worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31/1:b..l rcu: (detected by 1, t=13252 jiffies, g=29389, q=15 ncpus=2) task:khungtaskd state:R running task stack:29384 pid:31 tgid:31 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 vprintk_emit+0x4c5/0x560 kernel/printk/printk.c:2480 _printk+0xdd/0x130 kernel/printk/printk.c:2504 hung_task_info kernel/hung_task.c:253 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:337 [inline] watchdog+0xb4c/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 13229 jiffies! g29389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: dc 7e 02 e9 fe 5f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 8e 18 00 fb f4 d7 5f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc900000079e8 EFLAGS: 00000246 RAX: ffffffff8176b19a RBX: 0000000000000001 RCX: ffff8880357e3e00 RDX: 0000000000000100 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80 RBP: 0000000000000001 R08: ffffffff90579137 R09: 1ffffffff20af226 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000200 R13: 1ffff110170c7821 R14: ffff8880b863c114 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c406561 CR3: 000000008fc2e000 CR4: 0000000000350ef0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] kvm_wait+0x10f/0x150 arch/x86/kernel/kvm.c:1096 pv_wait arch/x86/include/asm/paravirt-spinlock.h:83 [inline] pv_wait_node kernel/locking/qspinlock_paravirt.h:322 [inline] __pv_queued_spin_lock_slowpath+0x469/0xbc0 kernel/locking/qspinlock.c:290 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:35 [inline] queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:66 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x26c/0x2f0 kernel/locking/spinlock_debug.c:116 spin_lock include/linux/spinlock.h:342 [inline] br_multicast_port_group_expired+0x69/0x750 net/bridge/br_multicast.c:863 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x225/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:preempt_schedule_irq+0x48/0xa0 kernel/sched/core.c:7556 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RAX: 00000000000027fb RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff8e22d06b RDI: 0000000000000001 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:should_resched arch/x86/include/asm/preempt.h:104 [inline] RIP: 0010:__local_bh_enable_ip+0xd8/0x130 kernel/softirq.c:457 Code: 8b e8 8c 83 48 0a 65 66 8b 05 9c a0 e4 11 66 85 c0 75 32 bf 01 00 00 00 e8 85 f0 0b 00 e8 d0 be 46 00 fb 65 8b 05 78 a0 e4 11 <85> c0 75 05 e8 3f ef aa ff 5b 41 5e e9 42 c1 87 ff cc 90 0f 0b 90 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000046 RDX: 0000000000000000 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 00000000e74403e8 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 crc32c_arch lib/crc/x86/crc32.h:76 [inline] crc32c+0x78/0x470 lib/crc/crc32-main.c:86 jbd2_chksum include/linux/jbd2.h:1798 [inline] jbd2_block_tag_csum_set fs/jbd2/commit.c:362 [inline] jbd2_journal_commit_transaction+0x1c4d/0x5b70 fs/jbd2/commit.c:705 kjournald2+0x3bc/0x750 fs/jbd2/journal.c:199 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 100, space 0, times -1 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 100, space 0, times -1 CPU: 1 UID: 0 PID: 5757 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 should_failslab+0xa8/0x100 mm/failslab.c:46 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] hsr_init_skb+0xf3/0x6d0 net/hsr/hsr_device.c:267 send_hsr_supervision_frame+0x195/0xcf0 net/hsr/hsr_device.c:316 hsr_announce+0x1db/0x370 net/hsr/hsr_device.c:421 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x225/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:preempt_schedule_irq+0x48/0xa0 kernel/sched/core.c:7556 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 RAX: 0000000000076fdf RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 kthread+0x388/0x470 kernel/kthread.c:436 kjournald2+0x3bc/0x750 fs/jbd2/journal.c:199 Call Trace: slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 should_failslab+0xa8/0x100 mm/failslab.c:46 Workqueue: events_power_efficient gc_worker CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) CPU: 1 UID: 0 PID: 5757 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 100, space 0, times -1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Call Trace: ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) R10: dffffc0000000000 R11: fffffbfff20af227 R12: ffff888035a1ef18 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 should_failslab+0xa8/0x100 mm/failslab.c:46 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 100, space 0, times -1 addrconf_rs_timer+0x2d2/0x6c0 net/ipv6/addrconf.c:4072 ndisc_send_rs+0x288/0x6b0 net/ipv6/ndisc.c:707 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 RIP: 0010:preempt_schedule_irq+0x48/0xa0 kernel/sched/core.c:7556 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000004b31b Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 RDX: 0000000000000000 RSI: ffffffff8e22d06b RDI: 0000000000000001 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RAX: 0000000000076fdf RBX: 0000000000000000 RCX: 0000000000000001 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RAX: 0000000000076fdf RBX: 0000000000000000 RCX: 0000000000000001 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RAX: 00000000000027fb RBX: 0000000000000000 RCX: 0000000000000001 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 alloc_skb include/linux/skbuff.h:1384 [inline] ndisc_alloc_skb+0xa0/0x480 net/ipv6/ndisc.c:420 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 handle_softirqs+0x225/0x840 kernel/softirq.c:622 handle_softirqs+0x225/0x840 kernel/softirq.c:622 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 handle_softirqs+0x225/0x840 kernel/softirq.c:622 ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:811 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 Call Trace: CPU: 0 UID: 0 PID: 4949 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) crc32c_arch lib/crc/x86/crc32.h:76 [inline] crc32c+0x78/0x470 lib/crc/crc32-main.c:86 R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000004b31b RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 00000000e74403e8 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000046 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000046 Code: 00 00 48 c7 c2 a0 18 ec 8b e8 c4 ed 0c 00 e8 3f da 3a 0a 85 c0 74 46 48 c7 c7 20 9d b5 8e be ff ff ff ff e8 ea d6 3a 0a 85 c0 <74> 31 e8 21 da 3a 0a 85 c0 74 28 80 3d 56 e1 aa 0e 00 75 1f c6 05 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 br_multicast_port_group_expired+0x609/0x750 net/bridge/br_multicast.c:878 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 mac80211_hwsim_beacon+0xaf/0x240 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2525 RIP: 0010:preempt_schedule_irq+0x48/0xa0 kernel/sched/core.c:7556 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 RDX: 0000000000000000 RSI: ffffffff8e22d06b RDI: 0000000000000001 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000046 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 jbd2_chksum include/linux/jbd2.h:1798 [inline] jbd2_block_tag_csum_set fs/jbd2/commit.c:362 [inline] jbd2_journal_commit_transaction+0x1c4d/0x5b70 fs/jbd2/commit.c:705 R10: dffffc0000000000 R11: fffffbfff20af227 R12: ffff888035a1ef18 gc_worker+0x109c/0x1890 net/netfilter/nf_conntrack_core.c:1610 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 Call Trace: CPU: 1 UID: 0 PID: 5757 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 should_failslab+0xa8/0x100 mm/failslab.c:46 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker should_failslab+0xa8/0x100 mm/failslab.c:46 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 Call Trace: Call Trace: slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 should_failslab+0xa8/0x100 mm/failslab.c:46 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 should_failslab+0xa8/0x100 mm/failslab.c:46 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 should_failslab+0xa8/0x100 mm/failslab.c:46 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 should_failslab+0xa8/0x100 mm/failslab.c:46 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 should_failslab+0xa8/0x100 mm/failslab.c:46 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 should_failslab+0xa8/0x100 mm/failslab.c:46 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] hsr_init_skb+0xf3/0x6d0 net/hsr/hsr_device.c:267 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 should_failslab+0xa8/0x100 mm/failslab.c:46 should_failslab+0xa8/0x100 mm/failslab.c:46 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 mac80211_hwsim_beacon+0xaf/0x240 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2525 handle_softirqs+0x225/0x840 kernel/softirq.c:622 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RAX: 0000000000076fdf RBX: 0000000000000000 RCX: 0000000000000001 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 RIP: 0010:should_resched arch/x86/include/asm/preempt.h:104 [inline] RIP: 0010:__local_bh_enable_ip+0xd8/0x130 kernel/softirq.c:457 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 gc_worker+0x109c/0x1890 net/netfilter/nf_conntrack_core.c:1610 R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000004b31b RBP: ffffc900042ffaf0 R08: ffffffff90579137 R09: 1ffffffff20af226 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 RBP: ffffc9000fae7c90 R08: ffffffff90579137 R09: 1ffffffff20af226 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 00000000e74403e8 RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000046 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 RAX: 00000000000027fb RBX: 0000000000000000 RCX: 0000000000000001 RSP: 0018:ffffc900042ff828 EFLAGS: 00000202 RIP: 0010:preempt_schedule_irq+0x48/0xa0 kernel/sched/core.c:7556 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 Workqueue: events_power_efficient gc_worker Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Call Trace: __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 netdev_alloc_skb include/linux/skbuff.h:3500 [inline] dev_alloc_skb include/linux/skbuff.h:3513 [inline] __ieee80211_beacon_get+0xcfd/0x1920 net/mac80211/tx.c:5820 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 Workqueue: events_power_efficient gc_worker slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Workqueue: events_power_efficient gc_worker slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Workqueue: events_power_efficient gc_worker Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Workqueue: events_power_efficient gc_worker Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Call Trace: fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Workqueue: events_power_efficient gc_worker slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Workqueue: events_power_efficient gc_worker should_failslab+0xa8/0x100 mm/failslab.c:46 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: CPU: 1 UID: 0 PID: 5757 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: Call Trace: __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 br_transmit_config+0x3c5/0x5e0 net/bridge/br_stp.c:248 hsr_announce+0x1db/0x370 net/hsr/hsr_device.c:421 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 should_failslab+0xa8/0x100 mm/failslab.c:46 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 should_failslab+0xa8/0x100 mm/failslab.c:46 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 should_failslab+0xa8/0x100 mm/failslab.c:46 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 Call Trace: fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Call Trace: fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Call Trace: __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 Call Trace: should_failslab+0xa8/0x100 mm/failslab.c:46 Workqueue: events_power_efficient gc_worker Workqueue: events_power_efficient gc_worker dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_power_efficient gc_worker Workqueue: events_power_efficient gc_worker slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Call Trace: fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 Workqueue: events_power_efficient gc_worker __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 handle_softirqs+0x225/0x840 kernel/softirq.c:622 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 RSP: 0018:ffffc9000fae7768 EFLAGS: 00000202 RAX: 0000000000076fdf RBX: 0000000000000000 RCX: 0000000000000001 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 Code: 8b e8 8c 83 48 0a 65 66 8b 05 9c a0 e4 11 66 85 c0 75 32 bf 01 00 00 00 e8 85 f0 0b 00 e8 d0 be 46 00 fb 65 8b 05 78 a0 e4 11 <85> c0 75 05 e8 3f ef aa ff 5b 41 5e e9 42 c1 87 ff cc 90 0f 0b 90 RSP: 0018:ffffc900042ff948 EFLAGS: 00000246 RDX: 0000000000000000 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80 R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000004b31b crc32c_arch lib/crc/x86/crc32.h:76 [inline] crc32c+0x78/0x470 lib/crc/crc32-main.c:86 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 R13: 0000000000000000 R14: ffffffff816cd5e2 R15: 0000000000001000 RBP: ffffc900042ffaf0 R08: ffffffff90579137 R09: 1ffffffff20af226 RSP: 0018:ffffc9000fae7888 EFLAGS: 00000206 RIP: 0010:__might_resched+0x88/0x4d0 kernel/sched/core.c:9159 R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 RAX: 00000000000027fb RBX: 0000000000000000 RCX: 0000000000000001 Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f3 53 c2 f5 e8 de 23 fd f5 fb bf 01 00 00 00 83 a3 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 a4 25 fd f5 bf 01 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 __run_hrtimer kernel/time/hrtimer.c:2032 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 __pskb_copy include/linux/skbuff.h:1448 [inline] pskb_copy include/linux/skbuff.h:3839 [inline] tipc_udp_send_msg+0x25b/0x3f0 net/tipc/udp_media.c:268 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 should_failslab+0xa8/0x100 mm/failslab.c:46 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x40c/0x560 lib/fault-inject.c:174 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 should_failslab+0xa8/0x100 mm/failslab.c:46 should_failslab+0xa8/0x100 mm/failslab.c:46 slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4897 [inline] kmem_cache_alloc_node_noprof+0xb3/0x610 mm/slub.c:4989 Call Trace: should_failslab+0xa8/0x100 mm/failslab.c:46 Call Trace: should_failslab+0xa8/0x100 mm/failslab.c:46 should_failslab+0xa8/0x100 mm/failslab.c:46 __alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2489 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5942 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775 __iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:775