.216011][ T3559] kmem_cache_alloc+0x3d/0x280 [ 128.220830][ T3559] getname_flags+0xb7/0x4f0 [ 128.225348][ T3559] do_sys_openat2+0xdd/0x500 [ 128.229955][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 128.234994][ T3559] ? do_sys_open+0xe0/0xe0 [ 128.239419][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.245416][ T3559] ? lock_chain_count+0x20/0x20 [ 128.250287][ T3559] __x64_sys_openat+0x135/0x160 [ 128.255164][ T3559] do_syscall_64+0x4c/0xa0 [ 128.259596][ T3559] ? clear_bhb_loop+0x30/0x80 [ 128.264287][ T3559] ? clear_bhb_loop+0x30/0x80 [ 128.268982][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.274920][ T3559] RIP: 0033:0x7f9ec9f2e407 [ 128.279357][ T3559] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 128.299005][ T3559] RSP: 002b:00007ffc94ddc650 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 128.307436][ T3559] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 128.315425][ T3559] RDX: 0000000000080141 RSI: 0000562342ab802e RDI: ffffffffffffff9c [ 128.323415][ T3559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.331406][ T3559] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 128.339400][ T3559] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 128.347405][ T3559] [ 128.369349][ T4381] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 128.377399][ T4381] RBP: 0000000000000000 R08: ffffc9000336f687 R09: 1ffff9200066ded0 [ 128.412142][ T4381] R10: dffffc0000000000 R11: fffff5200066ded1 R12: ffff88805c7d3600 [ 128.429339][ T4381] R13: 0000000000400000 R14: 0000000000000000 R15: ffff88805c7d3608 [ 128.437389][ T4381] FS: 000055558308b500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 128.446048][ T4385] FAULT_INJECTION: forcing a failure. [ 128.446048][ T4385] name failslab, interval 1, probability 1, space 0, times 868 [ 128.453913][ T4381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.466112][ T4381] CR2: 00007f1508eba218 CR3: 0000000062d2a000 CR4: 00000000003506e0 [ 128.474291][ T4284] FAULT_INJECTION: forcing a failure. [ 128.474291][ T4284] name failslab, interval 1, probability 1, space 0, times 868 [ 128.487136][ T4284] CPU: 1 PID: 4284 Comm: kworker/1:7 Not tainted syzkaller #0 [ 128.494629][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.504734][ T4284] Workqueue: events nsim_dev_trap_report_work [ 128.510848][ T4284] Call Trace: [ 128.514146][ T4284] [ 128.517098][ T4284] dump_stack_lvl+0x188/0x250 [ 128.521803][ T4284] ? show_regs_print_info+0x20/0x20 [ 128.527041][ T4284] ? load_image+0x410/0x410 [ 128.531590][ T4284] ? prandom_u32+0x217/0x250 [ 128.536227][ T4284] should_fail+0x383/0x4b0 [ 128.540686][ T4284] should_failslab+0x5/0x20 [ 128.545218][ T4284] slab_pre_alloc_hook+0x51/0xc0 [ 128.550186][ T4284] __kmalloc_node_track_caller+0x68/0x3a0 [ 128.555937][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 128.561779][ T4284] ? __alloc_skb+0xf4/0x750 [ 128.566309][ T4284] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 128.572149][ T4284] __alloc_skb+0x22c/0x750 [ 128.576606][ T4284] nsim_dev_trap_report_work+0x25c/0xab0 [ 128.582297][ T4284] process_one_work+0x867/0xff0 [ 128.587201][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 128.592865][ T4284] ? lockdep_hardirqs_off+0x70/0x100 [ 128.598188][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 128.603245][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 128.608816][ T4284] ? wq_worker_running+0x97/0x170 [ 128.613866][ T4284] worker_thread+0xad7/0x12a0 [ 128.618598][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 128.624624][ T4284] kthread+0x42e/0x520 [ 128.628730][ T4284] ? rcu_lock_release+0x20/0x20 [ 128.633604][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 128.638231][ T4284] ret_from_fork+0x1f/0x30 [ 128.642697][ T4284] [ 128.645904][ T4381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.649420][ T4385] CPU: 0 PID: 4385 Comm: syz-executor Not tainted syzkaller #0 [ 128.654053][ T4381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.661498][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.661513][ T4385] Call Trace: [ 128.661530][ T4385] [ 128.661541][ T4385] dump_stack_lvl+0x188/0x250 [ 128.669618][ T4381] Call Trace: [ 128.679614][ T4385] ? show_regs_print_info+0x20/0x20 [ 128.679643][ T4385] ? load_image+0x410/0x410 [ 128.694398][ T4381] [ 128.699060][ T4385] ? prandom_u32+0x217/0x250 [ 128.699096][ T4385] should_fail+0x383/0x4b0 [ 128.699124][ T4385] should_failslab+0x5/0x20 [ 128.699144][ T4385] slab_pre_alloc_hook+0x51/0xc0 [ 128.699168][ T4385] __kmalloc+0x6b/0x340 [ 128.699186][ T4385] ? security_prepare_creds+0x47/0x130 [ 128.699209][ T4385] ? prepare_creds+0x3c/0x610 [ 128.699236][ T4385] security_prepare_creds+0x47/0x130 [ 128.699262][ T4385] prepare_creds+0x450/0x610 [ 128.699288][ T4385] prepare_exec_creds+0x14/0x220 [ 128.699313][ T4385] bprm_execve+0xf1/0x1740 [ 128.699338][ T4385] ? __might_fault+0xb3/0x110 [ 128.699363][ T4385] ? put_arg_page+0xe1/0x200 [ 128.699383][ T4385] ? copy_strings+0x43b/0x4b0 [ 128.699401][ T4385] ? alloc_bprm+0x690/0x690 [ 128.699430][ T4385] do_execveat_common+0x504/0x6b0 [ 128.699458][ T4385] __x64_sys_execve+0x8e/0xa0 [ 128.699480][ T4385] do_syscall_64+0x4c/0xa0 [ 128.699500][ T4385] ? clear_bhb_loop+0x30/0x80 [ 128.699521][ T4385] ? clear_bhb_loop+0x30/0x80 [ 128.699543][ T4385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.699571][ T4385] RIP: 0033:0x7f150e6809d7 [ 128.699592][ T4385] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.699612][ T4385] RSP: 002b:00007f150e8b9de8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 128.699636][ T4385] RAX: ffffffffffffffda RBX: 00007fffd06f1ecc RCX: 00007f150e6809d7 [ 128.699653][ T4385] RDX: 00007fffd06f0da0 RSI: 00007fffd06f0fe0 RDI: 00007fffd06f1ecc [ 128.699668][ T4385] RBP: 00007f150e8b9e60 R08: 00007fffd06f0b70 R09: 0000000000000000 [ 128.699684][ T4385] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fffd06f0fe0 [ 128.706966][ T9] FAULT_INJECTION: forcing a failure. [ 128.706966][ T9] name failslab, interval 1, probability 1, space 0, times 867 [ 128.711753][ T4385] R13: 00007fffd06f0da0 R14: 0000000000000000 R15: 0000000000000000 [ 128.711783][ T4385] [ 128.718205][ T13] FAULT_INJECTION: forcing a failure. [ 128.718205][ T13] name failslab, interval 1, probability 1, space 0, times 867 [ 128.720987][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 128.915463][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.925540][ T9] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 128.932343][ T9] Call Trace: [ 128.935670][ T9] [ 128.938621][ T9] dump_stack_lvl+0x188/0x250 [ 128.943321][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 128.948537][ T9] ? show_regs_print_info+0x20/0x20 [ 128.953777][ T9] ? load_image+0x410/0x410 [ 128.958303][ T9] ? prandom_u32+0x217/0x250 [ 128.962921][ T9] should_fail+0x383/0x4b0 [ 128.967384][ T9] should_failslab+0x5/0x20 [ 128.971904][ T9] slab_pre_alloc_hook+0x51/0xc0 [ 128.976865][ T9] ? __es_insert_extent+0x706/0x17b0 [ 128.982178][ T9] kmem_cache_alloc+0x3d/0x280 [ 128.986985][ T9] __es_insert_extent+0x706/0x17b0 [ 128.992141][ T9] ext4_es_insert_extent+0x5ac/0x2dd0 [ 128.997546][ T9] ? ext4_es_scan_clu+0x230/0x230 [ 129.002586][ T9] ? rwsem_write_trylock+0x135/0x1c0 [ 129.007895][ T9] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 129.013399][ T9] ext4_map_blocks+0xcb6/0x1a50 [ 129.018296][ T9] ? ext4_issue_zeroout+0x250/0x250 [ 129.023519][ T9] ? jbd2__journal_start+0x5a0/0x5a0 [ 129.028839][ T9] ext4_convert_unwritten_extents+0x2b6/0x5e0 [ 129.034936][ T9] ? trace_ext4_fallocate_exit+0x1d0/0x1d0 [ 129.040763][ T9] ? jbd2_journal_start_reserved+0x1a1/0x2b0 [ 129.046768][ T9] ? ext4_convert_unwritten_io_end_vec+0x30/0x170 [ 129.053206][ T9] ? __ext4_journal_start_reserved+0x228/0x410 [ 129.059380][ T9] ? rcu_is_watching+0x11/0xa0 [ 129.064174][ T9] ext4_convert_unwritten_io_end_vec+0xfb/0x170 [ 129.070460][ T9] ext4_end_io_rsv_work+0x2b1/0x620 [ 129.075684][ T9] ? __lock_acquire+0x7b50/0x7b50 [ 129.080736][ T9] ? ext4_last_io_end_vec+0x70/0x70 [ 129.085957][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 129.091178][ T9] process_one_work+0x867/0xff0 [ 129.096064][ T9] ? worker_detach_from_pool+0x240/0x240 [ 129.101735][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 129.107047][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 129.112089][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 129.117653][ T9] ? wq_worker_running+0x97/0x170 [ 129.122696][ T9] worker_thread+0xad7/0x12a0 [ 129.127411][ T9] kthread+0x42e/0x520 [ 129.131511][ T9] ? rcu_lock_release+0x20/0x20 [ 129.136385][ T9] ? kthread_blkcg+0xd0/0xd0 [ 129.141000][ T9] ret_from_fork+0x1f/0x30 [ 129.145452][ T9] [ 129.148483][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0 [ 129.155852][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.165943][ T13] Workqueue: events nsim_dev_trap_report_work [ 129.169512][ T4381] mmap_file+0x5d/0xb0 [ 129.172067][ T13] Call Trace: [ 129.172079][ T13] [ 129.172088][ T13] dump_stack_lvl+0x188/0x250 [ 129.172118][ T13] ? show_regs_print_info+0x20/0x20 [ 129.172143][ T13] ? load_image+0x410/0x410 [ 129.172169][ T13] ? prandom_u32+0x217/0x250 [ 129.172204][ T13] should_fail+0x383/0x4b0 [ 129.172233][ T13] should_failslab+0x5/0x20 SYZFAIL: posix_spawnp failed (errno 12: Cannot allocate memory) [ 129.172254][ T13] slab_pre_alloc_hook+0x51/0xc0 [ 129.172280][ T13] kmem_cache_alloc_node+0x47/0x2c0 [ 129.172301][ T13] ? __alloc_skb+0xf4/0x750 [ 129.172329][ T13] __alloc_skb+0xf4/0x750 [ 129.172356][ T13] nsim_dev_trap_report_work+0x25c/0xab0 [ 129.172384][ T13] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 129.172422][ T13] process_one_work+0x867/0xff0 [ 129.172464][ T13] ? worker_detach_from_pool+0x240/0x240 [ 129.172487][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 129.172516][ T13] ? _raw_spin_lock_irq+0xb7/0xf0 [ 129.172537][ T13] ? _raw_spin_lock_irqsave+0x100/0x100 [ 129.172563][ T13] ? wq_worker_running+0x97/0x170 [ 129.172588][ T13] worker_thread+0xad7/0x12a0 [ 129.172648][ T13] kthread+0x42e/0x520 [ 129.172668][ T13] ? rcu_lock_release+0x20/0x20 [ 129.172689][ T13] ? kthread_blkcg+0xd0/0xd0 [ 129.172711][ T13] ret_from_fork+0x1f/0x30 [ 129.172746][ T13] [ 129.250669][ T3559] udevd[3559]: could not touch /run/udev/queue: Cannot allocate memory [ 129.302877][ T4174] FAULT_INJECTION: forcing a failure. [ 129.302877][ T4174] name failslab, interval 1, probability 1, space 0, times 862 [ 129.321760][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted syzkaller #0 [ 129.329351][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.329976][ T4350] FAULT_INJECTION: forcing a failure. [ 129.329976][ T4350] name failslab, interval 1, probability 1, space 0, times 862 [ 129.339430][ T4174] Call Trace: [ 129.339440][ T4174] [ 129.339449][ T4174] dump_stack_lvl+0x188/0x250 [ 129.363089][ T4352] FAULT_INJECTION: forcing a failure. [ 129.363089][ T4352] name failslab, interval 1, probability 1, space 0, times 862 [ 129.375911][ T4174] ? show_regs_print_info+0x20/0x20 [ 129.375943][ T4174] ? load_image+0x410/0x410 [ 129.375970][ T4174] ? prandom_u32+0x217/0x250 [ 129.376008][ T4174] should_fail+0x383/0x4b0 [ 129.376038][ T4174] should_failslab+0x5/0x20 [ 129.376059][ T4174] slab_pre_alloc_hook+0x51/0xc0 [ 129.376100][ T4174] ? jbd2__journal_start+0x13c/0x5a0 [ 129.376124][ T4174] kmem_cache_alloc+0x3d/0x280 [ 129.376151][ T4174] jbd2__journal_start+0x13c/0x5a0 [ 129.376180][ T4174] __ext4_journal_start_sb+0x167/0x360 [ 129.376211][ T4174] ext4_evict_inode+0x895/0x1050 [ 129.376244][ T4174] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.376271][ T4174] ? do_raw_spin_unlock+0x11d/0x230 [ 129.376297][ T4174] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.376320][ T4174] evict+0x4b6/0x8b0 [ 129.376350][ T4174] ? proc_nr_inodes+0x320/0x320 [ 129.376374][ T4174] ? do_raw_spin_unlock+0x11d/0x230 [ 129.376397][ T4174] ? _raw_spin_unlock+0x24/0x40 [ 129.396696][ T3559] FAULT_INJECTION: forcing a failure. [ 129.396696][ T3559] name failslab, interval 1, probability 1, space 0, times 862 [ 129.399869][ T4174] ? iput+0x6ea/0x880 [ 129.399906][ T4174] __dentry_kill+0x412/0x630 [ 129.487572][ T4174] dentry_kill+0xb8/0x290 [ 129.491940][ T4174] dput+0xd8/0x1a0 [ 129.495682][ T4174] __fput+0x5a5/0x8c0 [ 129.499711][ T4174] task_work_run+0x125/0x1a0 [ 129.504328][ T4174] do_exit+0x635/0x2110 [ 129.508533][ T4174] ? put_task_struct+0x80/0x80 [ 129.513321][ T4174] ? lock_chain_count+0x20/0x20 [ 129.518231][ T4174] do_group_exit+0x12c/0x2f0 [ 129.519436][ T4381] mmap_region+0x1048/0x1730 [ 129.522859][ T4174] __x64_sys_exit_group+0x3b/0x40 [ 129.527499][ T4381] do_mmap+0x801/0xe30 [ 129.532512][ T4174] do_syscall_64+0x4c/0xa0 [ 129.532540][ T4174] ? clear_bhb_loop+0x30/0x80 [ 129.532558][ T4174] ? clear_bhb_loop+0x30/0x80 [ 129.532578][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.532598][ T4174] RIP: 0033:0x7f150e657e99 [ 129.532614][ T4174] Code: Unable to access opcode bytes at RIP 0x7f150e657e6f. [ 129.532624][ T4174] RSP: 002b:00007fffd06f0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 129.532646][ T4174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f150e657e99 [ 129.532661][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 129.532674][ T4174] RBP: 00007f150e708fe9 R08: 0000000000000000 R09: 00005555862828e8 [ 129.532716][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 129.532730][ T4174] R13: 00005555862828e8 R14: 000055558628062c R15: 00007fffd06f0fe0 [ 129.532759][ T4174] [ 129.560310][ T4293] FAULT_INJECTION: forcing a failure. [ 129.560310][ T4293] name failslab, interval 1, probability 1, space 0, times 862 [ 129.564028][ T4350] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 129.639518][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.649594][ T4350] Call Trace: [ 129.652890][ T4350] [ 129.655837][ T4350] dump_stack_lvl+0x188/0x250 [ 129.660542][ T4350] ? show_regs_print_info+0x20/0x20 [ 129.665763][ T4350] ? load_image+0x410/0x410 [ 129.670293][ T4350] should_fail+0x383/0x4b0 [ 129.674731][ T4350] should_failslab+0x5/0x20 [ 129.679248][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 129.684203][ T4350] ? getname_flags+0xb7/0x4f0 [ 129.688898][ T4350] kmem_cache_alloc+0x3d/0x280 [ 129.693683][ T4350] getname_flags+0xb7/0x4f0 [ 129.698242][ T4350] do_sys_openat2+0xdd/0x500 [ 129.702848][ T4350] ? __lock_acquire+0x7b50/0x7b50 [ 129.707885][ T4350] ? do_sys_open+0xe0/0xe0 [ 129.712307][ T4350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.718308][ T4350] ? lock_chain_count+0x20/0x20 [ 129.723178][ T4350] __x64_sys_openat+0x135/0x160 [ 129.728040][ T4350] do_syscall_64+0x4c/0xa0 [ 129.732476][ T4350] ? clear_bhb_loop+0x30/0x80 [ 129.737173][ T4350] ? clear_bhb_loop+0x30/0x80 [ 129.741871][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.747783][ T4350] RIP: 0033:0x7f9ec9f2e407 [ 129.752210][ T4350] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.771827][ T4350] RSP: 002b:00007ffc94dd3aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 129.780259][ T4350] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 129.788271][ T4350] RDX: 0000000000080000 RSI: 00007ffc94dd3c20 RDI: ffffffffffffff9c [ 129.796256][ T4350] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 129.804239][ T4350] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 129.812225][ T4350] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 129.820223][ T4350] [ 129.823585][ C0] FAULT_INJECTION: forcing a failure. [ 129.823585][ C0] name failslab, interval 1, probability 1, space 0, times 862 [ 129.825851][ T501] FAULT_INJECTION: forcing a failure. [ 129.825851][ T501] name failslab, interval 1, probability 1, space 0, times 862 [ 129.836436][ C0] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 129.850044][ T154] FAULT_INJECTION: forcing a failure. [ 129.850044][ T154] name failslab, interval 1, probability 1, space 0, times 862 [ 129.856146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.878985][ C0] Call Trace: [ 129.882371][ C0] [ 129.885234][ C0] dump_stack_lvl+0x188/0x250 [ 129.889939][ C0] ? verify_lock_unused+0x140/0x140 [ 129.895168][ C0] ? show_regs_print_info+0x20/0x20 [ 129.900390][ C0] ? load_image+0x410/0x410 [ 129.904955][ C0] ? __lock_acquire+0x1305/0x7b50 [ 129.910007][ C0] ? prandom_u32+0x217/0x250 [ 129.914634][ C0] should_fail+0x383/0x4b0 [ 129.919072][ C0] should_failslab+0x5/0x20 [ 129.923589][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 129.928574][ C0] ? dst_alloc+0x101/0x160 [ 129.933010][ C0] kmem_cache_alloc+0x3d/0x280 [ 129.937795][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 129.943466][ C0] dst_alloc+0x101/0x160 [ 129.947759][ C0] icmp6_dst_alloc+0x7e/0x470 [ 129.952481][ C0] ? icmpv6_flow_init+0x5e/0x120 [ 129.957441][ C0] ndisc_send_skb+0x3d1/0x1410 [ 129.962243][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 129.967235][ C0] ? ndisc_send_rs+0x524/0x700 [ 129.972118][ C0] addrconf_rs_timer+0x367/0x640 [ 129.977079][ C0] ? detach_timer+0x33/0x2b0 [ 129.981691][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 129.987893][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 129.994007][ C0] call_timer_fn+0x17b/0x540 [ 129.998633][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 130.004723][ C0] ? __run_timers+0x810/0x810 [ 130.009444][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 130.014668][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 130.019925][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 130.026022][ C0] __run_timers+0x56c/0x810 [ 130.030563][ C0] ? detach_timer+0x2b0/0x2b0 [ 130.035460][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.041497][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 130.046383][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 130.052650][ C0] run_timer_softirq+0x63/0xf0 [ 130.057451][ C0] handle_softirqs+0x336/0x830 [ 130.062262][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 130.067141][ C0] ? do_softirq+0x210/0x210 [ 130.071669][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 130.076802][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 130.082022][ C0] __irq_exit_rcu+0x13b/0x230 [ 130.086725][ C0] ? irq_exit_rcu+0x20/0x20 [ 130.091258][ C0] irq_exit_rcu+0x5/0x20 [ 130.095522][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.101194][ C0] [ 130.104141][ C0] [ 130.107103][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.113104][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 130.119053][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 130.138683][ C0] RSP: 0018:ffffc9000302fa60 EFLAGS: 00000286 [ 130.144777][ C0] RAX: 1ce08ac894e26700 RBX: 0000000000000000 RCX: 1ce08ac894e26700 [ 130.152766][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 130.160760][ C0] RBP: ffffc9000302fb00 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 130.168749][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 130.176750][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000605f4c [ 130.184778][ C0] ? __cond_resched+0xd0/0xd0 [ 130.189494][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 130.195333][ C0] irqentry_exit+0x63/0x70 [ 130.199567][ T4174] EXT4-fs error (device sda1) in ext4_evict_inode:259: Out of memory [ 130.199775][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 130.213413][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 130.218900][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 130.238526][ C0] RSP: 0018:ffffc9000302fbc0 EFLAGS: 00000293 [ 130.244627][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807424d940 [ 130.252635][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.260636][ C0] RBP: ffffc9000302fca8 R08: 0000000000000003 R09: 0000000000000004 [ 130.268630][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 130.276625][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000605f7c [ 130.284628][ C0] ? dump_stack_lvl+0x204/0x250 [ 130.289537][ C0] ? show_regs_print_info+0x20/0x20 [ 130.294766][ C0] ? load_image+0x410/0x410 [ 130.296906][ C1] FAULT_INJECTION: forcing a failure. [ 130.296906][ C1] name failslab, interval 1, probability 1, space 0, times 861 [ 130.299304][ C0] should_fail+0x383/0x4b0 [ 130.299335][ C0] should_failslab+0x5/0x20 [ 130.321018][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 130.325985][ C0] ? getname_flags+0xb7/0x4f0 [ 130.330679][ C0] kmem_cache_alloc+0x3d/0x280 [ 130.335460][ C0] getname_flags+0xb7/0x4f0 [ 130.339993][ C0] do_sys_openat2+0xdd/0x500 [ 130.344607][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 130.349655][ C0] ? do_sys_open+0xe0/0xe0 [ 130.354083][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.360083][ C0] ? lock_chain_count+0x20/0x20 [ 130.364967][ C0] __x64_sys_openat+0x135/0x160 [ 130.369834][ C0] do_syscall_64+0x4c/0xa0 [ 130.374266][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.378955][ C0] ? clear_bhb_loop+0x30/0x80 [ 130.383655][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.389563][ C0] RIP: 0033:0x7f9ec9f2e407 [ 130.394002][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 130.413626][ C0] RSP: 002b:00007ffc94dd3aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 130.422058][ C0] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 130.430051][ C0] RDX: 0000000000080000 RSI: 00007ffc94dd3c20 RDI: ffffffffffffff9c [ 130.438040][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 130.446049][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 130.454041][ C0] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 130.462044][ C0] [ 130.465075][ C1] CPU: 1 PID: 501 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 130.472571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.482741][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 130.489006][ C1] Call Trace: [ 130.492286][ C1] [ 130.495136][ C1] dump_stack_lvl+0x188/0x250 [ 130.499822][ C1] ? show_regs_print_info+0x20/0x20 [ 130.505042][ C1] ? load_image+0x410/0x410 [ 130.509563][ C1] ? prandom_u32+0x217/0x250 [ 130.514174][ C1] should_fail+0x383/0x4b0 [ 130.518615][ C1] should_failslab+0x5/0x20 [ 130.523124][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 130.528076][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 130.533281][ C1] ? __alloc_skb+0xf4/0x750 [ 130.537795][ C1] __alloc_skb+0xf4/0x750 [ 130.542131][ C1] skb_copy+0x122/0x6f0 [ 130.546321][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 130.552406][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 130.558566][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 130.564479][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 130.569967][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 130.575536][ C1] __iterate_interfaces+0x225/0x4c0 [ 130.580742][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 130.587003][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 130.593264][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 130.600300][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 130.605504][ C1] ? hw_scan_work+0xef0/0xef0 [ 130.610187][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 130.615429][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 130.620548][ C1] hrtimer_run_softirq+0x176/0x240 [ 130.625671][ C1] handle_softirqs+0x336/0x830 [ 130.630466][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 130.635349][ C1] ? do_softirq+0x210/0x210 [ 130.639852][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 130.644989][ C1] __irq_exit_rcu+0x13b/0x230 [ 130.649678][ C1] ? irq_exit_rcu+0x20/0x20 [ 130.654222][ C1] irq_exit_rcu+0x5/0x20 [ 130.658481][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.664243][ C1] [ 130.667185][ C1] [ 130.670119][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.676123][ C1] RIP: 0010:__printk_wait_on_cpu_lock+0x7/0x30 [ 130.682277][ C1] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 30 c2 5d 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 db 9e 18 00 f3 90 <48> c7 c7 00 b7 1f 8c be 04 00 00 00 e8 18 c3 5d 00 8b 05 42 54 bf [ 130.701896][ C1] RSP: 0018:ffffc90002f2f478 EFLAGS: 00000293 [ 130.707970][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88801e559dc0 [ 130.715938][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 130.723914][ C1] RBP: ffffc90002f2f568 R08: 0000000000000003 R09: 0000000000000004 [ 130.731904][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 130.739896][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005e5e94 [ 130.747903][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 130.753550][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 130.759189][ C1] dump_stack_lvl+0x161/0x250 [ 130.763873][ C1] ? show_regs_print_info+0x20/0x20 [ 130.769085][ C1] ? load_image+0x410/0x410 [ 130.773613][ C1] should_fail+0x383/0x4b0 [ 130.778041][ C1] should_failslab+0x5/0x20 [ 130.782550][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 130.787497][ C1] __kmalloc+0x6b/0x340 [ 130.791657][ C1] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 130.797560][ C1] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 130.803298][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 130.808331][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 130.814411][ C1] ieee80211_bss_info_update+0x74d/0xa80 [ 130.820081][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 130.825301][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 130.831122][ C1] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 130.837301][ C1] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 130.843030][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 130.848935][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 130.854138][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 130.860049][ C1] ? _raw_spin_unlock+0x40/0x40 [ 130.864912][ C1] ? kcov_remote_start+0x6a/0x490 [ 130.869952][ C1] ? kcov_remote_start+0xfa/0x490 [ 130.874998][ C1] ieee80211_iface_work+0x714/0xc50 [ 130.880219][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 130.885448][ C1] cfg80211_wiphy_work+0x224/0x260 [ 130.890575][ C1] process_one_work+0x867/0xff0 [ 130.895445][ C1] ? worker_detach_from_pool+0x240/0x240 [ 130.901083][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 130.906384][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 130.911409][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 130.916970][ C1] ? wq_worker_running+0x97/0x170 [ 130.922003][ C1] worker_thread+0xad7/0x12a0 [ 130.926728][ C1] kthread+0x42e/0x520 [ 130.930802][ C1] ? rcu_lock_release+0x20/0x20 [ 130.935662][ C1] ? kthread_blkcg+0xd0/0xd0 [ 130.940262][ C1] ret_from_fork+0x1f/0x30 [ 130.944705][ C1] [ 130.947916][ C0] FAULT_INJECTION: forcing a failure. [ 130.947916][ C0] name failslab, interval 1, probability 1, space 0, times 859 [ 130.960759][ C0] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 130.967712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.977770][ C0] Call Trace: [ 130.981056][ C0] [ 130.983919][ C0] dump_stack_lvl+0x188/0x250 [ 130.988642][ C0] ? show_regs_print_info+0x20/0x20 [ 130.993848][ C0] ? load_image+0x410/0x410 [ 130.998384][ C0] should_fail+0x383/0x4b0 [ 131.002946][ C0] should_failslab+0x5/0x20 [ 131.007462][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 131.012429][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 131.018163][ C0] ? skb_copy+0x122/0x6f0 [ 131.022493][ C0] ? __alloc_skb+0xf4/0x750 [ 131.027007][ C0] ? skb_copy+0x122/0x6f0 [ 131.031340][ C0] __alloc_skb+0x22c/0x750 [ 131.035766][ C0] skb_copy+0x122/0x6f0 [ 131.039929][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 131.046022][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 131.052180][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 131.058094][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 131.063558][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 131.069116][ C0] __iterate_interfaces+0x225/0x4c0 [ 131.074317][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.080570][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.086825][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 131.093864][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 131.099073][ C0] ? hw_scan_work+0xef0/0xef0 [ 131.103759][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 131.108979][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 131.114102][ C0] hrtimer_run_softirq+0x176/0x240 [ 131.119226][ C0] handle_softirqs+0x336/0x830 [ 131.124001][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 131.128862][ C0] ? do_softirq+0x210/0x210 [ 131.133370][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 131.138492][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 131.143697][ C0] __irq_exit_rcu+0x13b/0x230 [ 131.148386][ C0] ? irq_exit_rcu+0x20/0x20 [ 131.152906][ C0] irq_exit_rcu+0x5/0x20 [ 131.157155][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 131.162793][ C0] [ 131.165729][ C0] [ 131.168657][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.174643][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 131.180545][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 131.200165][ C0] RSP: 0018:ffffc9000302fa60 EFLAGS: 00000286 [ 131.206243][ C0] RAX: 1ce08ac894e26700 RBX: 0000000000000000 RCX: 1ce08ac894e26700 [ 131.214219][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 131.222201][ C0] RBP: ffffc9000302fb00 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 131.230188][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 131.238166][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000605f4c [ 131.246150][ C0] ? __cond_resched+0xd0/0xd0 [ 131.250843][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 131.256659][ C0] irqentry_exit+0x63/0x70 [ 131.261080][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 131.266547][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 131.272012][ C0] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 131.291626][ C0] RSP: 0018:ffffc9000302fbc0 EFLAGS: 00000293 [ 131.297720][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807424d940 [ 131.305710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.313692][ C0] RBP: ffffc9000302fca8 R08: 0000000000000003 R09: 0000000000000004 [ 131.321686][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 131.329671][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000605f7c [ 131.337660][ C0] ? dump_stack_lvl+0x204/0x250 [ 131.342525][ C0] ? show_regs_print_info+0x20/0x20 [ 131.347740][ C0] ? load_image+0x410/0x410 [ 131.352272][ C0] should_fail+0x383/0x4b0 [ 131.356708][ C0] should_failslab+0x5/0x20 [ 131.361215][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 131.366160][ C0] ? getname_flags+0xb7/0x4f0 [ 131.370841][ C0] kmem_cache_alloc+0x3d/0x280 [ 131.375644][ C0] getname_flags+0xb7/0x4f0 [ 131.380152][ C0] do_sys_openat2+0xdd/0x500 [ 131.384753][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 131.389793][ C0] ? do_sys_open+0xe0/0xe0 [ 131.394245][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.400244][ C0] ? lock_chain_count+0x20/0x20 [ 131.405136][ C0] __x64_sys_openat+0x135/0x160 [ 131.410090][ C0] do_syscall_64+0x4c/0xa0 [ 131.414522][ C0] ? clear_bhb_loop+0x30/0x80 [ 131.419241][ C0] ? clear_bhb_loop+0x30/0x80 [ 131.423923][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.429858][ C0] RIP: 0033:0x7f9ec9f2e407 [ 131.434289][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 131.453910][ C0] RSP: 002b:00007ffc94dd3aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 131.462339][ C0] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 131.470347][ C0] RDX: 0000000000080000 RSI: 00007ffc94dd3c20 RDI: ffffffffffffff9c [ 131.478326][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 131.486300][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 131.494423][ C0] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 131.502426][ C0] [ 131.507398][ T4243] FAULT_INJECTION: forcing a failure. [ 131.507398][ T4243] name failslab, interval 1, probability 1, space 0, times 858 [ 131.513083][ T4293] CPU: 1 PID: 4293 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 131.527762][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.537858][ T4293] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 131.545691][ T4293] Call Trace: [ 131.548982][ T4293] [ 131.551928][ T4293] dump_stack_lvl+0x188/0x250 [ 131.556627][ T4293] ? show_regs_print_info+0x20/0x20 [ 131.561843][ T4293] ? load_image+0x410/0x410 [ 131.566368][ T4293] ? prandom_u32+0x217/0x250 [ 131.570994][ T4293] should_fail+0x383/0x4b0 [ 131.575446][ T4293] should_failslab+0x5/0x20 [ 131.579967][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 131.584926][ T4293] __kmalloc_node_track_caller+0x68/0x3a0 [ 131.590662][ T4293] ? __netdev_alloc_skb+0x110/0x4c0 [ 131.595877][ T4293] ? __alloc_skb+0xf4/0x750 [ 131.600406][ T4293] ? __netdev_alloc_skb+0x110/0x4c0 [ 131.605640][ T4293] __alloc_skb+0x22c/0x750 [ 131.610098][ T4293] __netdev_alloc_skb+0x110/0x4c0 [ 131.615157][ T4293] ? __alloc_skb+0x750/0x750 [ 131.619771][ T4293] ? do_raw_spin_unlock+0x11d/0x230 [ 131.625004][ T4293] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 131.630495][ T4293] ? __lock_acquire+0x7b50/0x7b50 [ 131.635562][ T4293] batadv_iv_ogm_schedule+0xb35/0x1000 [ 131.641045][ T4293] ? pskb_expand_head+0xb45/0x1100 [ 131.646207][ T4293] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 131.653435][ T4293] ? batadv_send_skb_packet+0x36e/0x580 [ 131.659001][ T4293] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 131.666057][ T4293] process_one_work+0x867/0xff0 [ 131.670944][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 131.676599][ T4293] ? lockdep_hardirqs_off+0x70/0x100 [ 131.681929][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.686966][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 131.692530][ T4293] ? wq_worker_running+0x97/0x170 [ 131.697578][ T4293] worker_thread+0xad7/0x12a0 [ 131.702304][ T4293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.708261][ T4293] kthread+0x42e/0x520 [ 131.712354][ T4293] ? rcu_lock_release+0x20/0x20 [ 131.717235][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 131.721869][ T4293] ret_from_fork+0x1f/0x30 [ 131.726336][ T4293] [ 131.729388][ T4243] CPU: 0 PID: 4243 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 131.736963][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.747036][ T4243] Workqueue: events_unbound cfg80211_wiphy_work [ 131.753299][ T4243] Call Trace: [ 131.756592][ T4243] [ 131.759537][ T4243] dump_stack_lvl+0x188/0x250 [ 131.764235][ T4243] ? show_regs_print_info+0x20/0x20 [ 131.769448][ T4243] ? load_image+0x410/0x410 [ 131.773975][ T4243] should_fail+0x383/0x4b0 [ 131.778415][ T4243] should_failslab+0x5/0x20 [ 131.782933][ T4243] slab_pre_alloc_hook+0x51/0xc0 [ 131.787887][ T4243] __kmalloc+0x6b/0x340 [ 131.792056][ T4243] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 131.798406][ T4243] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 131.804584][ T4243] ? verify_lock_unused+0x140/0x140 [ 131.809806][ T4243] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 131.815911][ T4243] ? __lock_acquire+0x7b50/0x7b50 [ 131.820961][ T4243] ieee80211_bss_info_update+0x6ba/0xa80 [ 131.826616][ T4243] ? ieee80211_rx_bss_put+0x60/0x60 [ 131.831836][ T4243] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 131.832844][ C1] FAULT_INJECTION: forcing a failure. [ 131.832844][ C1] name failslab, interval 1, probability 1, space 0, times 858 [ 131.837667][ T4243] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 131.856638][ T4243] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 131.862384][ T4243] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 131.868393][ T4243] ? lockdep_hardirqs_on+0x94/0x140 [ 131.873644][ T4243] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.879559][ T4243] ? _raw_spin_unlock+0x40/0x40 [ 131.884424][ T4243] ? kcov_remote_start+0x6a/0x490 [ 131.889475][ T4243] ? kcov_remote_start+0xfa/0x490 [ 131.894541][ T4243] ieee80211_iface_work+0x714/0xc50 [ 131.899777][ T4243] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.904994][ T4243] cfg80211_wiphy_work+0x224/0x260 [ 131.910128][ T4243] process_one_work+0x867/0xff0 [ 131.915038][ T4243] ? worker_detach_from_pool+0x240/0x240 [ 131.920691][ T4243] ? lockdep_hardirqs_off+0x70/0x100 [ 131.925998][ T4243] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.931039][ T4243] ? _raw_spin_lock_irqsave+0x100/0x100 [ 131.936600][ T4243] ? wq_worker_running+0x97/0x170 [ 131.941665][ T4243] worker_thread+0xad7/0x12a0 [ 131.946392][ T4243] kthread+0x42e/0x520 [ 131.950478][ T4243] ? rcu_lock_release+0x20/0x20 [ 131.955373][ T4243] ? kthread_blkcg+0xd0/0xd0 [ 131.959979][ T4243] ret_from_fork+0x1f/0x30 [ 131.964424][ T4243] [ 131.967459][ C1] CPU: 1 PID: 1325 Comm: kworker/1:3 Not tainted syzkaller #0 [ 131.974947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.985113][ C1] Workqueue: events bpf_prog_free_deferred [ 131.990927][ C1] Call Trace: [ 131.994219][ C1] [ 131.997092][ C1] dump_stack_lvl+0x188/0x250 [ 132.001780][ C1] ? show_regs_print_info+0x20/0x20 [ 132.006990][ C1] ? load_image+0x410/0x410 [ 132.011501][ C1] ? prandom_u32+0x217/0x250 [ 132.016122][ C1] should_fail+0x383/0x4b0 [ 132.020548][ C1] should_failslab+0x5/0x20 [ 132.025058][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 132.030082][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 132.035304][ C1] ? __alloc_skb+0xf4/0x750 [ 132.039825][ C1] __alloc_skb+0xf4/0x750 [ 132.044187][ C1] skb_copy+0x122/0x6f0 [ 132.048372][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 132.054456][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 132.060626][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 132.066562][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 132.072051][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 132.077612][ C1] __iterate_interfaces+0x225/0x4c0 [ 132.082817][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 132.089084][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 132.095327][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 132.102361][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 132.107568][ C1] ? hw_scan_work+0xef0/0xef0 [ 132.112248][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 132.117471][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 132.122597][ C1] hrtimer_run_softirq+0x176/0x240 [ 132.127720][ C1] handle_softirqs+0x336/0x830 [ 132.132487][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 132.137346][ C1] ? do_softirq+0x210/0x210 [ 132.141979][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 132.147103][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 132.152311][ C1] __irq_exit_rcu+0x13b/0x230 [ 132.156999][ C1] ? irq_exit_rcu+0x20/0x20 [ 132.161511][ C1] irq_exit_rcu+0x5/0x20 [ 132.165757][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 132.171390][ C1] [ 132.174328][ C1] [ 132.177265][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.183248][ C1] RIP: 0010:smp_call_function_many_cond+0xba3/0xd80 [ 132.189856][ C1] Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 fb 73 0b 00 83 e3 01 75 07 e8 91 70 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 132.209469][ C1] RSP: 0018:ffffc90004fe7840 EFLAGS: 00000293 [ 132.215555][ C1] RAX: ffffffff816d9115 RBX: 0000000000000001 RCX: ffff888022c08000 [ 132.223527][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 132.231665][ C1] RBP: ffffc90004fe7970 R08: ffffffff901ee0c7 R09: 1ffffffff203dc18 [ 132.239661][ C1] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffff8880b913b3c0 [ 132.247657][ C1] R13: 1ffff11017208509 R14: ffff8880b9042848 R15: 0000000000000000 [ 132.255636][ C1] ? smp_call_function_many_cond+0xbc5/0xd80 [ 132.261641][ C1] ? flush_tlb_kernel_range+0x260/0x260 [ 132.267201][ C1] ? smp_call_function_many+0x30/0x30 [ 132.272581][ C1] ? kasan_depopulate_vmalloc_pte+0x73/0x80 [ 132.278483][ C1] ? __apply_to_page_range+0xc3a/0xd10 [ 132.284074][ C1] ? flush_tlb_kernel_range+0x260/0x260 [ 132.289638][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 132.294766][ C1] flush_tlb_kernel_range+0x1b5/0x260 [ 132.300155][ C1] __purge_vmap_area_lazy+0xaf6/0x1940 [ 132.305659][ C1] ? purge_fragmented_blocks_allcpus+0x9c0/0x9c0 [ 132.312000][ C1] _vm_unmap_aliases+0x40b/0x4a0 [ 132.316949][ C1] __vunmap+0x72f/0xa80 [ 132.321117][ C1] bpf_jit_free+0x92/0x180 [ 132.325543][ C1] process_one_work+0x867/0xff0 [ 132.330412][ C1] ? worker_detach_from_pool+0x240/0x240 [ 132.336053][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 132.341390][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 132.346433][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 132.351980][ C1] ? wq_worker_running+0x97/0x170 [ 132.357013][ C1] worker_thread+0xad7/0x12a0 [ 132.361703][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 132.367617][ C1] kthread+0x42e/0x520 [ 132.371691][ C1] ? rcu_lock_release+0x20/0x20 [ 132.376548][ C1] ? kthread_blkcg+0xd0/0xd0 [ 132.381144][ C1] ret_from_fork+0x1f/0x30 [ 132.385580][ C1] [ 132.389715][ T4352] CPU: 0 PID: 4352 Comm: udevd Not tainted syzkaller #0 [ 132.396718][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.406808][ T4352] Call Trace: [ 132.410114][ T4352] [ 132.413064][ T4352] dump_stack_lvl+0x188/0x250 [ 132.417788][ T4352] ? show_regs_print_info+0x20/0x20 [ 132.423014][ T4352] ? load_image+0x410/0x410 [ 132.427556][ T4352] ? prandom_u32+0x217/0x250 [ 132.432191][ T4352] should_fail+0x383/0x4b0 [ 132.436670][ T4352] should_failslab+0x5/0x20 [ 132.439558][ T4381] vm_mmap_pgoff+0x1c1/0x2d0 [ 132.441199][ T4352] slab_pre_alloc_hook+0x51/0xc0 [ 132.445834][ T4381] ? account_locked_vm+0xe0/0xe0 [ 132.450767][ T4352] ? __d_alloc+0x27/0x6d0 [ 132.450789][ T4352] kmem_cache_alloc+0x3d/0x280 [ 132.450809][ T4352] ? __lock_acquire+0x7b50/0x7b50 [ 132.450835][ T4352] __d_alloc+0x27/0x6d0 [ 132.450857][ T4352] d_alloc_parallel+0x7b/0x1320 [ 132.450880][ T4352] ? __d_lookup+0x6a4/0x760 [ 132.450913][ T4352] path_openat+0x985/0x2fb0 [ 132.450964][ T4352] ? do_filp_open+0x400/0x400 [ 132.451003][ T4352] do_filp_open+0x1df/0x400 [ 132.451030][ T4352] ? vfs_tmpfile+0x300/0x300 [ 132.451073][ T4352] ? _raw_spin_unlock+0x24/0x40 [ 132.451093][ T4352] ? alloc_fd+0x59e/0x650 [ 132.451121][ T4352] do_sys_openat2+0x14b/0x500 [ 132.451142][ T4352] ? __lock_acquire+0x7b50/0x7b50 [ 132.451168][ T4352] ? do_sys_open+0xe0/0xe0 [ 132.451188][ T4352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.451216][ T4352] ? lock_chain_count+0x20/0x20 [ 132.451244][ T4352] __x64_sys_openat+0x135/0x160 [ 132.451269][ T4352] do_syscall_64+0x4c/0xa0 [ 132.451288][ T4352] ? clear_bhb_loop+0x30/0x80 [ 132.451309][ T4352] ? clear_bhb_loop+0x30/0x80 [ 132.451332][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.451354][ T4352] RIP: 0033:0x7f9ec9f2e407 [ 132.451374][ T4352] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 132.451394][ T4352] RSP: 002b:00007ffc94dd7f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 132.451419][ T4352] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 132.451435][ T4352] RDX: 0000000000080000 RSI: 00007ffc94dd80e0 RDI: ffffffffffffff9c [ 132.451451][ T4352] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 132.451465][ T4352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 132.451479][ T4352] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 132.451508][ T4352] [ 132.559565][ T3559] CPU: 0 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 132.563083][ C1] FAULT_INJECTION: forcing a failure. [ 132.563083][ C1] name failslab, interval 1, probability 1, space 0, times 855 [ 132.566194][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.666901][ T3559] Call Trace: [ 132.670213][ T3559] [ 132.673162][ T3559] dump_stack_lvl+0x188/0x250 [ 132.677900][ T3559] ? show_regs_print_info+0x20/0x20 [ 132.683120][ T3559] ? load_image+0x410/0x410 [ 132.687650][ T3559] ? prandom_u32+0x217/0x250 [ 132.692265][ T3559] should_fail+0x383/0x4b0 [ 132.696709][ T3559] should_failslab+0x5/0x20 [ 132.701227][ T3559] slab_pre_alloc_hook+0x51/0xc0 [ 132.706196][ T3559] ? anon_vma_fork+0x1f4/0x520 [ 132.711019][ T3559] kmem_cache_alloc+0x3d/0x280 [ 132.715808][ T3559] anon_vma_fork+0x1f4/0x520 [ 132.720429][ T3559] copy_mm+0x9df/0x13d0 [ 132.724616][ T3559] ? copy_signal+0x610/0x610 [ 132.729229][ T3559] ? __init_rwsem+0x11e/0x160 [ 132.733935][ T3559] ? copy_signal+0x501/0x610 [ 132.738545][ T3559] copy_process+0x17fb/0x3ec0 [ 132.743256][ T3559] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 132.749267][ T3559] ? __pidfd_prepare+0x140/0x140 [ 132.754236][ T3559] ? verify_lock_unused+0x140/0x140 [ 132.759459][ T3559] kernel_clone+0x23f/0x990 [ 132.764008][ T3559] ? create_io_thread+0x180/0x180 [ 132.769062][ T3559] __x64_sys_clone+0x19a/0x210 [ 132.773843][ T3559] ? __ia32_sys_vfork+0x130/0x130 [ 132.778895][ T3559] ? lockdep_hardirqs_on+0x94/0x140 [ 132.784110][ T3559] do_syscall_64+0x4c/0xa0 [ 132.788539][ T3559] ? clear_bhb_loop+0x30/0x80 [ 132.793233][ T3559] ? clear_bhb_loop+0x30/0x80 [ 132.797926][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.803972][ T3559] RIP: 0033:0x7f9ec9f78636 [ 132.808430][ T3559] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 132.828066][ T3559] RSP: 002b:00007ffc94ddc480 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 132.836538][ T3559] RAX: ffffffffffffffda RBX: 00007ffc94ddc488 RCX: 00007f9ec9f78636 [ 132.844529][ T3559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 132.852522][ T3559] RBP: 000056238112e910 R08: 0000000000000000 R09: 0000000000000210 [ 132.860523][ T3559] R10: 00007f9ec9e40b50 R11: 0000000000000246 R12: 00007ffc94ddc840 [ 132.868525][ T3559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.876525][ T3559] [ 132.879561][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 132.886886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.896978][ C1] Call Trace: [ 132.900282][ C1] [ 132.903293][ C1] dump_stack_lvl+0x188/0x250 [ 132.907602][ T4293] FAULT_INJECTION: forcing a failure. [ 132.907602][ T4293] name failslab, interval 1, probability 1, space 0, times 855 [ 132.908100][ C1] ? show_regs_print_info+0x20/0x20 [ 132.926093][ C1] ? load_image+0x410/0x410 [ 132.930641][ C1] ? __lock_acquire+0x1305/0x7b50 [ 132.935710][ C1] ? prandom_u32+0x217/0x250 [ 132.940335][ C1] should_fail+0x383/0x4b0 [ 132.944777][ C1] should_failslab+0x5/0x20 [ 132.949294][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 132.954259][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 132.959489][ C1] ? __alloc_skb+0xf4/0x750 [ 132.964026][ C1] __alloc_skb+0xf4/0x750 [ 132.968398][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 132.973455][ C1] ? __alloc_skb+0x750/0x750 [ 132.978072][ C1] ? mark_lock+0x94/0x320 [ 132.982455][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 132.988080][ C1] ? verify_lock_unused+0x140/0x140 [ 132.993309][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 132.999331][ C1] ? verify_lock_unused+0x140/0x140 [ 133.004580][ C1] ? verify_lock_unused+0x140/0x140 [ 133.009822][ C1] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 133.015690][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 133.021204][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 133.026828][ C1] __iterate_interfaces+0x225/0x4c0 [ 133.032061][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 133.038326][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 133.044626][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 133.051728][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 133.056972][ C1] ? hw_scan_work+0xef0/0xef0 [ 133.061674][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 133.066919][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 133.072071][ C1] hrtimer_run_softirq+0x176/0x240 [ 133.077228][ C1] handle_softirqs+0x336/0x830 [ 133.080816][ T4350] FAULT_INJECTION: forcing a failure. [ 133.080816][ T4350] name failslab, interval 1, probability 1, space 0, times 854 [ 133.082025][ C1] ? run_ksoftirqd+0xa4/0x100 [ 133.099583][ C1] ? do_softirq+0x210/0x210 [ 133.104118][ C1] ? run_ksoftirqd+0x81/0x100 [ 133.108827][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 133.114063][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 133.119385][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 133.124620][ C1] run_ksoftirqd+0xa4/0x100 [ 133.129170][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 133.134417][ C1] smpboot_thread_fn+0x520/0x990 [ 133.139395][ C1] kthread+0x42e/0x520 [ 133.143486][ C1] ? cpu_report_death+0x180/0x180 [ 133.148539][ C1] ? kthread_blkcg+0xd0/0xd0 [ 133.153154][ C1] ret_from_fork+0x1f/0x30 [ 133.157620][ C1] [ 133.160669][ T4350] CPU: 0 PID: 4350 Comm: udevd Not tainted syzkaller #0 [ 133.166686][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.167643][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.174755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183962][ T4350] Call Trace: [ 133.183977][ T4350] [ 133.183987][ T4350] dump_stack_lvl+0x188/0x250 [ 133.184022][ T4350] ? show_regs_print_info+0x20/0x20 [ 133.206399][ T4350] ? load_image+0x410/0x410 [ 133.210937][ T4350] ? prandom_u32+0x217/0x250 [ 133.215559][ T4350] should_fail+0x383/0x4b0 [ 133.220012][ T4350] should_failslab+0x5/0x20 [ 133.224544][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 133.229508][ T4350] __kmalloc+0x6b/0x340 [ 133.233696][ T4350] ? tomoyo_encode+0x28a/0x550 [ 133.238502][ T4350] tomoyo_encode+0x28a/0x550 [ 133.243131][ T4350] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 133.248803][ T4350] tomoyo_check_open_permission+0x1eb/0x410 [ 133.254748][ T4350] ? tomoyo_check_path_number_acl+0x280/0x280 [ 133.260865][ T4350] ? __lock_acquire+0x7b50/0x7b50 [ 133.265915][ T4350] ? __rwlock_init+0x140/0x140 [ 133.270809][ T4350] ? hook_file_open+0xf1/0x230 [ 133.275601][ T4350] ? tomoyo_file_open+0xe9/0x170 [ 133.280581][ T4350] security_file_open+0x5e/0xa0 [ 133.285466][ T4350] do_dentry_open+0x321/0xf90 [ 133.290178][ T4350] ? vfs_open+0x2b/0x80 [ 133.294351][ T4350] path_openat+0x2718/0x2fb0 [ 133.298970][ T4350] ? __kasan_slab_alloc+0xa9/0xc0 [ 133.304018][ T4350] ? do_filp_open+0x400/0x400 [ 133.308724][ T4350] do_filp_open+0x1df/0x400 [ 133.313254][ T4350] ? vfs_tmpfile+0x300/0x300 [ 133.317888][ T4350] ? _raw_spin_unlock+0x24/0x40 [ 133.322796][ T4350] ? alloc_fd+0x59e/0x650 [ 133.327154][ T4350] do_sys_openat2+0x14b/0x500 [ 133.331860][ T4350] ? __lock_acquire+0x7b50/0x7b50 [ 133.336903][ T4350] ? do_sys_open+0xe0/0xe0 [ 133.341336][ T4350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.347352][ T4350] ? lock_chain_count+0x20/0x20 [ 133.352253][ T4350] __x64_sys_openat+0x135/0x160 [ 133.357143][ T4350] do_syscall_64+0x4c/0xa0 [ 133.361575][ T4350] ? clear_bhb_loop+0x30/0x80 [ 133.366271][ T4350] ? clear_bhb_loop+0x30/0x80 [ 133.370966][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.376910][ T4350] RIP: 0033:0x7f9ec9f2e407 [ 133.381355][ T4350] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 133.400982][ T4350] RSP: 002b:00007ffc94dd7f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 133.409458][ T4350] RAX: ffffffffffffffda RBX: 00007f9ec9e40880 RCX: 00007f9ec9f2e407 [ 133.417451][ T4350] RDX: 0000000000080000 RSI: 00007ffc94dd80d0 RDI: ffffffffffffff9c [ 133.425436][ T4350] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 133.433422][ T4350] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562342ab87f5 [ 133.441413][ T4350] R13: 0000562342ab87f5 R14: 0000000000000001 R15: 0000562342ad3140 [ 133.449438][ T4350] [ 133.454791][ T4243] FAULT_INJECTION: forcing a failure. [ 133.454791][ T4243] name failslab, interval 1, probability 1, space 0, times 852 [ 133.467719][ T501] CPU: 1 PID: 501 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 133.475213][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.485310][ T501] Workqueue: events_unbound cfg80211_wiphy_work [ 133.491591][ T501] Call Trace: [ 133.494889][ T501] [ 133.497859][ T501] dump_stack_lvl+0x188/0x250 [ 133.502562][ T501] ? show_regs_print_info+0x20/0x20 [ 133.507787][ T501] ? load_image+0x410/0x410 [ 133.512325][ T501] should_fail+0x383/0x4b0 [ 133.516775][ T501] should_failslab+0x5/0x20 [ 133.521301][ T501] slab_pre_alloc_hook+0x51/0xc0 [ 133.526260][ T501] __kmalloc+0x6b/0x340 [ 133.530436][ T501] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 133.536351][ T501] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 133.542105][ T501] ? __lock_acquire+0x7b50/0x7b50 [ 133.547151][ T501] ? ieee80211_queue_delayed_work+0x150/0x150 [ 133.553256][ T501] ieee80211_bss_info_update+0x74d/0xa80 [ 133.558922][ T501] ? ieee80211_rx_bss_put+0x60/0x60 [ 133.564170][ T501] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 133.570011][ T501] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 133.576215][ T501] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 133.581969][ T501] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 133.587885][ T501] ? lockdep_hardirqs_on+0x94/0x140 [ 133.593107][ T501] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.599017][ T501] ? _raw_spin_unlock+0x40/0x40 [ 133.603886][ T501] ? kcov_remote_start+0x6a/0x490 [ 133.608952][ T501] ? kcov_remote_start+0xfa/0x490 [ 133.612130][ T4234] FAULT_INJECTION: forcing a failure. [ 133.612130][ T4234] name failslab, interval 1, probability 1, space 0, times 852 [ 133.614017][ T501] ieee80211_iface_work+0x714/0xc50 [ 133.631973][ T501] ? _raw_spin_unlock_irq+0x1f/0x40 [ 133.637200][ T501] cfg80211_wiphy_work+0x224/0x260 [ 133.642357][ T501] process_one_work+0x867/0xff0 [ 133.647263][ T501] ? worker_detach_from_pool+0x240/0x240 [ 133.652937][ T501] ? lockdep_hardirqs_off+0x70/0x100 [ 133.658250][ T501] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.663293][ T501] ? _raw_spin_lock_irqsave+0x100/0x100 [ 133.668863][ T501] ? wq_worker_running+0x97/0x170 [ 133.673907][ T501] worker_thread+0xad7/0x12a0 [ 133.678627][ T501] kthread+0x42e/0x520 [ 133.682711][ T501] ? rcu_lock_release+0x20/0x20 [ 133.687575][ T501] ? kthread_blkcg+0xd0/0xd0 [ 133.692200][ T501] ret_from_fork+0x1f/0x30 [ 133.696654][ T501] [ 133.699689][ T4234] CPU: 0 PID: 4234 Comm: kworker/0:6 Not tainted syzkaller #0 [ 133.707187][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.717266][ T4234] Workqueue: events nsim_dev_trap_report_work [ 133.723360][ T4234] Call Trace: [ 133.726653][ T4234] [ 133.729599][ T4234] dump_stack_lvl+0x188/0x250 [ 133.734297][ T4234] ? show_regs_print_info+0x20/0x20 [ 133.739517][ T4234] ? load_image+0x410/0x410 [ 133.744039][ T4234] ? prandom_u32+0x217/0x250 [ 133.748649][ T4234] should_fail+0x383/0x4b0 [ 133.753089][ T4234] should_failslab+0x5/0x20 [ 133.757606][ T4234] slab_pre_alloc_hook+0x51/0xc0 [ 133.762560][ T4234] __kmalloc_node_track_caller+0x68/0x3a0 [ 133.768293][ T4234] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 133.774110][ T4234] ? __alloc_skb+0xf4/0x750 [ 133.778625][ T4234] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 133.784449][ T4234] __alloc_skb+0x22c/0x750 [ 133.788887][ T4234] nsim_dev_trap_report_work+0x25c/0xab0 [ 133.794543][ T4234] process_one_work+0x867/0xff0 [ 133.799416][ T4234] ? worker_detach_from_pool+0x240/0x240 [ 133.805073][ T4234] ? lockdep_hardirqs_off+0x70/0x100 [ 133.810392][ T4234] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.815458][ T4234] ? _raw_spin_lock_irqsave+0x100/0x100 [ 133.821016][ T4234] ? wq_worker_running+0x97/0x170 [ 133.826057][ T4234] worker_thread+0xad7/0x12a0 [ 133.830792][ T4234] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.836712][ T4234] kthread+0x42e/0x520 [ 133.840795][ T4234] ? rcu_lock_release+0x20/0x20 [ 133.845653][ T4234] ? kthread_blkcg+0xd0/0xd0 [ 133.850258][ T4234] ret_from_fork+0x1f/0x30 [ 133.854702][ T4234] [ 133.859008][ T4381] ksys_mmap_pgoff+0x4e2/0x790 [ 133.863897][ T4293] CPU: 0 PID: 4293 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 133.871471][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.881571][ T4293] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 133.889410][ T4293] Call Trace: [ 133.892731][ T4293] [ 133.895676][ T4293] dump_stack_lvl+0x188/0x250 [ 133.900385][ T4293] ? show_regs_print_info+0x20/0x20 [ 133.905615][ T4293] ? load_image+0x410/0x410 [ 133.910148][ T4293] ? prandom_u32+0x217/0x250 [ 133.914763][ T4293] should_fail+0x383/0x4b0 [ 133.919204][ T4293] should_failslab+0x5/0x20 [ 133.923728][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 133.928697][ T4293] __kmalloc_node_track_caller+0x68/0x3a0 [ 133.934443][ T4293] ? __netdev_alloc_skb+0x110/0x4c0 [ 133.939656][ T4293] ? __alloc_skb+0xf4/0x750 [ 133.944185][ T4293] ? __netdev_alloc_skb+0x110/0x4c0 [ 133.949427][ T4293] __alloc_skb+0x22c/0x750 [ 133.953978][ T4293] __netdev_alloc_skb+0x110/0x4c0 [ 133.959047][ T4293] ? __alloc_skb+0x750/0x750 [ 133.963679][ T4293] ? do_raw_spin_unlock+0x11d/0x230 [ 133.968914][ T4293] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 133.974575][ T4293] batadv_iv_ogm_schedule+0xb35/0x1000 [ 133.980061][ T4293] ? pskb_expand_head+0xb45/0x1100 [ 133.985211][ T4293] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 133.992443][ T4293] ? batadv_send_skb_packet+0x36e/0x580 [ 133.998016][ T4293] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 134.005098][ T4293] process_one_work+0x867/0xff0 [ 134.009987][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 134.015634][ T4293] ? lockdep_hardirqs_off+0x70/0x100 [ 134.020942][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 134.025996][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 134.031568][ T4293] ? wq_worker_running+0x97/0x170 [ 134.036614][ T4293] worker_thread+0xad7/0x12a0 [ 134.041325][ T4293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.047275][ T4293] kthread+0x42e/0x520 [ 134.051410][ T4293] ? rcu_lock_release+0x20/0x20 [ 134.056371][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 134.060987][ T4293] ret_from_fork+0x1f/0x30 [ 134.065450][ T4293] [ 134.068489][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 134.075981][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.079428][ T4381] ? mmap_region+0x1730/0x1730 [ 134.086058][ T154] Workqueue: events_unbound cfg80211_wiphy_work [ 134.086110][ T154] Call Trace: [ 134.086118][ T154] [ 134.086128][ T154] dump_stack_lvl+0x188/0x250 [ 134.086158][ T154] ? show_regs_print_info+0x20/0x20 [ 134.086183][ T154] ? load_image+0x410/0x410 [ 134.086222][ T154] should_fail+0x383/0x4b0 [ 134.086251][ T154] should_failslab+0x5/0x20 [ 134.086273][ T154] slab_pre_alloc_hook+0x51/0xc0 [ 134.086299][ T154] __kmalloc+0x6b/0x340 [ 134.086319][ T154] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 134.086349][ T154] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 134.086399][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 134.086427][ T154] ? ieee80211_queue_delayed_work+0x150/0x150 [ 134.086461][ T154] ieee80211_bss_info_update+0x74d/0xa80 [ 134.086499][ T154] ? ieee80211_rx_bss_put+0x60/0x60 [ 134.086532][ T154] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 134.086563][ T154] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 134.086611][ T154] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 134.086634][ T154] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 134.109731][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 134.113740][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 134.118292][ T4381] do_syscall_64+0x4c/0xa0 [ 134.122706][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.122730][ T154] ? _raw_spin_unlock+0x40/0x40 [ 134.122751][ T154] ? kcov_remote_start+0x6a/0x490 [ 134.139391][ T4381] ? clear_bhb_loop+0x30/0x80 [ 134.142266][ T154] ? kcov_remote_start+0xfa/0x490 [ 134.147979][ T4381] ? clear_bhb_loop+0x30/0x80 [ 134.153012][ T154] ieee80211_iface_work+0x714/0xc50 [ 134.153040][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 134.179393][ T4381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.181882][ T154] cfg80211_wiphy_work+0x224/0x260 [ 134.199401][ T4381] RIP: 0033:0x7fc7ba292c02 [ 134.203926][ T154] process_one_work+0x867/0xff0 [ 134.208342][ T4381] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 134.214264][ T154] ? worker_detach_from_pool+0x240/0x240 [ 134.214289][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 134.214315][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 134.214335][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 134.214359][ T154] ? wq_worker_running+0x97/0x170 [ 134.214383][ T154] worker_thread+0xad7/0x12a0 [ 134.214485][ T154] kthread+0x42e/0x520 [ 134.239384][ T4381] RSP: 002b:00007ffcd588b798 EFLAGS: 00000206 [ 134.243845][ T154] ? rcu_lock_release+0x20/0x20 [ 134.249058][ T4381] ORIG_RAX: 0000000000000009 [ 134.254959][ T154] ? kthread_blkcg+0xd0/0xd0 [ 134.254985][ T154] ret_from_fork+0x1f/0x30 [ 134.279472][ T4381] RAX: ffffffffffffffda RBX: 00007fc7b94f0000 RCX: 00007fc7ba292c02 [ 134.289277][ T154] [ 134.295290][ C0] FAULT_INJECTION: forcing a failure. [ 134.295290][ C0] name failslab, interval 1, probability 1, space 0, times 851 [ 134.321281][ T1325] FAULT_INJECTION: forcing a failure. [ 134.321281][ T1325] name failslab, interval 1, probability 1, space 0, times 851 [ 134.324726][ C0] CPU: 0 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 134.393368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.403439][ C0] Call Trace: [ 134.406737][ C0] [ 134.409601][ C0] dump_stack_lvl+0x188/0x250 [ 134.414311][ C0] ? vm_mmap_pgoff+0x1c1/0x2d0 [ 134.419091][ C0] ? do_syscall_64+0x4c/0xa0 [ 134.423698][ C0] ? show_regs_print_info+0x20/0x20 [ 134.428916][ C0] ? load_image+0x410/0x410 [ 134.433452][ C0] should_fail+0x383/0x4b0 [ 134.437895][ C0] should_failslab+0x5/0x20 [ 134.442428][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 134.447394][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 134.453152][ C0] ? skb_copy+0x122/0x6f0 [ 134.457497][ C0] ? __alloc_skb+0xf4/0x750 [ 134.462041][ C0] ? skb_copy+0x122/0x6f0 [ 134.466398][ C0] __alloc_skb+0x22c/0x750 [ 134.470839][ C0] skb_copy+0x122/0x6f0 [ 134.475031][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 134.481136][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 134.487316][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 134.493240][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 134.498730][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 134.504326][ C0] __iterate_interfaces+0x225/0x4c0 [ 134.509564][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.515827][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.522220][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 134.529276][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 134.534509][ C0] ? hw_scan_work+0xef0/0xef0 [ 134.539210][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 134.544459][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 134.549602][ C0] hrtimer_run_softirq+0x176/0x240 [ 134.554739][ C0] handle_softirqs+0x336/0x830 [ 134.559524][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 134.564388][ C0] ? do_softirq+0x210/0x210 [ 134.568903][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 134.574033][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 134.579253][ C0] __irq_exit_rcu+0x13b/0x230 [ 134.583948][ C0] ? irq_exit_rcu+0x20/0x20 [ 134.588502][ C0] irq_exit_rcu+0x5/0x20 [ 134.592764][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 134.605383][ C0] [ 134.608343][ C0] [ 134.611301][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.617317][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 134.622885][ C0] Code: 75 11 e8 e3 e3 18 00 4d 85 e4 75 16 e8 d9 e3 18 00 eb 15 e8 d2 e3 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 c3 e3 18 00 fb 31 ff <89> de e8 19 e7 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 a7 [ 134.642692][ C0] RSP: 0018:ffffc9000336f4c0 EFLAGS: 00000246 [ 134.648780][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff8880206b3b80 [ 134.656773][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.664760][ C0] RBP: ffffc9000336f730 R08: ffffffff901ee0f7 R09: 1ffffffff203dc1e [ 134.672757][ C0] R10: dffffc0000000000 R11: fffffbfff203dc1f R12: 0000000000000200 [ 134.680749][ C0] R13: 000000000000003e R14: 0000000000000000 R15: dffffc0000000000 [ 134.688746][ C0] ? console_unlock+0xc8d/0x10f0 [ 134.693726][ C0] ? console_trylock_spinning+0x370/0x370 [ 134.699475][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.705482][ C0] ? read_lock_is_recursive+0x10/0x10 [ 134.710886][ C0] ? vprintk_emit+0x150/0x150 [ 134.715586][ C0] ? preempt_count_add+0x8d/0x190 [ 134.720630][ C0] vprintk_emit+0xc0/0x150 [ 134.725076][ C0] _printk+0xda/0x130 [ 134.729088][ C0] ? __check_object_size+0x87/0x410 [ 134.734329][ C0] ? load_image+0x410/0x410 [ 134.738880][ C0] ? show_opcodes+0xf6/0x120 [ 134.743514][ C0] __show_regs+0xcb/0x500 [ 134.747882][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.753990][ C0] __show_trace_log_lvl+0x390/0x550 [ 134.759233][ C0] ? kcov_mmap+0x10a/0x120 [ 134.763678][ C0] __warn+0x15e/0x2b0 [ 134.767689][ C0] ? kcov_mmap+0x10a/0x120 [ 134.772148][ C0] report_bug+0x1b9/0x2e0 [ 134.776507][ C0] handle_bug+0x3a/0x70 [ 134.780691][ C0] exc_invalid_op+0x16/0x40 [ 134.785219][ C0] asm_exc_invalid_op+0x16/0x20 [ 134.790092][ C0] RIP: 0010:kcov_mmap+0x10a/0x120 [ 134.795140][ C0] Code: 89 df 48 89 c2 e8 56 7a 34 00 85 c0 74 d0 80 3d 29 39 fe 0b 00 75 c7 c6 05 20 39 fe 0b 01 48 c7 c7 b2 02 c8 8b e8 16 0f 3c 08 <0f> 0b eb b0 31 ed e9 7b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 [ 134.814775][ C0] RSP: 0018:ffffc9000336fb50 EFLAGS: 00010246 [ 134.820889][ C0] RAX: c8dc56a0466be500 RBX: ffff88802a21d630 RCX: ffff8880206b3b80 [ 134.828880][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 134.836869][ C0] RBP: 0000000000000000 R08: ffffc9000336f687 R09: 1ffff9200066ded0 [ 134.844857][ C0] R10: dffffc0000000000 R11: fffff5200066ded1 R12: ffff88805c7d3600 [ 134.852843][ C0] R13: 0000000000400000 R14: 0000000000000000 R15: ffff88805c7d3608 [ 134.860872][ C0] mmap_file+0x5d/0xb0 [ 134.864976][ C0] mmap_region+0x1048/0x1730 [ 134.869600][ C0] do_mmap+0x801/0xe30 [ 134.873718][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 134.878328][ C0] ? account_locked_vm+0xe0/0xe0 [ 134.883318][ C0] ksys_mmap_pgoff+0x4e2/0x790 [ 134.888114][ C0] ? mmap_region+0x1730/0x1730 [ 134.892907][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 134.898128][ C0] do_syscall_64+0x4c/0xa0 [ 134.902566][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.907267][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.911976][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.917902][ C0] RIP: 0033:0x7fc7ba292c02 [ 134.922452][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 134.942095][ C0] RSP: 002b:00007ffcd588b798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 134.953414][ C0] RAX: ffffffffffffffda RBX: 00007fc7b94f0000 RCX: 00007fc7ba292c02 [ 134.961414][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fc7b94f0000 [ 134.969416][ C0] RBP: 0000000000000011 R08: 00000000000000da R09: 0000000000000000 [ 134.977482][ C0] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 134.985539][ C0] R13: 0000000000000003 R14: 00007ffcd588ba08 R15: 0000000000000000 [ 134.993556][ C0] [ 134.996597][ T1325] CPU: 1 PID: 1325 Comm: kworker/1:3 Not tainted syzkaller #0 [ 135.004094][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.004453][ T4386] FAULT_INJECTION: forcing a failure. [ 135.004453][ T4386] name failslab, interval 1, probability 1, space 0, times 850 [ 135.014211][ T1325] Workqueue: events nsim_dev_trap_report_work [ 135.014244][ T1325] Call Trace: [ 135.014254][ T1325] [ 135.014264][ T1325] dump_stack_lvl+0x188/0x250 [ 135.044186][ T1325] ? show_regs_print_info+0x20/0x20 [ 135.049414][ T1325] ? load_image+0x410/0x410 [ 135.049419][ T4381] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fc7b94f0000 [ 135.049441][ T1325] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.053953][ T4381] RBP: 0000000000000011 R08: 00000000000000da R09: 0000000000000000 [ 135.061933][ T1325] ? prandom_u32+0x217/0x250 [ 135.061970][ T1325] should_fail+0x383/0x4b0 [ 135.084925][ T1325] should_failslab+0x5/0x20 [ 135.089448][ T1325] slab_pre_alloc_hook+0x51/0xc0 [ 135.094420][ T1325] kmem_cache_alloc_node+0x47/0x2c0 [ 135.099388][ T4381] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 135.099642][ T1325] ? __alloc_skb+0xf4/0x750 [ 135.107631][ T4381] R13: 0000000000000003 R14: 00007ffcd588ba08 R15: 0000000000000000 [ 135.112152][ T1325] __alloc_skb+0xf4/0x750 [ 135.112181][ T1325] nsim_dev_trap_report_work+0x25c/0xab0 [ 135.112222][ T1325] process_one_work+0x867/0xff0 [ 135.112240][ C0] FAULT_INJECTION: forcing a failure. [ 135.112240][ C0] name failslab, interval 1, probability 1, space 0, times 850 [ 135.112260][ T1325] ? worker_detach_from_pool+0x240/0x240 [ 135.112281][ T1325] ? lockdep_hardirqs_off+0x70/0x100 [ 135.112306][ T1325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 135.112324][ T1325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 135.112344][ T1325] ? wq_worker_running+0x97/0x170 [ 135.112365][ T1325] worker_thread+0xad7/0x12a0 [ 135.112397][ T1325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.112424][ T1325] kthread+0x42e/0x520 [ 135.112441][ T1325] ? rcu_lock_release+0x20/0x20 [ 135.112459][ T1325] ? kthread_blkcg+0xd0/0xd0 [ 135.112478][ T1325] ret_from_fork+0x1f/0x30 [ 135.112510][ T1325] [ 135.112518][ C0] CPU: 0 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 135.112545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.112559][ C0] Call Trace: [ 135.112566][ C0] [ 135.112574][ C0] dump_stack_lvl+0x188/0x250 [ 135.112601][ C0] ? show_regs_print_info+0x20/0x20 [ 135.112625][ C0] ? load_image+0x410/0x410 [ 135.112649][ C0] ? prandom_u32+0x217/0x250 [ 135.112680][ C0] should_fail+0x383/0x4b0 [ 135.112706][ C0] should_failslab+0x5/0x20 [ 135.112727][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 135.112751][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 135.112771][ C0] ? __alloc_skb+0xf4/0x750 [ 135.112796][ C0] __alloc_skb+0xf4/0x750 [ 135.112822][ C0] skb_copy+0x122/0x6f0 [ 135.112854][ C0] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 135.112897][ C0] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 135.112920][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 135.112960][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 135.112989][ C0] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 135.113021][ C0] __iterate_interfaces+0x225/0x4c0 [ 135.113043][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.113071][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.113097][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 135.113123][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 135.113146][ C0] ? hw_scan_work+0xef0/0xef0 [ 135.113170][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 135.113211][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 135.113241][ C0] hrtimer_run_softirq+0x176/0x240 [ 135.113269][ C0] handle_softirqs+0x336/0x830 [ 135.113296][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 135.113321][ C0] ? do_softirq+0x210/0x210 [ 135.113341][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 135.113368][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 135.113395][ C0] __irq_exit_rcu+0x13b/0x230 [ 135.113416][ C0] ? irq_exit_rcu+0x20/0x20 [ 135.113448][ C0] irq_exit_rcu+0x5/0x20 [ 135.113466][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 135.113489][ C0] [ 135.113496][ C0] [ 135.113505][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.113528][ C0] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 135.113559][ C0] Code: 85 db 74 89 e8 e0 f0 18 00 fb 31 c0 eb 48 e8 d6 f0 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 c7 f0 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 135.113579][ C0] RSP: 0018:ffffc9000336f660 EFLAGS: 00000293 [ 135.113600][ C0] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff8880206b3b80 [ 135.113617][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 135.113631][ C0] RBP: ffffc9000336f730 R08: ffffffff901ee0f7 R09: 1ffffffff203dc1e [ 135.113645][ C0] R10: dffffc0000000000 R11: fffffbfff203dc1f R12: dffffc0000000000 [ 135.113661][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff9200066decc [ 135.113681][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 135.113709][ C0] ? vprintk_emit+0x150/0x150 [ 135.113740][ C0] ? preempt_count_add+0x8d/0x190 [ 135.113766][ C0] vprintk_emit+0xa7/0x150 [ 135.113790][ C0] _printk+0xda/0x130 [ 135.113811][ C0] ? __check_object_size+0x87/0x410 [ 135.113840][ C0] ? load_image+0x410/0x410 [ 135.113864][ C0] ? show_opcodes+0xf6/0x120 [ 135.113897][ C0] __show_regs+0x261/0x500 [ 135.113917][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.113944][ C0] __show_trace_log_lvl+0x390/0x550 [ 135.113983][ C0] ? kcov_mmap+0x10a/0x120 [ 135.114006][ C0] __warn+0x15e/0x2b0 [ 135.114029][ C0] ? kcov_mmap+0x10a/0x120 [ 135.114052][ C0] report_bug+0x1b9/0x2e0 [ 135.114080][ C0] handle_bug+0x3a/0x70 [ 135.114100][ C0] exc_invalid_op+0x16/0x40 [ 135.114120][ C0] asm_exc_invalid_op+0x16/0x20 [ 135.114140][ C0] RIP: 0010:kcov_mmap+0x10a/0x120 [ 135.114161][ C0] Code: 89 df 48 89 c2 e8 56 7a 34 00 85 c0 74 d0 80 3d 29 39 fe 0b 00 75 c7 c6 05 20 39 fe 0b 01 48 c7 c7 b2 02 c8 8b e8 16 0f 3c 08 <0f> 0b eb b0 31 ed e9 7b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 [ 135.114180][ C0] RSP: 0018:ffffc9000336fb50 EFLAGS: 00010246 [ 135.114199][ C0] RAX: c8dc56a0466be500 RBX: ffff88802a21d630 RCX: ffff8880206b3b80 [ 135.114216][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 135.114231][ C0] RBP: 0000000000000000 R08: ffffc9000336f687 R09: 1ffff9200066ded0 [ 135.114247][ C0] R10: dffffc0000000000 R11: fffff5200066ded1 R12: ffff88805c7d3600 [ 135.114264][ C0] R13: 0000000000400000 R14: 0000000000000000 R15: ffff88805c7d3608 [ 135.114299][ C0] mmap_file+0x5d/0xb0 [ 135.114323][ C0] mmap_region+0x1048/0x1730 [ 135.114364][ C0] do_mmap+0x801/0xe30 [ 135.114395][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 135.114420][ C0] ? account_locked_vm+0xe0/0xe0 [ 135.114451][ C0] ksys_mmap_pgoff+0x4e2/0x790 [ 135.114479][ C0] ? mmap_region+0x1730/0x1730 [ 135.114503][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 135.114526][ C0] do_syscall_64+0x4c/0xa0 [ 135.114552][ C0] ? clear_bhb_loop+0x30/0x80 [ 135.114572][ C0] ? clear_bhb_loop+0x30/0x80 [ 135.114595][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.114617][ C0] RIP: 0033:0x7fc7ba292c02 [ 135.114637][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 135.114654][ C0] RSP: 002b:00007ffcd588b798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 135.114676][ C0] RAX: ffffffffffffffda RBX: 00007fc7b94f0000 RCX: 00007fc7ba292c02 [ 135.114693][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fc7b94f0000 [ 135.114707][ C0] RBP: 0000000000000011 R08: 00000000000000da R09: 0000000000000000 [ 135.114720][ C0] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 135.114733][ C0] R13: 0000000000000003 R14: 00007ffcd588ba08 R15: 0000000000000000 [ 135.114761][ C0] [ 135.131017][ T3559] udevd[3559]: fork of child failed: Cannot allocate memory [ 135.136252][ T4386] CPU: 0 PID: 4386 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 135.151099][ T3559] FAULT_INJECTION: forcing a failure. [ 135.151099][ T3559] name failslab, interval 1, probability 1, space 0, times 845 [ 135.156683][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.156699][ T4386] Workqueue: events_unbound cfg80211_wiphy_work [ 135.156728][ T4386] Call Trace: [ 135.156736][ T4386] [ 135.156745][ T4386] dump_stack_lvl+0x188/0x250 [ 135.156775][ T4386] ? show_regs_print_info+0x20/0x20 [ 135.379599][ T4350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.382433][ T4386] ? load_image+0x410/0x410 [ 135.824832][ T1325] FAULT_INJECTION: forcing a failure. [ 135.824832][ T1325] name failslab, interval 1, probability 1, space 0, times 843 [ 135.827800][ T4386] should_fail+0x383/0x4b0 [ 135.827834][ T4386] should_failslab+0x5/0x20 [ 135.827855][ T4386] slab_pre_alloc_hook+0x51/0xc0 [ 135.827880][ T4386] __kmalloc+0x6b/0x340 [ 135.827900][ T4386] ? ieee802_11_parse_elems_crc+0xb3/0x1090 [ 135.827932][ T4386] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 135.827940][ C1] FAULT_INJECTION: forcing a failure. [ 135.827940][ C1] name failslab, interval 1, probability 1, space 0, times 843 [ 135.828000][ T4386] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 135.828022][ T4386] ? verify_lock_unused+0x140/0x140 [ 135.828048][ T4386] ? mutex_lock_io_nested+0x60/0x60 [ 135.828072][ T4386] ? verify_lock_unused+0x140/0x140 [ 135.828094][ T4386] ? ieee80211_queue_delayed_work+0x150/0x150 [ 135.828114][ T4386] ? verify_lock_unused+0x140/0x140 [ 135.828140][ T4386] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 135.828167][ T4386] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.828194][ T4386] ? __rwlock_init+0x140/0x140 [ 135.828215][ T4386] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 135.828233][ T4386] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 135.828253][ T4386] ? lockdep_hardirqs_on+0x94/0x140 [ 135.828274][ T4386] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.828293][ T4386] ? _raw_spin_unlock+0x40/0x40 [ 135.828311][ T4386] ? kcov_remote_start+0x6a/0x490 [ 135.828335][ T4386] ? kcov_remote_start+0xfa/0x490 [ 135.828358][ T4386] ieee80211_iface_work+0x714/0xc50 [ 135.828378][ T4386] ? _raw_spin_unlock_irq+0x1f/0x40 [ 135.828400][ T4386] cfg80211_wiphy_work+0x224/0x260 [ 135.828426][ T4386] process_one_work+0x867/0xff0 [ 135.828459][ T4386] ? worker_detach_from_pool+0x240/0x240 [ 135.828479][ T4386] ? lockdep_hardirqs_off+0x70/0x100 [ 135.828502][ T4386] ? _raw_spin_lock_irq+0xb7/0xf0 [ 135.828519][ T4386] ? _raw_spin_lock_irqsave+0x100/0x100 [ 135.828540][ T4386] ? wq_worker_running+0x97/0x170 [ 135.828560][ T4386] worker_thread+0xad7/0x12a0 [ 135.828592][ T4386] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.828620][ T4386] kthread+0x42e/0x520 [ 135.828636][ T4386] ? rcu_lock_release+0x20/0x20 [ 135.828653][ T4386] ? kthread_blkcg+0xd0/0xd0 [ 135.828672][ T4386] ret_from_fork+0x1f/0x30 [ 135.828705][ T4386] [ 135.828713][ C1] CPU: 1 PID: 1325 Comm: kworker/1:3 Not tainted syzkaller #0 [ 135.828734][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.828748][ C1] Workqueue: events nsim_dev_trap_report_work [ 135.828773][ C1] Call Trace: [ 135.828781][ C1] [ 135.828790][ C1] dump_stack_lvl+0x188/0x250 [ 135.828817][ C1] ? show_regs_print_info+0x20/0x20 [ 135.828842][ C1] ? load_image+0x410/0x410 [ 135.828867][ C1] ? prandom_u32+0x217/0x250 [ 135.828899][ C1] should_fail+0x383/0x4b0 [ 135.828923][ C1] should_failslab+0x5/0x20 [ 135.828941][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 135.828963][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 135.828979][ C1] ? __alloc_skb+0xf4/0x750 [ 135.829004][ C1] __alloc_skb+0xf4/0x750 [ 135.829028][ C1] skb_copy+0x122/0x6f0 [ 135.829058][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 135.829096][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 135.829117][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 135.829154][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 135.829182][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 135.829212][ C1] __iterate_interfaces+0x225/0x4c0 [ 135.829234][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.829260][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.829291][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 135.829318][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 135.829341][ C1] ? hw_scan_work+0xef0/0xef0 [ 135.829364][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 135.829406][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 135.829439][ C1] hrtimer_run_softirq+0x176/0x240 [ 135.829474][ C1] handle_softirqs+0x336/0x830 [ 135.829499][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 135.829524][ C1] ? do_softirq+0x210/0x210 [ 135.829539][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 135.829559][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 135.829578][ C1] __irq_exit_rcu+0x13b/0x230 [ 135.829593][ C1] ? irq_exit_rcu+0x20/0x20 [ 135.829615][ C1] irq_exit_rcu+0x5/0x20 [ 135.829628][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 135.829645][ C1] [ 135.829650][ C1] [ 135.829656][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.829673][ C1] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 135.829690][ C1] Code: 85 db 74 89 e8 e0 f0 18 00 fb 31 c0 eb 48 e8 d6 f0 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 c7 f0 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 135.829704][ C1] RSP: 0018:ffffc90004fe7800 EFLAGS: 00000293 [ 135.829719][ C1] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff888022c08000 [ 135.829731][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 135.829741][ C1] RBP: ffffc90004fe78d0 R08: ffffffff901ee1bf R09: 1ffffffff203dc37 [ 135.829753][ C1] R10: dffffc0000000000 R11: fffffbfff203dc38 R12: dffffc0000000000 [ 135.829765][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff920009fcf00 [ 135.829780][ C1] ? console_trylock_spinning+0x2f9/0x370 [ 135.829800][ C1] ? vprintk_emit+0x150/0x150 [ 135.829814][ C1] ? __kasan_slab_alloc+0xa9/0xc0 [ 135.829831][ C1] ? __kasan_slab_alloc+0x92/0xc0 [ 135.829846][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 135.829861][ C1] ? process_one_work+0x867/0xff0 [ 135.829877][ C1] ? kthread+0x42e/0x520 [ 135.829891][ C1] ? ret_from_fork+0x1f/0x30 [ 135.829912][ C1] vprintk_emit+0xa7/0x150 [ 135.829929][ C1] _printk+0xda/0x130 [ 135.829949][ C1] ? load_image+0x410/0x410 [ 135.829970][ C1] ? prandom_u32+0x217/0x250 [ 135.829993][ C1] should_fail+0x364/0x4b0 [ 135.830012][ C1] should_failslab+0x5/0x20 [ 135.830026][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 135.830042][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 135.830058][ C1] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 135.830074][ C1] ? __alloc_skb+0xf4/0x750 [ 135.830089][ C1] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 135.830107][ C1] __alloc_skb+0x22c/0x750 [ 135.830125][ C1] nsim_dev_trap_report_work+0x25c/0xab0 [ 135.830153][ C1] process_one_work+0x867/0xff0 [ 135.830178][ C1] ? worker_detach_from_pool+0x240/0x240 [ 135.830194][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 135.830212][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 135.830227][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 135.830244][ C1] ? wq_worker_running+0x97/0x170 [ 135.830261][ C1] worker_thread+0xad7/0x12a0 [ 135.830286][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.830309][ C1] kthread+0x42e/0x520 [ 135.830322][ C1] ? rcu_lock_release+0x20/0x20 [ 135.830337][ C1] ? kthread_blkcg+0xd0/0xd0 [ 135.830353][ C1] ret_from_fork+0x1f/0x30 [ 135.830378][ C1] [ 135.834406][ T4381] [ 135.835542][ T1325] CPU: 1 PID: 1325 Comm: kworker/1:3 Not tainted syzkaller #0 [ 135.840858][ T4381] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.847423][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.554244][ T1325] Workqueue: events nsim_dev_trap_report_work [ 136.560337][ T1325] Call Trace: [ 136.563630][ T1325] [ 136.566577][ T1325] dump_stack_lvl+0x188/0x250 [ 136.571279][ T1325] ? show_regs_print_info+0x20/0x20 [ 136.576498][ T1325] ? load_image+0x410/0x410 [ 136.581027][ T1325] ? prandom_u32+0x217/0x250 [ 136.585647][ T1325] should_fail+0x383/0x4b0 [ 136.590079][ T1325] should_failslab+0x5/0x20 [ 136.594591][ T1325] slab_pre_alloc_hook+0x51/0xc0 [ 136.599543][ T1325] __kmalloc_node_track_caller+0x68/0x3a0 [ 136.605278][ T1325] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 136.611100][ T1325] ? __alloc_skb+0xf4/0x750 [ 136.615616][ T1325] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 136.621434][ T1325] __alloc_skb+0x22c/0x750 [ 136.625867][ T1325] nsim_dev_trap_report_work+0x25c/0xab0 [ 136.631531][ T1325] process_one_work+0x867/0xff0 [ 136.636407][ T1325] ? worker_detach_from_pool+0x240/0x240 [ 136.642056][ T1325] ? lockdep_hardirqs_off+0x70/0x100 [ 136.647358][ T1325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 136.652399][ T1325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 136.657959][ T1325] ? wq_worker_running+0x97/0x170 [ 136.662998][ T1325] worker_thread+0xad7/0x12a0 [ 136.667703][ T1325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 136.673618][ T1325] kthread+0x42e/0x520 [ 136.677699][ T1325] ? rcu_lock_release+0x20/0x20 [ 136.682559][ T1325] ? kthread_blkcg+0xd0/0xd0 [ 136.687160][ T1325] ret_from_fork+0x1f/0x30 [ 136.691619][ T1325] [ 136.694653][ T4381] CPU: 0 PID: 4381 Comm: syz-executor Not tainted syzkaller #0 [ 136.702244][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.712329][ T4381] Call Trace: [ 136.715638][ T4381] [ 136.718580][ T4381] dump_stack_lvl+0x188/0x250 [ 136.723281][ T4381] ? show_regs_print_info+0x20/0x20 [ 136.728500][ T4381] ? load_image+0x410/0x410 [ 136.733032][ T4381] panic+0x2f8/0x850 [ 136.736966][ T4381] ? bpf_jit_dump+0xd0/0xd0 [ 136.741502][ T4381] ? kcov_mmap+0x10a/0x120 [ 136.745934][ T4381] __warn+0x248/0x2b0 [ 136.748151][ C1] FAULT_INJECTION: forcing a failure. [ 136.748151][ C1] name failslab, interval 1, probability 1, space 0, times 841 [ 136.749928][ T4381] ? kcov_mmap+0x10a/0x120 [ 136.749954][ T4381] report_bug+0x1b9/0x2e0 [ 136.771476][ T4381] handle_bug+0x3a/0x70 [ 136.775647][ T4381] exc_invalid_op+0x16/0x40 [ 136.780161][ T4381] asm_exc_invalid_op+0x16/0x20 [ 136.785039][ T4381] RIP: 0010:kcov_mmap+0x10a/0x120 [ 136.790081][ T4381] Code: 89 df 48 89 c2 e8 56 7a 34 00 85 c0 74 d0 80 3d 29 39 fe 0b 00 75 c7 c6 05 20 39 fe 0b 01 48 c7 c7 b2 02 c8 8b e8 16 0f 3c 08 <0f> 0b eb b0 31 ed e9 7b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 [ 136.809700][ T4381] RSP: 0018:ffffc9000336fb50 EFLAGS: 00010246 [ 136.815793][ T4381] RAX: c8dc56a0466be500 RBX: ffff88802a21d630 RCX: ffff8880206b3b80 [ 136.823777][ T4381] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 136.831757][ T4381] RBP: 0000000000000000 R08: ffffc9000336f687 R09: 1ffff9200066ded0 [ 136.839740][ T4381] R10: dffffc0000000000 R11: fffff5200066ded1 R12: ffff88805c7d3600 [ 136.847735][ T4381] R13: 0000000000400000 R14: 0000000000000000 R15: ffff88805c7d3608 [ 136.855730][ T4381] mmap_file+0x5d/0xb0 [ 136.859816][ T4381] mmap_region+0x1048/0x1730 [ 136.864438][ T4381] do_mmap+0x801/0xe30 [ 136.868530][ T4381] vm_mmap_pgoff+0x1c1/0x2d0 [ 136.873143][ T4381] ? account_locked_vm+0xe0/0xe0 [ 136.878102][ T4381] ksys_mmap_pgoff+0x4e2/0x790 [ 136.882883][ T4381] ? mmap_region+0x1730/0x1730 [ 136.887669][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 136.892883][ T4381] do_syscall_64+0x4c/0xa0 [ 136.897319][ T4381] ? clear_bhb_loop+0x30/0x80 [ 136.902009][ T4381] ? clear_bhb_loop+0x30/0x80 [ 136.906707][ T4381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.912620][ T4381] RIP: 0033:0x7fc7ba292c02 [ 136.917065][ T4381] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 136.936686][ T4381] RSP: 002b:00007ffcd588b798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 136.945115][ T4381] RAX: ffffffffffffffda RBX: 00007fc7b94f0000 RCX: 00007fc7ba292c02 [ 136.953106][ T4381] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fc7b94f0000 [ 136.961095][ T4381] RBP: 0000000000000011 R08: 00000000000000da R09: 0000000000000000 [ 136.969082][ T4381] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 136.977073][ T4381] R13: 0000000000000003 R14: 00007ffcd588ba08 R15: 0000000000000000 [ 136.985069][ T4381] [ 136.988101][ C1] CPU: 1 PID: 4243 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 136.995675][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.005748][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 137.012007][ C1] Call Trace: [ 137.015302][ C1] [ 137.018158][ C1] dump_stack_lvl+0x188/0x250 [ 137.022875][ C1] ? show_regs_print_info+0x20/0x20 [ 137.028178][ C1] ? load_image+0x410/0x410 [ 137.032699][ C1] ? prandom_u32+0x217/0x250 [ 137.037311][ C1] should_fail+0x383/0x4b0 [ 137.041744][ C1] should_failslab+0x5/0x20 [ 137.046265][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 137.051221][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 137.056432][ C1] ? __alloc_skb+0xf4/0x750 [ 137.060975][ C1] __alloc_skb+0xf4/0x750 [ 137.065327][ C1] skb_copy+0x122/0x6f0 [ 137.069505][ C1] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 137.075605][ C1] ? seqcount_lockdep_reader_access+0xa0/0x1d0 [ 137.081776][ C1] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 137.087709][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 137.093193][ C1] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 137.098772][ C1] __iterate_interfaces+0x225/0x4c0 [ 137.103983][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 137.110243][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 137.116505][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 137.123550][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 137.128772][ C1] ? hw_scan_work+0xef0/0xef0 [ 137.133472][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 137.138709][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 137.143845][ C1] hrtimer_run_softirq+0x176/0x240 [ 137.148985][ C1] handle_softirqs+0x336/0x830 [ 137.153772][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 137.158681][ C1] ? do_softirq+0x210/0x210 [ 137.163203][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 137.168340][ C1] __irq_exit_rcu+0x13b/0x230 [ 137.173036][ C1] ? irq_exit_rcu+0x20/0x20 [ 137.177561][ C1] irq_exit_rcu+0x5/0x20 [ 137.181818][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 137.187474][ C1] [ 137.190417][ C1] [ 137.193362][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.199357][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 137.205548][ C1] Code: 34 6e 89 7e 65 8b 15 35 6e 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 137.225168][ C1] RSP: 0018:ffffc90003dff370 EFLAGS: 00000246 [ 137.231385][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88802b079dc0 [ 137.239375][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 137.247361][ C1] RBP: ffffc90003dff468 R08: 0000000000000003 R09: 0000000000000004 [ 137.255343][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 137.263329][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920007bfe74 [ 137.271315][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 137.276968][ C1] __printk_wait_on_cpu_lock+0x28/0x30 [ 137.282446][ C1] dump_stack_lvl+0x161/0x250 [ 137.287143][ C1] ? show_regs_print_info+0x20/0x20 [ 137.292360][ C1] ? load_image+0x410/0x410 [ 137.296893][ C1] should_fail+0x383/0x4b0 [ 137.301333][ C1] should_failslab+0x5/0x20 [ 137.305851][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 137.310807][ C1] __kmalloc+0x6b/0x340 [ 137.314982][ C1] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 137.321330][ C1] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 137.327516][ C1] ? verify_lock_unused+0x140/0x140 [ 137.332739][ C1] ? cfg80211_parse_mbssid_data+0x3070/0x3070 [ 137.338849][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 137.343934][ C1] ieee80211_bss_info_update+0x6ba/0xa80 [ 137.349595][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 137.354827][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 137.360663][ C1] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 137.366856][ C1] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 137.372596][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 137.378506][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 137.383743][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 137.389662][ C1] ? _raw_spin_unlock+0x40/0x40 [ 137.394547][ C1] ? kcov_remote_start+0x6a/0x490 [ 137.399591][ C1] ? kcov_remote_start+0xfa/0x490 [ 137.404635][ C1] ieee80211_iface_work+0x714/0xc50 [ 137.409853][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 137.415072][ C1] cfg80211_wiphy_work+0x224/0x260 [ 137.420209][ C1] process_one_work+0x867/0xff0 [ 137.425088][ C1] ? worker_detach_from_pool+0x240/0x240 [ 137.430768][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 137.436078][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 137.441127][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 137.446688][ C1] ? wq_worker_running+0x97/0x170 [ 137.451729][ C1] worker_thread+0xad7/0x12a0 [ 137.456449][ C1] kthread+0x42e/0x520 [ 137.460537][ C1] ? rcu_lock_release+0x20/0x20 [ 137.465421][ C1] ? kthread_blkcg+0xd0/0xd0 [ 137.470033][ C1] ret_from_fork+0x1f/0x30 [ 137.474477][ C1] [ 137.477623][ T4381] Kernel Offset: disabled [ 137.482147][ T4381] Rebooting in 86400 seconds..