last executing test programs: 1m19.427871815s ago: executing program 2 (id=76): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3d2, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x23, 0x4, 0x0, 0x29, 0x3c4, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x101}, {@private=0xa010102, 0xfffffffa}, {@multicast2, 0x40}, {@remote, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x95, 0x1, 0x7}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x4, 0xa8, 0x3, 0xc}, @timestamp={0x44, 0x8, 0x28, 0x0, 0xb, [0x2]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0x7, [0x3, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x6, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x1}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa6, 0x3, [], "461a09e2cfaf0ba4f955000cb5b1d55da61f3a876848a03f4b6b44770eca0fec0dae8364f994307fe74bdfc0c2ecfa7794a6de9d26b9c14a53247da8ae79853f6bc2eaca792469e81d718bfdc6e1c6d49cc83d87ddad409cd03e082f97908625b0748a6576f95d3580ec864cd13f22515f396e1a83fd4bfd2cd2297f47c759090d6fa41e9572d5ec11a943ecda1b8ba52bff69d667a4fa6fa7f6bf026d891eaa8ea66e2d7a50"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xc], "bfdf3d15e9e924d64c3ca93407368c3690e96f344993dd1a270e97e4787e777a041ad9f0e280221f3b16f4eefd1404834f519137c8329f185dcfb24b9657dfee75674f5f84241322e700a5d3e925fa01d4ea894a4062c4fe797e2743ef953c85caa519d88703a4c1804a07fcc19fd44f00a8931f57794ed2a10c7f0b4834a8793952c174248d91a4e8191faa1ab7cb34df3147747951d0f7b1f77f768c8d94712025d5303de0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xb], "d50f98d46259b38048d42e6cd1c0af174e28241a2a2b770e5ecb574fe10072c5a39458e8fa6e0611c6585eb81a67f1c92bd57f3fefd3085467ccac3ccfa980e23a0af5ffa2ce27cbc32a332c77d199138b2a004f81a86e85c4205e8dcc33be42c7dd6f98297cffc3caf4a37b901ef7f28cea74aee33b12ddc343c2e740c56b39d14d0bd764f21f65d0ea691acd48b98954d6f09f211cb871271541b91b99c4228317420394dcace9075150919be05328742a4a7e101c"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x4, 0x3, 0x1, 0x3, 0x4, 0xf}, 0x1, {0xc34}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x8, 0x0, 0x1, 0x3, 0x7, 0x81}, 0x2, {0xfffffffc, 0x1, 0x1, 0x8, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x1, "635e6eca6029e1bcbb30cdb3792c475fdb3c424ec076305949fb195a52830a5df14c8c1a36f54a9e7576aa1ce36814c428e6d52a6fef122287ddf96015091e3c8aaa40571495a7417164927825218418d2bf7072478eb6c08d27f69f3ebf14756e5961a52f4bcdf0ac833356ccab201ebcea44ce7fd0c80ba0fa2c1857aa6c9e4c324a2e1236cda878e833e44f54cf5c200c86790bddd5b703043e271e23de9f0cc114178e3df8a8703c7caf4646511d126929d6b5c4beb751908a06638aab5b07e28ac88d34ea1c521213f7e087b300eaca5205069cfff788f6a0a29f4f9bb5512358fbc1ba61ad9e2785cc"}}}}}}, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="9a", 0x1) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd, 0x0, 0x7}}}}}}, 0x0) 1m19.385391891s ago: executing program 4 (id=77): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x20) read$FUSE(r3, &(0x7f0000005440)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x1d) 1m19.087980349s ago: executing program 2 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='* ./export_dir \\000000000 8194 0 0 0\n', 0x25) 1m18.63749102s ago: executing program 4 (id=82): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="62f5ff6ccf3d2ec97f0e4bc8a900d2bd65ddd28d9c642869255bb3d50995a0f8ee0244972a44172334670879c539e6d89b62e92a4f10a4de102e99846b5a9519a6ea42983dcd33895c147569e2e993", 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000180), 0x1000) 1m18.636891007s ago: executing program 2 (id=83): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m18.041622835s ago: executing program 4 (id=86): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00002da000/0x1000)=nil, &(0x7f0000081000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000076e000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m17.840778624s ago: executing program 3 (id=88): creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/60, 0x3c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m17.501972076s ago: executing program 2 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x24000408) inotify_rm_watch(r5, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 1m17.366000894s ago: executing program 3 (id=91): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xa4, 0x0, 0x4000}}, @TCA_TBF_BURST={0x8, 0x6, 0x12}]}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x2, 0x5, 0x6ccf, 0x6}, {0x1, 0x2, 0xfffc, 0xa535, 0x8, 0x228}, 0x6, 0x6, 0x6a1}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xdcebd51a7f62bc27}]}}]}, 0x6c}}, 0x0) 1m16.8377096s ago: executing program 3 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000080) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1m16.829605783s ago: executing program 1 (id=94): r0 = socket(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m16.75439178s ago: executing program 1 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x10, 0x0, 0x0}) 1m16.605569574s ago: executing program 4 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r5, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000b00)='\n\x00', 0x1) close(r6) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 1m16.560176427s ago: executing program 1 (id=97): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000035c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @remote}, 0x246, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x5, 0x8, 0xd1dd}) 1m15.273907123s ago: executing program 4 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 1m13.363705153s ago: executing program 2 (id=99): r0 = socket(0x10, 0x803, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0x6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1m10.137713511s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='Conf 1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 1m10.0180327s ago: executing program 1 (id=101): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1m9.612548419s ago: executing program 3 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x224e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcb}}}}}}, 0x0) 1m8.921537305s ago: executing program 3 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m8.787368791s ago: executing program 4 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 1m8.716111213s ago: executing program 2 (id=107): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000240)='100', 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 1m8.346735107s ago: executing program 3 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd651", 0x9}, {&(0x7f0000000340)="5a28ad33f107f6176a", 0x9}], 0x2) 1m7.499120382s ago: executing program 1 (id=109): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @local, 0x2}, 0x1c) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004081) 52.20192642s ago: executing program 32 (id=107): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000240)='100', 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 50.852741727s ago: executing program 33 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 50.700977369s ago: executing program 34 (id=109): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @local, 0x2}, 0x1c) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24004081) 49.397619043s ago: executing program 35 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd651", 0x9}, {&(0x7f0000000340)="5a28ad33f107f6176a", 0x9}], 0x2) 6.269005503s ago: executing program 5 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.801120238s ago: executing program 0 (id=181): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x6}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 4.608780684s ago: executing program 5 (id=182): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='wchan\x00') 4.136175086s ago: executing program 5 (id=183): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x1, 0x4, 0x1}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) 4.12898937s ago: executing program 0 (id=184): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0xffffffff, 0x4) 3.49865532s ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file3\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./reg_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./fifo_file\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./fifo_file\x00', 0x802, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, 0x0, [{{r1}}]}) 2.844274053s ago: executing program 0 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.417803241s ago: executing program 5 (id=187): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.708719789s ago: executing program 0 (id=188): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) listen(r1, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) listen(0xffffffffffffffff, 0x7d4165c9) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 393.304504ms ago: executing program 6 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1-1\x00', 0x8) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='add 3-1\x00', 0x8) write(r0, &(0x7f0000000200)='add 4-1\x00', 0x8) write(r0, &(0x7f0000000240)='add 5-1\x00', 0x8) write(r0, &(0x7f0000000280)='add 6-1\x00', 0x8) write(r0, &(0x7f00000002c0)='add 7-1\x00', 0x8) write(r0, &(0x7f0000000300)='add 8-1\x00', 0x8) write(r0, &(0x7f0000000340)='add 1-2\x00', 0x8) write(r0, &(0x7f0000000380)='add 2-2\x00', 0x8) write(r0, &(0x7f00000003c0)='add 3-2\x00', 0x8) write(r0, &(0x7f0000000400)='add 4-2\x00', 0x8) write(r0, &(0x7f0000000440)='add 5-2\x00', 0x8) write(r0, &(0x7f0000000480)='add 6-2\x00', 0x8) write(r0, &(0x7f00000004c0)='add 7-2\x00', 0x8) write(r0, &(0x7f0000000500)='add 8-2\x00', 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000029be0008110700096ffa010203010902240001000000000904970002ffffff000905041020000637460905de24"], 0x0) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 319.109668ms ago: executing program 0 (id=189): close(0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 0s ago: executing program 7 (id=114): mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) kernel console output (not intermixed with test programs): ] ? __alloc_skb+0x1d7/0x7a0 [ 176.212300][ T13] __alloc_skb+0x1d7/0x7a0 [ 176.212376][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 176.212450][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 176.212526][ T13] process_scheduled_works+0xa8e/0x14e0 [ 176.212676][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.212876][ T13] ? assign_work+0x3cf/0x5d0 [ 176.213060][ T13] worker_thread+0xa47/0xfb0 [ 176.213232][ T13] kthread+0x388/0x470 [ 176.213327][ T13] ? __pfx_worker_thread+0x10/0x10 [ 176.213401][ T13] ? __pfx_kthread+0x10/0x10 [ 176.213497][ T13] ret_from_fork+0x514/0xb70 [ 176.213611][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 176.213711][ T13] ? __switch_to+0xc89/0x1420 [ 176.213805][ T13] ? __pfx_kthread+0x10/0x10 [ 176.213900][ T13] ret_from_fork_asm+0x1a/0x30 [ 176.214018][ T13] [ 176.218210][ T6147] syz.4.105: vmalloc error: size 9096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 176.420560][ T127] FAULT_INJECTION: forcing a failure. [ 176.420560][ T127] name failslab, interval 1, probability 1, space 0, times 61 [ 176.421135][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.421196][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.421232][ T127] Workqueue: events_unbound cfg80211_wiphy_work [ 176.421358][ T127] Call Trace: [ 176.421381][ T127] [ 176.421410][ T127] dump_stack_lvl+0xe8/0x150 [ 176.421514][ T127] should_fail_ex+0x467/0x600 [ 176.421621][ T127] should_failslab+0xa8/0x100 [ 176.421729][ T127] __kmalloc_noprof+0xfe/0x780 [ 176.421801][ T127] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 176.421888][ T127] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 176.421993][ T127] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 176.422065][ T127] ? unwind_next_frame+0x8f/0x2550 [ 176.422108][ T127] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 176.422272][ T127] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 176.422366][ T127] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 176.422464][ T127] cfg80211_inform_bss_data+0x25b/0x3d50 [ 176.422629][ T127] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 176.422854][ T127] ? __lock_acquire+0x683/0x2ce0 [ 176.422968][ T127] ? cfg80211_defragment_element+0x3e/0x360 [ 176.423062][ T127] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.423150][ T127] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 176.423247][ T127] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.423337][ T127] ieee80211_bss_info_update+0x791/0xa50 [ 176.423426][ T127] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 176.423492][ T127] ? sta_info_get+0x4f/0x300 [ 176.423599][ T127] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 176.423694][ T127] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 176.423811][ T127] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 176.423894][ T127] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 176.423989][ T127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.424056][ T127] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.424127][ T127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.424341][ T127] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 176.424438][ T127] ? reacquire_held_locks+0x104/0x190 [ 176.424535][ T127] ? rt_spin_unlock+0x163/0x200 [ 176.424576][ T127] ieee80211_iface_work+0x78a/0x1010 [ 176.425021][ T127] cfg80211_wiphy_work+0x29e/0x420 [ 176.425391][ T127] ? process_scheduled_works+0xa20/0x14e0 [ 176.425467][ T127] process_scheduled_works+0xa8e/0x14e0 [ 176.425655][ T127] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.425762][ T127] ? assign_work+0x3cf/0x5d0 [ 176.425855][ T127] worker_thread+0xa47/0xfb0 [ 176.426093][ T127] ? __kthread_parkme+0x71/0x1f0 [ 176.426180][ T127] kthread+0x388/0x470 [ 176.426238][ T127] ? __pfx_worker_thread+0x10/0x10 [ 176.426305][ T127] ? __pfx_kthread+0x10/0x10 [ 176.426408][ T127] ret_from_fork+0x514/0xb70 [ 176.426506][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 176.426601][ T127] ? __switch_to+0xc89/0x1420 [ 176.426724][ T127] ? __pfx_kthread+0x10/0x10 [ 176.426820][ T127] ret_from_fork_asm+0x1a/0x30 [ 176.426928][ T127] [ 176.934310][ C0] FAULT_INJECTION: forcing a failure. [ 176.934310][ C0] name failslab, interval 1, probability 1, space 0, times 54 [ 176.934353][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.934376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.934391][ C0] Call Trace: [ 176.934399][ C0] [ 176.934410][ C0] dump_stack_lvl+0xe8/0x150 [ 176.934453][ C0] should_fail_ex+0x467/0x600 [ 176.934498][ C0] should_failslab+0xa8/0x100 [ 176.934534][ C0] __kmalloc_noprof+0xfe/0x780 [ 176.934558][ C0] ? kthread+0x388/0x470 [ 176.934584][ C0] ? ret_from_fork+0x514/0xb70 [ 176.934612][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 176.934628][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.934655][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.934687][ C0] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.934722][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.934748][ C0] ? kvfree_call_rcu+0xd4/0x3c0 [ 176.934772][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.934816][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 176.934845][ C0] ? cfg80211_update_known_bss+0xa51/0x1430 [ 176.934881][ C0] ieee80211_inform_bss+0x163/0x10d0 [ 176.934909][ C0] ? __cfg80211_bss_update+0x125c/0x2010 [ 176.934936][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 176.934956][ C0] ? rt_spin_lock+0x20e/0x400 [ 176.934993][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 176.935019][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 176.935042][ C0] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 176.935069][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 176.935118][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 176.935162][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.935195][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 176.935224][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 176.935280][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 176.935306][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 176.935335][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 176.935372][ C0] ? unwind_next_frame+0x8f/0x2550 [ 176.935422][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 176.935449][ C0] ? __lock_acquire+0x683/0x2ce0 [ 176.935494][ C0] ? __lock_acquire+0x683/0x2ce0 [ 176.935526][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.935559][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 176.935601][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.935634][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 176.935670][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 176.935715][ C0] ? rt_spin_unlock+0x157/0x200 [ 176.935750][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 176.935782][ C0] ieee80211_scan_rx+0x552/0xa40 [ 176.935822][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 176.935881][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 176.935910][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.935961][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 176.935990][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 176.936024][ C0] ? reacquire_held_locks+0x104/0x190 [ 176.936056][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 176.936083][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 176.936132][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 176.936170][ C0] ? rt_spin_unlock+0x163/0x200 [ 176.936211][ C0] ? skb_dequeue+0x11a/0x150 [ 176.936247][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 176.936280][ C0] tasklet_action_common+0x31c/0x600 [ 176.936320][ C0] handle_softirqs+0x1d9/0x6c0 [ 176.936359][ C0] run_ktimerd+0x69/0x100 [ 176.936390][ C0] smpboot_thread_fn+0x57c/0xa80 [ 176.936426][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 176.936468][ C0] kthread+0x388/0x470 [ 176.936504][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.936535][ C0] ? __pfx_kthread+0x10/0x10 [ 176.936574][ C0] ret_from_fork+0x514/0xb70 [ 176.936615][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 176.936651][ C0] ? __switch_to+0xc89/0x1420 [ 176.936689][ C0] ? __pfx_kthread+0x10/0x10 [ 176.936727][ C0] ret_from_fork_asm+0x1a/0x30 [ 176.936772][ C0] [ 176.962154][ T127] FAULT_INJECTION: forcing a failure. [ 176.962154][ T127] name failslab, interval 1, probability 1, space 0, times 51 [ 176.962194][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.962276][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.962325][ T127] Workqueue: events_unbound cfg80211_wiphy_work [ 176.962423][ T127] Call Trace: [ 176.962445][ T127] [ 176.962474][ T127] dump_stack_lvl+0xe8/0x150 [ 176.962569][ T127] should_fail_ex+0x467/0x600 [ 176.962680][ T127] should_failslab+0xa8/0x100 [ 176.962759][ T127] __kmalloc_noprof+0xfe/0x780 [ 176.962832][ T127] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.962917][ T127] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.963016][ T127] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 176.963137][ T127] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.963230][ T127] ? kvfree_call_rcu+0xd4/0x3c0 [ 176.963303][ T127] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.963474][ T127] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 176.963581][ T127] ? cfg80211_update_known_bss+0xa51/0x1430 [ 176.963805][ T127] ieee80211_inform_bss+0x163/0x10d0 [ 176.963913][ T127] ? __cfg80211_bss_update+0x125c/0x2010 [ 176.963996][ T127] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 176.964078][ T127] ? rt_spin_lock+0x20e/0x400 [ 176.964209][ T127] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 176.964295][ T127] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 176.964427][ T127] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 176.964535][ T127] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 176.964642][ T127] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 176.964749][ T127] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 176.964849][ T127] cfg80211_inform_bss_data+0x25b/0x3d50 [ 176.965035][ T127] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 176.965257][ T127] ? __lock_acquire+0x683/0x2ce0 [ 176.965340][ T127] ? cfg80211_defragment_element+0x3e/0x360 [ 176.965441][ T127] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.965541][ T127] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 176.965689][ T127] ? ieee80211_bss_info_update+0x30f/0xa50 [ 176.965776][ T127] ieee80211_bss_info_update+0x791/0xa50 [ 176.965870][ T127] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 176.965944][ T127] ? sta_info_get+0x4f/0x300 [ 176.966084][ T127] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 176.966174][ T127] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 176.966311][ T127] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 176.966394][ T127] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 176.966489][ T127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.966563][ T127] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.966640][ T127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.966713][ T127] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 176.966819][ T127] ? reacquire_held_locks+0x104/0x190 [ 176.966937][ T127] ? rt_spin_unlock+0x163/0x200 [ 176.967054][ T127] ieee80211_iface_work+0x78a/0x1010 [ 176.967162][ T127] cfg80211_wiphy_work+0x29e/0x420 [ 176.967275][ T127] ? process_scheduled_works+0xa20/0x14e0 [ 176.967359][ T127] process_scheduled_works+0xa8e/0x14e0 [ 176.967551][ T127] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.967633][ T127] ? assign_work+0x3cf/0x5d0 [ 176.967728][ T127] worker_thread+0xa47/0xfb0 [ 176.967848][ T127] ? __kthread_parkme+0x71/0x1f0 [ 176.967957][ T127] kthread+0x388/0x470 [ 176.968046][ T127] ? __pfx_worker_thread+0x10/0x10 [ 176.968118][ T127] ? __pfx_kthread+0x10/0x10 [ 176.968214][ T127] ret_from_fork+0x514/0xb70 [ 176.968349][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 176.968445][ T127] ? __switch_to+0xc89/0x1420 [ 176.968531][ T127] ? __pfx_kthread+0x10/0x10 [ 176.968625][ T127] ret_from_fork_asm+0x1a/0x30 [ 176.968733][ T127] [ 177.100307][ T127] FAULT_INJECTION: forcing a failure. [ 177.100307][ T127] name failslab, interval 1, probability 1, space 0, times 49 [ 177.100418][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.100489][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.100531][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 177.100623][ T127] Call Trace: [ 177.100645][ T127] [ 177.100668][ T127] dump_stack_lvl+0xe8/0x150 [ 177.100764][ T127] should_fail_ex+0x467/0x600 [ 177.100879][ T127] should_failslab+0xa8/0x100 [ 177.100958][ T127] kmem_cache_alloc_node_noprof+0xae/0x670 [ 177.100984][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 177.101006][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 177.101107][ T127] __alloc_skb+0x1d7/0x7a0 [ 177.101169][ T127] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 177.101297][ T127] ? process_scheduled_works+0xa20/0x14e0 [ 177.101379][ T127] process_scheduled_works+0xa8e/0x14e0 [ 177.101531][ T127] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.101631][ T127] ? assign_work+0x3cf/0x5d0 [ 177.101718][ T127] worker_thread+0xa47/0xfb0 [ 177.101836][ T127] ? __kthread_parkme+0x71/0x1f0 [ 177.101944][ T127] kthread+0x388/0x470 [ 177.102030][ T127] ? __pfx_worker_thread+0x10/0x10 [ 177.102104][ T127] ? __pfx_kthread+0x10/0x10 [ 177.102193][ T127] ret_from_fork+0x514/0xb70 [ 177.102295][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 177.102383][ T127] ? __switch_to+0xc89/0x1420 [ 177.102449][ T127] ? __pfx_kthread+0x10/0x10 [ 177.102494][ T127] ret_from_fork_asm+0x1a/0x30 [ 177.102614][ T127] [ 177.122469][ T4950] FAULT_INJECTION: forcing a failure. [ 177.122469][ T4950] name failslab, interval 1, probability 1, space 0, times 49 [ 177.122571][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.122706][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.122754][ T4950] Call Trace: [ 177.122790][ T4950] [ 177.122826][ T4950] dump_stack_lvl+0xe8/0x150 [ 177.122942][ T4950] should_fail_ex+0x467/0x600 [ 177.123053][ T4950] should_failslab+0xa8/0x100 [ 177.123179][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 177.123253][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 177.123317][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 177.123394][ T4950] __alloc_skb+0x1d7/0x7a0 [ 177.123467][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 177.123533][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 177.123630][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 177.123759][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.123855][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 177.123961][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 177.124071][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 177.124201][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 177.124348][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 177.124434][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 177.124517][ T4950] __sys_sendto+0x41e/0x5d0 [ 177.124538][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 177.124575][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 177.124617][ T4950] ? kvm_sched_clock_read+0x11/0x20 [ 177.124654][ T4950] ? rcu_is_watching+0x15/0xb0 [ 177.124687][ T4950] __x64_sys_sendto+0xde/0x100 [ 177.124729][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.124795][ T4950] do_syscall_64+0x174/0x580 [ 177.124869][ T4950] ? clear_bhb_loop+0x40/0x90 [ 177.124942][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.125005][ T4950] RIP: 0033:0x7f79ba9fa407 [ 177.125060][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 177.125108][ T4950] RSP: 002b:00007ffd8a737c20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 177.125171][ T4950] RAX: ffffffffffffffda RBX: 00007f79ba8aac80 RCX: 00007f79ba9fa407 [ 177.125213][ T4950] RDX: 000000000000004c RSI: 00007ffd8a737d60 RDI: 0000000000000003 [ 177.125246][ T4950] RBP: 00007ffd8a738190 R08: 0000000000000000 R09: 0000000000000000 [ 177.125280][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd8a7381a8 [ 177.125321][ T4950] R13: 00007ffd8a737d60 R14: 0000000000000031 R15: 00007ffd8a737d60 [ 177.125399][ T4950] [ 177.131578][ T6147] /,mems_allowed=0-1 [ 177.210395][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.4.105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.210497][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.210531][ T6147] Call Trace: [ 177.210561][ T6147] [ 177.210585][ T6147] dump_stack_lvl+0xe8/0x150 [ 177.210718][ T6147] warn_alloc+0x24c/0x270 [ 177.210801][ T6147] ? __pfx_warn_alloc+0x10/0x10 [ 177.210896][ T6147] ? __get_vm_area_node+0x2af/0x300 [ 177.211012][ T6147] __vmalloc_node_range_noprof+0x37d/0x1730 [ 177.211087][ T6147] ? tty_ldisc_lock+0x6c/0xc0 [ 177.211227][ T6147] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.211347][ T6147] ? __ldsem_down_write_nested+0xf8/0x740 [ 177.211420][ T6147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.211486][ T6147] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 177.211551][ T6147] ? rt_spin_unlock+0x157/0x200 [ 177.211666][ T6147] ? n_tty_open+0x1d/0x150 [ 177.211760][ T6147] vzalloc_noprof+0xb2/0xe0 [ 177.211822][ T6147] ? n_tty_open+0x1d/0x150 [ 177.211919][ T6147] n_tty_open+0x1d/0x150 [ 177.212021][ T6147] tty_ldisc_setup+0xcc/0x270 [ 177.212094][ T6147] tty_init_dev+0x279/0x4d0 [ 177.212122][ T6147] tty_open+0x7e5/0xcd0 [ 177.212200][ T6147] ? __pfx_tty_open+0x10/0x10 [ 177.212286][ T6147] ? rt_spin_unlock+0x157/0x200 [ 177.212392][ T6147] ? rt_spin_unlock+0x163/0x200 [ 177.212496][ T6147] chrdev_open+0x4dc/0x600 [ 177.212622][ T6147] ? __pfx_chrdev_open+0x10/0x10 [ 177.212722][ T6147] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 177.212818][ T6147] ? __pfx_chrdev_open+0x10/0x10 [ 177.212895][ T6147] do_dentry_open+0x849/0x1420 [ 177.213017][ T6147] vfs_open+0x3b/0x350 [ 177.213078][ T6147] ? path_openat+0x2e49/0x3850 [ 177.213159][ T6147] path_openat+0x2e60/0x3850 [ 177.213258][ T6147] ? kmem_cache_alloc_noprof+0x355/0x650 [ 177.213322][ T6147] ? __x64_sys_openat+0x138/0x170 [ 177.213383][ T6147] ? do_syscall_64+0x174/0x580 [ 177.213456][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.213573][ T6147] do_file_open+0x23e/0x4a0 [ 177.213650][ T6147] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.213735][ T6147] ? __pfx_do_file_open+0x10/0x10 [ 177.213881][ T6147] ? alloc_fd+0x654/0x6d0 [ 177.213981][ T6147] do_sys_openat2+0x115/0x200 [ 177.214060][ T6147] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.214127][ T6147] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.214205][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.214288][ T6147] __x64_sys_openat+0x138/0x170 [ 177.214362][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.214427][ T6147] do_syscall_64+0x174/0x580 [ 177.214501][ T6147] ? trace_irq_disable+0x3b/0x140 [ 177.214530][ T6147] ? clear_bhb_loop+0x40/0x90 [ 177.214566][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.214613][ T6147] RIP: 0033:0x7f61dbbbe7ce [ 177.214634][ T6147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.214652][ T6147] RSP: 002b:00007f61d9e55b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.214682][ T6147] RAX: ffffffffffffffda RBX: 00007f61d9e566c0 RCX: 00007f61dbbbe7ce [ 177.214698][ T6147] RDX: 0000000000000002 RSI: 00007f61d9e55c00 RDI: ffffffffffffff9c [ 177.214713][ T6147] RBP: 00007f61dbc94ec4 R08: 0000000000000000 R09: 0000000000000000 [ 177.214733][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.214770][ T6147] R13: 00007f61dbe86038 R14: 00007f61dbe85fa0 R15: 00007ffcb5e0d138 [ 177.214872][ T6147] [ 177.242402][ T6147] Mem-Info: [ 177.242453][ T6147] active_anon:357 inactive_anon:5801 isolated_anon:0 [ 177.242453][ T6147] active_file:5329 inactive_file:38002 isolated_file:0 [ 177.242453][ T6147] unevictable:768 dirty:200 writeback:49 [ 177.242453][ T6147] slab_reclaimable:11222 slab_unreclaimable:102075 [ 177.242453][ T6147] mapped:29860 shmem:1471 pagetables:1136 [ 177.242453][ T6147] sec_pagetables:0 bounce:0 [ 177.242453][ T6147] kernel_misc_reclaimable:0 [ 177.242453][ T6147] free:1330949 free_pcp:3734 free_cma:0 [ 177.242648][ T6147] Node 0 active_anon:1428kB inactive_anon:23204kB active_file:21132kB inactive_file:152008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119440kB dirty:800kB writeback:196kB shmem:4348kB kernel_stack:12732kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 177.242798][ T6147] Node 1 active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 177.242943][ T6147] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.243101][ T6147] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 177.243216][ T6147] Node 0 DMA32 free:1370040kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1428kB inactive_anon:23204kB active_file:21132kB inactive_file:152008kB unevictable:1536kB writepending:996kB zspages:0kB present:3129332kB managed:2560588kB mlocked:0kB bounce:0kB free_pcp:14928kB local_pcp:7848kB free_cma:0kB [ 177.243672][ T6147] lowmem_reserve[]: 0 0 1 1 1 [ 177.243802][ T6147] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 177.258522][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 177.258678][ T6147] Node 1 Normal free:3938396kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.258899][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 177.258997][ T6147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.259421][ T6147] Node 0 DMA32: [ 177.355686][ C0] FAULT_INJECTION: forcing a failure. [ 177.355686][ C0] name failslab, interval 1, probability 1, space 0, times 45 [ 177.355729][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.355755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.355773][ C0] Call Trace: [ 177.355782][ C0] [ 177.355791][ C0] dump_stack_lvl+0xe8/0x150 [ 177.355833][ C0] should_fail_ex+0x467/0x600 [ 177.355875][ C0] should_failslab+0xa8/0x100 [ 177.355904][ C0] __kmalloc_cache_noprof+0xa0/0x6b0 [ 177.355929][ C0] ? dst_cow_metrics_generic+0x56/0x1c0 [ 177.355960][ C0] ? dst_cow_metrics_generic+0x56/0x1c0 [ 177.356001][ C0] dst_cow_metrics_generic+0x56/0x1c0 [ 177.356037][ C0] icmp6_dst_alloc+0x265/0x450 [ 177.356059][ C0] ? icmpv6_flow_init+0x62/0x120 [ 177.356096][ C0] ndisc_send_skb+0x42f/0x1650 [ 177.356134][ C0] ? ndisc_send_skb+0x203/0x1650 [ 177.356174][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 177.356207][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 177.356272][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 177.356301][ C0] ? call_timer_fn+0xd4/0x5e0 [ 177.356337][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 177.356367][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 177.356412][ C0] call_timer_fn+0x192/0x5e0 [ 177.356441][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 177.356468][ C0] ? call_timer_fn+0xd4/0x5e0 [ 177.356496][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 177.356537][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.356567][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 177.356605][ C0] __run_timer_base+0x67b/0x9b0 [ 177.356650][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 177.356683][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 177.356716][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 177.356752][ C0] run_timer_softirq+0xb7/0x170 [ 177.356780][ C0] handle_softirqs+0x1d9/0x6c0 [ 177.356822][ C0] run_ktimerd+0x69/0x100 [ 177.356855][ C0] smpboot_thread_fn+0x57c/0xa80 [ 177.356892][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 177.356934][ C0] kthread+0x388/0x470 [ 177.356971][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 177.357002][ C0] ? __pfx_kthread+0x10/0x10 [ 177.357040][ C0] ret_from_fork+0x514/0xb70 [ 177.357082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 177.357119][ C0] ? __switch_to+0xc89/0x1420 [ 177.357156][ C0] ? __pfx_kthread+0x10/0x10 [ 177.357194][ C0] ret_from_fork_asm+0x1a/0x30 [ 177.357237][ C0] [ 177.461201][ T1177] FAULT_INJECTION: forcing a failure. [ 177.461201][ T1177] name failslab, interval 1, probability 1, space 0, times 43 [ 177.461301][ T1177] CPU: 1 UID: 0 PID: 1177 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.461366][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.461407][ T1177] Workqueue: events_unbound nsim_dev_trap_report_work [ 177.461512][ T1177] Call Trace: [ 177.461534][ T1177] [ 177.461564][ T1177] dump_stack_lvl+0xe8/0x150 [ 177.461615][ T1177] should_fail_ex+0x467/0x600 [ 177.461739][ T1177] should_failslab+0xa8/0x100 [ 177.461817][ T1177] kmem_cache_alloc_node_noprof+0xae/0x670 [ 177.461855][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 177.461878][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 177.461944][ T1177] __alloc_skb+0x1d7/0x7a0 [ 177.462028][ T1177] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 177.462345][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 177.462439][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 177.462652][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.462758][ T1177] ? assign_work+0x3cf/0x5d0 [ 177.462839][ T1177] worker_thread+0xa47/0xfb0 [ 177.463119][ T1177] ? __kthread_parkme+0x71/0x1f0 [ 177.463258][ T1177] kthread+0x388/0x470 [ 177.463345][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 177.463372][ T1177] ? __pfx_kthread+0x10/0x10 [ 177.463450][ T1177] ret_from_fork+0x514/0xb70 [ 177.463505][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 177.463587][ T1177] ? __switch_to+0xc89/0x1420 [ 177.463673][ T1177] ? __pfx_kthread+0x10/0x10 [ 177.463801][ T1177] ret_from_fork_asm+0x1a/0x30 [ 177.463927][ T1177] [ 177.596591][ T13] FAULT_INJECTION: forcing a failure. [ 177.596591][ T13] name failslab, interval 1, probability 1, space 0, times 41 [ 177.596697][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.596764][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.596804][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 177.596911][ T13] Call Trace: [ 177.596933][ T13] [ 177.596962][ T13] dump_stack_lvl+0xe8/0x150 [ 177.597085][ T13] should_fail_ex+0x467/0x600 [ 177.597219][ T13] should_failslab+0xa8/0x100 [ 177.597303][ T13] __kmalloc_noprof+0xfe/0x780 [ 177.597369][ T13] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 177.597455][ T13] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 177.597573][ T13] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 177.597696][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 177.597781][ T13] ? kvfree_call_rcu+0xd4/0x3c0 [ 177.597873][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 177.598005][ T13] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 177.598108][ T13] ? cfg80211_update_known_bss+0xa51/0x1430 [ 177.598226][ T13] ieee80211_inform_bss+0x163/0x10d0 [ 177.598314][ T13] ? __cfg80211_bss_update+0x125c/0x2010 [ 177.598408][ T13] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 177.598487][ T13] ? rt_spin_lock+0x20e/0x400 [ 177.598608][ T13] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 177.598686][ T13] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 177.598780][ T13] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 177.598886][ T13] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 177.599065][ T13] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 177.599137][ T13] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 177.599173][ T13] cfg80211_inform_bss_data+0x25b/0x3d50 [ 177.599328][ T13] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 177.599524][ T13] ? __lock_acquire+0x683/0x2ce0 [ 177.599622][ T13] ? cfg80211_defragment_element+0x3e/0x360 [ 177.599731][ T13] ? ieee80211_bss_info_update+0x30f/0xa50 [ 177.599809][ T13] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 177.599916][ T13] ? ieee80211_bss_info_update+0x30f/0xa50 [ 177.600008][ T13] ieee80211_bss_info_update+0x791/0xa50 [ 177.600106][ T13] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 177.600179][ T13] ? sta_info_get+0x4f/0x300 [ 177.600287][ T13] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 177.600383][ T13] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 177.600510][ T13] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 177.600585][ T13] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 177.600621][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.600648][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.600674][ T13] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.600730][ T13] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 177.600864][ T13] ? reacquire_held_locks+0x104/0x190 [ 177.600996][ T13] ? rt_spin_unlock+0x163/0x200 [ 177.601178][ T13] ieee80211_iface_work+0x78a/0x1010 [ 177.601293][ T13] cfg80211_wiphy_work+0x29e/0x420 [ 177.601392][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 177.601466][ T13] process_scheduled_works+0xa8e/0x14e0 [ 177.601623][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.601717][ T13] ? assign_work+0x3cf/0x5d0 [ 177.601801][ T13] worker_thread+0xa47/0xfb0 [ 177.601961][ T13] kthread+0x388/0x470 [ 177.602048][ T13] ? __pfx_worker_thread+0x10/0x10 [ 177.602112][ T13] ? __pfx_kthread+0x10/0x10 [ 177.602170][ T13] ret_from_fork+0x514/0xb70 [ 177.602296][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 177.602410][ T13] ? __switch_to+0xc89/0x1420 [ 177.602498][ T13] ? __pfx_kthread+0x10/0x10 [ 177.602598][ T13] ret_from_fork_asm+0x1a/0x30 [ 177.602705][ T13] [ 178.493321][ T56] FAULT_INJECTION: forcing a failure. [ 178.493321][ T56] name failslab, interval 1, probability 1, space 0, times 35 [ 178.493566][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.493682][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.493721][ T56] Workqueue: events_unbound cfg80211_wiphy_work [ 178.493853][ T56] Call Trace: [ 178.493863][ T56] [ 178.493873][ T56] dump_stack_lvl+0xe8/0x150 [ 178.493912][ T56] should_fail_ex+0x467/0x600 [ 178.494019][ T56] should_failslab+0xa8/0x100 [ 178.494096][ T56] __kmalloc_noprof+0xfe/0x780 [ 178.494200][ T56] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 178.494296][ T56] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 178.494485][ T56] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 178.494551][ T56] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.494719][ T56] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 178.494833][ T56] ? __lock_acquire+0x683/0x2ce0 [ 178.494931][ T56] ieee80211_ibss_rx_queued_mgmt+0x509/0x2c40 [ 178.495023][ T56] ? __lock_acquire+0x683/0x2ce0 [ 178.495120][ T56] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.495217][ T56] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 178.495322][ T56] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.495396][ T56] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.495472][ T56] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.495526][ T56] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 178.495660][ T56] ? reacquire_held_locks+0x104/0x190 [ 178.495780][ T56] ? rt_spin_unlock+0x163/0x200 [ 178.495895][ T56] ieee80211_iface_work+0x78a/0x1010 [ 178.496053][ T56] cfg80211_wiphy_work+0x29e/0x420 [ 178.496189][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 178.496264][ T56] process_scheduled_works+0xa8e/0x14e0 [ 178.496484][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.496593][ T56] ? assign_work+0x3cf/0x5d0 [ 178.496679][ T56] worker_thread+0xa47/0xfb0 [ 178.496796][ T56] ? __kthread_parkme+0x71/0x1f0 [ 178.496906][ T56] kthread+0x388/0x470 [ 178.497001][ T56] ? __pfx_worker_thread+0x10/0x10 [ 178.497062][ T56] ? __pfx_kthread+0x10/0x10 [ 178.497155][ T56] ret_from_fork+0x514/0xb70 [ 178.497259][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 178.497352][ T56] ? __switch_to+0xc89/0x1420 [ 178.497440][ T56] ? __pfx_kthread+0x10/0x10 [ 178.497543][ T56] ret_from_fork_asm+0x1a/0x30 [ 178.497690][ T56] [ 178.672730][ C0] FAULT_INJECTION: forcing a failure. [ 178.672730][ C0] name failslab, interval 1, probability 1, space 0, times 33 [ 178.672766][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.672786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.672796][ C0] Call Trace: [ 178.672806][ C0] [ 178.672814][ C0] dump_stack_lvl+0xe8/0x150 [ 178.672850][ C0] should_fail_ex+0x467/0x600 [ 178.672885][ C0] should_failslab+0xa8/0x100 [ 178.672912][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.672933][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 178.672956][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 178.672982][ C0] __alloc_skb+0x1d7/0x7a0 [ 178.673017][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 178.673040][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 178.673066][ C0] ? __lock_acquire+0x683/0x2ce0 [ 178.673086][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 178.673108][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 178.673132][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 178.673164][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 178.673193][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 178.673216][ C0] __iterate_interfaces+0x2af/0x5a0 [ 178.673234][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 178.673258][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 178.673279][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 178.673304][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 178.673327][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 178.673347][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 178.673370][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 178.673417][ C0] hrtimer_run_softirq+0x18f/0x260 [ 178.673501][ C0] handle_softirqs+0x1d9/0x6c0 [ 178.673538][ C0] run_ktimerd+0x69/0x100 [ 178.673567][ C0] smpboot_thread_fn+0x57c/0xa80 [ 178.673595][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 178.673626][ C0] kthread+0x388/0x470 [ 178.673654][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 178.673677][ C0] ? __pfx_kthread+0x10/0x10 [ 178.673705][ C0] ret_from_fork+0x514/0xb70 [ 178.673739][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 178.673767][ C0] ? __switch_to+0xc89/0x1420 [ 178.673797][ C0] ? __pfx_kthread+0x10/0x10 [ 178.673828][ C0] ret_from_fork_asm+0x1a/0x30 [ 178.673860][ C0] [ 178.751889][ T4950] FAULT_INJECTION: forcing a failure. [ 178.751889][ T4950] name failslab, interval 1, probability 1, space 0, times 32 [ 178.808026][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.808070][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.808110][ T4950] Call Trace: [ 178.808132][ T4950] [ 178.808154][ T4950] dump_stack_lvl+0xe8/0x150 [ 178.808269][ T4950] should_fail_ex+0x467/0x600 [ 178.808377][ T4950] should_failslab+0xa8/0x100 [ 178.808453][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.808543][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 178.808599][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 178.808681][ T4950] __alloc_skb+0x1d7/0x7a0 [ 178.808757][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 178.808822][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 178.808935][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 178.809075][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 178.809170][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 178.809265][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 178.809385][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 178.809487][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 178.809543][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 178.809622][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 178.809704][ T4950] __sys_sendto+0x41e/0x5d0 [ 178.809768][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 178.809874][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 178.809976][ T4950] ? kvm_sched_clock_read+0x11/0x20 [ 178.810216][ T4950] ? rcu_is_watching+0x15/0xb0 [ 178.810311][ T4950] __x64_sys_sendto+0xde/0x100 [ 178.810384][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.810449][ T4950] do_syscall_64+0x174/0x580 [ 178.810525][ T4950] ? clear_bhb_loop+0x40/0x90 [ 178.810648][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.810702][ T4950] RIP: 0033:0x7f79ba9fa407 [ 178.810765][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 178.810816][ T4950] RSP: 002b:00007ffd8a737c20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 178.810875][ T4950] RAX: ffffffffffffffda RBX: 00007f79ba8aac80 RCX: 00007f79ba9fa407 [ 178.810919][ T4950] RDX: 0000000000000049 RSI: 00007ffd8a737d60 RDI: 0000000000000003 [ 178.810959][ T4950] RBP: 00007ffd8a738190 R08: 0000000000000000 R09: 0000000000000000 [ 178.810979][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd8a7381a8 [ 178.810992][ T4950] R13: 00007ffd8a737d60 R14: 000000000000002e R15: 00007ffd8a737d60 [ 178.811023][ T4950] [ 178.833355][ T56] FAULT_INJECTION: forcing a failure. [ 178.833355][ T56] name failslab, interval 1, probability 1, space 0, times 32 [ 178.833472][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.833524][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.833567][ T56] Workqueue: events_unbound nsim_dev_trap_report_work [ 178.833683][ T56] Call Trace: [ 178.833705][ T56] [ 178.833736][ T56] dump_stack_lvl+0xe8/0x150 [ 178.833833][ T56] should_fail_ex+0x467/0x600 [ 178.833942][ T56] should_failslab+0xa8/0x100 [ 178.834036][ T56] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.834114][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 178.834177][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 178.834261][ T56] __alloc_skb+0x1d7/0x7a0 [ 178.834342][ T56] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 178.834469][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 178.834695][ T56] process_scheduled_works+0xa8e/0x14e0 [ 178.834761][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.834801][ T56] ? assign_work+0x3cf/0x5d0 [ 178.834838][ T56] worker_thread+0xa47/0xfb0 [ 178.834985][ T56] ? __kthread_parkme+0x71/0x1f0 [ 178.835100][ T56] kthread+0x388/0x470 [ 178.835230][ T56] ? __pfx_worker_thread+0x10/0x10 [ 178.835317][ T56] ? __pfx_kthread+0x10/0x10 [ 178.835426][ T56] ret_from_fork+0x514/0xb70 [ 178.835728][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 178.835798][ T56] ? __switch_to+0xc89/0x1420 [ 178.835941][ T56] ? __pfx_kthread+0x10/0x10 [ 178.836047][ T56] ret_from_fork_asm+0x1a/0x30 [ 178.836155][ T56] [ 178.845134][ T4950] FAULT_INJECTION: forcing a failure. [ 178.845134][ T4950] name failslab, interval 1, probability 1, space 0, times 31 [ 178.845228][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.845332][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.845375][ T4950] Call Trace: [ 178.845398][ T4950] [ 178.845420][ T4950] dump_stack_lvl+0xe8/0x150 [ 178.845547][ T4950] should_fail_ex+0x467/0x600 [ 178.845665][ T4950] should_failslab+0xa8/0x100 [ 178.845744][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.845817][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 178.845874][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 178.845949][ T4950] __alloc_skb+0x1d7/0x7a0 [ 178.846025][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 178.846087][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 178.846127][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 178.846225][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 178.846323][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 178.846429][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 178.846551][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 178.846649][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 178.846804][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 178.846906][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 178.847005][ T4950] __sys_sendto+0x41e/0x5d0 [ 178.847088][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 178.847151][ T4950] ? unix_dgram_connect+0x276/0xba0 [ 178.847270][ T4950] ? __pfx___sys_connect+0x10/0x10 [ 178.847357][ T4950] ? rcu_is_watching+0x15/0xb0 [ 178.847452][ T4950] __x64_sys_sendto+0xde/0x100 [ 178.847518][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.847579][ T4950] do_syscall_64+0x174/0x580 [ 178.847607][ T4950] ? clear_bhb_loop+0x40/0x90 [ 178.847632][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.847654][ T4950] RIP: 0033:0x7f79ba9fa407 [ 178.847697][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 178.847741][ T4950] RSP: 002b:00007ffd8a737c20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 178.847803][ T4950] RAX: ffffffffffffffda RBX: 00007f79ba8aac80 RCX: 00007f79ba9fa407 [ 178.847846][ T4950] RDX: 000000000000004f RSI: 00007ffd8a737d60 RDI: 0000000000000003 [ 178.847887][ T4950] RBP: 00007ffd8a738190 R08: 0000000000000000 R09: 0000000000000000 [ 178.847920][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd8a7381a8 [ 178.847955][ T4950] R13: 00007ffd8a737d60 R14: 0000000000000034 R15: 00007ffd8a737d60 [ 178.848045][ T4950] [ 178.849912][ T127] FAULT_INJECTION: forcing a failure. [ 178.849912][ T127] name failslab, interval 1, probability 1, space 0, times 30 [ 178.850000][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.850061][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.850111][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 178.850200][ T127] Call Trace: [ 178.850228][ T127] [ 178.850252][ T127] dump_stack_lvl+0xe8/0x150 [ 178.850350][ T127] should_fail_ex+0x467/0x600 [ 178.850409][ T127] should_failslab+0xa8/0x100 [ 178.850463][ T127] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.850549][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 178.850572][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 178.850654][ T127] __alloc_skb+0x1d7/0x7a0 [ 178.850740][ T127] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 178.850872][ T127] ? process_scheduled_works+0xa20/0x14e0 [ 178.850949][ T127] process_scheduled_works+0xa8e/0x14e0 [ 178.851118][ T127] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.851212][ T127] ? assign_work+0x3cf/0x5d0 [ 178.851308][ T127] worker_thread+0xa47/0xfb0 [ 178.851427][ T127] ? __kthread_parkme+0x71/0x1f0 [ 178.851550][ T127] kthread+0x388/0x470 [ 178.851648][ T127] ? __pfx_worker_thread+0x10/0x10 [ 178.851715][ T127] ? __pfx_kthread+0x10/0x10 [ 178.851824][ T127] ret_from_fork+0x514/0xb70 [ 178.851927][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 178.852011][ T127] ? __switch_to+0xc89/0x1420 [ 178.852094][ T127] ? __pfx_kthread+0x10/0x10 [ 178.852206][ T127] ret_from_fork_asm+0x1a/0x30 [ 178.852354][ T127] [ 178.854099][ T66] FAULT_INJECTION: forcing a failure. [ 178.854099][ T66] name failslab, interval 1, probability 1, space 0, times 30 [ 178.854203][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.854267][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.854308][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 178.854415][ T66] Call Trace: [ 178.854436][ T66] [ 178.854466][ T66] dump_stack_lvl+0xe8/0x150 [ 178.854541][ T66] should_fail_ex+0x467/0x600 [ 178.854581][ T66] should_failslab+0xa8/0x100 [ 178.854609][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.854634][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 178.854656][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 178.854686][ T66] __alloc_skb+0x1d7/0x7a0 [ 178.854758][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 178.854895][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 178.854968][ T66] process_scheduled_works+0xa8e/0x14e0 [ 178.855180][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.855392][ T66] ? assign_work+0x3cf/0x5d0 [ 178.855835][ T66] worker_thread+0xa47/0xfb0 [ 178.856771][ T66] kthread+0x388/0x470 [ 178.856840][ T66] ? __pfx_worker_thread+0x10/0x10 [ 178.856867][ T66] ? __pfx_kthread+0x10/0x10 [ 178.856916][ T66] ret_from_fork+0x514/0xb70 [ 178.856954][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 178.857127][ T66] ? __switch_to+0xc89/0x1420 [ 178.857152][ T66] ? __pfx_kthread+0x10/0x10 [ 178.857178][ T66] ret_from_fork_asm+0x1a/0x30 [ 178.857210][ T66] [ 178.877698][ C0] FAULT_INJECTION: forcing a failure. [ 178.877698][ C0] name failslab, interval 1, probability 1, space 0, times 30 [ 178.877737][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.877757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.877769][ C0] Call Trace: [ 178.877775][ C0] [ 178.877783][ C0] dump_stack_lvl+0xe8/0x150 [ 178.877818][ C0] should_fail_ex+0x467/0x600 [ 178.877852][ C0] should_failslab+0xa8/0x100 [ 178.877876][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.877897][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 178.877915][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 178.877939][ C0] __alloc_skb+0x1d7/0x7a0 [ 178.877961][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 178.877995][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 178.878021][ C0] ? __lock_acquire+0x683/0x2ce0 [ 178.878041][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 178.878064][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 178.878088][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 178.878110][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.878144][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 178.878172][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 178.878195][ C0] __iterate_interfaces+0x2af/0x5a0 [ 178.878214][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 178.878239][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 178.878260][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 178.878284][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 178.878308][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 178.878327][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 178.878350][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 178.878395][ C0] hrtimer_run_softirq+0x18f/0x260 [ 178.878426][ C0] handle_softirqs+0x1d9/0x6c0 [ 178.878458][ C0] run_ktimerd+0x69/0x100 [ 178.878486][ C0] smpboot_thread_fn+0x57c/0xa80 [ 178.878514][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 178.878546][ C0] kthread+0x388/0x470 [ 178.878573][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 178.878596][ C0] ? __pfx_kthread+0x10/0x10 [ 178.878624][ C0] ret_from_fork+0x514/0xb70 [ 178.878658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 178.878686][ C0] ? __switch_to+0xc89/0x1420 [ 178.878713][ C0] ? __pfx_kthread+0x10/0x10 [ 178.878741][ C0] ret_from_fork_asm+0x1a/0x30 [ 178.878774][ C0] [ 178.955051][ T1177] FAULT_INJECTION: forcing a failure. [ 178.955051][ T1177] name failslab, interval 1, probability 1, space 0, times 23 [ 178.955178][ T1177] CPU: 1 UID: 0 PID: 1177 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.955244][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.955287][ T1177] Workqueue: events_unbound nsim_dev_trap_report_work [ 178.955391][ T1177] Call Trace: [ 178.955413][ T1177] [ 178.955443][ T1177] dump_stack_lvl+0xe8/0x150 [ 178.955561][ T1177] should_fail_ex+0x467/0x600 [ 178.955674][ T1177] should_failslab+0xa8/0x100 [ 178.955761][ T1177] kmem_cache_alloc_node_noprof+0xae/0x670 [ 178.955918][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 178.955972][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 178.956058][ T1177] __alloc_skb+0x1d7/0x7a0 [ 178.956187][ T1177] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 178.956362][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 178.956437][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 178.957697][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.957825][ T1177] ? assign_work+0x3cf/0x5d0 [ 178.957915][ T1177] worker_thread+0xa47/0xfb0 [ 178.958236][ T1177] ? __kthread_parkme+0x71/0x1f0 [ 178.958406][ T1177] kthread+0x388/0x470 [ 178.958560][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 178.958636][ T1177] ? __pfx_kthread+0x10/0x10 [ 178.958731][ T1177] ret_from_fork+0x514/0xb70 [ 178.958836][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 178.958923][ T1177] ? __switch_to+0xc89/0x1420 [ 178.959014][ T1177] ? __pfx_kthread+0x10/0x10 [ 178.959101][ T1177] ret_from_fork_asm+0x1a/0x30 [ 178.959214][ T1177] [ 179.108788][ T1468] FAULT_INJECTION: forcing a failure. [ 179.108788][ T1468] name failslab, interval 1, probability 1, space 0, times 21 [ 179.108905][ T1468] CPU: 1 UID: 0 PID: 1468 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.108967][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.109003][ T1468] Workqueue: events_unbound nsim_dev_trap_report_work [ 179.109114][ T1468] Call Trace: [ 179.109136][ T1468] [ 179.109168][ T1468] dump_stack_lvl+0xe8/0x150 [ 179.109274][ T1468] should_fail_ex+0x467/0x600 [ 179.109401][ T1468] should_failslab+0xa8/0x100 [ 179.109486][ T1468] kmem_cache_alloc_node_noprof+0xae/0x670 [ 179.109570][ T1468] ? __alloc_skb+0x1d7/0x7a0 [ 179.109635][ T1468] ? __alloc_skb+0x1d7/0x7a0 [ 179.109735][ T1468] __alloc_skb+0x1d7/0x7a0 [ 179.109761][ T1468] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 179.109805][ T1468] ? process_scheduled_works+0xa20/0x14e0 [ 179.109835][ T1468] process_scheduled_works+0xa8e/0x14e0 [ 179.110037][ T1468] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.110136][ T1468] ? assign_work+0x3cf/0x5d0 [ 179.110222][ T1468] worker_thread+0xa47/0xfb0 [ 179.110398][ T1468] ? __kthread_parkme+0x71/0x1f0 [ 179.110518][ T1468] kthread+0x388/0x470 [ 179.110607][ T1468] ? __pfx_worker_thread+0x10/0x10 [ 179.110675][ T1468] ? __pfx_kthread+0x10/0x10 [ 179.110758][ T1468] ret_from_fork+0x514/0xb70 [ 179.110872][ T1468] ? __pfx_ret_from_fork+0x10/0x10 [ 179.110967][ T1468] ? __switch_to+0xc89/0x1420 [ 179.111054][ T1468] ? __pfx_kthread+0x10/0x10 [ 179.111151][ T1468] ret_from_fork_asm+0x1a/0x30 [ 179.111275][ T1468] [ 179.213618][ T6147] 84*4kB (UME) 226*8kB (UME) 261*16kB (UME) 213*32kB (UME) 67*64kB (UME) 30*128kB (UME) 9*256kB (UM) 16*512kB (UME) 15*1024kB (UM) 14*2048kB (ME) 316*4096kB (M) = 1370128kB [ 179.214163][ T6147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 179.214467][ T6147] Node 1 Normal: [ 179.249356][ T127] FAULT_INJECTION: forcing a failure. [ 179.249356][ T127] name failslab, interval 1, probability 1, space 0, times 20 [ 179.330034][ T127] CPU: 1 UID: 0 PID: 127 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.330117][ T127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.330163][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 179.330279][ T127] Call Trace: [ 179.330302][ T127] [ 179.330331][ T127] dump_stack_lvl+0xe8/0x150 [ 179.330439][ T127] should_fail_ex+0x467/0x600 [ 179.330566][ T127] should_failslab+0xa8/0x100 [ 179.330654][ T127] kmem_cache_alloc_node_noprof+0xae/0x670 [ 179.330728][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 179.330806][ T127] ? __alloc_skb+0x1d7/0x7a0 [ 179.330882][ T127] __alloc_skb+0x1d7/0x7a0 [ 179.330964][ T127] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 179.331037][ T127] ? process_scheduled_works+0xa20/0x14e0 [ 179.331080][ T127] process_scheduled_works+0xa8e/0x14e0 [ 179.331256][ T127] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.331363][ T127] ? assign_work+0x3cf/0x5d0 [ 179.331456][ T127] worker_thread+0xa47/0xfb0 [ 179.331551][ T127] ? __kthread_parkme+0x71/0x1f0 [ 179.331670][ T127] kthread+0x388/0x470 [ 179.331757][ T127] ? __pfx_worker_thread+0x10/0x10 [ 179.331829][ T127] ? __pfx_kthread+0x10/0x10 [ 179.331924][ T127] ret_from_fork+0x514/0xb70 [ 179.332027][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 179.332115][ T127] ? __switch_to+0xc89/0x1420 [ 179.332206][ T127] ? __pfx_kthread+0x10/0x10 [ 179.332301][ T127] ret_from_fork_asm+0x1a/0x30 [ 179.332409][ T127] [ 179.492943][ T66] FAULT_INJECTION: forcing a failure. [ 179.492943][ T66] name failslab, interval 1, probability 1, space 0, times 18 [ 179.493063][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.493135][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.493182][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 179.493292][ T66] Call Trace: [ 179.493313][ T66] [ 179.493337][ T66] dump_stack_lvl+0xe8/0x150 [ 179.493678][ T66] should_fail_ex+0x467/0x600 [ 179.493800][ T66] should_failslab+0xa8/0x100 [ 179.493878][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 179.493947][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 179.494005][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 179.494093][ T66] __alloc_skb+0x1d7/0x7a0 [ 179.494188][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 179.494327][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 179.494412][ T66] process_scheduled_works+0xa8e/0x14e0 [ 179.494548][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.494583][ T66] ? assign_work+0x3cf/0x5d0 [ 179.494614][ T66] worker_thread+0xa47/0xfb0 [ 179.494672][ T66] kthread+0x388/0x470 [ 179.494768][ T66] ? __pfx_worker_thread+0x10/0x10 [ 179.494843][ T66] ? __pfx_kthread+0x10/0x10 [ 179.494940][ T66] ret_from_fork+0x514/0xb70 [ 179.495054][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 179.495152][ T66] ? __switch_to+0xc89/0x1420 [ 179.495248][ T66] ? __pfx_kthread+0x10/0x10 [ 179.495355][ T66] ret_from_fork_asm+0x1a/0x30 [ 179.495477][ T66] [ 179.779134][ T66] FAULT_INJECTION: forcing a failure. [ 179.779134][ T66] name failslab, interval 1, probability 1, space 0, times 16 [ 179.779250][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.779317][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.779360][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 179.779455][ T66] Call Trace: [ 179.779482][ T66] [ 179.779512][ T66] dump_stack_lvl+0xe8/0x150 [ 179.779613][ T66] should_fail_ex+0x467/0x600 [ 179.779730][ T66] should_failslab+0xa8/0x100 [ 179.779808][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 179.779882][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 179.779951][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 179.780039][ T66] __alloc_skb+0x1d7/0x7a0 [ 179.780122][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 179.780259][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 179.780347][ T66] process_scheduled_works+0xa8e/0x14e0 [ 179.780517][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.780616][ T66] ? assign_work+0x3cf/0x5d0 [ 179.780711][ T66] worker_thread+0xa47/0xfb0 [ 179.780831][ T66] kthread+0x388/0x470 [ 179.780929][ T66] ? __pfx_worker_thread+0x10/0x10 [ 179.781022][ T66] ? __pfx_kthread+0x10/0x10 [ 179.781106][ T66] ret_from_fork+0x514/0xb70 [ 179.781213][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 179.781314][ T66] ? __switch_to+0xc89/0x1420 [ 179.781416][ T66] ? __pfx_kthread+0x10/0x10 [ 179.781506][ T66] ret_from_fork_asm+0x1a/0x30 [ 179.781624][ T66] [ 179.782292][ T13] FAULT_INJECTION: forcing a failure. [ 179.782292][ T13] name failslab, interval 1, probability 1, space 0, times 16 [ 179.782371][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.782448][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.782495][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 179.782583][ T13] Call Trace: [ 179.782605][ T13] [ 179.782628][ T13] dump_stack_lvl+0xe8/0x150 [ 179.782738][ T13] should_fail_ex+0x467/0x600 [ 179.782854][ T13] should_failslab+0xa8/0x100 [ 179.783181][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 179.783439][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 179.783508][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 179.783607][ T13] __alloc_skb+0x1d7/0x7a0 [ 179.783695][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 179.784027][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 179.784115][ T13] process_scheduled_works+0xa8e/0x14e0 [ 179.784279][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.784405][ T13] ? assign_work+0x3cf/0x5d0 [ 179.784502][ T13] worker_thread+0xa47/0xfb0 [ 179.784567][ T13] kthread+0x388/0x470 [ 179.784609][ T13] ? __pfx_worker_thread+0x10/0x10 [ 179.784636][ T13] ? __pfx_kthread+0x10/0x10 [ 179.784673][ T13] ret_from_fork+0x514/0xb70 [ 179.784714][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 179.784776][ T13] ? __switch_to+0xc89/0x1420 [ 179.785229][ T13] ? __pfx_kthread+0x10/0x10 [ 179.785373][ T13] ret_from_fork_asm+0x1a/0x30 [ 179.785836][ T13] [ 179.808550][ C0] FAULT_INJECTION: forcing a failure. [ 179.808550][ C0] name failslab, interval 1, probability 1, space 0, times 15 [ 179.808592][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.808619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.808635][ C0] Call Trace: [ 179.808643][ C0] [ 179.808654][ C0] dump_stack_lvl+0xe8/0x150 [ 179.808698][ C0] should_fail_ex+0x467/0x600 [ 179.808744][ C0] should_failslab+0xa8/0x100 [ 179.808775][ C0] __kmalloc_noprof+0xfe/0x780 [ 179.808829][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.808865][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.808902][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.808935][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 179.808979][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.809014][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 179.809043][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 179.809091][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 179.809116][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 179.809141][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 179.809171][ C0] ? unwind_next_frame+0x8f/0x2550 [ 179.809209][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 179.809231][ C0] ? __lock_acquire+0x683/0x2ce0 [ 179.809265][ C0] ? __lock_acquire+0x683/0x2ce0 [ 179.809290][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 179.809318][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 179.809351][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 179.809377][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 179.809405][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 179.809442][ C0] ? rt_spin_unlock+0x157/0x200 [ 179.809485][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 179.809512][ C0] ieee80211_scan_rx+0x552/0xa40 [ 179.809545][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 179.809592][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 179.809613][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.809652][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.809684][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.809710][ C0] ? reacquire_held_locks+0x104/0x190 [ 179.809739][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.809761][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 179.809787][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 179.809811][ C0] ? rt_spin_unlock+0x163/0x200 [ 179.809841][ C0] ? skb_dequeue+0x11a/0x150 [ 179.809871][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 179.809897][ C0] tasklet_action_common+0x31c/0x600 [ 179.809930][ C0] handle_softirqs+0x1d9/0x6c0 [ 179.809964][ C0] run_ktimerd+0x69/0x100 [ 179.809992][ C0] smpboot_thread_fn+0x57c/0xa80 [ 179.810021][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 179.810052][ C0] kthread+0x388/0x470 [ 179.810084][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 179.810109][ C0] ? __pfx_kthread+0x10/0x10 [ 179.810141][ C0] ret_from_fork+0x514/0xb70 [ 179.810175][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 179.810202][ C0] ? __switch_to+0xc89/0x1420 [ 179.810230][ C0] ? __pfx_kthread+0x10/0x10 [ 179.810258][ C0] ret_from_fork_asm+0x1a/0x30 [ 179.810291][ C0] [ 179.810379][ C0] FAULT_INJECTION: forcing a failure. [ 179.810379][ C0] name failslab, interval 1, probability 1, space 0, times 14 [ 179.810408][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.810430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.810443][ C0] Call Trace: [ 179.810451][ C0] [ 179.810470][ C0] dump_stack_lvl+0xe8/0x150 [ 179.810502][ C0] should_fail_ex+0x467/0x600 [ 179.810539][ C0] should_failslab+0xa8/0x100 [ 179.810565][ C0] __kmalloc_noprof+0xfe/0x780 [ 179.810589][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.810620][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.810657][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 179.810699][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 179.810742][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.810784][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 179.810814][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 179.810862][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 179.810888][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 179.810913][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 179.810942][ C0] ? unwind_next_frame+0x8f/0x2550 [ 179.810982][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 179.811005][ C0] ? __lock_acquire+0x683/0x2ce0 [ 179.811039][ C0] ? __lock_acquire+0x683/0x2ce0 [ 179.811067][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 179.811095][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 179.811129][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 179.811155][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 179.811182][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 179.811218][ C0] ? rt_spin_unlock+0x157/0x200 [ 179.811245][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 179.811272][ C0] ieee80211_scan_rx+0x552/0xa40 [ 179.811302][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 179.811350][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 179.811377][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.811422][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.811449][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.811493][ C0] ? reacquire_held_locks+0x104/0x190 [ 179.811523][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 179.811545][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 179.811571][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 179.811595][ C0] ? rt_spin_unlock+0x163/0x200 [ 179.811624][ C0] ? skb_dequeue+0x11a/0x150 [ 179.811662][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 179.811687][ C0] tasklet_action_common+0x31c/0x600 [ 179.811720][ C0] handle_softirqs+0x1d9/0x6c0 [ 179.811753][ C0] run_ktimerd+0x69/0x100 [ 179.811779][ C0] smpboot_thread_fn+0x57c/0xa80 [ 179.811808][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 179.811841][ C0] kthread+0x388/0x470 [ 179.811867][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 179.811890][ C0] ? __pfx_kthread+0x10/0x10 [ 179.811918][ C0] ret_from_fork+0x514/0xb70 [ 179.811951][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 179.811983][ C0] ? __switch_to+0xc89/0x1420 [ 179.812012][ C0] ? __pfx_kthread+0x10/0x10 [ 179.812039][ C0] ret_from_fork_asm+0x1a/0x30 [ 179.812072][ C0] [ 179.894216][ T6147] 3*4kB (UM) 2*8kB (UM) 12*16kB (UM) 6*32kB (UM) 3*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938396kB [ 179.894982][ T6147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.895038][ T6147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.895091][ T6147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.895525][ T6147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.895585][ T6147] 44635 total pagecache pages [ 179.895618][ T6147] 0 pages in swap cache [ 179.895640][ T6147] Free swap = 124996kB [ 179.895662][ T6147] Total swap = 124996kB [ 179.895693][ T6147] 2097051 pages RAM [ 179.895717][ T6147] 0 pages HighMem/MovableOnly [ 179.895746][ T6147] 424825 pages reserved [ 179.895780][ T6147] 0 pages cma reserved [ 179.931151][ T6156] FAULT_INJECTION: forcing a failure. [ 179.931151][ T6156] name failslab, interval 1, probability 1, space 0, times 12 [ 179.931280][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.931349][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.931385][ T6156] Call Trace: [ 179.931412][ T6156] [ 179.931441][ T6156] dump_stack_lvl+0xe8/0x150 [ 179.931566][ T6156] should_fail_ex+0x467/0x600 [ 179.931685][ T6156] should_failslab+0xa8/0x100 [ 179.931779][ T6156] __kmalloc_noprof+0xfe/0x780 [ 179.931838][ T6156] ? rcu_is_watching+0x15/0xb0 [ 179.931913][ T6156] ? hash_netportnet6_add+0x1183/0x2cd0 [ 179.932025][ T6156] ? hash_netportnet6_add+0x1183/0x2cd0 [ 179.932134][ T6156] hash_netportnet6_add+0x1183/0x2cd0 [ 179.932284][ T6156] ? hash_netportnet6_add+0x84/0x2cd0 [ 179.932430][ T6156] hash_netportnet6_uadt+0xbc8/0xf70 [ 179.932538][ T6156] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 179.932634][ T6156] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 179.932705][ T6156] ? __nla_validate_parse+0x2429/0x2d50 [ 179.932846][ T6156] call_ad+0x2ee/0xa30 [ 179.932942][ T6156] ? __pfx_call_ad+0x10/0x10 [ 179.933003][ T6156] ? ip_set_pernet+0x23/0x240 [ 179.933139][ T6156] ? __nla_parse+0x40/0x60 [ 179.933213][ T6156] ip_set_ad+0x82a/0x9d0 [ 179.933678][ T6156] ? __pfx_ip_set_ad+0x10/0x10 [ 179.933845][ T6156] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.934301][ T6156] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.934368][ T6156] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.934447][ T6156] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 179.934519][ T6156] ? unwind_get_return_address+0x4d/0x90 [ 179.934544][ T6156] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 179.934596][ T6156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.934807][ T6156] netlink_rcv_skb+0x226/0x4a0 [ 179.935133][ T6156] ? __lock_acquire+0x683/0x2ce0 [ 179.935229][ T6156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.935301][ T6156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.935403][ T6156] ? bpf_lsm_capable+0x9/0x20 [ 179.935730][ T6156] ? security_capable+0x7e/0x2c0 [ 179.936308][ T6156] nfnetlink_rcv+0x2b9/0x28d0 [ 179.936357][ T6156] ? __local_bh_enable+0x1e1/0x2f0 [ 179.936438][ T6156] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 179.936521][ T6156] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.936605][ T6156] ? __dev_queue_xmit+0x294/0x3880 [ 179.936694][ T6156] ? __dev_queue_xmit+0x1ee9/0x3880 [ 179.936808][ T6156] ? __dev_queue_xmit+0x294/0x3880 [ 179.936952][ T6156] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.937064][ T6156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 179.937171][ T6156] ? ref_tracker_free+0x668/0x820 [ 179.937245][ T6156] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.937269][ T6156] ? __asan_memcpy+0x40/0x70 [ 179.937391][ T6156] ? __skb_clone+0x5c/0x6c0 [ 179.937483][ T6156] ? __skb_clone+0x449/0x6c0 [ 179.937580][ T6156] ? skb_clone+0x246/0x3a0 [ 179.937693][ T6156] ? __netlink_deliver_tap+0x811/0x860 [ 179.937776][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.939153][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.939255][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.939362][ T6156] netlink_unicast+0x7f5/0x990 [ 179.939443][ T6156] netlink_sendmsg+0x813/0xb40 [ 179.939551][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.939623][ T6156] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 179.939742][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.939817][ T6156] sock_sendmsg_nosec+0x13a/0x180 [ 179.940055][ T6156] ____sys_sendmsg+0x565/0x870 [ 179.940148][ T6156] ? __might_fault+0xaf/0x130 [ 179.940248][ T6156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.940358][ T6156] ? import_iovec+0x73/0xa0 [ 179.940450][ T6156] ___sys_sendmsg+0x2a5/0x360 [ 179.940526][ T6156] ? __lock_acquire+0x683/0x2ce0 [ 179.940620][ T6156] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.940709][ T6156] ? futex_wake+0x51e/0x600 [ 179.940936][ T6156] ? __fget_files+0x2a/0x420 [ 179.941010][ T6156] ? __fget_files+0x3a8/0x420 [ 179.941107][ T6156] __x64_sys_sendmsg+0x1b7/0x290 [ 179.941195][ T6156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.941361][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.941446][ T6156] do_syscall_64+0x174/0x580 [ 179.941529][ T6156] ? trace_irq_disable+0x3b/0x140 [ 179.941594][ T6156] ? clear_bhb_loop+0x40/0x90 [ 179.941671][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.941737][ T6156] RIP: 0033:0x7f34f7b4df99 [ 179.941813][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.941865][ T6156] RSP: 002b:00007f34f5d85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.941938][ T6156] RAX: ffffffffffffffda RBX: 00007f34f7dd6090 RCX: 00007f34f7b4df99 [ 179.941982][ T6156] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 179.942023][ T6156] RBP: 00007f34f7be4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 179.942063][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.942096][ T6156] R13: 00007f34f7dd6128 R14: 00007f34f7dd6090 R15: 00007ffd98d3e0e8 [ 179.942192][ T6156] [ 180.005579][ T66] FAULT_INJECTION: forcing a failure. [ 180.005579][ T66] name failslab, interval 1, probability 1, space 0, times 12 [ 180.005686][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.005751][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.005794][ T66] Workqueue: events_unbound cfg80211_wiphy_work [ 180.005917][ T66] Call Trace: [ 180.005940][ T66] [ 180.005965][ T66] dump_stack_lvl+0xe8/0x150 [ 180.006062][ T66] should_fail_ex+0x467/0x600 [ 180.006188][ T66] should_failslab+0xa8/0x100 [ 180.006264][ T66] __kmalloc_noprof+0xfe/0x780 [ 180.006331][ T66] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 180.006413][ T66] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 180.006534][ T66] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 180.006653][ T66] ? unwind_next_frame+0x8f/0x2550 [ 180.006729][ T66] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 180.006902][ T66] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 180.006989][ T66] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 180.007093][ T66] cfg80211_inform_bss_data+0x25b/0x3d50 [ 180.007252][ T66] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 180.007427][ T66] ? __lock_acquire+0x683/0x2ce0 [ 180.007537][ T66] ? cfg80211_defragment_element+0x3e/0x360 [ 180.007634][ T66] ? ieee80211_bss_info_update+0x30f/0xa50 [ 180.007718][ T66] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 180.007819][ T66] ? ieee80211_bss_info_update+0x30f/0xa50 [ 180.007907][ T66] ieee80211_bss_info_update+0x791/0xa50 [ 180.008007][ T66] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 180.008073][ T66] ? sta_info_get+0x4f/0x300 [ 180.008187][ T66] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 180.008274][ T66] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 180.008390][ T66] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 180.008474][ T66] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 180.008573][ T66] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.008648][ T66] ? lockdep_hardirqs_on+0x7a/0x110 [ 180.008739][ T66] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 180.008848][ T66] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 180.008927][ T66] ? reacquire_held_locks+0x104/0x190 [ 180.009053][ T66] ? rt_spin_unlock+0x163/0x200 [ 180.009157][ T66] ieee80211_iface_work+0x78a/0x1010 [ 180.009266][ T66] cfg80211_wiphy_work+0x29e/0x420 [ 180.009360][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 180.009437][ T66] process_scheduled_works+0xa8e/0x14e0 [ 180.009586][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.009684][ T66] ? assign_work+0x3cf/0x5d0 [ 180.009772][ T66] worker_thread+0xa47/0xfb0 [ 180.009928][ T66] kthread+0x388/0x470 [ 180.010010][ T66] ? __pfx_worker_thread+0x10/0x10 [ 180.010083][ T66] ? __pfx_kthread+0x10/0x10 [ 180.010179][ T66] ret_from_fork+0x514/0xb70 [ 180.010287][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 180.010519][ T66] ? __switch_to+0xc89/0x1420 [ 180.010618][ T66] ? __pfx_kthread+0x10/0x10 [ 180.010709][ T66] ret_from_fork_asm+0x1a/0x30 [ 180.010900][ T66] [ 180.013885][ T6147] tty tty1: ldisc open failed (-12), clearing slot 0 [ 180.312188][ C1] FAULT_INJECTION: forcing a failure. [ 180.312188][ C1] name failslab, interval 1, probability 1, space 0, times 9 [ 180.312230][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.312255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.312342][ C1] Call Trace: [ 180.312371][ C1] [ 180.312416][ C1] dump_stack_lvl+0xe8/0x150 [ 180.312536][ C1] should_fail_ex+0x467/0x600 [ 180.312644][ C1] should_failslab+0xa8/0x100 [ 180.312728][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 180.312795][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 180.312860][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 180.312986][ C1] __alloc_skb+0x1d7/0x7a0 [ 180.313073][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 180.313199][ C1] ieee80211_beacon_get_ap+0x5c6/0x2120 [ 180.313502][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 180.313619][ C1] ? __lock_acquire+0x683/0x2ce0 [ 180.313713][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 180.313802][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 180.313923][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 180.314030][ C1] __ieee80211_beacon_get+0x1174/0x1820 [ 180.314130][ C1] ? __lock_acquire+0x683/0x2ce0 [ 180.314195][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 180.314281][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 180.314368][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 180.314460][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.314542][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 180.314576][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 180.314607][ C1] __iterate_interfaces+0x2af/0x5a0 [ 180.314635][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 180.314668][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 180.314695][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 180.314757][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 180.314842][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 180.314936][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 180.315019][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 180.315138][ C1] hrtimer_run_softirq+0x18f/0x260 [ 180.315250][ C1] handle_softirqs+0x1d9/0x6c0 [ 180.315387][ C1] run_ktimerd+0x69/0x100 [ 180.315480][ C1] smpboot_thread_fn+0x57c/0xa80 [ 180.315582][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 180.315698][ C1] kthread+0x388/0x470 [ 180.315785][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 180.315869][ C1] ? __pfx_kthread+0x10/0x10 [ 180.315974][ C1] ret_from_fork+0x514/0xb70 [ 180.316082][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 180.316146][ C1] ? __switch_to+0xc89/0x1420 [ 180.316215][ C1] ? __pfx_kthread+0x10/0x10 [ 180.316312][ C1] ret_from_fork_asm+0x1a/0x30 [ 180.316434][ C1] [ 180.376984][ T1177] FAULT_INJECTION: forcing a failure. [ 180.376984][ T1177] name failslab, interval 1, probability 1, space 0, times 8 [ 180.377103][ T1177] CPU: 1 UID: 0 PID: 1177 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.377257][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.377285][ T1177] Workqueue: events_unbound nsim_dev_trap_report_work [ 180.377332][ T1177] Call Trace: [ 180.377376][ T1177] [ 180.377416][ T1177] dump_stack_lvl+0xe8/0x150 [ 180.377563][ T1177] should_fail_ex+0x467/0x600 [ 180.377684][ T1177] should_failslab+0xa8/0x100 [ 180.377776][ T1177] kmem_cache_alloc_node_noprof+0xae/0x670 [ 180.377856][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 180.377910][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 180.377997][ T1177] __alloc_skb+0x1d7/0x7a0 [ 180.378077][ T1177] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 180.378212][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 180.378293][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 180.378467][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.378567][ T1177] ? assign_work+0x3cf/0x5d0 [ 180.378698][ T1177] worker_thread+0xa47/0xfb0 [ 180.378831][ T1177] ? __kthread_parkme+0x71/0x1f0 [ 180.378983][ T1177] kthread+0x388/0x470 [ 180.379081][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 180.379151][ T1177] ? __pfx_kthread+0x10/0x10 [ 180.379256][ T1177] ret_from_fork+0x514/0xb70 [ 180.379374][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 180.379476][ T1177] ? __switch_to+0xc89/0x1420 [ 180.379567][ T1177] ? __pfx_kthread+0x10/0x10 [ 180.379666][ T1177] ret_from_fork_asm+0x1a/0x30 [ 180.379781][ T1177] [ 180.466339][ T4950] FAULT_INJECTION: forcing a failure. [ 180.466339][ T4950] name failslab, interval 1, probability 1, space 0, times 7 [ 180.466449][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.466520][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.466567][ T4950] Call Trace: [ 180.466596][ T4950] [ 180.466619][ T4950] dump_stack_lvl+0xe8/0x150 [ 180.466728][ T4950] should_fail_ex+0x467/0x600 [ 180.466878][ T4950] should_failslab+0xa8/0x100 [ 180.466968][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 180.467045][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 180.467111][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 180.467196][ T4950] __alloc_skb+0x1d7/0x7a0 [ 180.467273][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 180.467346][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 180.467451][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 180.467510][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 180.467607][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 180.467728][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 180.467846][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 180.467962][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 180.468087][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 180.468174][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 180.468278][ T4950] __sys_sendto+0x41e/0x5d0 [ 180.468341][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 180.468442][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 180.468542][ T4950] ? kvm_sched_clock_read+0x11/0x20 [ 180.468648][ T4950] ? rcu_is_watching+0x15/0xb0 [ 180.468770][ T4950] __x64_sys_sendto+0xde/0x100 [ 180.468846][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.468936][ T4950] do_syscall_64+0x174/0x580 [ 180.469024][ T4950] ? clear_bhb_loop+0x40/0x90 [ 180.469101][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.469165][ T4950] RIP: 0033:0x7f79ba9fa407 [ 180.469227][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 180.469281][ T4950] RSP: 002b:00007ffd8a737c20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 180.469345][ T4950] RAX: ffffffffffffffda RBX: 00007f79ba8aac80 RCX: 00007f79ba9fa407 [ 180.469389][ T4950] RDX: 000000000000004d RSI: 00007ffd8a737d60 RDI: 0000000000000003 [ 180.469425][ T4950] RBP: 00007ffd8a738190 R08: 0000000000000000 R09: 0000000000000000 [ 180.469459][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd8a7381a8 [ 180.469502][ T4950] R13: 00007ffd8a737d60 R14: 0000000000000032 R15: 00007ffd8a737d60 [ 180.469597][ T4950] [ 180.515507][ C1] FAULT_INJECTION: forcing a failure. [ 180.515507][ C1] name failslab, interval 1, probability 1, space 0, times 7 [ 180.515548][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.515573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.515587][ C1] Call Trace: [ 180.515595][ C1] [ 180.515605][ C1] dump_stack_lvl+0xe8/0x150 [ 180.515650][ C1] should_fail_ex+0x467/0x600 [ 180.515690][ C1] should_failslab+0xa8/0x100 [ 180.515716][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 180.515740][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 180.515760][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 180.515786][ C1] __alloc_skb+0x1d7/0x7a0 [ 180.515810][ C1] skb_copy+0x19d/0x870 [ 180.515835][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 180.515865][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 180.515912][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 180.515942][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 180.515978][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 180.516004][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 180.516037][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 180.516072][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 180.516100][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 180.516126][ C1] __iterate_interfaces+0x2af/0x5a0 [ 180.516145][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 180.516172][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 180.516194][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 180.516220][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 180.516244][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 180.516264][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 180.516287][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 180.516333][ C1] hrtimer_run_softirq+0x18f/0x260 [ 180.516376][ C1] handle_softirqs+0x1d9/0x6c0 [ 180.516411][ C1] run_ktimerd+0x69/0x100 [ 180.516438][ C1] smpboot_thread_fn+0x57c/0xa80 [ 180.516467][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 180.516502][ C1] kthread+0x388/0x470 [ 180.516531][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 180.516556][ C1] ? __pfx_kthread+0x10/0x10 [ 180.516586][ C1] ret_from_fork+0x514/0xb70 [ 180.516626][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 180.516657][ C1] ? __switch_to+0xc89/0x1420 [ 180.516686][ C1] ? __pfx_kthread+0x10/0x10 [ 180.516716][ C1] ret_from_fork_asm+0x1a/0x30 [ 180.516752][ C1] [ 180.554943][ C0] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 180.722311][ T13] FAULT_INJECTION: forcing a failure. [ 180.722311][ T13] name failslab, interval 1, probability 1, space 0, times 4 [ 180.722427][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.722492][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.722543][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 180.722646][ T13] Call Trace: [ 180.722667][ T13] [ 180.722691][ T13] dump_stack_lvl+0xe8/0x150 [ 180.722796][ T13] should_fail_ex+0x467/0x600 [ 180.722907][ T13] should_failslab+0xa8/0x100 [ 180.722983][ T13] __kmalloc_noprof+0xfe/0x780 [ 180.723048][ T13] ? unwind_next_frame+0x8f/0x2550 [ 180.723113][ T13] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 180.723210][ T13] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 180.723308][ T13] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 180.723479][ T13] ? try_to_take_rt_mutex+0x842/0xb00 [ 180.723555][ T13] ? __lock_acquire+0x683/0x2ce0 [ 180.723664][ T13] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 180.723771][ T13] ? __lock_acquire+0x683/0x2ce0 [ 180.724084][ T13] ieee80211_ibss_rx_queued_mgmt+0x509/0x2c40 [ 180.724227][ T13] ? __lock_acquire+0x683/0x2ce0 [ 180.724312][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 180.724479][ T13] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 180.724539][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.724567][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 180.724595][ T13] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 180.724624][ T13] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 180.724666][ T13] ? reacquire_held_locks+0x104/0x190 [ 180.724716][ T13] ? rt_spin_unlock+0x163/0x200 [ 180.724833][ T13] ieee80211_iface_work+0x78a/0x1010 [ 180.724983][ T13] cfg80211_wiphy_work+0x29e/0x420 [ 180.725104][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 180.725190][ T13] process_scheduled_works+0xa8e/0x14e0 [ 180.725327][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.725413][ T13] ? assign_work+0x3cf/0x5d0 [ 180.725533][ T13] worker_thread+0xa47/0xfb0 [ 180.725699][ T13] kthread+0x388/0x470 [ 180.725816][ T13] ? __pfx_worker_thread+0x10/0x10 [ 180.725893][ T13] ? __pfx_kthread+0x10/0x10 [ 180.725995][ T13] ret_from_fork+0x514/0xb70 [ 180.726104][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 180.726203][ T13] ? __switch_to+0xc89/0x1420 [ 180.726300][ T13] ? __pfx_kthread+0x10/0x10 [ 180.726405][ T13] ret_from_fork_asm+0x1a/0x30 [ 180.726533][ T13] [ 180.728389][ T1468] FAULT_INJECTION: forcing a failure. [ 180.728389][ T1468] name failslab, interval 1, probability 1, space 0, times 3 [ 180.728498][ T1468] CPU: 1 UID: 0 PID: 1468 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.728558][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.728612][ T1468] Workqueue: events_unbound nsim_dev_trap_report_work [ 180.728710][ T1468] Call Trace: [ 180.728784][ T1468] [ 180.728816][ T1468] dump_stack_lvl+0xe8/0x150 [ 180.728924][ T1468] should_fail_ex+0x467/0x600 [ 180.729065][ T1468] should_failslab+0xa8/0x100 [ 180.729165][ T1468] kmem_cache_alloc_node_noprof+0xae/0x670 [ 180.729241][ T1468] ? __alloc_skb+0x1d7/0x7a0 [ 180.729307][ T1468] ? __alloc_skb+0x1d7/0x7a0 [ 180.729390][ T1468] __alloc_skb+0x1d7/0x7a0 [ 180.729474][ T1468] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 180.729605][ T1468] ? process_scheduled_works+0xa20/0x14e0 [ 180.729682][ T1468] process_scheduled_works+0xa8e/0x14e0 [ 180.729860][ T1468] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.729959][ T1468] ? assign_work+0x3cf/0x5d0 [ 180.730047][ T1468] worker_thread+0xa47/0xfb0 [ 180.730173][ T1468] ? __kthread_parkme+0x71/0x1f0 [ 180.730275][ T1468] kthread+0x388/0x470 [ 180.730365][ T1468] ? __pfx_worker_thread+0x10/0x10 [ 180.730439][ T1468] ? __pfx_kthread+0x10/0x10 [ 180.730555][ T1468] ret_from_fork+0x514/0xb70 [ 180.730699][ T1468] ? __pfx_ret_from_fork+0x10/0x10 [ 180.730796][ T1468] ? __switch_to+0xc89/0x1420 [ 180.730900][ T1468] ? __pfx_kthread+0x10/0x10 [ 180.731000][ T1468] ret_from_fork_asm+0x1a/0x30 [ 180.731108][ T1468] [ 180.803573][ T4961] FAULT_INJECTION: forcing a failure. [ 180.803573][ T4961] name failslab, interval 1, probability 1, space 0, times 2 [ 180.803679][ T4961] CPU: 1 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.803746][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.803790][ T4961] Call Trace: [ 180.803812][ T4961] [ 180.803834][ T4961] dump_stack_lvl+0xe8/0x150 [ 180.804153][ T4961] should_fail_ex+0x467/0x600 [ 180.804261][ T4961] should_failslab+0xa8/0x100 [ 180.804337][ T4961] __kmalloc_noprof+0xfe/0x780 [ 180.804359][ T4961] ? rcu_is_watching+0x15/0xb0 [ 180.804421][ T4961] ? tomoyo_realpath_from_path+0xef/0x640 [ 180.804502][ T4961] ? tomoyo_realpath_from_path+0xef/0x640 [ 180.804546][ T4961] tomoyo_realpath_from_path+0xef/0x640 [ 180.804590][ T4961] tomoyo_path_perm+0x283/0x560 [ 180.804639][ T4961] ? tomoyo_path_perm+0x251/0x560 [ 180.804704][ T4961] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 180.804949][ T4961] security_inode_getattr+0x12b/0x310 [ 180.804996][ T4961] vfs_getattr+0x23/0x70 [ 180.805032][ T4961] vfs_statx_path+0x2b/0x230 [ 180.805072][ T4961] ? vfs_statx+0x107/0x200 [ 180.805209][ T4961] vfs_statx+0x12e/0x200 [ 180.805321][ T4961] ? __pfx_vfs_statx+0x10/0x10 [ 180.805404][ T4961] ? strncpy_from_user+0x150/0x2c0 [ 180.805501][ T4961] ? do_getname+0x151/0x250 [ 180.805598][ T4961] vfs_fstatat+0x11b/0x170 [ 180.805694][ T4961] __x64_sys_newfstatat+0x151/0x200 [ 180.805761][ T4961] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 180.805816][ T4961] ? __rcu_read_unlock+0x83/0xe0 [ 180.805934][ T4961] ? rcu_is_watching+0x15/0xb0 [ 180.806029][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.806101][ T4961] do_syscall_64+0x174/0x580 [ 180.806186][ T4961] ? clear_bhb_loop+0x40/0x90 [ 180.806253][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.806316][ T4961] RIP: 0033:0x7f60acbfcb0a [ 180.806351][ T4961] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 180.806368][ T4961] RSP: 002b:00007fff81447578 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 180.806435][ T4961] RAX: ffffffffffffffda RBX: 0000559514d92410 RCX: 00007f60acbfcb0a [ 180.806453][ T4961] RDX: 00007fff81447580 RSI: 0000559514d802a8 RDI: 00000000ffffff9c [ 180.806468][ T4961] RBP: 0000559517f92148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 180.806484][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.806497][ T4961] R13: 00007fff81447580 R14: 0000000000000000 R15: 00063478c1c69200 [ 180.806538][ T4961] [ 180.903296][ T4961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.799553][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.831187][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.866421][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.899889][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.900958][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.146523][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.182059][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.190158][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.253001][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.284478][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.439840][ T4910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.480095][ T4910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.498886][ T4910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.542158][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.589513][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.244810][ T5610] Bluetooth: hci5: command tx timeout [ 194.411292][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.501747][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.503115][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.530894][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.600169][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.675449][ T5610] Bluetooth: hci6: command tx timeout [ 195.755003][ T5610] Bluetooth: hci7: command tx timeout [ 196.120341][ T127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.314992][ T5610] Bluetooth: hci5: command tx timeout [ 196.675002][ T127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.794750][ T5610] Bluetooth: hci1: command tx timeout [ 197.190936][ T127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.754697][ T5610] Bluetooth: hci6: command tx timeout [ 197.835002][ T5610] Bluetooth: hci7: command tx timeout [ 197.900293][ T127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.934144][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.010182][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.012485][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.394954][ T5610] Bluetooth: hci5: command tx timeout [ 198.449423][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.450060][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.761590][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.778333][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.874776][ T5610] Bluetooth: hci1: command tx timeout [ 199.614253][ T997] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.655263][ T6231] ffs_data_put(): freeing [ 199.730749][ T997] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.789647][ T1240] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.835052][ T5610] Bluetooth: hci6: command tx timeout [ 199.861764][ T1240] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.923468][ T5610] Bluetooth: hci7: command tx timeout [ 200.474805][ T5610] Bluetooth: hci5: command tx timeout [ 200.955798][ T5610] Bluetooth: hci1: command tx timeout [ 201.363789][ T6254] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 201.363814][ T6254] netlink: 17 bytes leftover after parsing attributes in process `syz.0.125'. [ 201.686580][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.686658][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.716585][ T127] bridge_slave_1: left allmulticast mode [ 201.716924][ T127] bridge_slave_1: left promiscuous mode [ 201.740954][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.908343][ T127] bridge_slave_0: left allmulticast mode [ 201.908398][ T127] bridge_slave_0: left promiscuous mode [ 201.908788][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.929236][ T5610] Bluetooth: hci6: command tx timeout [ 201.994644][ T5610] Bluetooth: hci7: command tx timeout [ 203.007828][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.036130][ T5610] Bluetooth: hci1: command tx timeout [ 203.075950][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.102771][ T127] bond0 (unregistering): Released all slaves [ 203.597708][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.598138][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.598379][ T6169] bridge_slave_0: entered allmulticast mode [ 203.629215][ T6169] bridge_slave_0: entered promiscuous mode [ 203.740720][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.740916][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.741143][ T6169] bridge_slave_1: entered allmulticast mode [ 203.794969][ T6169] bridge_slave_1: entered promiscuous mode [ 203.837369][ T6279] ffs_data_put(): freeing [ 204.757430][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.879757][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.879859][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.880087][ T6179] bridge_slave_0: entered allmulticast mode [ 204.884229][ T6179] bridge_slave_0: entered promiscuous mode [ 204.919556][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.920284][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.920478][ T6181] bridge_slave_0: entered allmulticast mode [ 204.923679][ T6181] bridge_slave_0: entered promiscuous mode [ 205.032663][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.096959][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.097096][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.097338][ T6179] bridge_slave_1: entered allmulticast mode [ 205.101138][ T6179] bridge_slave_1: entered promiscuous mode [ 205.102996][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.103163][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.103737][ T6181] bridge_slave_1: entered allmulticast mode [ 205.137669][ T6181] bridge_slave_1: entered promiscuous mode [ 205.471279][ T6302] ffs_data_put(): freeing [ 205.608473][ T5610] Bluetooth: hci2: link tx timeout [ 205.613307][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.853112][ T6169] team0: Port device team_slave_0 added [ 205.854002][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.873797][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.874106][ T6193] bridge_slave_0: entered allmulticast mode [ 205.912997][ T6193] bridge_slave_0: entered promiscuous mode [ 205.981916][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.030315][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.249038][ T6169] team0: Port device team_slave_1 added [ 206.250623][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.250776][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.251038][ T6193] bridge_slave_1: entered allmulticast mode [ 206.261224][ T6193] bridge_slave_1: entered promiscuous mode [ 206.400207][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.436087][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.684223][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.747330][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.747351][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.747385][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.823709][ T6193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.839958][ T6179] team0: Port device team_slave_0 added [ 207.004994][ T127] hsr_slave_0: left promiscuous mode [ 207.024908][ T127] hsr_slave_1: left promiscuous mode [ 207.062990][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.063381][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.181029][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.181066][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.369161][ T127] veth1_macvtap: left promiscuous mode [ 207.387809][ T127] veth0_macvtap: left promiscuous mode [ 207.392475][ T127] veth1_vlan: left promiscuous mode [ 207.393210][ T127] veth0_vlan: left promiscuous mode [ 207.675003][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 208.465397][ T127] team0 (unregistering): Port device team_slave_1 removed [ 208.545678][ T127] team0 (unregistering): Port device team_slave_0 removed [ 208.858851][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.858868][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.858890][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.862364][ T6181] team0: Port device team_slave_0 added [ 208.948936][ T6193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.952252][ T6179] team0: Port device team_slave_1 added [ 209.183588][ T6181] team0: Port device team_slave_1 added [ 209.253565][ T6331] ffs_data_put(): freeing [ 209.535778][ T6193] team0: Port device team_slave_0 added [ 209.537634][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.537651][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.537679][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.630782][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.630803][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.630834][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.668100][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.668167][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.668265][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.687189][ T6193] team0: Port device team_slave_1 added [ 209.795399][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.795413][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.795435][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.969181][ T6169] hsr_slave_0: entered promiscuous mode [ 209.970512][ T6169] hsr_slave_1: entered promiscuous mode [ 209.971553][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 209.971580][ T6169] Cannot create hsr debugfs directory [ 210.272709][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.272730][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.272759][ T6193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.458586][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.458606][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.458638][ T6193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.792207][ T6179] hsr_slave_0: entered promiscuous mode [ 210.811890][ T6179] hsr_slave_1: entered promiscuous mode [ 210.813192][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 210.813221][ T6179] Cannot create hsr debugfs directory [ 210.941594][ T6181] hsr_slave_0: entered promiscuous mode [ 210.951684][ T6181] hsr_slave_1: entered promiscuous mode [ 210.966038][ T6181] debugfs: 'hsr0' already exists in 'hsr' [ 210.966067][ T6181] Cannot create hsr debugfs directory [ 211.247330][ T6193] hsr_slave_0: entered promiscuous mode [ 211.248770][ T6193] hsr_slave_1: entered promiscuous mode [ 211.249638][ T6193] debugfs: 'hsr0' already exists in 'hsr' [ 211.249662][ T6193] Cannot create hsr debugfs directory [ 211.518943][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.218506][ T127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.813503][ T127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.448241][ T127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.513263][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.821907][ T127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.918875][ T6169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.079657][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.116618][ T6169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.260166][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.270183][ T6169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.361156][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.362941][ T6169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.453332][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.972460][ T6403] ffs_data_put(): freeing [ 215.320397][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 215.492773][ T6181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.619134][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.649875][ T6181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.692773][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.784486][ T6181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.819499][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.841033][ T6181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.879182][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.371100][ T6179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.441907][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.476365][ T6179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.544350][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.583863][ T6179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.673051][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.693971][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.947665][ T127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.068077][ T6179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 217.176456][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.662731][ T127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.911807][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.081157][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.325265][ T127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.394601][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.414036][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.432008][ T6193] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.460111][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.467149][ T6193] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.536438][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.654106][ T127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.705136][ T6193] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.728284][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.743046][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.743227][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.784485][ T6193] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.870608][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.350351][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.130010][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.161404][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 220.308383][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.356130][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.356579][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.416522][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.416754][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.559296][ T6480] ffs_data_put(): freeing [ 220.587028][ T127] bridge_slave_1: left allmulticast mode [ 220.587113][ T127] bridge_slave_1: left promiscuous mode [ 220.600833][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.818861][ T127] bridge_slave_0: left allmulticast mode [ 220.818892][ T127] bridge_slave_0: left promiscuous mode [ 220.819091][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.103427][ T127] bridge_slave_1: left allmulticast mode [ 221.103457][ T127] bridge_slave_1: left promiscuous mode [ 221.103668][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.197221][ T127] bridge_slave_0: left allmulticast mode [ 221.197250][ T127] bridge_slave_0: left promiscuous mode [ 221.197433][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.435890][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.495525][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.541576][ T127] bond0 (unregistering): Released all slaves [ 223.209012][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.266192][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.310446][ T127] bond0 (unregistering): Released all slaves [ 223.514576][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.706652][ T127] tipc: Left network mode [ 223.712158][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.712314][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.809996][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.810292][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.895774][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.405230][ T6193] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.498625][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.498851][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.564335][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.578083][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.236937][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.202434][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 226.204250][ T6533] warning: `syz.0.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.977410][ T6169] veth0_vlan: entered promiscuous mode [ 228.010390][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.070437][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.529998][ T6169] veth1_vlan: entered promiscuous mode [ 229.275065][ T127] hsr_slave_0: left promiscuous mode [ 229.294904][ T127] hsr_slave_1: left promiscuous mode [ 229.296797][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.296822][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.343865][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.343897][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.476281][ T127] hsr_slave_0: left promiscuous mode [ 229.520952][ T127] hsr_slave_1: left promiscuous mode [ 229.521928][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.521948][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.561126][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.561160][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.689674][ T127] veth1_macvtap: left promiscuous mode [ 229.689753][ T127] veth0_macvtap: left promiscuous mode [ 229.689932][ T127] veth1_vlan: left promiscuous mode [ 229.690065][ T127] veth0_vlan: left promiscuous mode [ 229.826811][ T127] veth1_macvtap: left promiscuous mode [ 229.826890][ T127] veth0_macvtap: left promiscuous mode [ 229.827074][ T127] veth1_vlan: left promiscuous mode [ 229.827206][ T127] veth0_vlan: left promiscuous mode [ 231.005877][ T127] team0 (unregistering): Port device team_slave_1 removed [ 231.059789][ T127] team0 (unregistering): Port device team_slave_0 removed [ 231.915585][ T127] team0 (unregistering): Port device team_slave_1 removed [ 231.976914][ T127] team0 (unregistering): Port device team_slave_0 removed [ 232.220599][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 232.345749][ T6169] veth0_macvtap: entered promiscuous mode [ 232.391962][ T6169] veth1_macvtap: entered promiscuous mode [ 232.611680][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.770938][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.085289][ T1240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.090363][ T6193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.093331][ T1240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.124676][ T6181] veth0_vlan: entered promiscuous mode [ 233.125819][ T1240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.127569][ T6179] veth0_vlan: entered promiscuous mode [ 233.130172][ T1240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.343831][ T6181] veth1_vlan: entered promiscuous mode [ 233.376190][ T6179] veth1_vlan: entered promiscuous mode [ 234.729917][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.729941][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.914668][ T6179] veth0_macvtap: entered promiscuous mode [ 234.961949][ T6181] veth0_macvtap: entered promiscuous mode [ 235.012741][ T6179] veth1_macvtap: entered promiscuous mode [ 235.067228][ T6181] veth1_macvtap: entered promiscuous mode [ 235.213215][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.213240][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.400839][ T6631] batman_adv: batadv0: Adding interface: dummy0 [ 235.400859][ T6631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.400896][ T6631] batman_adv: batadv0: Interface activated: dummy0 [ 235.469455][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 235.469501][ T6631] openvswitch: netlink: Flow key attr not present in new flow. [ 235.474339][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.702480][ T6633] batadv0: mtu less than device minimum [ 235.725411][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.732758][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.764430][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.825901][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.831494][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.849470][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.878455][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.883868][ T6633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.111559][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 236.145699][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.145953][ T6193] veth0_vlan: entered promiscuous mode [ 236.149621][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.210761][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.283512][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.301295][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.315385][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.354071][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.368018][ T6193] veth1_vlan: entered promiscuous mode [ 236.447709][ T1177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.450104][ T1177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.483391][ T1177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.628396][ T1177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.261509][ T6193] veth0_macvtap: entered promiscuous mode [ 238.390430][ T127] IPVS: stop unused estimator thread 0... [ 238.640029][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.640054][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.642241][ T6193] veth1_macvtap: entered promiscuous mode [ 238.885764][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.885790][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.032644][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.083586][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.083609][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.307384][ T6667] overlayfs: failed to clone upperpath [ 239.334459][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.629141][ T2273] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.630730][ T2273] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.744388][ T2273] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.789553][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.789578][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.801088][ T2273] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.101331][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 240.278953][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 240.278983][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.279026][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.279043][ T5616] Workqueue: hci5 hci_rx_work [ 240.279081][ T5616] Call Trace: [ 240.279099][ T5616] [ 240.279111][ T5616] dump_stack_lvl+0xe8/0x150 [ 240.279149][ T5616] sysfs_create_dir_ns+0x271/0x2a0 [ 240.279176][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.279206][ T5616] ? rt_spin_unlock+0x163/0x200 [ 240.279244][ T5616] kobject_add_internal+0x62c/0xce0 [ 240.279279][ T5616] kobject_add+0x163/0x240 [ 240.279308][ T5616] ? rt_spin_unlock+0x157/0x200 [ 240.279347][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 240.279384][ T5616] ? get_device_parent+0x370/0x3a0 [ 240.279423][ T5616] device_add+0x3fa/0xb80 [ 240.279452][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 240.279479][ T5616] le_conn_complete_evt+0xfef/0x1580 [ 240.279519][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.279551][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.279578][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 240.279604][ T5616] ? rt_mutex_slowunlock+0x219/0x460 [ 240.279635][ T5616] ? skb_pull_data+0xf0/0x200 [ 240.279686][ T5616] hci_le_conn_complete_evt+0x187/0x470 [ 240.279725][ T5616] hci_event_packet+0x67a/0xf10 [ 240.279761][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.279788][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 240.279812][ T5616] ? rt_spin_unlock+0x157/0x200 [ 240.279865][ T5616] ? hci_send_to_monitor+0xe2/0x590 [ 240.279902][ T5616] hci_rx_work+0x3ee/0x1020 [ 240.279935][ T5616] ? process_scheduled_works+0xa20/0x14e0 [ 240.279964][ T5616] process_scheduled_works+0xa8e/0x14e0 [ 240.280019][ T5616] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.280052][ T5616] ? assign_work+0x3cf/0x5d0 [ 240.280080][ T5616] worker_thread+0xa47/0xfb0 [ 240.280131][ T5616] kthread+0x388/0x470 [ 240.280165][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 240.280189][ T5616] ? __pfx_kthread+0x10/0x10 [ 240.280223][ T5616] ret_from_fork+0x514/0xb70 [ 240.280261][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 240.280294][ T5616] ? __switch_to+0xc89/0x1420 [ 240.280326][ T5616] ? __pfx_kthread+0x10/0x10 [ 240.280364][ T5616] ret_from_fork_asm+0x1a/0x30 [ 240.280402][ T5616] [ 240.280445][ T5616] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.280487][ T5616] Bluetooth: hci5: failed to register connection device [ 240.909154][ T198] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 241.595895][ T198] usb 6-1: Using ep0 maxpacket: 8 [ 241.601588][ T198] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.601620][ T198] usb 6-1: config 0 has no interfaces? [ 241.639100][ T198] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 241.639134][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.639155][ T198] usb 6-1: Product: syz [ 241.639172][ T198] usb 6-1: Manufacturer: syz [ 241.639187][ T198] usb 6-1: SerialNumber: syz [ 241.686415][ T198] usb 6-1: config 0 descriptor?? [ 241.903202][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.903226][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.122875][ T821] usb 6-1: USB disconnect, device number 2 [ 242.629442][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.629468][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.823505][ T5614] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 243.005004][ T5614] usb 7-1: Using ep0 maxpacket: 8 [ 243.156424][ T5614] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 243.156456][ T5614] usb 7-1: config 0 has no interface number 0 [ 243.156508][ T5614] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 243.156537][ T5614] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 243.164062][ T5614] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=fa.6f [ 243.164093][ T5614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.164113][ T5614] usb 7-1: Product: syz [ 243.164127][ T5614] usb 7-1: Manufacturer: syz [ 243.164140][ T5614] usb 7-1: SerialNumber: syz [ 243.845750][ T5614] usb 7-1: config 0 descriptor?? [ 243.884320][ T6718] netlink: 64 bytes leftover after parsing attributes in process `syz.5.193'. [ 244.078647][ T5614] sisusb 7-1:0.151: Invalid USB2VGA device [ 244.078687][ T5614] sisusb 7-1:0.151: probe with driver sisusb failed with error -22 [ 244.714876][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 244.928436][ T6730] rdma_rxe: rxe_newlink: failed to add syz_tun [ 245.063261][ T198] usb 7-1: USB disconnect, device number 2 [ 247.316688][ T6727] infiniband syz1: set active [ 247.316712][ T6727] infiniband syz1: added syz_tun [ 247.628510][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 248.023119][ T6727] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 248.023164][ T6727] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 248.023234][ T6727] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 248.098487][ T6703] ------------[ cut here ]------------ [ 248.098501][ T6703] dev->config->get_status(dev) [ 248.098515][ T6703] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x18b/0x1b0, CPU#1: syz.7.114/6703 [ 248.098549][ T6703] Modules linked in: [ 248.098565][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.7.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.098584][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.098596][ T6703] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 248.098614][ T6703] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 cb 7e c1 1a e8 96 50 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 248.098630][ T6703] RSP: 0018:ffffc90003ccf7d8 EFLAGS: 00010246 [ 248.098644][ T6703] RAX: ffffffff853e8a5a RBX: ffff8880207086d0 RCX: 0000000000080000 [ 248.098657][ T6703] RDX: ffffc900206e3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 248.098669][ T6703] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 248.098679][ T6703] R10: dffffc0000000000 R11: ffffffff8540e710 R12: 1ffff110040e10da [ 248.098692][ T6703] R13: dffffc0000000000 R14: ffff888020708000 R15: ffffffff8bd67c98 [ 248.098706][ T6703] FS: 00007fb536ed66c0(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 248.098720][ T6703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.098732][ T6703] CR2: 00007f0b49bba1d4 CR3: 0000000041d78000 CR4: 00000000003526f0 [ 248.098747][ T6703] Call Trace: [ 248.098753][ T6703] [ 248.098763][ T6703] ? __pfx_virtio_dev_remove+0x10/0x10 [ 248.098780][ T6703] device_release_driver_internal+0x48b/0x880 [ 248.098822][ T6703] bus_remove_device+0x449/0x560 [ 248.098846][ T6703] ? __pfx_bus_remove_device+0x10/0x10 [ 248.098866][ T6703] ? up_read+0x34/0x180 [ 248.098893][ T6703] ? kernfs_remove_by_name_ns+0x101/0x140 [ 248.098920][ T6703] device_del+0x528/0x8f0 [ 248.098951][ T6703] ? __pfx_device_del+0x10/0x10 [ 248.098982][ T6703] device_unregister+0x21/0xf0 [ 248.099006][ T6703] unregister_virtio_device+0x37/0x60 [ 248.099035][ T6703] virtio_pci_remove+0x7f/0xf0 [ 248.099060][ T6703] pci_device_remove+0x99/0x1c0 [ 248.099079][ T6703] ? __pfx_pci_device_remove+0x10/0x10 [ 248.099096][ T6703] device_release_driver_internal+0x48b/0x880 [ 248.099127][ T6703] pci_stop_bus_device+0xf6/0x120 [ 248.099153][ T6703] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 248.099178][ T6703] remove_store+0xe5/0x150 [ 248.099206][ T6703] ? __pfx_remove_store+0x10/0x10 [ 248.099231][ T6703] ? sysfs_file_kobj+0x1e4/0x230 [ 248.099260][ T6703] ? sysfs_kf_write+0x166/0x260 [ 248.099346][ T6703] ? __pfx_sysfs_kf_write+0x10/0x10 [ 248.099367][ T6703] kernfs_fop_write_iter+0x3a5/0x540 [ 248.099407][ T6703] vfs_write+0x61e/0xbb0 [ 248.099448][ T6703] ? __pfx_vfs_write+0x10/0x10 [ 248.099483][ T6703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.099515][ T6703] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.099548][ T6703] ? mutex_lock_nested+0x152/0x1d0 [ 248.099582][ T6703] ? fdget_pos+0x252/0x320 [ 248.099622][ T6703] ksys_write+0x156/0x270 [ 248.099658][ T6703] ? __pfx_ksys_write+0x10/0x10 [ 248.099703][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.099731][ T6703] do_syscall_64+0x174/0x580 [ 248.099764][ T6703] ? clear_bhb_loop+0x40/0x90 [ 248.099796][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.099830][ T6703] RIP: 0033:0x7fb538c7df99 [ 248.099853][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.099875][ T6703] RSP: 002b:00007fb536ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.099900][ T6703] RAX: ffffffffffffffda RBX: 00007fb538f05fa0 RCX: 00007fb538c7df99 [ 248.099918][ T6703] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 248.099933][ T6703] RBP: 00007fb538d14ec4 R08: 0000000000000000 R09: 0000000000000000 [ 248.099948][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.099964][ T6703] R13: 00007fb538f06038 R14: 00007fb538f05fa0 R15: 00007fffde92e5a8 [ 248.100005][ T6703] [ 248.100017][ T6703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.100036][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.7.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.100061][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.100076][ T6703] Call Trace: [ 248.100085][ T6703] [ 248.100095][ T6703] vpanic+0x56c/0xa60 [ 248.100121][ T6703] ? __pfx__printk+0x10/0x10 [ 248.100151][ T6703] ? __pfx_vpanic+0x10/0x10 [ 248.100173][ T6703] ? is_bpf_text_address+0x292/0x2b0 [ 248.100201][ T6703] ? is_bpf_text_address+0x26/0x2b0 [ 248.100240][ T6703] panic+0xc5/0xd0 [ 248.100262][ T6703] ? __pfx_panic+0x10/0x10 [ 248.100307][ T6703] __warn+0x315/0x4c0 [ 248.100329][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100357][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100379][ T6703] __report_bug+0x276/0x570 [ 248.100412][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100440][ T6703] ? __pfx___report_bug+0x10/0x10 [ 248.100471][ T6703] ? irqentry_exit+0x218/0x8f0 [ 248.100498][ T6703] ? trace_irq_disable+0x3b/0x140 [ 248.100531][ T6703] ? virtio_dev_remove+0x18d/0x1b0 [ 248.100552][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100582][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100607][ T6703] report_bug+0x16a/0x220 [ 248.100638][ T6703] ? virtio_dev_remove+0x18b/0x1b0 [ 248.100660][ T6703] ? virtio_dev_remove+0x18d/0x1b0 [ 248.100683][ T6703] handle_bug+0x9c/0x200 [ 248.100717][ T6703] exc_invalid_op+0x1a/0x50 [ 248.100752][ T6703] asm_exc_invalid_op+0x1a/0x20 [ 248.100776][ T6703] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 248.100801][ T6703] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 cb 7e c1 1a e8 96 50 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 248.100831][ T6703] RSP: 0018:ffffc90003ccf7d8 EFLAGS: 00010246 [ 248.100852][ T6703] RAX: ffffffff853e8a5a RBX: ffff8880207086d0 RCX: 0000000000080000 [ 248.100870][ T6703] RDX: ffffc900206e3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 248.100888][ T6703] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 248.100902][ T6703] R10: dffffc0000000000 R11: ffffffff8540e710 R12: 1ffff110040e10da [ 248.100921][ T6703] R13: dffffc0000000000 R14: ffff888020708000 R15: ffffffff8bd67c98 [ 248.100945][ T6703] ? __pfx_vp_get_status+0x10/0x10 [ 248.100982][ T6703] ? virtio_dev_remove+0x18a/0x1b0 [ 248.101014][ T6703] ? virtio_dev_remove+0x18a/0x1b0 [ 248.101040][ T6703] ? __pfx_virtio_dev_remove+0x10/0x10 [ 248.101063][ T6703] device_release_driver_internal+0x48b/0x880 [ 248.101106][ T6703] bus_remove_device+0x449/0x560 [ 248.101130][ T6703] ? __pfx_bus_remove_device+0x10/0x10 [ 248.101150][ T6703] ? up_read+0x34/0x180 [ 248.101188][ T6703] ? kernfs_remove_by_name_ns+0x101/0x140 [ 248.101214][ T6703] device_del+0x528/0x8f0 [ 248.101243][ T6703] ? __pfx_device_del+0x10/0x10 [ 248.101273][ T6703] device_unregister+0x21/0xf0 [ 248.101297][ T6703] unregister_virtio_device+0x37/0x60 [ 248.101326][ T6703] virtio_pci_remove+0x7f/0xf0 [ 248.101350][ T6703] pci_device_remove+0x99/0x1c0 [ 248.101369][ T6703] ? __pfx_pci_device_remove+0x10/0x10 [ 248.101386][ T6703] device_release_driver_internal+0x48b/0x880 [ 248.101415][ T6703] pci_stop_bus_device+0xf6/0x120 [ 248.101440][ T6703] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 248.101464][ T6703] remove_store+0xe5/0x150 [ 248.101490][ T6703] ? __pfx_remove_store+0x10/0x10 [ 248.101514][ T6703] ? sysfs_file_kobj+0x1e4/0x230 [ 248.101541][ T6703] ? sysfs_kf_write+0x166/0x260 [ 248.101560][ T6703] ? __pfx_sysfs_kf_write+0x10/0x10 [ 248.101574][ T6703] kernfs_fop_write_iter+0x3a5/0x540 [ 248.101602][ T6703] vfs_write+0x61e/0xbb0 [ 248.101631][ T6703] ? __pfx_vfs_write+0x10/0x10 [ 248.101655][ T6703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.101675][ T6703] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.101697][ T6703] ? mutex_lock_nested+0x152/0x1d0 [ 248.101722][ T6703] ? fdget_pos+0x252/0x320 [ 248.101746][ T6703] ksys_write+0x156/0x270 [ 248.101770][ T6703] ? __pfx_ksys_write+0x10/0x10 [ 248.101799][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.101823][ T6703] do_syscall_64+0x174/0x580 [ 248.101844][ T6703] ? clear_bhb_loop+0x40/0x90 [ 248.101865][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.101882][ T6703] RIP: 0033:0x7fb538c7df99 [ 248.101896][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.101910][ T6703] RSP: 002b:00007fb536ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.101927][ T6703] RAX: ffffffffffffffda RBX: 00007fb538f05fa0 RCX: 00007fb538c7df99 [ 248.101939][ T6703] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 248.101949][ T6703] RBP: 00007fb538d14ec4 R08: 0000000000000000 R09: 0000000000000000 [ 248.101959][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.101969][ T6703] R13: 00007fb538f06038 R14: 00007fb538f05fa0 R15: 00007fffde92e5a8 [ 248.101996][ T6703] [ 248.102650][ T6703] Kernel Offset: disabled