last executing test programs: 15m52.617789833s ago: executing program 32 (id=1173): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 12m48.457011802s ago: executing program 33 (id=1679): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@nodioread_nolock}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) init_module(0x0, 0xb0, &(0x7f00000003c0)='smaps\x00') r3 = landlock_create_ruleset(&(0x7f0000000140)={0x6000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c854}, 0x20004000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) read$FUSE(r7, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) 6m58.235317768s ago: executing program 34 (id=2968): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 4m3.481984935s ago: executing program 1 (id=3326): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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") r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 4m0.273671163s ago: executing program 1 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m57.154163239s ago: executing program 1 (id=3338): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x1, 0x1}) 3m54.26153378s ago: executing program 1 (id=3344): creat(&(0x7f00000000c0)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001bc0)={&(0x7f0000001b00), 0x0, 0x7f, 0x0, 0x9, 0x7fff, 0x2, 0x5, 0x1}) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) 3m52.58712327s ago: executing program 1 (id=3345): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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") r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 3m48.318089505s ago: executing program 1 (id=3352): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getgid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 3m47.896341375s ago: executing program 35 (id=3352): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getgid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 3m28.415203291s ago: executing program 4 (id=3392): openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0x4) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000058c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105409, 0x0, 0x1, 0x0, &(0x7f0000005ac0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340)='d', 0x1) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) lgetxattr(&(0x7f0000005a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000005d00)=@known='trusted.overlay.impure\x00', 0x0, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) 3m27.123948443s ago: executing program 4 (id=3395): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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") r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 3m24.591303145s ago: executing program 4 (id=3398): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") r1 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x3a424bc, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYBLOB="3f198e53ab6ea4db1b9a3c6a11f288a50a851c8184dca84852d81c9cba4dee14fa14df64df74fcc1088c118b83b607ef9c839a4365cf8d30007f7ae68f729fc6b1c1c7c58baa786ceb93a4513425de45657af5eb36b6", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESOCT, @ANYBLOB="b3445f008d6734afc7efe79ad070db1061cf05fdf244a65da9400ea485ad6e5c9ff8f6b99dd2f2d4081f72dc056cda47fb78c3836bc9ac972cc9b741453f2f93c1ca8a9169b3fc2ce2d9e3b7a51e024d9a04cf313790ed337ee44dd208ad5f27487c66dbe866e7d74f9ef96a110b11ea4a62f2c135f89ed5a7eb8cd54bd5672b4f3ac43c12970620c4d5a0bff6bc3fe413114894caac082f090905cfa921b7af9185e28d446f12e7f93d84fe85d16d97b9dd8f77035773136fe5ae75c25800b1e122d1abc0755064c2b686bff8ef3385cc9febb7748b58bfc7a6fd6168bf37986f3f62ea", @ANYRES64=r1, @ANYBLOB="0fa958827c9398d5e6889bf291f05e640fa764a117963ab0b217a2fac88057f1c8ac17a4f5ada08a99a83f75d64a100ce7a2c7647cd14b0ad2d345dd179cfe6baab4fe09a0acf7c505d1b2efec534b0a4728d70bb548ec20613d7c83b7986e319d9ce92abc0d80d44af2dbd013773d4bfe76689f07e512b8f1d333905f0e7147ea"], 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3m24.034218018s ago: executing program 4 (id=3399): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 3m23.809318943s ago: executing program 4 (id=3401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x40}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x1, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@loopback, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}]}, 0x1fc}}, 0x0) 3m21.88991823s ago: executing program 4 (id=3408): prlimit64(0x0, 0x9, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x300000f, 0x12, r0, 0x8000000) 3m20.767206848s ago: executing program 36 (id=3408): prlimit64(0x0, 0x9, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x300000f, 0x12, r0, 0x8000000) 2m44.062181614s ago: executing program 8 (id=3505): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00", 0xca, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m43.601492275s ago: executing program 8 (id=3506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000080) 2m43.265371373s ago: executing program 8 (id=3508): syz_open_procfs(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105d6, &(0x7f0000010640)="$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") symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m38.47420286s ago: executing program 8 (id=3519): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f00000006c0)=ANY=[], 0x1, 0x1530, &(0x7f0000001c40)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 2m36.86574713s ago: executing program 8 (id=3525): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 2m35.550207222s ago: executing program 8 (id=3530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m34.920041737s ago: executing program 37 (id=3530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m53.00493097s ago: executing program 7 (id=3689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getgid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r3}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m51.670146513s ago: executing program 7 (id=3697): r0 = socket$unix(0x1, 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) 1m51.36490665s ago: executing program 7 (id=3702): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 1m51.198571725s ago: executing program 7 (id=3704): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201400700020008fd0701004000010203010902600003010d3009132d000000010000000a240106000a00020102090401"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m49.309871571s ago: executing program 2 (id=3717): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x10000, 0x4) 1m48.978169489s ago: executing program 2 (id=3720): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1m48.977900289s ago: executing program 7 (id=3721): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0470a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) io_setup(0x1, &(0x7f0000000000)) 1m46.440248681s ago: executing program 7 (id=3724): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 1m46.261616495s ago: executing program 2 (id=3726): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f00000005c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$eJzs3cFrHFUcB/Bf15q0tenmIIKC+NCLXpYk/gMu0oIYUGIj1YMwNRNddrobdpbKFrG9iTf/juLRmyCC51y8e/OWi8ceiiu7m6TZNTlY2EzLfj6QvF/m5cu82WWW32X2Hdz68U57t2zsZv2ovZfickTUHkWsRi2OXDgca+N6KU56EO/Ub/35+iefff5hc3Pz+lZKN5o3391IKV1749dvvv3pzd/6L33687VflmN/9YuDvzf+2n9l/9WDf25+3SpTq0ydbj9l6Xa3289uF3naaZXtRkofF3lW5qnVKfPe1Pxu0d3bG6Sss7NyZa+Xl2XKOoPUzgep30393iBlX2WtTmo0GmnlSiyWp7ne7YdbW1lzDovhHP0we+Dy9J+9XjMb3cPL/0luP5zrwgCAZ9Js/1+LS+PjFfX/Ry3K/+//Lyx6//809P+LYNT/Lx3ev9P0/wAAAAAAAAAAAAAA8Dx4NBzWh8Nh/Wic/al6fcyX93+xnXhw71JE8f3d7bvbk3Ey39yNVhSRx1rU43HE8FiMnxS88cHm9bU0thord+5P8qPxhen8etRjdTo/+j3Kr6eUhvdTms6/OP5Gi+P8RtTj5dPzG5Pzz+SX4u23TuQbUY8/voxuFLETo+yT/HfrKb3/0eZMfnn8fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAshkY6dur+/Y3GWfOT/PH++mtRj8en78+/dur+/BfjtYvVXjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCkH99pZUeS98y8exBlTw0NVLez8i4i5neL3q3HW66yopFiOM6auHt6Tla9wXFT8wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVeLLpd9UrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoErl4F47K4q8N8ei6msEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nvwbAAD//xBWIbM=") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m45.295340278s ago: executing program 2 (id=3729): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) 1m44.119007507s ago: executing program 2 (id=3732): socket(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000d80)=ANY=[@ANYRES64=r0], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m42.922088327s ago: executing program 2 (id=3734): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 1m30.194029098s ago: executing program 38 (id=3724): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 1m26.674648124s ago: executing program 39 (id=3734): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) 34.418967029s ago: executing program 5 (id=3915): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r3, 0x16, 0x0, @val=@iter={&(0x7f0000000280)=@map_fd=r3, 0x10}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() getrlimit(0x2, &(0x7f0000000000)) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x10000, 0x8, 0x8, 0x7fff]}, &(0x7f0000000240)=0x54) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000180)={[{@errors_remount}, {@nobh}]}, 0x43, 0x4fd, &(0x7f0000000780)="$eJzs3UFvI1cdAPD/TOxssk3rlHJoK1GqtihbwdpJQ9uIQ1skBKdKQBHXEBIniuLEUeK0m6hCqfgASAgBEidOvSDxAZBQPwJCqgQ3DggqEIItHDgARh6PQzZrb9zF8WyT30+anffmzfj/f7Py2ON5mQngyno6Il6LiImIeD4iKvnyNJ+WO5Xj7nof3n57tTMl0W6/8dckknxZ77WSfP5Qd5OYioivfyXi20m/yEdbK41GfS+v1Vrbu7X9w6Obm9srG/WN+s7i4sJLSy8vvbg0P3xn0sFNsxHxypc++OH33v3yK7/83Fu/X/7zje900prJ20/3Y5S6XS9n+6KnFBF7FxGsIKWshwAAfBw8FhGfiIhnsu//lZjIvs1NFp0WAAAAMELtV2fiX0lEe0jPxPDrAgAAAA+GNBsDm6TVfPjsTKRptdodw/vJuJ42mvutz643D3bWuu2zUU7XNxv1+Xys8GyUk059IR9j26u/cKa+GBGPRsQPKtNZvbrabKwV/eMHAAAAXBEPnTn//0ele/7/7p1/0LlbWIIAAADAaMwWnQAAAABw4Zz/AwAAwOXn/B8AAAAuta++/npnaveef7325uHBVvPNm2v1/a3q9sFqdbW5t1vdaDY3snv2bZ/3eo1mc/fzsXNwq9aq77dq+4dHy9vNg53W8uYdj8AGAAAAxujRT7/32yQijr8wnU0dTxSdFDAW6UdZ+Y8XlwcwfhNFJwAUplR0AkBhyue0T48pD6A4yTntjwxq+NXocwEAAC7G3BN3X/+vFJ0UMBYf6fo/AHApuP4PV1fZCEC48h455zgw8OYdd13/f3XAiu32faQFAACM0Ew2JWk1vxY4E2larUY8nD0WoJysbzbq8/n4399Uytc69YVsy+TcMcMAAAAAAAAAAAAAAAAAAAAAAAAAQFe7nUQbAAAAuNQi0j8l2d38I+Yqz82c/X1gMvlnJZtHxFs/eeNHt1Zarb2FzvK/nSxv/Thf/kIRv2AAAADAFfHB8E/i652n987jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCUPrz99mpvGmfcv3wxImb7xS/FVDafinJEXP97EqVT2yURMTGC+MfvRMTj/eInnbRiNs+iX/zpsce/drJdOoLYcNW91zn+vNbv/ZfG09m8//u/lE//r8HHv/Tk+Dcx4Pjz8JAxnnz/57WB8d+JeLLU//jTi59k0e6O/+yQ8b/1jaOjU9Vrp9vaP42Y6/v5k9wRq9ba3q3tHx7d3Nxe2ahv1HcWFxdeWnp56cWl+dr6ZqOe/9s3/vc/9Yv/3Kv/1wfEnz3pf//9/9yQ/f/3+7duP9YtlvvFv/Fs/8/fxwfET/PPvs/k5U77XK983C2f9tTPfv3Uvfq/NqD/U+f0/8aQ/X/+a9/9w5CrAgBjsH94tLXSaNT3FC68MJnv8wcln5PC775ZWGKTFxO09ADs1aIKnf/JEbxOgQclAADgQvzvS/99bDyKC+AAAAAAAAAAAAAAAAAAAADAWO7/dzbmcTFdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4p/8GAAD//9PHyQw=") mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000000380)=ANY=[@ANYRESDEC]) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) read(r0, &(0x7f0000000000)=""/145, 0x91) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) 31.097131371s ago: executing program 5 (id=3923): syz_usb_connect(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c46f3d08a90530261255000000010902"], 0x0) 30.804081708s ago: executing program 9 (id=3925): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 30.769503449s ago: executing program 6 (id=3926): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) 30.415054657s ago: executing program 9 (id=3927): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) 29.642114136s ago: executing program 6 (id=3929): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) fadvise64(r0, 0x1000, 0x5, 0x2) 29.641874636s ago: executing program 0 (id=3771): openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x4) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000058c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105409, 0x0, 0x1, 0x0, &(0x7f0000005ac0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340)='d', 0x1) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) lgetxattr(&(0x7f0000005a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000005d00)=@known='trusted.overlay.impure\x00', 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) 29.531669739s ago: executing program 0 (id=3930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1}) 28.451716295s ago: executing program 3 (id=3931): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, 0x0, 0x8112) 28.317997898s ago: executing program 6 (id=3932): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="20031f0000"], 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 28.25394934s ago: executing program 9 (id=3933): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000740)=ANY=[@ANYBLOB="696f636861727365743d757466382c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e393500006e695f786c6174653d302c73686f77657865632c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c6e6f6e756d746169726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6e66733d6e6f7374616c655f726f2c757466383d302c003d3a4b4a0a5ec0ed4da27a5de363b3a91fd197126a888dbe451631e9579055e7d918068357005bc341e6a09a19a30431333ed635eb8b6c97a1cb5a855176133732dcf18e9478584c7576318ffeae7f4207af67deb2aea64f17ce6e79711400a4f47ccc52175af0c2a40896f6a6905a0478970420d2950d11b74cfb6c3474cd8aacc22141a46eab11033f437e2cd72a04aa2a6b3d8f9d4338026068ac84440fb5a59bb324f4d6a38f48a16b2160984478abfb2e713aaa319ef5693307f4", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="05c7e4c1760bf9f19be970814e78a49804445b15815646968ed0101ae5b6bb70e6890a1a52fb56af72e72e0cfa1e10b0451a323d0855323f92afe049f4c3408e07e0e36c3b9c", @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 28.141493013s ago: executing program 0 (id=3934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 27.84388773s ago: executing program 5 (id=3935): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000ed6a00142c00fe800000000000"], 0x0) 27.714203953s ago: executing program 0 (id=3936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) 26.832215305s ago: executing program 3 (id=3937): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) recvmmsg(r0, 0x0, 0x0, 0x40012001, 0x0) r5 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000280)={&(0x7f0000000000)=0xb, 0x9, &(0x7f0000000180)=[{}], &(0x7f0000000240)}) 26.779355406s ago: executing program 5 (id=3938): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) 26.278772828s ago: executing program 0 (id=3939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xc0189436, 0x20003fff) munmap(&(0x7f0000293000/0x1000)=nil, 0x1000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x3, 0x11, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 25.706798932s ago: executing program 5 (id=3940): openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x4) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000058c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105409, 0x0, 0x1, 0x0, &(0x7f0000005ac0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340)='d', 0x1) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) lgetxattr(&(0x7f0000005a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000005d00)=@known='trusted.overlay.impure\x00', 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a1174369b7849def048bfb552513f5754c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x58}], 0x1) 25.704178702s ago: executing program 9 (id=3941): inotify_rm_watch(0xffffffffffffffff, 0x0) 24.220456018s ago: executing program 6 (id=3942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b70033a8"], 0x2c}}, 0x0) 23.892176516s ago: executing program 3 (id=3943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 23.74010911s ago: executing program 6 (id=3944): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000340)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@noacl}, {@heap}, {@norecovery}, {@noextent_cache}, {@adaptive_mode}, {@jqfmt_vfsold}]}, 0x1, 0x5508, &(0x7f0000002480)="$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") r0 = io_uring_setup(0x3eaf, &(0x7f0000001940)={0x0, 0x0, 0x100, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000340)=[{&(0x7f0000001840)=""/249, 0xf9}], 0x1) 23.690205341s ago: executing program 9 (id=3945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 23.687570971s ago: executing program 3 (id=3946): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000cc0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x996X@\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd8\xbf`$\xbf\xca\xea\xa3\x83\x8f-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4\x03\x12[\a\x00\x00\x00{h\xb0\xc0:\x8f|\x8f\x86\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xb2\xe8\xec\x1a\xe5\xf2\x87\xc5\x9cU\x80\xd3\xe8,?\x87\x84\\/y\xa0\x03\xc9\x00\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91OM\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10L\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\xff\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xec\x1f\x01d\x90\x81A\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x9d\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\xc7\xe7@\xd6\xe6#\x9e\x86\x95rJ\x00\x96\x80i\x11e\xe4\xd6\xa7\xc1\xf9U1T:p\xe7\xd9\xdfw\x18~\x98\xce\xbf\x9d\xb6\xac\xd9-\x127p\x1c\x83\x91\x1e\xady\x17\xec\xe2kv,\xd1\xa9\xc6\xe9C\x17\xad)\xf91\xc9-]\x89\xf9)\xff#\t\x14!\xdcn\xd6\x1buW\xc6\xa3\xfat\xf9LD\\\xe8?\xd1(\xf4\xfb\n\x0f\xc6\x11\x80\x98\x10\xd7=D\x95\x94\xd1\r\xa9b\xa3w\x8ee\x04\x1f/\xc06\xaa-\x7f\x18\xaa\xfc\xcc\xf3\x1bs\xb69\x9b~\x7f\x8f\xc8\xff1X7r$Ar@O\r1cbmq\xcf\xb3\xbfFO\"%\x16\xcd[\xbdVy\x1cP \xc3\xd0\xcc_M\x89?2\x9d\x06_hx\xa53~\xaa1`?\xe96\x86\xd3\xb1\x95L\xc3\xdb\xfaC\xb1\xfa\xb7\x88\\\x99\x9b\r\xce\x9e\xb9\\\x10D\x96\xae#\xa7\t\x80BH\x94\xfa\xb7\x00g;\x9e\r\xd7\xf2\xac\xb6\xab\xcf\x00\x93\xbc#\xca\x9cq\x9a\xcb\x04\xd0\x00\xbfQyI\xbe\n\x0feq\x93\v\xdc9\xfc\xbd\xc7\x8d\xee\x80g~o\x9ct\xab\xd4\xc7\xa5\xcf\xbe\t\x02\x85\xe4', 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) r7 = dup(r0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8=r7], 0x138) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4084c2, 0x0) 22.624117177s ago: executing program 9 (id=3947): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)}, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r1, &(0x7f0000000140)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x8001, 0xc1) write(r2, &(0x7f00000001c0)='0\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0xa000400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resgid}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x400, &(0x7f0000000280)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b66068a37565a6a9ba7ff235fdee7d61f5bc28914df6dfd94"}, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) unshare(0x44040000) 22.10687422s ago: executing program 3 (id=3948): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000ed6a00142c00fe800000000000"], 0x0) 20.540525688s ago: executing program 0 (id=3949): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000a70000007500000095"], 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 17.467532623s ago: executing program 6 (id=3950): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f482a, 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 13.556271259s ago: executing program 5 (id=3951): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) 13.556065469s ago: executing program 3 (id=3952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c7b3ecd45036a2762bb626c65640a", 0x10) 5.781030689s ago: executing program 40 (id=3947): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)}, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r1, &(0x7f0000000140)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/failslab/space\x00', 0x8001, 0xc1) write(r2, &(0x7f00000001c0)='0\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1\x00', 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0xa000400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resgid}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x400, &(0x7f0000000280)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b66068a37565a6a9ba7ff235fdee7d61f5bc28914df6dfd94"}, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) unshare(0x44040000) 0s ago: executing program 41 (id=3949): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000a70000007500000095"], 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): ister_table_exit+0x230/0x230 [ 1448.052902][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1448.052927][ C1] ? trace_contention_end+0x5f/0x170 [ 1448.052958][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1448.052988][ C1] ? mutex_unlock+0x10/0x10 [ 1448.053015][ C1] ? __might_fault+0xc2/0x120 [ 1448.053037][ C1] ? aa_af_perm+0x340/0x340 [ 1448.053055][ C1] ? ipv6_getsockopt+0x265/0x2e0 [ 1448.053084][ C1] nf_setsockopt+0x25f/0x280 [ 1448.053107][ C1] ? sock_common_recvmsg+0x190/0x190 [ 1448.053133][ C1] __sys_setsockopt+0x2bf/0x3d0 [ 1448.053163][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 1448.053192][ C1] do_syscall_64+0x4c/0xa0 [ 1448.053215][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1448.053238][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1448.053263][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.053286][ C1] RIP: 0033:0x7f980159f6da [ 1448.053302][ C1] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1448.053317][ C1] RSP: 002b:00007ffdd48f1658 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1448.053336][ C1] RAX: ffffffffffffffda RBX: 00007ffdd48f16e0 RCX: 00007f980159f6da [ 1448.053350][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1448.053361][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0000000000000000 [ 1448.053372][ C1] R10: 00007f98017ed960 R11: 0000000000000202 R12: 00007f98017ed900 [ 1448.053386][ C1] R13: 00007ffdd48f167c R14: 0000000000000000 R15: 00007f98017edfc0 [ 1448.053412][ C1] [ 1448.053420][T13349] CPU: 0 PID: 13349 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1448.053444][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1448.053459][T13349] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1448.053492][T13349] Call Trace: [ 1448.053500][T13349] [ 1448.053509][T13349] dump_stack_lvl+0x188/0x24e [ 1448.053545][T13349] ? show_regs_print_info+0x12/0x12 [ 1448.053578][T13349] ? load_image+0x410/0x410 [ 1448.053610][T13349] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1448.053641][T13349] should_fail_ex+0x390/0x4c0 [ 1448.053678][T13349] should_failslab+0x5/0x20 [ 1448.053698][T13349] slab_pre_alloc_hook+0x59/0x300 [ 1448.063097][T18139] EXT4-fs (loop9): mount failed [ 1448.065625][T13349] ? __alloc_skb+0x4e6/0x7d0 [ 1448.151042][T13965] (UME) [ 1448.156865][T13349] ? batadv_forw_packet_alloc+0x174/0x360 [ 1448.156907][T13349] __kmem_cache_alloc_node+0x4f/0x270 [ 1448.156938][T13349] ? batadv_forw_packet_alloc+0x174/0x360 [ 1448.156968][T13349] kmalloc_trace+0x26/0xe0 [ 1448.157003][T13349] batadv_forw_packet_alloc+0x174/0x360 [ 1448.157039][T13349] batadv_iv_ogm_queue_add+0x86a/0xdb0 [ 1448.157085][T13349] batadv_iv_ogm_schedule+0xb9d/0x1080 [ 1448.157124][T13349] ? batadv_iv_ogm_schedule+0x87e/0x1080 [ 1448.157160][T13349] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1448.157204][T13349] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 1448.157260][T13349] ? process_one_work+0x7b4/0x1160 [ 1448.157290][T13349] process_one_work+0x8ab/0x1160 [ 1448.157334][T13349] ? worker_detach_from_pool+0x240/0x240 [ 1448.188316][T13965] 54*1024kB [ 1448.189821][T13349] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1448.189854][T13349] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1448.189884][T13349] ? wq_worker_running+0x97/0x190 [ 1448.189921][T13349] worker_thread+0xaf5/0x12a0 [ 1448.189974][T13349] kthread+0x29d/0x330 [ 1448.189993][T13349] ? worker_clr_flags+0x1a0/0x1a0 [ 1448.190019][T13349] ? kthread_blkcg+0xd0/0xd0 [ 1448.190042][T13349] ret_from_fork+0x1f/0x30 [ 1448.190087][T13349] [ 1448.190919][T14781] CPU: 0 PID: 14781 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1448.200287][T13965] (UME) [ 1448.206171][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1448.223639][T14528] FAULT_INJECTION: forcing a failure. [ 1448.223639][T14528] name failslab, interval 1, probability 1, space 0, times 928 [ 1448.230136][T14781] Workqueue: events_unbound cfg80211_wiphy_work [ 1448.241992][T13965] 22*2048kB [ 1448.251029][T14781] [ 1448.251040][T14781] Call Trace: [ 1448.295242][T13965] (UM) [ 1448.295575][T14781] [ 1448.299918][T13965] 142*4096kB [ 1448.304085][T14781] dump_stack_lvl+0x188/0x24e [ 1448.337971][T13965] (UM) [ 1448.338874][T14781] ? show_regs_print_info+0x12/0x12 [ 1448.344446][T13965] = 1130828kB [ 1448.349652][T14781] ? load_image+0x410/0x410 [ 1448.349695][T14781] should_fail_ex+0x390/0x4c0 [ 1448.381368][T13965] Node 0 [ 1448.381660][T14781] should_failslab+0x5/0x20 [ 1448.386878][T13965] Normal: [ 1448.391552][T14781] slab_pre_alloc_hook+0x59/0x300 [ 1448.391579][T14781] ? stack_trace_save+0xa6/0xf0 [ 1448.391609][T14781] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1448.444964][T13965] 1*4kB [ 1448.445473][T14781] __kmem_cache_alloc_node+0x4f/0x270 [ 1448.448417][T13965] (U) [ 1448.451370][T14781] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1448.499393][T13965] 1*8kB [ 1448.504581][T14781] __kmalloc+0xa3/0x240 [ 1448.528725][T17384] FAULT_INJECTION: forcing a failure. [ 1448.528725][T17384] name failslab, interval 1, probability 1, space 0, times 927 [ 1448.533291][T14781] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1448.533337][T14781] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1448.533386][T14781] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1448.533413][T14781] ? __lock_acquire+0x138a/0x7c40 [ 1449.182652][T14781] ? __lock_acquire+0x7c40/0x7c40 [ 1449.187741][T14781] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1449.193590][T14781] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1449.199354][T14781] ? ieee80211_rx_bss_put+0x60/0x60 [ 1449.204596][T14781] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1449.210877][T14781] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1449.216549][T14781] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1449.222395][T14781] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1449.228585][T14781] ? verify_lock_unused+0x140/0x140 [ 1449.233860][T14781] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1449.240228][T14781] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1449.246001][T14781] ? mark_lock+0x94/0x320 [ 1449.250377][T14781] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1449.256395][T14781] ? __lock_acquire+0x7c40/0x7c40 [ 1449.261481][T14781] ? lock_chain_count+0x20/0x20 [ 1449.266393][T14781] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1449.272428][T14781] ? lockdep_hardirqs_on+0x94/0x140 [ 1449.277663][T14781] ? skb_dequeue+0x120/0x150 [ 1449.282295][T14781] ieee80211_iface_work+0x72c/0xc70 [ 1449.287550][T14781] cfg80211_wiphy_work+0x224/0x260 [ 1449.292701][T14781] ? process_one_work+0x7b4/0x1160 [ 1449.297850][T14781] process_one_work+0x8ab/0x1160 [ 1449.302848][T14781] ? worker_detach_from_pool+0x240/0x240 [ 1449.308529][T14781] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1449.313584][T14781] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1449.319167][T14781] ? wq_worker_running+0x97/0x190 [ 1449.324232][T14781] worker_thread+0xaf5/0x12a0 [ 1449.328962][T14781] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1449.334907][T14781] kthread+0x29d/0x330 [ 1449.339007][T14781] ? worker_clr_flags+0x1a0/0x1a0 [ 1449.344075][T14781] ? kthread_blkcg+0xd0/0xd0 [ 1449.348703][T14781] ret_from_fork+0x1f/0x30 [ 1449.353174][T14781] [ 1449.356316][T17384] CPU: 1 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1449.364105][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1449.374223][T17384] Workqueue: events_unbound nsim_dev_trap_report_work [ 1449.381058][T17384] Call Trace: [ 1449.384384][T17384] [ 1449.387360][T17384] dump_stack_lvl+0x188/0x24e [ 1449.392102][T17384] ? show_regs_print_info+0x12/0x12 [ 1449.397363][T17384] ? load_image+0x410/0x410 [ 1449.400011][T13349] FAULT_INJECTION: forcing a failure. [ 1449.400011][T13349] name failslab, interval 1, probability 1, space 0, times 925 [ 1449.401898][T17384] ? mark_lock+0x94/0x320 [ 1449.419041][T17384] should_fail_ex+0x390/0x4c0 [ 1449.423775][T17384] should_failslab+0x5/0x20 [ 1449.428333][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1449.433396][T17384] kmem_cache_alloc_node+0x5a/0x310 [ 1449.438634][T17384] ? __alloc_skb+0xf9/0x7d0 [ 1449.443215][T17384] __alloc_skb+0xf9/0x7d0 [ 1449.447612][T17384] nsim_dev_trap_report_work+0x24f/0xa80 [ 1449.453295][T17384] ? process_one_work+0x7b4/0x1160 [ 1449.458472][T17384] process_one_work+0x8ab/0x1160 [ 1449.463462][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1449.469134][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1449.474201][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1449.479800][T17384] ? wq_worker_running+0x97/0x190 [ 1449.484957][T17384] worker_thread+0xaf5/0x12a0 [ 1449.489690][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1449.495639][T17384] kthread+0x29d/0x330 [ 1449.499813][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1449.504895][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1449.509526][T17384] ret_from_fork+0x1f/0x30 [ 1449.513996][T17384] [ 1449.517063][T13349] CPU: 0 PID: 13349 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1449.524763][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1449.528322][ C1] FAULT_INJECTION: forcing a failure. [ 1449.528322][ C1] name failslab, interval 1, probability 1, space 0, times 924 [ 1449.534932][T13349] Workqueue: events_unbound nsim_dev_trap_report_work [ 1449.554538][T13349] Call Trace: [ 1449.557855][T13349] [ 1449.560822][T13349] dump_stack_lvl+0x188/0x24e [ 1449.565569][T13349] ? show_regs_print_info+0x12/0x12 [ 1449.570812][T13349] ? load_image+0x410/0x410 [ 1449.575348][T13349] ? mark_lock+0x94/0x320 [ 1449.579724][T13349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1449.585744][T13349] should_fail_ex+0x390/0x4c0 [ 1449.590464][T13349] should_failslab+0x5/0x20 [ 1449.595093][T13349] slab_pre_alloc_hook+0x59/0x300 [ 1449.600181][T13349] kmem_cache_alloc_node+0x5a/0x310 [ 1449.605408][T13349] ? slab_free_freelist_hook+0x133/0x1b0 [ 1449.611076][T13349] ? __alloc_skb+0xf9/0x7d0 [ 1449.615629][T13349] __alloc_skb+0xf9/0x7d0 [ 1449.620004][T13349] nsim_dev_trap_report_work+0x24f/0xa80 [ 1449.625690][T13349] ? process_one_work+0x7b4/0x1160 [ 1449.631014][T13349] process_one_work+0x8ab/0x1160 [ 1449.636087][T13349] ? worker_detach_from_pool+0x240/0x240 [ 1449.641756][T13349] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1449.646827][T13349] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1449.652408][T13349] ? wq_worker_running+0x97/0x190 [ 1449.657477][T13349] worker_thread+0xaf5/0x12a0 [ 1449.662215][T13349] kthread+0x29d/0x330 [ 1449.666328][T13349] ? worker_clr_flags+0x1a0/0x1a0 [ 1449.671408][T13349] ? kthread_blkcg+0xd0/0xd0 [ 1449.676030][T13349] ret_from_fork+0x1f/0x30 [ 1449.680501][T13349] [ 1449.683551][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1449.690903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1449.701091][ C1] Call Trace: [ 1449.704411][ C1] [ 1449.707385][ C1] dump_stack_lvl+0x188/0x24e [ 1449.710387][ T3933] FAULT_INJECTION: forcing a failure. [ 1449.710387][ T3933] name failslab, interval 1, probability 1, space 0, times 922 [ 1449.712107][ C1] ? show_regs_print_info+0x12/0x12 [ 1449.730212][ C1] ? load_image+0x410/0x410 [ 1449.734768][ C1] ? mark_lock+0x94/0x320 [ 1449.739152][ C1] ? verify_lock_unused+0x140/0x140 [ 1449.744396][ C1] should_fail_ex+0x390/0x4c0 [ 1449.749204][ C1] should_failslab+0x5/0x20 [ 1449.753737][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1449.758818][ C1] kmem_cache_alloc_node+0x5a/0x310 [ 1449.764072][ C1] ? __alloc_skb+0xf9/0x7d0 [ 1449.768615][ C1] __alloc_skb+0xf9/0x7d0 [ 1449.773028][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 1449.778104][ C1] ? __alloc_skb+0x7d0/0x7d0 [ 1449.782754][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 1449.788269][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1449.793876][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1449.799389][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1449.805080][ C1] __iterate_interfaces+0x225/0x4c0 [ 1449.810313][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1449.816620][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1449.823992][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1449.830280][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1449.837368][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1449.842636][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1449.847895][ C1] ? hw_scan_work+0xf00/0xf00 [ 1449.852639][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1449.857804][ C1] hrtimer_run_softirq+0x173/0x290 [ 1449.862967][ C1] handle_softirqs+0x291/0x910 [ 1449.867765][ C1] ? run_ksoftirqd+0xa4/0x100 [ 1449.872471][ C1] ? do_softirq+0x210/0x210 [ 1449.877287][ C1] run_ksoftirqd+0xa4/0x100 [ 1449.881928][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1449.887168][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1449.892654][ C1] ? takeover_tasklets+0x770/0x770 [ 1449.897825][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1449.903085][ C1] smpboot_thread_fn+0x667/0xa30 [ 1449.908085][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 1449.913179][ C1] kthread+0x29d/0x330 [ 1449.917294][ C1] ? cpu_report_death+0x250/0x250 [ 1449.922380][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1449.927018][ C1] ret_from_fork+0x1f/0x30 [ 1449.931496][ C1] [ 1449.934544][ T3933] CPU: 0 PID: 3933 Comm: dhcpcd Not tainted syzkaller #0 [ 1449.941630][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1449.951732][ T3933] Call Trace: [ 1449.955051][ T3933] [ 1449.958031][ T3933] dump_stack_lvl+0x188/0x24e [ 1449.962779][ T3933] ? show_regs_print_info+0x12/0x12 [ 1449.968035][ T3933] ? load_image+0x410/0x410 [ 1449.972585][ T3933] ? __lock_acquire+0x7c40/0x7c40 [ 1449.977656][ T3933] ? slab_post_alloc_hook+0x67/0x490 [ 1449.983427][ T3933] should_fail_ex+0x390/0x4c0 [ 1449.988158][ T3933] should_failslab+0x5/0x20 [ 1449.992695][ T3933] slab_pre_alloc_hook+0x59/0x300 [ 1449.995619][T13965] (U) 0*16kB [ 1449.997879][ T3933] kmem_cache_alloc+0x56/0x2f0 [ 1449.997907][ T3933] ? anon_vma_fork+0xe1/0x520 [ 1450.001232][T13965] 0*32kB [ 1450.006007][ T3933] anon_vma_fork+0xe1/0x520 [ 1450.018230][ T3933] ? dup_userfaultfd+0x131/0x630 [ 1450.023210][ T3933] ? vm_area_dup+0x11f/0x1a0 [ 1450.027937][ T3933] copy_mm+0xc1d/0x1680 [ 1450.032168][ T3933] ? copy_signal+0x640/0x640 [ 1450.036823][ T3933] ? lockdep_init_map_type+0x98/0x8d0 [ 1450.042292][ T3933] ? __init_rwsem+0x11e/0x160 [ 1450.047135][ T3933] ? copy_signal+0x51f/0x640 [ 1450.051776][ T3933] copy_process+0x19a6/0x40c0 [ 1450.056511][ T3933] ? verify_lock_unused+0x140/0x140 [ 1450.059771][T13965] 0*64kB [ 1450.061755][ T3933] ? copy_process+0x974/0x40c0 [ 1450.061769][T13965] 0*128kB [ 1450.061790][ T3933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1450.064829][T13965] 0*256kB [ 1450.069608][ T3933] ? idle_dummy+0x10/0x10 [ 1450.086060][ T3933] kernel_clone+0x24b/0x900 [ 1450.090714][ T3933] ? create_io_thread+0x170/0x170 [ 1450.095807][ T3933] ? __lock_acquire+0x7c40/0x7c40 [ 1450.100887][ T3933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1450.107365][ T3933] __x64_sys_clone+0x1a7/0x220 [ 1450.112173][ T3933] ? __might_fault+0xc2/0x120 [ 1450.113222][T13965] 0*512kB [ 1450.116879][ T3933] ? __ia32_sys_vfork+0x140/0x140 [ 1450.116894][T13965] 0*1024kB [ 1450.116941][ T3933] ? lock_chain_count+0x20/0x20 [ 1450.119956][T13965] 0*2048kB [ 1450.125002][ T3933] ? lockdep_hardirqs_on+0x94/0x140 [ 1450.125033][ T3933] do_syscall_64+0x4c/0xa0 [ 1450.145695][ T9] FAULT_INJECTION: forcing a failure. [ 1450.145695][ T9] name failslab, interval 1, probability 1, space 0, times 921 [ 1450.158566][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1450.163290][ T3933] ? clear_bhb_loop+0x60/0xb0 [ 1450.168008][ T3933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.173943][ T3933] RIP: 0033:0x7f22acad5636 [ 1450.177359][T13965] 0*4096kB [ 1450.178383][ T3933] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1450.181522][T13965] = 12kB [ 1450.201147][ T3933] RSP: 002b:00007ffc1fd09e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1450.201175][ T3933] RAX: ffffffffffffffda RBX: 00007ffc1fd09e08 RCX: 00007f22acad5636 [ 1450.201192][ T3933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1450.201212][ T3933] RBP: 00007ffc1fd2a350 R08: 0000000000000000 R09: 0000000000000001 [ 1450.236797][ T3933] R10: 00007f22aca01a10 R11: 0000000000000246 R12: 00007ffc1fd09f40 [ 1450.244895][ T3933] R13: 0000000000000000 R14: 0000000000000000 R15: 00005632715e8ac0 [ 1450.252919][ T3933] [ 1450.255964][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1450.263309][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1450.273422][ T9] Workqueue: bat_events batadv_mcast_mla_update [ 1450.279729][ T9] Call Trace: [ 1450.283051][ T9] [ 1450.286034][ T9] dump_stack_lvl+0x188/0x24e [ 1450.290791][ T9] ? worker_thread+0xaf5/0x12a0 [ 1450.295697][ T9] ? ret_from_fork+0x1f/0x30 [ 1450.300355][ T9] ? show_regs_print_info+0x12/0x12 [ 1450.305649][ T9] ? load_image+0x410/0x410 [ 1450.310263][ T9] should_fail_ex+0x390/0x4c0 [ 1450.315033][ T9] should_failslab+0x5/0x20 [ 1450.319597][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1450.324696][ T9] ? batadv_mcast_mla_update+0x1498/0x3280 [ 1450.330561][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1450.335999][ T9] ? batadv_mcast_mla_update+0x1498/0x3280 [ 1450.341940][ T9] kmalloc_trace+0x26/0xe0 [ 1450.346528][ T9] batadv_mcast_mla_update+0x1498/0x3280 [ 1450.352228][ T9] ? batadv_mcast_mla_update+0x139/0x3280 [ 1450.358016][ T9] ? batadv_mcast_tvlv_ogm_handler+0x230/0x230 [ 1450.364225][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1450.368841][ T3638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1450.370258][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1450.370296][ T9] ? read_lock_is_recursive+0x10/0x10 [ 1450.387466][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1450.393426][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1450.398678][ T9] ? process_one_work+0x7b4/0x1160 [ 1450.403815][ T9] process_one_work+0x8ab/0x1160 [ 1450.408780][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1450.414449][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1450.419521][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1450.425121][ T9] ? wq_worker_running+0x97/0x190 [ 1450.430187][ T9] worker_thread+0xaf5/0x12a0 [ 1450.434923][ T9] kthread+0x29d/0x330 [ 1450.439013][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1450.444064][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1450.448680][ T9] ret_from_fork+0x1f/0x30 [ 1450.453143][ T9] [ 1450.463292][T13965] Node 1 Normal: 183*4kB (UE) 51*8kB (UE) 32*16kB (UME) 34*32kB (UME) 21*64kB (UME) 12*128kB (UME) 2*256kB (UM) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3892724kB [ 1450.466272][T14528] CPU: 1 PID: 14528 Comm: udevd Not tainted syzkaller #0 [ 1450.484126][T13965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.488284][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1450.488301][T14528] Call Trace: [ 1450.488309][T14528] [ 1450.488320][T14528] dump_stack_lvl+0x188/0x24e [ 1450.497879][T13965] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1450.507946][T14528] ? show_regs_print_info+0x12/0x12 [ 1450.507982][T14528] ? load_image+0x410/0x410 [ 1450.511334][T13965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.514218][T14528] ? __might_sleep+0xd0/0xd0 [ 1450.518892][T13965] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1450.528179][T14528] ? __lock_acquire+0x7c40/0x7c40 [ 1450.528220][T14528] should_fail_ex+0x390/0x4c0 [ 1450.535658][T17384] FAULT_INJECTION: forcing a failure. [ 1450.535658][T17384] name failslab, interval 1, probability 1, space 0, times 917 [ 1450.538039][T14528] should_failslab+0x5/0x20 [ 1450.589232][T14528] slab_pre_alloc_hook+0x59/0x300 [ 1450.594303][T14528] ? mark_lock+0x94/0x320 [ 1450.598695][T14528] kmem_cache_alloc+0x56/0x2f0 [ 1450.603487][T14528] ? mas_alloc_nodes+0x2ec/0x880 [ 1450.608462][T14528] mas_alloc_nodes+0x2ec/0x880 [ 1450.613268][T14528] mas_preallocate+0x162/0x3b0 [ 1450.618067][T14528] do_mas_align_munmap+0x239/0x12d0 [ 1450.623308][T14528] ? verify_lock_unused+0x140/0x140 [ 1450.628556][T14528] ? do_mas_align_munmap+0x74c/0x12d0 [ 1450.633971][T14528] ? do_mas_munmap+0x2b0/0x2b0 [ 1450.638779][T14528] ? mtree_range_walk+0x664/0x780 [ 1450.643854][T14528] ? mas_walk+0x15f/0x180 [ 1450.648218][T14528] ? mas_find+0x1ba/0x220 [ 1450.652586][T14528] do_mas_munmap+0x240/0x2b0 [ 1450.657222][T14528] __vm_munmap+0x1aa/0x2d0 [ 1450.661680][T14528] ? vm_munmap+0x20/0x20 [ 1450.665965][T14528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1450.672011][T14528] ? syscall_enter_from_user_mode+0x21/0x80 [ 1450.677940][T14528] __x64_sys_munmap+0x5c/0x70 [ 1450.682659][T14528] do_syscall_64+0x4c/0xa0 [ 1450.687110][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1450.691818][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1450.696527][T14528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.702463][T14528] RIP: 0033:0x7f7b3371e097 [ 1450.706917][T14528] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1450.726559][T14528] RSP: 002b:00007fffa26a9928 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1450.735033][T14528] RAX: ffffffffffffffda RBX: 000055a54640c1e0 RCX: 00007f7b3371e097 [ 1450.743029][T14528] RDX: 000055a54640c888 RSI: 0000000000000200 RDI: 00007f7b33e2b000 [ 1450.751026][T14528] RBP: 0000000000000003 R08: 0000000000000030 R09: 000055a546419320 [ 1450.759027][T14528] R10: 0000000000000040 R11: 0000000000000246 R12: 000055a54640a0b0 [ 1450.767023][T14528] R13: 00007f7b33f5539c R14: 0000000000000600 R15: 0000000000000009 [ 1450.775040][T14528] [ 1450.778087][T17384] CPU: 0 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1450.785856][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1450.795976][T17384] Workqueue: events_unbound nsim_dev_trap_report_work [ 1450.802805][T17384] Call Trace: [ 1450.806128][T17384] [ 1450.809100][T17384] dump_stack_lvl+0x188/0x24e [ 1450.813837][T17384] ? show_regs_print_info+0x12/0x12 [ 1450.819088][T17384] ? load_image+0x410/0x410 [ 1450.823640][T17384] ? mark_lock+0x94/0x320 [ 1450.828028][T17384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1450.834073][T17384] should_fail_ex+0x390/0x4c0 [ 1450.838815][T17384] should_failslab+0x5/0x20 [ 1450.843397][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1450.848484][T17384] kmem_cache_alloc_node+0x5a/0x310 [ 1450.848732][T14528] FAULT_INJECTION: forcing a failure. [ 1450.848732][T14528] name failslab, interval 1, probability 1, space 0, times 916 [ 1450.853713][T17384] ? slab_free_freelist_hook+0x133/0x1b0 [ 1450.853742][T17384] ? __alloc_skb+0xf9/0x7d0 [ 1450.853780][T17384] __alloc_skb+0xf9/0x7d0 [ 1450.881540][T17384] nsim_dev_trap_report_work+0x24f/0xa80 [ 1450.887251][T17384] ? process_one_work+0x7b4/0x1160 [ 1450.892413][T17384] process_one_work+0x8ab/0x1160 [ 1450.897408][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1450.899601][T13965] 115577 total pagecache pages [ 1450.903085][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1450.912935][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1450.918538][T17384] ? wq_worker_running+0x97/0x190 [ 1450.919370][T13965] 30 pages in swap cache [ 1450.923613][T17384] worker_thread+0xaf5/0x12a0 [ 1450.932590][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1450.938534][T17384] kthread+0x29d/0x330 [ 1450.942272][T13965] Free swap = 124152kB [ 1450.942625][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1450.946818][T13965] Total swap = 124996kB [ 1450.952169][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1450.952196][T17384] ret_from_fork+0x1f/0x30 [ 1450.952280][T17384] [ 1450.968488][T14528] CPU: 1 PID: 14528 Comm: udevd Not tainted syzkaller #0 [ 1450.975557][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1450.985636][T14528] Call Trace: [ 1450.988940][T14528] [ 1450.991899][T14528] dump_stack_lvl+0x188/0x24e [ 1450.996648][T14528] ? show_regs_print_info+0x12/0x12 [ 1451.001880][T14528] ? load_image+0x410/0x410 [ 1451.004623][ C0] FAULT_INJECTION: forcing a failure. [ 1451.004623][ C0] name failslab, interval 1, probability 1, space 0, times 913 [ 1451.006408][T14528] ? __might_sleep+0xd0/0xd0 [ 1451.023815][T14528] ? __lock_acquire+0x7c40/0x7c40 [ 1451.028892][T14528] should_fail_ex+0x390/0x4c0 [ 1451.033610][T14528] should_failslab+0x5/0x20 [ 1451.038140][T14528] slab_pre_alloc_hook+0x59/0x300 [ 1451.043198][T14528] ? slab_post_alloc_hook+0x67/0x490 [ 1451.048513][T14528] kmem_cache_alloc_bulk+0x42/0x4e0 [ 1451.053748][T14528] ? kmem_cache_alloc+0x1b2/0x2f0 [ 1451.058831][T14528] ? mas_alloc_nodes+0x2ec/0x880 [ 1451.063804][T14528] mas_alloc_nodes+0x449/0x880 [ 1451.068633][T14528] mas_preallocate+0x162/0x3b0 [ 1451.073450][T14528] do_mas_align_munmap+0x239/0x12d0 [ 1451.078714][T14528] ? verify_lock_unused+0x140/0x140 [ 1451.083968][T14528] ? do_mas_align_munmap+0x74c/0x12d0 [ 1451.089382][T14528] ? do_mas_munmap+0x2b0/0x2b0 [ 1451.094201][T14528] ? mtree_range_walk+0x664/0x780 [ 1451.099271][T14528] ? mas_walk+0x15f/0x180 [ 1451.103631][T14528] ? mas_find+0x1ba/0x220 [ 1451.107998][T14528] do_mas_munmap+0x240/0x2b0 [ 1451.112648][T14528] __vm_munmap+0x1aa/0x2d0 [ 1451.117118][T14528] ? vm_munmap+0x20/0x20 [ 1451.121485][T14528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1451.127541][T14528] ? syscall_enter_from_user_mode+0x21/0x80 [ 1451.133478][T14528] __x64_sys_munmap+0x5c/0x70 [ 1451.138204][T14528] do_syscall_64+0x4c/0xa0 [ 1451.142681][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1451.147392][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1451.152146][T14528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.158124][T14528] RIP: 0033:0x7f7b3371e097 [ 1451.162617][T14528] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1451.182260][T14528] RSP: 002b:00007fffa26a9928 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1451.190706][T14528] RAX: ffffffffffffffda RBX: 000055a5464252e0 RCX: 00007f7b3371e097 [ 1451.198730][T14528] RDX: 000055a5464248f8 RSI: 0000000000000200 RDI: 00007f7b33e22000 [ 1451.206730][T14528] RBP: 000000000000000c R08: 000055a5464094a0 R09: 0000000000000003 [ 1451.214727][T14528] R10: 0000000000000040 R11: 0000000000000246 R12: 000055a54640a0b0 [ 1451.222723][T14528] R13: 00007f7b33f5539c R14: 0000000000001800 R15: 0000000000000009 [ 1451.230738][T14528] [ 1451.233779][ C0] CPU: 0 PID: 4324 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1451.241374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1451.251454][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1451.257990][ C0] Call Trace: [ 1451.261297][ C0] [ 1451.264176][ C0] dump_stack_lvl+0x188/0x24e [ 1451.268876][ C0] ? show_regs_print_info+0x12/0x12 [ 1451.274097][ C0] ? load_image+0x410/0x410 [ 1451.278618][ C0] ? mark_lock+0x94/0x320 [ 1451.282982][ C0] should_fail_ex+0x390/0x4c0 [ 1451.287685][ C0] should_failslab+0x5/0x20 [ 1451.292205][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1451.297255][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1451.302468][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1451.307014][ C0] __alloc_skb+0xf9/0x7d0 [ 1451.311363][ C0] skb_copy+0x122/0x6f0 [ 1451.315559][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1451.321676][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1451.327586][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1451.333842][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1451.339153][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1451.344979][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1451.350462][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1451.356030][ C0] __iterate_interfaces+0x225/0x4c0 [ 1451.361248][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1451.367499][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1451.374718][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1451.381068][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1451.388116][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1451.393346][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1451.398661][ C0] ? hw_scan_work+0xf00/0xf00 [ 1451.403369][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1451.408498][ C0] hrtimer_run_softirq+0x173/0x290 [ 1451.413646][ C0] handle_softirqs+0x291/0x910 [ 1451.418430][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1451.423296][ C0] ? do_softirq+0x210/0x210 [ 1451.427823][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1451.432959][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1451.438176][ C0] __irq_exit_rcu+0x13b/0x230 [ 1451.442863][ C0] ? irq_exit_rcu+0x20/0x20 [ 1451.447405][ C0] irq_exit_rcu+0x5/0x20 [ 1451.451655][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1451.457318][ C0] [ 1451.460267][ C0] [ 1451.463227][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1451.469259][ C0] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250 [ 1451.476230][ C0] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 73 ff 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 ff fb 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff [ 1451.495878][ C0] RSP: 0018:ffffc90004547800 EFLAGS: 00000293 [ 1451.501975][ C0] RAX: ffffffff81773813 RBX: dffffc0000000000 RCX: ffff888027663c00 [ 1451.509962][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1451.518584][ C0] RBP: ffffc90004547960 R08: ffffffff90b0f247 R09: 1ffffffff2161e48 [ 1451.526581][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 1ffff110171e8219 [ 1451.534570][ C0] R13: ffff8880b8e3bdc0 R14: 0000000000000001 R15: ffff8880b8f410c8 [ 1451.542657][ C0] ? smp_call_function_many_cond+0x1163/0x1250 [ 1451.548868][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1451.554372][ C0] ? text_poke_sync+0x20/0x20 [ 1451.559069][ C0] ? smp_call_function_many+0x30/0x30 [ 1451.564551][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1451.570029][ C0] ? text_poke+0x90/0x90 [ 1451.574294][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1451.580461][ C0] ? text_poke_loc_init+0x105/0x560 [ 1451.585771][ C0] ? text_poke_sync+0x20/0x20 [ 1451.590469][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 1451.595598][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1451.601070][ C0] text_poke_bp_batch+0x2b7/0x850 [ 1451.606136][ C0] ? text_poke_loc_init+0x560/0x560 [ 1451.611372][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1451.617564][ C0] ? __jump_label_update+0x39a/0x3c0 [ 1451.623151][ C0] ? process_one_work+0x7b4/0x1160 [ 1451.628282][ C0] text_poke_finish+0x16/0x30 [ 1451.632989][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 1451.638992][ C0] static_key_enable_cpuslocked+0x11f/0x240 [ 1451.644907][ C0] static_key_enable+0x16/0x20 [ 1451.649707][ C0] toggle_allocation_gate+0xba/0x470 [ 1451.655011][ C0] ? show_object+0xa0/0xa0 [ 1451.659451][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1451.665449][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1451.670519][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1451.675915][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1451.681837][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1451.687057][ C0] ? process_one_work+0x7b4/0x1160 [ 1451.692216][ C0] process_one_work+0x8ab/0x1160 [ 1451.697180][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1451.702836][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1451.707910][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1451.713478][ C0] ? wq_worker_running+0x97/0x190 [ 1451.718528][ C0] worker_thread+0xaf5/0x12a0 [ 1451.723251][ C0] kthread+0x29d/0x330 [ 1451.727352][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1451.732429][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1451.737052][ C0] ret_from_fork+0x1f/0x30 [ 1451.741508][ C0] [ 1451.746902][T13349] FAULT_INJECTION: forcing a failure. [ 1451.746902][T13349] name failslab, interval 1, probability 1, space 0, times 911 [ 1451.748240][ T4455] FAULT_INJECTION: forcing a failure. [ 1451.748240][ T4455] name failslab, interval 1, probability 1, space 0, times 911 [ 1451.759792][T13349] CPU: 0 PID: 13349 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1451.780269][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1451.790381][T13349] Workqueue: events_unbound cfg80211_wiphy_work [ 1451.796702][T13349] Call Trace: [ 1451.798763][T13965] 2097051 pages RAM [ 1451.800005][T13349] [ 1451.806828][T13349] dump_stack_lvl+0x188/0x24e [ 1451.811579][T13349] ? show_regs_print_info+0x12/0x12 [ 1451.816872][T13349] ? load_image+0x410/0x410 [ 1451.818484][T18142] FAULT_INJECTION: forcing a failure. [ 1451.818484][T18142] name failslab, interval 1, probability 1, space 0, times 910 [ 1451.821517][T13349] should_fail_ex+0x390/0x4c0 [ 1451.839007][T13349] should_failslab+0x5/0x20 [ 1451.843631][T13349] slab_pre_alloc_hook+0x59/0x300 [ 1451.845872][T13965] 0 pages HighMem/MovableOnly [ 1451.848706][T13349] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1451.853393][T13965] 415222 pages reserved [ 1451.859564][T13349] __kmem_cache_alloc_node+0x4f/0x270 [ 1451.859597][T13349] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1451.859627][T13349] __kmalloc+0xa3/0x240 [ 1451.859662][T13349] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1451.859693][T13349] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1451.891477][T13349] ? trace_contention_end+0x5f/0x170 [ 1451.896812][T13349] ? __mutex_lock+0x1ab/0xae0 [ 1451.901554][T13349] ? __lock_acquire+0x1465/0x7c40 [ 1451.906633][T13349] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1451.909112][T13965] 0 pages cma reserved [ 1451.913023][T13349] ? mutex_lock_nested+0x10/0x10 [ 1451.913066][T13349] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1451.913109][T13349] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1451.913143][T13349] ? verify_lock_unused+0x140/0x140 [ 1451.913175][T13349] ? verify_lock_unused+0x140/0x140 [ 1451.944933][T13349] ? verify_lock_unused+0x140/0x140 [ 1451.950214][T13349] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1451.955997][T13349] ? mark_lock+0x94/0x320 [ 1451.960375][T13349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1451.966401][T13349] ? __lock_acquire+0x7c40/0x7c40 [ 1451.971485][T13349] ? lock_chain_count+0x20/0x20 [ 1451.976386][T13349] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1451.982342][T13349] ? lockdep_hardirqs_on+0x94/0x140 [ 1451.987591][T13349] ? skb_dequeue+0x120/0x150 [ 1451.992228][T13349] ieee80211_iface_work+0x72c/0xc70 [ 1451.997488][T13349] cfg80211_wiphy_work+0x224/0x260 [ 1452.002732][T13349] ? process_one_work+0x7b4/0x1160 [ 1452.007897][T13349] process_one_work+0x8ab/0x1160 [ 1452.012996][T13349] ? worker_detach_from_pool+0x240/0x240 [ 1452.018727][T13349] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1452.023812][T13349] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1452.029416][T13349] ? wq_worker_running+0x97/0x190 [ 1452.034503][T13349] worker_thread+0xaf5/0x12a0 [ 1452.039239][T13349] kthread+0x29d/0x330 [ 1452.043341][T13349] ? worker_clr_flags+0x1a0/0x1a0 [ 1452.048400][T13349] ? kthread_blkcg+0xd0/0xd0 [ 1452.053131][T13349] ret_from_fork+0x1f/0x30 [ 1452.057599][T13349] [ 1452.062535][ T3627] CPU: 1 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1452.069553][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1452.079670][ T3627] Call Trace: [ 1452.083020][ T3627] [ 1452.086017][ T3627] dump_stack_lvl+0x188/0x24e [ 1452.090766][ T3627] ? show_regs_print_info+0x12/0x12 [ 1452.096375][ T3627] ? load_image+0x410/0x410 [ 1452.100968][ T3627] ? __might_sleep+0xd0/0xd0 [ 1452.105606][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1452.106988][ T9] FAULT_INJECTION: forcing a failure. [ 1452.106988][ T9] name failslab, interval 1, probability 1, space 0, times 907 [ 1452.110772][ T3627] should_fail_ex+0x390/0x4c0 [ 1452.128366][ T3627] should_failslab+0x5/0x20 [ 1452.132903][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1452.137975][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1452.143231][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1452.147806][ T3627] __alloc_skb+0xf9/0x7d0 [ 1452.152178][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1452.157372][ T3627] ? rcu_read_unlock_special+0x510/0x510 [ 1452.163037][ T3627] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1452.169060][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1452.174317][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1452.178967][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1452.184039][ T3627] ? __rwlock_init+0x140/0x140 [ 1452.188858][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1452.194095][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1452.199273][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1452.203826][ T3627] ? aa_af_perm+0x340/0x340 [ 1452.208371][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1452.213359][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1452.219869][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1452.225470][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1452.230805][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1452.236324][ T3627] __sys_sendto+0x497/0x650 [ 1452.240888][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1452.246325][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1452.252367][ T3627] ? lock_chain_count+0x20/0x20 [ 1452.257258][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1452.261975][ T3627] do_syscall_64+0x4c/0xa0 [ 1452.266451][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1452.271195][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1452.275933][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.281893][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1452.286376][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1452.306140][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1452.314609][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1452.322638][ T3627] RDX: 0000000000000068 RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1452.328783][ T4722] FAULT_INJECTION: forcing a failure. [ 1452.328783][ T4722] name failslab, interval 1, probability 1, space 0, times 906 [ 1452.330639][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1452.330660][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1452.330676][ T3627] R13: 00007fffffe5f530 R14: 000000000000004d R15: 00007fffffe5f530 [ 1452.330707][ T3627] [ 1452.371139][ T4455] CPU: 0 PID: 4455 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1452.378836][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1452.388935][ T4455] Workqueue: events_unbound cfg80211_wiphy_work [ 1452.389764][T15081] FAULT_INJECTION: forcing a failure. [ 1452.389764][T15081] name failslab, interval 1, probability 1, space 0, times 903 [ 1452.395222][ T4455] Call Trace: [ 1452.395233][ T4455] [ 1452.395243][ T4455] dump_stack_lvl+0x188/0x24e [ 1452.395281][ T4455] ? show_regs_print_info+0x12/0x12 [ 1452.424239][ T4455] ? load_image+0x410/0x410 [ 1452.428785][ T4455] should_fail_ex+0x390/0x4c0 [ 1452.433520][ T4455] should_failslab+0x5/0x20 [ 1452.438061][ T4455] slab_pre_alloc_hook+0x59/0x300 [ 1452.443204][ T4455] ? stack_trace_save+0xa6/0xf0 [ 1452.448093][ T4455] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1452.454465][ T4455] __kmem_cache_alloc_node+0x4f/0x270 [ 1452.459871][ T4455] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1452.466320][ T4455] __kmalloc+0xa3/0x240 [ 1452.470550][ T4455] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1452.476424][ T4455] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1452.482638][ T4455] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1452.488763][ T4455] ? __lock_acquire+0x138a/0x7c40 [ 1452.493839][ T4455] ? __lock_acquire+0x7c40/0x7c40 [ 1452.498921][ T4455] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1452.504787][ T4455] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1452.510473][ T4455] ? ieee80211_rx_bss_put+0x60/0x60 [ 1452.515720][ T4455] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1452.522015][ T4455] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1452.527695][ T4455] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1452.533643][ T4455] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1452.539840][ T4455] ? verify_lock_unused+0x140/0x140 [ 1452.545090][ T4455] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1452.551384][ T4455] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1452.557156][ T4455] ? mark_lock+0x94/0x320 [ 1452.561557][ T4455] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1452.567580][ T4455] ? __lock_acquire+0x7c40/0x7c40 [ 1452.572662][ T4455] ? lock_chain_count+0x20/0x20 [ 1452.577551][ T4455] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1452.583486][ T4455] ? lockdep_hardirqs_on+0x94/0x140 [ 1452.588721][ T4455] ? skb_dequeue+0x120/0x150 [ 1452.593343][ T4455] ieee80211_iface_work+0x72c/0xc70 [ 1452.598588][ T4455] cfg80211_wiphy_work+0x224/0x260 [ 1452.603743][ T4455] ? process_one_work+0x7b4/0x1160 [ 1452.608890][ T4455] process_one_work+0x8ab/0x1160 [ 1452.613874][ T4455] ? worker_detach_from_pool+0x240/0x240 [ 1452.619548][ T4455] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1452.624605][ T4455] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1452.630183][ T4455] ? wq_worker_running+0x97/0x190 [ 1452.635247][ T4455] worker_thread+0xaf5/0x12a0 [ 1452.640058][ T4455] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1452.645995][ T4455] kthread+0x29d/0x330 [ 1452.650091][ T4455] ? worker_clr_flags+0x1a0/0x1a0 [ 1452.655161][ T4455] ? kthread_blkcg+0xd0/0xd0 [ 1452.659807][ T4455] ret_from_fork+0x1f/0x30 [ 1452.664301][ T4455] [ 1452.667347][T15081] CPU: 1 PID: 15081 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1452.675141][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1452.680842][ T4339] FAULT_INJECTION: forcing a failure. [ 1452.680842][ T4339] name failslab, interval 1, probability 1, space 0, times 903 [ 1452.685219][T15081] Workqueue: events_unbound nsim_dev_trap_report_work [ 1452.704971][T15081] Call Trace: [ 1452.708281][T15081] [ 1452.711242][T15081] dump_stack_lvl+0x188/0x24e [ 1452.715985][T15081] ? show_regs_print_info+0x12/0x12 [ 1452.721230][T15081] ? load_image+0x410/0x410 [ 1452.725765][T15081] ? mark_lock+0x94/0x320 [ 1452.730171][T15081] should_fail_ex+0x390/0x4c0 [ 1452.734914][T15081] should_failslab+0x5/0x20 [ 1452.739451][T15081] slab_pre_alloc_hook+0x59/0x300 [ 1452.744516][T15081] kmem_cache_alloc_node+0x5a/0x310 [ 1452.749838][T15081] ? __alloc_skb+0xf9/0x7d0 [ 1452.754393][T15081] __alloc_skb+0xf9/0x7d0 [ 1452.758782][T15081] nsim_dev_trap_report_work+0x24f/0xa80 [ 1452.764491][T15081] ? process_one_work+0x7b4/0x1160 [ 1452.769732][T15081] process_one_work+0x8ab/0x1160 [ 1452.774777][T15081] ? worker_detach_from_pool+0x240/0x240 [ 1452.780453][T15081] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1452.785531][T15081] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1452.791116][T15081] ? wq_worker_running+0x97/0x190 [ 1452.796196][T15081] worker_thread+0xaf5/0x12a0 [ 1452.801050][T15081] kthread+0x29d/0x330 [ 1452.805150][T15081] ? worker_clr_flags+0x1a0/0x1a0 [ 1452.810209][T15081] ? kthread_blkcg+0xd0/0xd0 [ 1452.814824][T15081] ret_from_fork+0x1f/0x30 [ 1452.819309][T15081] [ 1452.822350][ T4339] CPU: 0 PID: 4339 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1452.829951][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1452.840048][ T4339] Workqueue: events_unbound nsim_dev_trap_report_work [ 1452.846884][ T4339] Call Trace: [ 1452.850187][ T4339] [ 1452.853138][ T4339] dump_stack_lvl+0x188/0x24e [ 1452.857857][ T4339] ? show_regs_print_info+0x12/0x12 [ 1452.863097][ T4339] ? load_image+0x410/0x410 [ 1452.867646][ T4339] ? mark_lock+0x94/0x320 [ 1452.872029][ T4339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1452.878074][ T4339] should_fail_ex+0x390/0x4c0 [ 1452.882812][ T4339] should_failslab+0x5/0x20 [ 1452.887350][ T4339] slab_pre_alloc_hook+0x59/0x300 [ 1452.892443][ T4339] kmem_cache_alloc_node+0x5a/0x310 [ 1452.897671][ T4339] ? slab_free_freelist_hook+0x133/0x1b0 [ 1452.903332][ T4339] ? __alloc_skb+0xf9/0x7d0 [ 1452.906728][T14528] FAULT_INJECTION: forcing a failure. [ 1452.906728][T14528] name failslab, interval 1, probability 1, space 0, times 899 [ 1452.907864][ T4339] __alloc_skb+0xf9/0x7d0 [ 1452.924989][ T4339] nsim_dev_trap_report_work+0x24f/0xa80 [ 1452.930674][ T4339] ? process_one_work+0x7b4/0x1160 [ 1452.935841][ T4339] process_one_work+0x8ab/0x1160 [ 1452.940841][ T4339] ? worker_detach_from_pool+0x240/0x240 [ 1452.946517][ T4339] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1452.952188][ T4339] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1452.957785][ T4339] ? wq_worker_running+0x97/0x190 [ 1452.962860][ T4339] worker_thread+0xaf5/0x12a0 [ 1452.967597][ T4339] kthread+0x29d/0x330 [ 1452.971693][ T4339] ? worker_clr_flags+0x1a0/0x1a0 [ 1452.976760][ T4339] ? kthread_blkcg+0xd0/0xd0 [ 1452.981392][ T4339] ret_from_fork+0x1f/0x30 [ 1452.985868][ T4339] [ 1452.989200][ T4722] CPU: 1 PID: 4722 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1452.996945][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1453.007060][ T4722] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1453.014940][ T4722] Call Trace: [ 1453.018271][ T4722] [ 1453.021244][ T4722] dump_stack_lvl+0x188/0x24e [ 1453.025996][ T4722] ? show_regs_print_info+0x12/0x12 [ 1453.031252][ T4722] ? load_image+0x410/0x410 [ 1453.035814][ T4722] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1453.041506][ T4722] should_fail_ex+0x390/0x4c0 [ 1453.046244][ T4722] should_failslab+0x5/0x20 [ 1453.050784][ T4722] slab_pre_alloc_hook+0x59/0x300 [ 1453.055857][ T4722] ? __alloc_skb+0x4e6/0x7d0 [ 1453.060501][ T4722] ? batadv_forw_packet_alloc+0x174/0x360 [ 1453.066281][ T4722] __kmem_cache_alloc_node+0x4f/0x270 [ 1453.071718][ T4722] ? batadv_forw_packet_alloc+0x174/0x360 [ 1453.077489][ T4722] kmalloc_trace+0x26/0xe0 [ 1453.081963][ T4722] batadv_forw_packet_alloc+0x174/0x360 [ 1453.087572][ T4722] batadv_iv_ogm_queue_add+0x86a/0xdb0 [ 1453.093070][ T4722] ? __lock_acquire+0x7c40/0x7c40 [ 1453.098136][ T4722] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 1453.103826][ T4722] batadv_iv_ogm_schedule+0x860/0x1080 [ 1453.109345][ T4722] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 1453.115037][ T4722] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1453.122289][ T4722] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 1453.129372][ T4722] ? process_one_work+0x7b4/0x1160 [ 1453.134535][ T4722] process_one_work+0x8ab/0x1160 [ 1453.139539][ T4722] ? worker_detach_from_pool+0x240/0x240 [ 1453.145224][ T4722] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1453.150380][ T4722] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1453.155961][ T4722] ? wq_worker_running+0x97/0x190 [ 1453.161287][ T4722] worker_thread+0xaf5/0x12a0 [ 1453.166004][ T4722] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1453.171944][ T4722] kthread+0x29d/0x330 [ 1453.176052][ T4722] ? worker_clr_flags+0x1a0/0x1a0 [ 1453.181107][ T4722] ? kthread_blkcg+0xd0/0xd0 [ 1453.185726][ T4722] ret_from_fork+0x1f/0x30 [ 1453.190190][ T4722] [ 1453.193402][T18142] CPU: 0 PID: 18142 Comm: syz-executor Not tainted syzkaller #0 [ 1453.201092][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1453.211197][T18142] Call Trace: [ 1453.214516][T18142] [ 1453.217495][T18142] dump_stack_lvl+0x188/0x24e [ 1453.222229][T18142] ? show_regs_print_info+0x12/0x12 [ 1453.227496][T18142] ? load_image+0x410/0x410 [ 1453.232054][T18142] ? __might_sleep+0xd0/0xd0 [ 1453.236678][T18142] ? __lock_acquire+0x7c40/0x7c40 [ 1453.241747][T18142] should_fail_ex+0x390/0x4c0 [ 1453.246470][T18142] should_failslab+0x5/0x20 [ 1453.251014][T18142] slab_pre_alloc_hook+0x59/0x300 [ 1453.256094][T18142] kmem_cache_alloc+0x56/0x2f0 [ 1453.260897][T18142] ? mas_alloc_nodes+0x2ec/0x880 [ 1453.265885][T18142] mas_alloc_nodes+0x2ec/0x880 [ 1453.270693][T18142] mas_preallocate+0x162/0x3b0 [ 1453.275526][T18142] mmap_region+0xdcb/0x1c50 [ 1453.280103][T18142] ? file_mmap_ok+0x170/0x170 [ 1453.284813][T18142] ? mt_find+0x7e6/0x830 [ 1453.289155][T18142] ? mt_find+0x157/0x830 [ 1453.293465][T18142] ? mtree_destroy+0x30/0x30 [ 1453.298112][T18142] ? cap_mmap_addr+0x153/0x2c0 [ 1453.302944][T18142] ? file_mmap_ok+0x11c/0x170 [ 1453.307674][T18142] do_mmap+0x9ce/0x10d0 [ 1453.311889][T18142] ? mlock_future_check+0x100/0x100 [ 1453.317119][T18142] ? ima_file_mmap+0xf7/0x140 [ 1453.321836][T18142] ? ima_file_free+0x3e0/0x3e0 [ 1453.327081][T18142] ? common_file_perm+0x171/0x1c0 [ 1453.332159][T18142] vm_mmap_pgoff+0x1c1/0x2d0 [ 1453.336805][T18142] ? account_locked_vm+0xe0/0xe0 [ 1453.341799][T18142] ? __vm_munmap+0x1fb/0x2d0 [ 1453.346429][T18142] ? vm_mmap+0x66/0xb0 [ 1453.350574][T18142] elf_map+0xfd/0x2f0 [ 1453.354605][T18142] elf_load+0x87/0x480 [ 1453.358819][T18142] load_elf_binary+0x10e4/0x2820 [ 1453.363839][T18142] ? load_script+0x890/0x890 [ 1453.368475][T18142] ? do_raw_read_unlock+0x39/0x70 [ 1453.373535][T18142] ? _raw_read_unlock+0x24/0x40 [ 1453.378505][T18142] ? load_misc_binary+0x607/0xbe0 [ 1453.383571][T18142] bprm_execve+0xaf7/0x17e0 [ 1453.388140][T18142] ? alloc_bprm+0x710/0x710 [ 1453.392705][T18142] do_execveat_common+0x501/0x6b0 [ 1453.397782][T18142] __x64_sys_execve+0x8e/0xa0 [ 1453.402498][T18142] do_syscall_64+0x4c/0xa0 [ 1453.406953][T18142] ? clear_bhb_loop+0x60/0xb0 [ 1453.411670][T18142] ? clear_bhb_loop+0x60/0xb0 [ 1453.416388][T18142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.422333][T18142] RIP: 0033:0x7fdfca3c69d7 [ 1453.426801][T18142] Code: Unable to access opcode bytes at 0x7fdfca3c69ad. [ 1453.433855][T18142] RSP: 002b:00007fdfcb271de8 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 1453.442309][T18142] RAX: ffffffffffffffda RBX: 00007ffd03f35ece RCX: 00007fdfca3c69d7 [ 1453.450333][T18142] RDX: 00007ffd03f34c20 RSI: 00007ffd03f34e60 RDI: 00007ffd03f35ece [ 1453.458350][T18142] RBP: 00007fdfcb271e60 R08: 00007ffd03f349f0 R09: 0000000000000000 [ 1453.466360][T18142] R10: 0000000000000008 R11: 0000000000000206 R12: 00007ffd03f34e60 [ 1453.474390][T18142] R13: 00007ffd03f34c20 R14: 0000000000000000 R15: 0000000000000000 [ 1453.482440][T18142] [ 1453.487276][T14528] CPU: 1 PID: 14528 Comm: udevd Not tainted syzkaller #0 [ 1453.494462][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1453.504578][T14528] Call Trace: [ 1453.505279][T13349] FAULT_INJECTION: forcing a failure. [ 1453.505279][T13349] name failslab, interval 1, probability 1, space 0, times 895 [ 1453.507886][T14528] [ 1453.523660][T14528] dump_stack_lvl+0x188/0x24e [ 1453.528476][T14528] ? show_regs_print_info+0x12/0x12 [ 1453.533735][T14528] ? load_image+0x410/0x410 [ 1453.538407][T14528] ? __might_sleep+0xd0/0xd0 [ 1453.543048][T14528] ? __lock_acquire+0x7c40/0x7c40 [ 1453.548152][T14528] should_fail_ex+0x390/0x4c0 [ 1453.552913][T14528] should_failslab+0x5/0x20 [ 1453.557558][T14528] slab_pre_alloc_hook+0x59/0x300 [ 1453.562660][T14528] ? is_bpf_text_address+0x22/0x2a0 [ 1453.567916][T14528] kmem_cache_alloc+0x56/0x2f0 [ 1453.572721][T14528] ? __alloc_file+0x25/0x230 [ 1453.577361][T14528] __alloc_file+0x25/0x230 [ 1453.581819][T14528] alloc_empty_file+0x90/0x180 [ 1453.586632][T14528] path_openat+0x11c/0x2f10 [ 1453.591180][T14528] ? __lock_acquire+0x1465/0x7c40 [ 1453.596260][T14528] ? verify_lock_unused+0x140/0x140 [ 1453.601505][T14528] ? kasan_set_track+0x4b/0x70 [ 1453.606324][T14528] ? verify_lock_unused+0x140/0x140 [ 1453.611565][T14528] ? do_sys_openat2+0xdd/0x4f0 [ 1453.616373][T14528] ? __x64_sys_openat+0x135/0x160 [ 1453.621448][T14528] ? do_syscall_64+0x4c/0xa0 [ 1453.626088][T14528] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.632203][T14528] ? do_filp_open+0x420/0x420 [ 1453.636940][T14528] do_filp_open+0x1ee/0x420 [ 1453.641491][T14528] ? vfs_tmpfile+0x470/0x470 [ 1453.646143][T14528] ? _raw_spin_unlock+0x24/0x40 [ 1453.651033][T14528] ? alloc_fd+0x590/0x640 [ 1453.655415][T14528] do_sys_openat2+0x14b/0x4f0 [ 1453.660148][T14528] ? do_sys_open+0xe0/0xe0 [ 1453.664608][T14528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1453.670640][T14528] ? lock_chain_count+0x20/0x20 [ 1453.675548][T14528] __x64_sys_openat+0x135/0x160 [ 1453.680450][T14528] do_syscall_64+0x4c/0xa0 [ 1453.684921][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1453.689667][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1453.694400][T14528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.700339][T14528] RIP: 0033:0x7f7b336a7407 [ 1453.704793][T14528] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1453.724872][T14528] RSP: 002b:00007fffa26ae320 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1453.733336][T14528] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1453.741356][T14528] RDX: 0000000000080241 RSI: 00007fffa26ae880 RDI: ffffffffffffff9c [ 1453.749411][T14528] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1453.757416][T14528] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055a53ad77dfc [ 1453.765424][T14528] R13: 000055a53ad77dfc R14: 0000000000000001 R15: 000055a546419f10 [ 1453.773449][T14528] [ 1453.776508][T13349] CPU: 0 PID: 13349 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1453.784265][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1453.794398][T13349] Workqueue: events_unbound nsim_dev_trap_report_work [ 1453.801333][T13349] Call Trace: [ 1453.804722][T13349] [ 1453.807711][T13349] dump_stack_lvl+0x188/0x24e [ 1453.812555][T13349] ? show_regs_print_info+0x12/0x12 [ 1453.817819][T13349] ? load_image+0x410/0x410 [ 1453.822368][T13349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1453.828421][T13349] ? lock_chain_count+0x20/0x20 [ 1453.833340][T13349] should_fail_ex+0x390/0x4c0 [ 1453.838132][T13349] should_failslab+0x5/0x20 [ 1453.842677][T13349] slab_pre_alloc_hook+0x59/0x300 [ 1453.847752][T13349] ? slab_free_freelist_hook+0x133/0x1b0 [ 1453.853093][T17384] FAULT_INJECTION: forcing a failure. [ 1453.853093][T17384] name failslab, interval 1, probability 1, space 0, times 894 [ 1453.853438][T13349] kmem_cache_alloc_node+0x5a/0x310 [ 1453.871471][T13349] ? __alloc_skb+0xf9/0x7d0 [ 1453.876034][T13349] __alloc_skb+0xf9/0x7d0 [ 1453.880429][T13349] nsim_dev_trap_report_work+0x24f/0xa80 [ 1453.886138][T13349] ? process_one_work+0x7b4/0x1160 [ 1453.891305][T13349] process_one_work+0x8ab/0x1160 [ 1453.896302][T13349] ? worker_detach_from_pool+0x240/0x240 [ 1453.901986][T13349] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1453.907055][T13349] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1453.912647][T13349] ? wq_worker_running+0x97/0x190 [ 1453.917744][T13349] worker_thread+0xaf5/0x12a0 [ 1453.922498][T13349] kthread+0x29d/0x330 [ 1453.926603][T13349] ? worker_clr_flags+0x1a0/0x1a0 [ 1453.931676][T13349] ? kthread_blkcg+0xd0/0xd0 [ 1453.936321][T13349] ret_from_fork+0x1f/0x30 [ 1453.940803][T13349] [ 1453.945132][ T3638] FAULT_INJECTION: forcing a failure. [ 1453.945132][ T3638] name failslab, interval 1, probability 1, space 0, times 893 [ 1453.964950][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1453.972374][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1453.982498][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1453.988829][ T9] Call Trace: [ 1453.992171][ T9] [ 1453.995160][ T9] dump_stack_lvl+0x188/0x24e [ 1453.999919][ T9] ? show_regs_print_info+0x12/0x12 [ 1454.005201][ T9] ? load_image+0x410/0x410 [ 1454.009778][ T9] ? mark_lock+0x94/0x320 [ 1454.014209][ T9] should_fail_ex+0x390/0x4c0 [ 1454.018967][ T9] should_failslab+0x5/0x20 [ 1454.023617][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1454.028710][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.034803][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1454.040252][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.046317][ T9] __kmalloc+0xa3/0x240 [ 1454.050550][ T9] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.056424][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1454.062664][ T9] ? trace_contention_end+0x5f/0x170 [ 1454.068003][ T9] ? __mutex_lock+0x1ab/0xae0 [ 1454.072750][ T9] ? __lock_acquire+0x1465/0x7c40 [ 1454.077830][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1454.084138][ T9] ? mutex_lock_nested+0x10/0x10 [ 1454.089124][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1454.095243][ T9] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1454.101450][ T9] ? verify_lock_unused+0x140/0x140 [ 1454.106704][ T9] ? verify_lock_unused+0x140/0x140 [ 1454.111970][ T9] ? verify_lock_unused+0x140/0x140 [ 1454.117238][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1454.123007][ T9] ? mark_lock+0x94/0x320 [ 1454.127419][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1454.133462][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1454.138612][ T9] ? lock_chain_count+0x20/0x20 [ 1454.143495][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1454.149435][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1454.154699][ T9] ? skb_dequeue+0x120/0x150 [ 1454.159347][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1454.164594][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1454.169757][ T9] ? process_one_work+0x7b4/0x1160 [ 1454.174907][ T9] process_one_work+0x8ab/0x1160 [ 1454.179897][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1454.185596][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1454.190655][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1454.196234][ T9] ? wq_worker_running+0x97/0x190 [ 1454.201312][ T9] worker_thread+0xaf5/0x12a0 [ 1454.206058][ T9] kthread+0x29d/0x330 [ 1454.210153][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1454.215202][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1454.219820][ T9] ret_from_fork+0x1f/0x30 [ 1454.224282][ T9] [ 1454.227924][ C1] FAULT_INJECTION: forcing a failure. [ 1454.227924][ C1] name failslab, interval 1, probability 1, space 0, times 892 [ 1454.229606][T15081] FAULT_INJECTION: forcing a failure. [ 1454.229606][T15081] name failslab, interval 1, probability 1, space 0, times 892 [ 1454.240769][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1454.260875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1454.270973][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1454.277261][ C1] Call Trace: [ 1454.280566][ C1] [ 1454.283437][ C1] dump_stack_lvl+0x188/0x24e [ 1454.288151][ C1] ? show_regs_print_info+0x12/0x12 [ 1454.293389][ C1] ? load_image+0x410/0x410 [ 1454.297954][ C1] ? mark_lock+0x94/0x320 [ 1454.302318][ C1] ? verify_lock_unused+0x140/0x140 [ 1454.307559][ C1] should_fail_ex+0x390/0x4c0 [ 1454.312278][ C1] should_failslab+0x5/0x20 [ 1454.316803][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1454.321877][ C1] kmem_cache_alloc_node+0x5a/0x310 [ 1454.327109][ C1] ? __alloc_skb+0xf9/0x7d0 [ 1454.331650][ C1] __alloc_skb+0xf9/0x7d0 [ 1454.336032][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 1454.341093][ C1] ? __alloc_skb+0x7d0/0x7d0 [ 1454.345722][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 1454.351210][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1454.356796][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1454.362290][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1454.367867][ C1] __iterate_interfaces+0x225/0x4c0 [ 1454.373101][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1454.379375][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1454.386603][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1454.392867][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1454.399940][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1454.405178][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1454.410414][ C1] ? hw_scan_work+0xf00/0xf00 [ 1454.415134][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1454.420283][ C1] hrtimer_run_softirq+0x173/0x290 [ 1454.425425][ C1] handle_softirqs+0x291/0x910 [ 1454.430225][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1454.435190][ C1] ? do_softirq+0x210/0x210 [ 1454.439714][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1454.444880][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1454.450110][ C1] __irq_exit_rcu+0x13b/0x230 [ 1454.454821][ C1] ? irq_exit_rcu+0x20/0x20 [ 1454.459361][ C1] irq_exit_rcu+0x5/0x20 [ 1454.463724][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1454.469390][ C1] [ 1454.472349][ C1] [ 1454.475314][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1454.481344][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 1454.487292][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 a5 01 20 f7 e8 60 de 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1454.506964][ C1] RSP: 0018:ffffc900000e72e0 EFLAGS: 00000282 [ 1454.513079][ C1] RAX: f9a17baf1d9dbe00 RBX: 0000000000000000 RCX: f9a17baf1d9dbe00 [ 1454.521071][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1454.529067][ C1] RBP: ffffc900000e7380 R08: ffffffff90b0f2a7 R09: 1ffffffff2161e54 [ 1454.537068][ C1] R10: dffffc0000000000 R11: fffffbfff2161e55 R12: 0000000000000000 [ 1454.545061][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200001ce5c [ 1454.553077][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 1454.558951][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1454.564810][ C1] irqentry_exit+0x63/0x70 [ 1454.569262][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1454.574783][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x24e [ 1454.580284][ C1] Code: e8 75 7a 52 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 61 7a 52 f7 eb 06 e8 5a 7a 52 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1454.600147][ C1] RSP: 0018:ffffc900000e7440 EFLAGS: 00000293 [ 1454.606289][ C1] RAX: ffffffff8a2fb996 RBX: dffffc0000000000 RCX: ffff88813fec0000 [ 1454.614294][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1454.622302][ C1] RBP: ffffc900000e7530 R08: ffffffff90b0f2a7 R09: 1ffffffff2161e54 [ 1454.630320][ C1] R10: dffffc0000000000 R11: fffffbfff2161e55 R12: dffffc0000000004 [ 1454.638321][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200001ce8c [ 1454.646333][ C1] ? dump_stack_lvl+0x204/0x24e [ 1454.651249][ C1] ? show_regs_print_info+0x12/0x12 [ 1454.656485][ C1] ? load_image+0x410/0x410 [ 1454.661018][ C1] ? mark_lock+0x94/0x320 [ 1454.665395][ C1] should_fail_ex+0x390/0x4c0 [ 1454.670109][ C1] should_failslab+0x5/0x20 [ 1454.674655][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1454.679712][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.685737][ C1] __kmem_cache_alloc_node+0x4f/0x270 [ 1454.691141][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.697154][ C1] __kmalloc+0xa3/0x240 [ 1454.701350][ C1] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1454.707191][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1454.713395][ C1] ? trace_contention_end+0x5f/0x170 [ 1454.718746][ C1] ? __mutex_lock+0x1ab/0xae0 [ 1454.723461][ C1] ? __lock_acquire+0x1465/0x7c40 [ 1454.728515][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1454.734792][ C1] ? mutex_lock_nested+0x10/0x10 [ 1454.739778][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1454.745993][ C1] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1454.752120][ C1] ? verify_lock_unused+0x140/0x140 [ 1454.757363][ C1] ? verify_lock_unused+0x140/0x140 [ 1454.762973][ C1] ? verify_lock_unused+0x140/0x140 [ 1454.768264][ C1] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1454.774066][ C1] ? mark_lock+0x94/0x320 [ 1454.778453][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1454.784470][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1454.789535][ C1] ? lock_chain_count+0x20/0x20 [ 1454.794422][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1454.800360][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1454.805590][ C1] ? skb_dequeue+0x120/0x150 [ 1454.810214][ C1] ieee80211_iface_work+0x72c/0xc70 [ 1454.815459][ C1] cfg80211_wiphy_work+0x224/0x260 [ 1454.820611][ C1] ? process_one_work+0x7b4/0x1160 [ 1454.825750][ C1] process_one_work+0x8ab/0x1160 [ 1454.830731][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1454.836398][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1454.841452][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1454.847025][ C1] ? wq_worker_running+0x97/0x190 [ 1454.852088][ C1] worker_thread+0xaf5/0x12a0 [ 1454.856813][ C1] kthread+0x29d/0x330 [ 1454.860898][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1454.865952][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1454.870571][ C1] ret_from_fork+0x1f/0x30 [ 1454.875047][ C1] [ 1454.878095][T15081] CPU: 0 PID: 15081 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1454.885883][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1454.895987][T15081] Workqueue: events_unbound nsim_dev_trap_report_work [ 1454.902811][T15081] Call Trace: [ 1454.906130][T15081] [ 1454.909116][T15081] dump_stack_lvl+0x188/0x24e [ 1454.913855][T15081] ? show_regs_print_info+0x12/0x12 [ 1454.919280][T15081] ? load_image+0x410/0x410 [ 1454.923865][T15081] ? mark_lock+0x94/0x320 [ 1454.928261][T15081] should_fail_ex+0x390/0x4c0 [ 1454.932997][T15081] should_failslab+0x5/0x20 [ 1454.937716][T15081] slab_pre_alloc_hook+0x59/0x300 [ 1454.942792][T15081] kmem_cache_alloc_node+0x5a/0x310 [ 1454.948057][T15081] ? __alloc_skb+0xf9/0x7d0 [ 1454.952624][T15081] __alloc_skb+0xf9/0x7d0 [ 1454.957013][T15081] nsim_dev_trap_report_work+0x24f/0xa80 [ 1454.962712][T15081] ? process_one_work+0x7b4/0x1160 [ 1454.967881][T15081] process_one_work+0x8ab/0x1160 [ 1454.968528][ C1] FAULT_INJECTION: forcing a failure. [ 1454.968528][ C1] name failslab, interval 1, probability 1, space 0, times 891 [ 1454.972870][T15081] ? worker_detach_from_pool+0x240/0x240 [ 1454.991499][T15081] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1454.996569][T15081] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1455.002156][T15081] ? wq_worker_running+0x97/0x190 [ 1455.007248][T15081] worker_thread+0xaf5/0x12a0 [ 1455.011984][T15081] kthread+0x29d/0x330 [ 1455.016083][T15081] ? worker_clr_flags+0x1a0/0x1a0 [ 1455.021143][T15081] ? kthread_blkcg+0xd0/0xd0 [ 1455.025941][T15081] ret_from_fork+0x1f/0x30 [ 1455.030406][T15081] [ 1455.033458][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1455.038523][T14781] FAULT_INJECTION: forcing a failure. [ 1455.038523][T14781] name failslab, interval 1, probability 1, space 0, times 890 [ 1455.040778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.063671][ C1] Call Trace: [ 1455.066984][ C1] [ 1455.069941][ C1] dump_stack_lvl+0x188/0x24e [ 1455.074672][ C1] ? show_regs_print_info+0x12/0x12 [ 1455.079925][ C1] ? load_image+0x410/0x410 [ 1455.084474][ C1] ? mark_lock+0x94/0x320 [ 1455.088849][ C1] ? verify_lock_unused+0x140/0x140 [ 1455.094101][ C1] should_fail_ex+0x390/0x4c0 [ 1455.098822][ C1] should_failslab+0x5/0x20 [ 1455.103353][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1455.108431][ C1] kmem_cache_alloc_node+0x5a/0x310 [ 1455.113660][ C1] ? __alloc_skb+0xf9/0x7d0 [ 1455.118206][ C1] __alloc_skb+0xf9/0x7d0 [ 1455.122583][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 1455.127738][ C1] ? __alloc_skb+0x7d0/0x7d0 [ 1455.132568][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 1455.138056][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1455.143639][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1455.149132][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1455.154719][ C1] __iterate_interfaces+0x225/0x4c0 [ 1455.159956][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1455.166237][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1455.173475][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1455.179920][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1455.186984][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1455.192342][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1455.197622][ C1] ? hw_scan_work+0xf00/0xf00 [ 1455.202344][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1455.207502][ C1] hrtimer_run_softirq+0x173/0x290 [ 1455.212649][ C1] handle_softirqs+0x291/0x910 [ 1455.217472][ C1] ? run_ksoftirqd+0xa4/0x100 [ 1455.222183][ C1] ? do_softirq+0x210/0x210 [ 1455.226758][ C1] run_ksoftirqd+0xa4/0x100 [ 1455.231336][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1455.236596][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1455.242027][ C1] ? takeover_tasklets+0x770/0x770 [ 1455.247179][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1455.252436][ C1] smpboot_thread_fn+0x667/0xa30 [ 1455.257430][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 1455.262542][ C1] kthread+0x29d/0x330 [ 1455.266674][ C1] ? cpu_report_death+0x250/0x250 [ 1455.271785][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1455.276412][ C1] ret_from_fork+0x1f/0x30 [ 1455.280890][ C1] [ 1455.283946][T14781] CPU: 0 PID: 14781 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1455.291748][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.299181][ T5740] FAULT_INJECTION: forcing a failure. [ 1455.299181][ T5740] name failslab, interval 1, probability 1, space 0, times 889 [ 1455.301836][T14781] Workqueue: events_unbound nsim_dev_trap_report_work [ 1455.301880][T14781] Call Trace: [ 1455.301891][T14781] [ 1455.301903][T14781] dump_stack_lvl+0x188/0x24e [ 1455.332548][T14781] ? show_regs_print_info+0x12/0x12 [ 1455.337800][T14781] ? load_image+0x410/0x410 [ 1455.342345][T14781] ? mark_lock+0x94/0x320 [ 1455.346741][T14781] should_fail_ex+0x390/0x4c0 [ 1455.351475][T14781] should_failslab+0x5/0x20 [ 1455.356375][T14781] slab_pre_alloc_hook+0x59/0x300 [ 1455.361457][T14781] kmem_cache_alloc_node+0x5a/0x310 [ 1455.366702][T14781] ? __alloc_skb+0xf9/0x7d0 [ 1455.371262][T14781] __alloc_skb+0xf9/0x7d0 [ 1455.375732][T14781] nsim_dev_trap_report_work+0x24f/0xa80 [ 1455.381425][T14781] ? process_one_work+0x7b4/0x1160 [ 1455.386579][T14781] process_one_work+0x8ab/0x1160 [ 1455.391575][T14781] ? worker_detach_from_pool+0x240/0x240 [ 1455.397254][T14781] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1455.402324][T14781] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1455.407917][T14781] ? wq_worker_running+0x97/0x190 [ 1455.413002][T14781] worker_thread+0xaf5/0x12a0 [ 1455.417740][T14781] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1455.423689][T14781] kthread+0x29d/0x330 [ 1455.427803][T14781] ? worker_clr_flags+0x1a0/0x1a0 [ 1455.432895][T14781] ? kthread_blkcg+0xd0/0xd0 [ 1455.437551][T14781] ret_from_fork+0x1f/0x30 [ 1455.442044][T14781] [ 1455.445099][ T5740] CPU: 1 PID: 5740 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1455.452998][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.463296][ T5740] Workqueue: events_unbound nsim_dev_trap_report_work [ 1455.470125][ T5740] Call Trace: [ 1455.473450][ T5740] [ 1455.476431][ T5740] dump_stack_lvl+0x188/0x24e [ 1455.481183][ T5740] ? show_regs_print_info+0x12/0x12 [ 1455.486458][ T5740] ? load_image+0x410/0x410 [ 1455.491029][ T5740] ? mark_lock+0x94/0x320 [ 1455.495443][ T5740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1455.501520][ T5740] should_fail_ex+0x390/0x4c0 [ 1455.506281][ T5740] should_failslab+0x5/0x20 [ 1455.510854][ T5740] slab_pre_alloc_hook+0x59/0x300 [ 1455.515966][ T5740] kmem_cache_alloc_node+0x5a/0x310 [ 1455.521228][ T5740] ? slab_free_freelist_hook+0x133/0x1b0 [ 1455.526927][ T5740] ? __alloc_skb+0xf9/0x7d0 [ 1455.531512][ T5740] __alloc_skb+0xf9/0x7d0 [ 1455.536000][ T5740] nsim_dev_trap_report_work+0x24f/0xa80 [ 1455.541698][ T5740] ? process_one_work+0x7b4/0x1160 [ 1455.546411][ T11] FAULT_INJECTION: forcing a failure. [ 1455.546411][ T11] name failslab, interval 1, probability 1, space 0, times 888 [ 1455.546849][ T5740] process_one_work+0x8ab/0x1160 [ 1455.564647][ T5740] ? worker_detach_from_pool+0x240/0x240 [ 1455.570362][ T5740] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1455.575446][ T5740] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1455.581163][ T5740] ? wq_worker_running+0x97/0x190 [ 1455.586253][ T5740] worker_thread+0xaf5/0x12a0 [ 1455.591002][ T5740] kthread+0x29d/0x330 [ 1455.595104][ T5740] ? worker_clr_flags+0x1a0/0x1a0 [ 1455.600260][ T5740] ? kthread_blkcg+0xd0/0xd0 [ 1455.604905][ T5740] ret_from_fork+0x1f/0x30 [ 1455.609406][ T5740] [ 1455.612474][T17384] CPU: 0 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1455.620259][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.630398][T17384] Workqueue: events_unbound cfg80211_wiphy_work [ 1455.636715][T17384] Call Trace: [ 1455.640037][T17384] [ 1455.643006][T17384] dump_stack_lvl+0x188/0x24e [ 1455.647752][T17384] ? show_regs_print_info+0x12/0x12 [ 1455.653008][T17384] ? load_image+0x410/0x410 [ 1455.657587][T17384] ? mark_lock+0x94/0x320 [ 1455.661974][T17384] should_fail_ex+0x390/0x4c0 [ 1455.666710][T17384] should_failslab+0x5/0x20 [ 1455.671255][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1455.676325][T17384] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1455.682563][T17384] __kmem_cache_alloc_node+0x4f/0x270 [ 1455.688010][T17384] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1455.694048][T17384] __kmalloc+0xa3/0x240 [ 1455.698259][T17384] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1455.704165][T17384] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1455.710377][T17384] ? trace_contention_end+0x5f/0x170 [ 1455.715888][T17384] ? __mutex_lock+0x1ab/0xae0 [ 1455.720628][T17384] ? __lock_acquire+0x1465/0x7c40 [ 1455.725707][T17384] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1455.732001][T17384] ? mutex_lock_nested+0x10/0x10 [ 1455.737008][T17384] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1455.743129][T17384] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1455.749266][T17384] ? verify_lock_unused+0x140/0x140 [ 1455.754519][T17384] ? verify_lock_unused+0x140/0x140 [ 1455.759767][T17384] ? verify_lock_unused+0x140/0x140 [ 1455.765027][T17384] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1455.770810][T17384] ? mark_lock+0x94/0x320 [ 1455.775195][T17384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1455.781225][T17384] ? __lock_acquire+0x7c40/0x7c40 [ 1455.786328][T17384] ? lock_chain_count+0x20/0x20 [ 1455.791398][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1455.797343][T17384] ? lockdep_hardirqs_on+0x94/0x140 [ 1455.802586][T17384] ? skb_dequeue+0x120/0x150 [ 1455.807220][T17384] ieee80211_iface_work+0x72c/0xc70 [ 1455.812488][T17384] cfg80211_wiphy_work+0x224/0x260 [ 1455.817650][T17384] ? process_one_work+0x7b4/0x1160 [ 1455.822812][T17384] process_one_work+0x8ab/0x1160 [ 1455.827850][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1455.833532][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1455.838701][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1455.844292][T17384] ? wq_worker_running+0x97/0x190 [ 1455.849394][T17384] worker_thread+0xaf5/0x12a0 [ 1455.854140][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1455.860262][T17384] kthread+0x29d/0x330 [ 1455.864366][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1455.869458][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1455.874105][T17384] ret_from_fork+0x1f/0x30 [ 1455.878588][T17384] [ 1455.881675][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 1455.888692][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.898980][ T3638] Call Trace: [ 1455.902316][ T3638] [ 1455.905290][ T3638] dump_stack_lvl+0x188/0x24e [ 1455.910032][ T3638] ? show_regs_print_info+0x12/0x12 [ 1455.915300][ T3638] ? load_image+0x410/0x410 [ 1455.919860][ T3638] ? __might_sleep+0xd0/0xd0 [ 1455.924518][ T3638] ? __lock_acquire+0x7c40/0x7c40 [ 1455.929603][ T3638] should_fail_ex+0x390/0x4c0 [ 1455.934383][ T3638] should_failslab+0x5/0x20 [ 1455.938953][ T3638] slab_pre_alloc_hook+0x59/0x300 [ 1455.944054][ T3638] kmem_cache_alloc+0x56/0x2f0 [ 1455.948870][ T3638] ? getname_flags+0xb7/0x500 [ 1455.953716][ T3638] getname_flags+0xb7/0x500 [ 1455.958365][ T3638] do_sys_openat2+0xdd/0x4f0 [ 1455.963016][ T3638] ? do_sys_open+0xe0/0xe0 [ 1455.967483][ T3638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1455.973528][ T3638] ? lock_chain_count+0x20/0x20 [ 1455.978446][ T3638] __x64_sys_openat+0x135/0x160 [ 1455.983449][ T3638] do_syscall_64+0x4c/0xa0 [ 1455.987932][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 1455.992675][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 1455.997415][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.003372][ T3638] RIP: 0033:0x7f7b336a7407 [ 1456.007844][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1456.027496][ T3638] RSP: 002b:00007fffa26aed70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1456.035955][ T3638] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1456.043973][ T3638] RDX: 0000000000080141 RSI: 000055a53ad7702e RDI: ffffffffffffff9c [ 1456.052013][ T3638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1456.060030][ T3638] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 1456.068052][ T3638] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 1456.076087][ T3638] [ 1456.079145][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1456.086591][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.096707][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 1456.103033][ T11] Call Trace: [ 1456.106375][ T11] [ 1456.109376][ T11] dump_stack_lvl+0x188/0x24e [ 1456.114236][ T11] ? show_regs_print_info+0x12/0x12 [ 1456.119604][ T11] ? load_image+0x410/0x410 [ 1456.124265][ T11] ? mark_lock+0x94/0x320 [ 1456.128684][ T11] should_fail_ex+0x390/0x4c0 [ 1456.133439][ T11] should_failslab+0x5/0x20 [ 1456.138005][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1456.143099][ T11] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1456.149162][ T11] __kmem_cache_alloc_node+0x4f/0x270 [ 1456.154605][ T11] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1456.160743][ T11] __kmalloc+0xa3/0x240 [ 1456.164958][ T11] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1456.170811][ T11] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1456.177012][ T11] ? trace_contention_end+0x5f/0x170 [ 1456.182339][ T11] ? __mutex_lock+0x1ab/0xae0 [ 1456.187079][ T11] ? __lock_acquire+0x1465/0x7c40 [ 1456.192167][ T11] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1456.198543][ T11] ? mutex_lock_nested+0x10/0x10 [ 1456.203576][ T11] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1456.209701][ T11] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1456.215821][ T11] ? verify_lock_unused+0x140/0x140 [ 1456.221156][ T11] ? verify_lock_unused+0x140/0x140 [ 1456.226397][ T11] ? verify_lock_unused+0x140/0x140 [ 1456.231652][ T11] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1456.237438][ T11] ? mark_lock+0x94/0x320 [ 1456.241825][ T11] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1456.247852][ T11] ? __lock_acquire+0x7c40/0x7c40 [ 1456.252916][ T11] ? lock_chain_count+0x20/0x20 [ 1456.257901][ T11] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1456.263840][ T11] ? lockdep_hardirqs_on+0x94/0x140 [ 1456.269102][ T11] ? skb_dequeue+0x120/0x150 [ 1456.273740][ T11] ieee80211_iface_work+0x72c/0xc70 [ 1456.278990][ T11] cfg80211_wiphy_work+0x224/0x260 [ 1456.284155][ T11] ? process_one_work+0x7b4/0x1160 [ 1456.289343][ T11] process_one_work+0x8ab/0x1160 [ 1456.294354][ T11] ? worker_detach_from_pool+0x240/0x240 [ 1456.300046][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1456.305108][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1456.310695][ T11] ? wq_worker_running+0x97/0x190 [ 1456.316484][ T11] worker_thread+0xaf5/0x12a0 [ 1456.321218][ T11] kthread+0x29d/0x330 [ 1456.325310][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 1456.330447][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1456.335073][ T11] ret_from_fork+0x1f/0x30 [ 1456.339540][ T11] [ 1456.343604][ T3638] udevd[3638]: could not touch /run/udev/queue: Cannot allocate memory [ 1456.355558][ T3627] FAULT_INJECTION: forcing a failure. [ 1456.355558][ T3627] name failslab, interval 1, probability 1, space 0, times 882 [ 1456.423394][T17168] udevd[17168]: failed to send result of seq 22258 to main daemon: No buffer space available [ 1456.436388][T14329] FAULT_INJECTION: forcing a failure. [ 1456.436388][T14329] name failslab, interval 1, probability 1, space 0, times 879 [ 1456.444428][T14327] FAULT_INJECTION: forcing a failure. [ 1456.444428][T14327] name failslab, interval 1, probability 1, space 0, times 879 [ 1456.464424][ T5498] FAULT_INJECTION: forcing a failure. [ 1456.464424][ T5498] name failslab, interval 1, probability 1, space 0, times 879 [ 1456.477306][ T5498] CPU: 1 PID: 5498 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1456.485013][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.495131][ T5498] Workqueue: events_unbound nsim_dev_trap_report_work [ 1456.501947][ T5498] Call Trace: [ 1456.505262][ T5498] [ 1456.508224][ T5498] dump_stack_lvl+0x188/0x24e [ 1456.512955][ T5498] ? show_regs_print_info+0x12/0x12 [ 1456.518199][ T5498] ? load_image+0x410/0x410 [ 1456.522742][ T5498] ? mark_lock+0x94/0x320 [ 1456.527120][ T5498] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1456.533150][ T5498] should_fail_ex+0x390/0x4c0 [ 1456.537898][ T5498] should_failslab+0x5/0x20 [ 1456.542438][ T5498] slab_pre_alloc_hook+0x59/0x300 [ 1456.547519][ T5498] kmem_cache_alloc_node+0x5a/0x310 [ 1456.553293][ T5498] ? slab_free_freelist_hook+0x133/0x1b0 [ 1456.559173][ T5498] ? __alloc_skb+0xf9/0x7d0 [ 1456.563728][ T5498] __alloc_skb+0xf9/0x7d0 [ 1456.568107][ T5498] nsim_dev_trap_report_work+0x24f/0xa80 [ 1456.573802][ T5498] ? process_one_work+0x7b4/0x1160 [ 1456.578963][ T5498] process_one_work+0x8ab/0x1160 [ 1456.583963][ T5498] ? worker_detach_from_pool+0x240/0x240 [ 1456.589647][ T5498] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1456.594717][ T5498] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1456.600308][ T5498] ? wq_worker_running+0x97/0x190 [ 1456.605388][ T5498] worker_thread+0xaf5/0x12a0 [ 1456.610114][ T5498] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1456.616055][ T5498] kthread+0x29d/0x330 [ 1456.620177][ T5498] ? worker_clr_flags+0x1a0/0x1a0 [ 1456.625259][ T5498] ? kthread_blkcg+0xd0/0xd0 [ 1456.629910][ T5498] ret_from_fork+0x1f/0x30 [ 1456.634412][ T5498] [ 1456.647430][T14715] FAULT_INJECTION: forcing a failure. [ 1456.647430][T14715] name failslab, interval 1, probability 1, space 0, times 875 [ 1456.661317][ T4259] FAULT_INJECTION: forcing a failure. [ 1456.661317][ T4259] name failslab, interval 1, probability 1, space 0, times 875 [ 1456.674824][ T3627] CPU: 0 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1456.681840][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.692035][ T3627] Call Trace: [ 1456.695366][ T3627] [ 1456.698341][ T3627] dump_stack_lvl+0x188/0x24e [ 1456.698457][ T3638] FAULT_INJECTION: forcing a failure. [ 1456.698457][ T3638] name failslab, interval 1, probability 1, space 0, times 874 [ 1456.703060][ T3627] ? show_regs_print_info+0x12/0x12 [ 1456.703095][ T3627] ? load_image+0x410/0x410 [ 1456.725615][ T3627] ? __might_sleep+0xd0/0xd0 [ 1456.730238][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1456.735307][ T3627] should_fail_ex+0x390/0x4c0 [ 1456.740027][ T3627] should_failslab+0x5/0x20 [ 1456.744563][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1456.749650][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1456.754913][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1456.759487][ T3627] __alloc_skb+0xf9/0x7d0 [ 1456.764575][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1456.769752][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1456.775019][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1456.779664][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1456.784735][ T3627] ? __rwlock_init+0x140/0x140 [ 1456.789532][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1456.794794][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1456.799950][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1456.804495][ T3627] ? aa_af_perm+0x340/0x340 [ 1456.809122][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1456.814116][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1456.820589][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1456.826186][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1456.831514][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1456.837028][ T3627] __sys_sendto+0x497/0x650 [ 1456.841579][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1456.847023][ T3627] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 1456.852803][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1456.858834][ T3627] ? lock_chain_count+0x20/0x20 [ 1456.863731][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1456.868451][ T3627] do_syscall_64+0x4c/0xa0 [ 1456.872910][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1456.877622][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1456.882331][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.888268][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1456.892729][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1456.912396][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1456.920865][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1456.928887][ T3627] RDX: 00000000000000f9 RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1456.936893][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1456.944895][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1456.952915][ T3627] R13: 00007fffffe5f530 R14: 00000000000000de R15: 00007fffffe5f530 [ 1456.960937][ T3627] [ 1456.968130][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 1456.975151][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.985277][ T3638] Call Trace: [ 1456.988604][ T3638] [ 1456.991581][ T3638] dump_stack_lvl+0x188/0x24e [ 1456.996329][ T3638] ? show_regs_print_info+0x12/0x12 [ 1457.001591][ T3638] ? load_image+0x410/0x410 [ 1457.006165][ T3638] ? __might_sleep+0xd0/0xd0 [ 1457.010837][ T3638] ? __lock_acquire+0x7c40/0x7c40 [ 1457.015940][ T3638] should_fail_ex+0x390/0x4c0 [ 1457.020700][ T3638] should_failslab+0x5/0x20 [ 1457.025264][ T3638] slab_pre_alloc_hook+0x59/0x300 [ 1457.030339][ T3638] ? is_bpf_text_address+0x22/0x2a0 [ 1457.035646][ T3638] kmem_cache_alloc+0x56/0x2f0 [ 1457.040463][ T3638] ? __alloc_file+0x25/0x230 [ 1457.045123][ T3638] __alloc_file+0x25/0x230 [ 1457.049588][ T3638] alloc_empty_file+0x90/0x180 [ 1457.054391][ T3638] path_openat+0x11c/0x2f10 [ 1457.058933][ T3638] ? __lock_acquire+0x1465/0x7c40 [ 1457.064099][ T3638] ? verify_lock_unused+0x140/0x140 [ 1457.069355][ T3638] ? kasan_set_track+0x4b/0x70 [ 1457.074202][ T3638] ? verify_lock_unused+0x140/0x140 [ 1457.079444][ T3638] ? do_sys_openat2+0xdd/0x4f0 [ 1457.084244][ T3638] ? __x64_sys_openat+0x135/0x160 [ 1457.089305][ T3638] ? do_syscall_64+0x4c/0xa0 [ 1457.093948][ T3638] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.100062][ T3638] ? do_filp_open+0x420/0x420 [ 1457.104799][ T3638] do_filp_open+0x1ee/0x420 [ 1457.109353][ T3638] ? vfs_tmpfile+0x470/0x470 [ 1457.114004][ T3638] ? _raw_spin_unlock+0x24/0x40 [ 1457.118896][ T3638] ? alloc_fd+0x590/0x640 [ 1457.123449][ T3638] do_sys_openat2+0x14b/0x4f0 [ 1457.128261][ T3638] ? __bpf_trace_rseq_ip_fixup+0x40/0x40 [ 1457.128731][ T9] FAULT_INJECTION: forcing a failure. [ 1457.128731][ T9] name failslab, interval 1, probability 1, space 0, times 871 [ 1457.133923][ T3638] ? do_sys_open+0xe0/0xe0 [ 1457.151257][ T3638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1457.157315][ T3638] ? lock_chain_count+0x20/0x20 [ 1457.162241][ T3638] __x64_sys_openat+0x135/0x160 [ 1457.167152][ T3638] do_syscall_64+0x4c/0xa0 [ 1457.171628][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 1457.176361][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 1457.181094][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.187049][ T3638] RIP: 0033:0x7f7b336a7407 [ 1457.191517][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1457.211164][ T3638] RSP: 002b:00007fffa26aed70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1457.219629][ T3638] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1457.227691][ T3638] RDX: 0000000000080141 RSI: 000055a53ad7702e RDI: ffffffffffffff9c [ 1457.235700][ T3638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1457.243698][ T3638] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 1457.251713][ T3638] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 1457.259758][ T3638] [ 1457.263390][ T5740] FAULT_INJECTION: forcing a failure. [ 1457.263390][ T5740] name failslab, interval 1, probability 1, space 0, times 871 [ 1457.277278][ T5740] CPU: 0 PID: 5740 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1457.285089][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1457.295197][ T5740] Workqueue: events_unbound nsim_dev_trap_report_work [ 1457.302011][ T5740] Call Trace: [ 1457.305349][ T5740] [ 1457.308309][ T5740] dump_stack_lvl+0x188/0x24e [ 1457.313122][ T5740] ? show_regs_print_info+0x12/0x12 [ 1457.318375][ T5740] ? load_image+0x410/0x410 [ 1457.322927][ T5740] ? mark_lock+0x94/0x320 [ 1457.327330][ T5740] should_fail_ex+0x390/0x4c0 [ 1457.332070][ T5740] should_failslab+0x5/0x20 [ 1457.336626][ T5740] slab_pre_alloc_hook+0x59/0x300 [ 1457.341699][ T5740] kmem_cache_alloc_node+0x5a/0x310 [ 1457.346939][ T5740] ? __alloc_skb+0xf9/0x7d0 [ 1457.351492][ T5740] __alloc_skb+0xf9/0x7d0 [ 1457.355864][ T5740] nsim_dev_trap_report_work+0x24f/0xa80 [ 1457.361555][ T5740] ? process_one_work+0x7b4/0x1160 [ 1457.366717][ T5740] process_one_work+0x8ab/0x1160 [ 1457.371715][ T5740] ? worker_detach_from_pool+0x240/0x240 [ 1457.377407][ T5740] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1457.382491][ T5740] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1457.388089][ T5740] ? wq_worker_running+0x97/0x190 [ 1457.393198][ T5740] worker_thread+0xaf5/0x12a0 [ 1457.397958][ T5740] kthread+0x29d/0x330 [ 1457.402101][ T5740] ? worker_clr_flags+0x1a0/0x1a0 [ 1457.407186][ T5740] ? kthread_blkcg+0xd0/0xd0 [ 1457.411818][ T5740] ret_from_fork+0x1f/0x30 [ 1457.416291][ T5740] [ 1457.419339][T14715] CPU: 1 PID: 14715 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1457.427119][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1457.437219][T14715] Workqueue: events_unbound cfg80211_wiphy_work [ 1457.443507][T14715] Call Trace: [ 1457.446812][T14715] [ 1457.449773][T14715] dump_stack_lvl+0x188/0x24e [ 1457.454504][T14715] ? lockdep_hardirqs_on+0x94/0x140 [ 1457.459845][T14715] ? show_regs_print_info+0x12/0x12 [ 1457.465206][T14715] ? load_image+0x410/0x410 [ 1457.469753][T14715] ? do_raw_spin_unlock+0x11d/0x230 [ 1457.474993][T14715] should_fail_ex+0x390/0x4c0 [ 1457.479726][T14715] should_failslab+0x5/0x20 [ 1457.484266][T14715] slab_pre_alloc_hook+0x59/0x300 [ 1457.489354][T14715] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1457.495390][T14715] __kmem_cache_alloc_node+0x4f/0x270 [ 1457.500799][T14715] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1457.506814][T14715] __kmalloc+0xa3/0x240 [ 1457.511015][T14715] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1457.516867][T14715] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1457.523080][T14715] ? __lock_acquire+0x138a/0x7c40 [ 1457.528182][T14715] ? __lock_acquire+0x7c40/0x7c40 [ 1457.533267][T14715] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1457.539392][T14715] ieee80211_bss_info_update+0x7df/0xbf0 [ 1457.545067][T14715] ? ieee80211_rx_bss_put+0x60/0x60 [ 1457.550492][T14715] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1457.556174][T14715] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1457.562042][T14715] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1457.568247][T14715] ? verify_lock_unused+0x140/0x140 [ 1457.573551][T14715] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1457.579856][T14715] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1457.585710][T14715] ? mark_lock+0x94/0x320 [ 1457.590082][T14715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1457.596117][T14715] ? __lock_acquire+0x7c40/0x7c40 [ 1457.601190][T14715] ? lock_chain_count+0x20/0x20 [ 1457.606084][T14715] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1457.612024][T14715] ? lockdep_hardirqs_on+0x94/0x140 [ 1457.617256][T14715] ? skb_dequeue+0x120/0x150 [ 1457.621905][T14715] ieee80211_iface_work+0x72c/0xc70 [ 1457.627174][T14715] cfg80211_wiphy_work+0x224/0x260 [ 1457.632332][T14715] ? process_one_work+0x7b4/0x1160 [ 1457.637538][T14715] process_one_work+0x8ab/0x1160 [ 1457.642557][T14715] ? worker_detach_from_pool+0x240/0x240 [ 1457.648282][T14715] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1457.653352][T14715] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1457.658953][T14715] ? wq_worker_running+0x97/0x190 [ 1457.664040][T14715] worker_thread+0xaf5/0x12a0 [ 1457.668794][T14715] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1457.674747][T14715] kthread+0x29d/0x330 [ 1457.678848][T14715] ? worker_clr_flags+0x1a0/0x1a0 [ 1457.683949][T14715] ? kthread_blkcg+0xd0/0xd0 [ 1457.683979][ C0] FAULT_INJECTION: forcing a failure. [ 1457.683979][ C0] name failslab, interval 1, probability 1, space 0, times 866 [ 1457.688573][T14715] ret_from_fork+0x1f/0x30 [ 1457.688622][T14715] [ 1457.708889][ C0] CPU: 0 PID: 14327 Comm: udevd Not tainted syzkaller #0 [ 1457.716052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1457.726514][ C0] Call Trace: [ 1457.729826][ C0] [ 1457.732707][ C0] dump_stack_lvl+0x188/0x24e [ 1457.737444][ C0] ? show_regs_print_info+0x12/0x12 [ 1457.742671][ C0] ? load_image+0x410/0x410 [ 1457.747205][ C0] ? mark_lock+0x94/0x320 [ 1457.751565][ C0] ? verify_lock_unused+0x140/0x140 [ 1457.756828][ C0] should_fail_ex+0x390/0x4c0 [ 1457.761543][ C0] should_failslab+0x5/0x20 [ 1457.766077][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1457.771149][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1457.776548][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1457.781097][ C0] __alloc_skb+0xf9/0x7d0 [ 1457.785476][ C0] __netdev_alloc_skb+0x114/0x4f0 [ 1457.790538][ C0] ? __alloc_skb+0x7d0/0x7d0 [ 1457.795199][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 1457.800686][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1457.806275][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1457.811761][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1457.817447][ C0] __iterate_interfaces+0x225/0x4c0 [ 1457.822670][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1457.829025][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1457.836277][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1457.842624][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1457.849679][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1457.854907][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1457.860140][ C0] ? hw_scan_work+0xf00/0xf00 [ 1457.864852][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1457.869993][ C0] hrtimer_run_softirq+0x173/0x290 [ 1457.875165][ C0] handle_softirqs+0x291/0x910 [ 1457.879955][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1457.884827][ C0] ? do_softirq+0x210/0x210 [ 1457.889356][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1457.894500][ C0] __irq_exit_rcu+0x13b/0x230 [ 1457.899202][ C0] ? irq_exit_rcu+0x20/0x20 [ 1457.903738][ C0] irq_exit_rcu+0x5/0x20 [ 1457.908002][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1457.913692][ C0] [ 1457.916656][ C0] [ 1457.919611][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1457.925638][ C0] RIP: 0010:__printk_cpu_sync_wait+0xe/0x30 [ 1457.931572][ C0] Code: 38 00 74 08 48 89 df e8 20 f3 6b 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 0f 1f 44 00 00 e8 cb c5 1a 00 f3 90 48 c7 c7 00 9a a0 8c 04 00 00 00 e8 08 f4 6b 00 8b 05 c2 2b 39 0b 83 f8 ff 74 07 e8 [ 1457.951223][ C0] RSP: 0018:ffffc9000344fb78 EFLAGS: 00000293 [ 1457.957362][ C0] RAX: ffffffff81676e48 RBX: 0000000000000200 RCX: ffff88807bf8bc00 [ 1457.965360][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8ca09a00 [ 1457.973360][ C0] RBP: ffffc9000344fc80 R08: 0000000000000003 R09: 0000000000000004 [ 1457.981353][ C0] R10: dffffc0000000000 R11: fffffbfff1941340 R12: dffffc0000000004 [ 1457.989347][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000689f74 [ 1457.997444][ C0] ? __printk_cpu_sync_wait+0x28/0x30 [ 1458.002873][ C0] ? __printk_cpu_sync_wait+0x28/0x30 [ 1458.008272][ C0] dump_stack_lvl+0x161/0x24e [ 1458.012993][ C0] ? show_regs_print_info+0x12/0x12 [ 1458.018239][ C0] ? load_image+0x410/0x410 [ 1458.022789][ C0] ? __might_sleep+0xd0/0xd0 [ 1458.027401][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1458.032454][ C0] should_fail_ex+0x390/0x4c0 [ 1458.037170][ C0] should_failslab+0x5/0x20 [ 1458.041697][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1458.046753][ C0] kmem_cache_alloc+0x56/0x2f0 [ 1458.051539][ C0] ? getname_flags+0xb7/0x500 [ 1458.056240][ C0] getname_flags+0xb7/0x500 [ 1458.060773][ C0] do_sys_openat2+0xdd/0x4f0 [ 1458.065392][ C0] ? do_sys_open+0xe0/0xe0 [ 1458.069834][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1458.075841][ C0] ? lock_chain_count+0x20/0x20 [ 1458.080725][ C0] __x64_sys_openat+0x135/0x160 [ 1458.085634][ C0] do_syscall_64+0x4c/0xa0 [ 1458.090119][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1458.094837][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1458.099561][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.105488][ C0] RIP: 0033:0x7f7b336a7407 [ 1458.109930][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1458.129564][ C0] RSP: 002b:00007fffa26aa690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1458.138102][ C0] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1458.146103][ C0] RDX: 0000000000080000 RSI: 00007fffa26aa800 RDI: ffffffffffffff9c [ 1458.154099][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1458.162100][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a53ad777f5 [ 1458.170187][ C0] R13: 000055a53ad777f5 R14: 0000000000000001 R15: 000055a53ad92140 [ 1458.178280][ C0] [ 1458.184142][ T4455] FAULT_INJECTION: forcing a failure. [ 1458.184142][ T4455] name failslab, interval 1, probability 1, space 0, times 864 [ 1458.188092][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1458.204328][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1458.214414][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1458.220717][ T9] Call Trace: [ 1458.224031][ T9] [ 1458.227001][ T9] dump_stack_lvl+0x188/0x24e [ 1458.231827][ T9] ? show_regs_print_info+0x12/0x12 [ 1458.237081][ T9] ? load_image+0x410/0x410 [ 1458.241626][ T9] ? mark_lock+0x94/0x320 [ 1458.246022][ T9] should_fail_ex+0x390/0x4c0 [ 1458.250827][ T9] should_failslab+0x5/0x20 [ 1458.255363][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1458.260528][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1458.266548][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1458.271996][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1458.278034][ T9] __kmalloc+0xa3/0x240 [ 1458.282236][ T9] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1458.288085][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1458.294317][ T9] ? trace_contention_end+0x5f/0x170 [ 1458.299676][ T9] ? __mutex_lock+0x1ab/0xae0 [ 1458.304431][ T9] ? __lock_acquire+0x1465/0x7c40 [ 1458.309511][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1458.315901][ T9] ? mutex_lock_nested+0x10/0x10 [ 1458.320906][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1458.327097][ T9] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1458.333219][ T9] ? verify_lock_unused+0x140/0x140 [ 1458.338471][ T9] ? verify_lock_unused+0x140/0x140 [ 1458.343744][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1458.349529][ T9] ? mark_lock+0x94/0x320 [ 1458.353940][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1458.360102][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1458.365179][ T9] ? lock_chain_count+0x20/0x20 [ 1458.370110][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1458.376060][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1458.381414][ T9] ? skb_dequeue+0x120/0x150 [ 1458.386062][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1458.391333][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1458.396503][ T9] ? process_one_work+0x7b4/0x1160 [ 1458.401753][ T9] process_one_work+0x8ab/0x1160 [ 1458.406752][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1458.412461][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1458.417617][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1458.423279][ T9] ? wq_worker_running+0x97/0x190 [ 1458.428360][ T9] worker_thread+0xaf5/0x12a0 [ 1458.433116][ T9] kthread+0x29d/0x330 [ 1458.437224][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1458.442328][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1458.446965][ T9] ret_from_fork+0x1f/0x30 [ 1458.451450][ T9] [ 1458.454526][ T4455] CPU: 1 PID: 4455 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1458.462229][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1458.472354][ T4455] Workqueue: events_unbound nsim_dev_trap_report_work [ 1458.479205][ T4455] Call Trace: [ 1458.482626][ T4455] [ 1458.485779][ T4455] dump_stack_lvl+0x188/0x24e [ 1458.490544][ T4455] ? show_regs_print_info+0x12/0x12 [ 1458.495794][ T4455] ? load_image+0x410/0x410 [ 1458.500347][ T4455] ? mark_lock+0x94/0x320 [ 1458.504745][ T4455] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1458.510904][ T4455] should_fail_ex+0x390/0x4c0 [ 1458.515744][ T4455] should_failslab+0x5/0x20 [ 1458.520303][ T4455] slab_pre_alloc_hook+0x59/0x300 [ 1458.525468][ T4455] kmem_cache_alloc_node+0x5a/0x310 [ 1458.530712][ T4455] ? slab_free_freelist_hook+0x133/0x1b0 [ 1458.536399][ T4455] ? __alloc_skb+0xf9/0x7d0 [ 1458.540971][ T4455] __alloc_skb+0xf9/0x7d0 [ 1458.545365][ T4455] nsim_dev_trap_report_work+0x24f/0xa80 [ 1458.551080][ T4455] ? process_one_work+0x7b4/0x1160 [ 1458.556372][ T4455] process_one_work+0x8ab/0x1160 [ 1458.561485][ T4455] ? worker_detach_from_pool+0x240/0x240 [ 1458.567196][ T4455] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1458.572358][ T4455] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1458.577955][ T4455] ? wq_worker_running+0x97/0x190 [ 1458.583043][ T4455] worker_thread+0xaf5/0x12a0 [ 1458.587803][ T4455] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1458.593768][ T4455] kthread+0x29d/0x330 [ 1458.597892][ T4455] ? worker_clr_flags+0x1a0/0x1a0 [ 1458.602975][ T4455] ? kthread_blkcg+0xd0/0xd0 [ 1458.607614][ T4455] ret_from_fork+0x1f/0x30 [ 1458.612107][ T4455] [ 1458.616351][T14329] CPU: 1 PID: 14329 Comm: udevd Not tainted syzkaller #0 [ 1458.623453][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1458.633582][T14329] Call Trace: [ 1458.636908][T14329] [ 1458.639894][T14329] dump_stack_lvl+0x188/0x24e [ 1458.644640][T14329] ? show_regs_print_info+0x12/0x12 [ 1458.649908][T14329] ? load_image+0x410/0x410 [ 1458.654479][T14329] ? __might_sleep+0xd0/0xd0 [ 1458.659131][T14329] ? __lock_acquire+0x7c40/0x7c40 [ 1458.664250][T14329] ? __rseq_handle_notify_resume+0x3a9/0x11e0 [ 1458.669976][ C0] FAULT_INJECTION: forcing a failure. [ 1458.669976][ C0] name failslab, interval 1, probability 1, space 0, times 862 [ 1458.670367][T14329] should_fail_ex+0x390/0x4c0 [ 1458.688045][T14329] should_failslab+0x5/0x20 [ 1458.692609][T14329] slab_pre_alloc_hook+0x59/0x300 [ 1458.697701][T14329] kmem_cache_alloc+0x56/0x2f0 [ 1458.702539][T14329] ? getname_flags+0xb7/0x500 [ 1458.707278][T14329] getname_flags+0xb7/0x500 [ 1458.711837][T14329] ? syscall_enter_from_user_mode+0x21/0x80 [ 1458.717809][T14329] __x64_sys_unlink+0x38/0x50 [ 1458.722579][T14329] do_syscall_64+0x4c/0xa0 [ 1458.727041][T14329] ? clear_bhb_loop+0x60/0xb0 [ 1458.731756][T14329] ? clear_bhb_loop+0x60/0xb0 [ 1458.736571][T14329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.742510][T14329] RIP: 0033:0x7f7b33715937 [ 1458.746994][T14329] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1458.766636][T14329] RSP: 002b:00007fffa26ae828 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1458.775083][T14329] RAX: ffffffffffffffda RBX: 00007fffa26ae830 RCX: 00007f7b33715937 [ 1458.783094][T14329] RDX: 0000000000000000 RSI: 00000000000003de RDI: 00007fffa26ae830 [ 1458.791096][T14329] RBP: 000055a546419f10 R08: 0000000000000000 R09: 0000000000000000 [ 1458.799118][T14329] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000aba9500 [ 1458.807116][T14329] R13: 0000000003938700 R14: 000055a53ad92100 R15: 000055a53ad92140 [ 1458.815131][T14329] [ 1458.818292][ C0] CPU: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 [ 1458.825632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1458.835823][ C0] Call Trace: [ 1458.839131][ C0] [ 1458.841999][ C0] dump_stack_lvl+0x188/0x24e [ 1458.846803][ C0] ? show_regs_print_info+0x12/0x12 [ 1458.852040][ C0] ? load_image+0x410/0x410 [ 1458.856586][ C0] should_fail_ex+0x390/0x4c0 [ 1458.861301][ C0] should_failslab+0x5/0x20 [ 1458.865931][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1458.871262][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1458.876506][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1458.881056][ C0] __alloc_skb+0xf9/0x7d0 [ 1458.885430][ C0] skb_copy+0x122/0x6f0 [ 1458.889652][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1458.895761][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1458.901700][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1458.908068][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1458.913484][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1458.919417][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1458.924904][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1458.930909][ C0] __iterate_interfaces+0x225/0x4c0 [ 1458.936215][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1458.942581][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1458.949821][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1458.956184][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1458.963244][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1458.968747][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1458.973975][ C0] ? hw_scan_work+0xf00/0xf00 [ 1458.978682][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1458.984255][ C0] hrtimer_run_softirq+0x173/0x290 [ 1458.989394][ C0] handle_softirqs+0x291/0x910 [ 1458.994372][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1458.999258][ C0] ? do_softirq+0x210/0x210 [ 1459.003780][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1459.008910][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1459.014121][ C0] __irq_exit_rcu+0x13b/0x230 [ 1459.018818][ C0] ? irq_exit_rcu+0x20/0x20 [ 1459.023382][ C0] irq_exit_rcu+0x5/0x20 [ 1459.027641][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1459.033286][ C0] [ 1459.036408][ C0] [ 1459.039440][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1459.045440][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1459.051963][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 89 1e f7 65 8b 05 b0 3a c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1459.071593][ C0] RSP: 0018:ffffc90000157c20 EFLAGS: 00000206 [ 1459.077683][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ee1185d797a33800 [ 1459.085773][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1459.093899][ C0] RBP: ffffc90000157cb0 R08: ffffffff8cb330c3 R09: 1ffffffff1966618 [ 1459.101895][ C0] R10: dffffc0000000000 R11: fffffbfff1966619 R12: dffffc0000000000 [ 1459.109889][ C0] R13: ffffffff8cb3316c R14: ffffffff8cb330c0 R15: 1ffff9200002af84 [ 1459.118140][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1459.123031][ C0] ? rcu_implicit_dynticks_qs+0xc6/0xb50 [ 1459.128881][ C0] rcu_gp_fqs_loop+0x6c3/0x1350 [ 1459.133806][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1459.139995][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1459.145063][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 1459.149857][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 1459.154741][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1459.159973][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1459.165214][ C0] rcu_gp_kthread+0x99/0x3b0 [ 1459.169869][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1459.175102][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1459.181178][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1459.186159][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 1459.191244][ C0] kthread+0x29d/0x330 [ 1459.195358][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1459.200492][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1459.205097][ C0] ret_from_fork+0x1f/0x30 [ 1459.209552][ C0] [ 1459.213650][ C0] FAULT_INJECTION: forcing a failure. [ 1459.213650][ C0] name failslab, interval 1, probability 1, space 0, times 861 [ 1459.226591][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 1459.234073][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.244177][ C0] Call Trace: [ 1459.247481][ C0] [ 1459.250465][ C0] dump_stack_lvl+0x188/0x24e [ 1459.255182][ C0] ? show_regs_print_info+0x12/0x12 [ 1459.260405][ C0] ? load_image+0x410/0x410 [ 1459.264955][ C0] should_fail_ex+0x390/0x4c0 [ 1459.269677][ C0] should_failslab+0x5/0x20 [ 1459.274198][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1459.279245][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1459.284460][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1459.288988][ C0] __alloc_skb+0xf9/0x7d0 [ 1459.293350][ C0] skb_copy+0x122/0x6f0 [ 1459.297544][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1459.303642][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1459.309556][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1459.315824][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1459.321136][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1459.326975][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1459.332460][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1459.338030][ C0] __iterate_interfaces+0x225/0x4c0 [ 1459.343352][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1459.349611][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1459.356839][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1459.363108][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1459.370161][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1459.375384][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1459.380608][ C0] ? hw_scan_work+0xf00/0xf00 [ 1459.385313][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1459.390471][ C0] hrtimer_run_softirq+0x173/0x290 [ 1459.395608][ C0] handle_softirqs+0x291/0x910 [ 1459.400404][ C0] ? run_ksoftirqd+0xa4/0x100 [ 1459.405186][ C0] ? do_softirq+0x210/0x210 [ 1459.409731][ C0] run_ksoftirqd+0xa4/0x100 [ 1459.414253][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1459.419486][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1459.424884][ C0] ? takeover_tasklets+0x770/0x770 [ 1459.430007][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1459.435244][ C0] smpboot_thread_fn+0x667/0xa30 [ 1459.440219][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 1459.445364][ C0] kthread+0x29d/0x330 [ 1459.449450][ C0] ? cpu_report_death+0x250/0x250 [ 1459.454501][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1459.459108][ C0] ret_from_fork+0x1f/0x30 [ 1459.463678][ C0] [ 1459.471265][ T4888] FAULT_INJECTION: forcing a failure. [ 1459.471265][ T4888] name failslab, interval 1, probability 1, space 0, times 860 [ 1459.481339][T14327] CPU: 1 PID: 14327 Comm: udevd Not tainted syzkaller #0 [ 1459.491167][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.501251][T14327] Call Trace: [ 1459.504558][T14327] [ 1459.507519][T14327] dump_stack_lvl+0x188/0x24e [ 1459.512236][T14327] ? show_regs_print_info+0x12/0x12 [ 1459.517561][T14327] ? load_image+0x410/0x410 [ 1459.522100][T14327] ? __might_sleep+0xd0/0xd0 [ 1459.526716][T14327] ? __lock_acquire+0x7c40/0x7c40 [ 1459.531776][T14327] should_fail_ex+0x390/0x4c0 [ 1459.536493][T14327] should_failslab+0x5/0x20 [ 1459.541046][T14327] slab_pre_alloc_hook+0x59/0x300 [ 1459.546109][T14327] kmem_cache_alloc+0x56/0x2f0 [ 1459.550900][T14327] ? getname_flags+0xb7/0x500 [ 1459.555606][T14327] getname_flags+0xb7/0x500 [ 1459.560142][T14327] do_sys_openat2+0xdd/0x4f0 [ 1459.564776][T14327] ? do_sys_open+0xe0/0xe0 [ 1459.569223][T14327] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1459.575238][T14327] ? lock_chain_count+0x20/0x20 [ 1459.580143][T14327] __x64_sys_openat+0x135/0x160 [ 1459.585104][T14327] do_syscall_64+0x4c/0xa0 [ 1459.589563][T14327] ? clear_bhb_loop+0x60/0xb0 [ 1459.594358][T14327] ? clear_bhb_loop+0x60/0xb0 [ 1459.599068][T14327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.604995][T14327] RIP: 0033:0x7f7b336a7407 [ 1459.609456][T14327] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1459.629092][T14327] RSP: 002b:00007fffa26aa690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1459.637537][T14327] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1459.645535][T14327] RDX: 0000000000080000 RSI: 00007fffa26aa800 RDI: ffffffffffffff9c [ 1459.653535][T14327] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1459.661530][T14327] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a53ad777f5 [ 1459.669524][T14327] R13: 000055a53ad777f5 R14: 0000000000000001 R15: 000055a53ad92140 [ 1459.677623][T14327] [ 1459.694243][T17384] FAULT_INJECTION: forcing a failure. [ 1459.694243][T17384] name failslab, interval 1, probability 1, space 0, times 859 [ 1459.695350][ T4259] CPU: 0 PID: 4259 Comm: syz-executor Not tainted syzkaller #0 [ 1459.714671][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.724767][ T4259] Call Trace: [ 1459.728094][ T4259] [ 1459.731059][ T4259] dump_stack_lvl+0x188/0x24e [ 1459.735815][ T4259] ? show_regs_print_info+0x12/0x12 [ 1459.741064][ T4259] ? load_image+0x410/0x410 [ 1459.745604][ T4259] ? __might_sleep+0xd0/0xd0 [ 1459.750230][ T4259] ? __lock_acquire+0x7c40/0x7c40 [ 1459.755309][ T4259] should_fail_ex+0x390/0x4c0 [ 1459.760036][ T4259] should_failslab+0x5/0x20 [ 1459.764564][ T4259] slab_pre_alloc_hook+0x59/0x300 [ 1459.769623][ T4259] kmem_cache_alloc+0x56/0x2f0 [ 1459.774425][ T4259] ? security_file_alloc+0x30/0x110 [ 1459.779671][ T4259] security_file_alloc+0x30/0x110 [ 1459.784738][ T4259] __alloc_file+0xc2/0x230 [ 1459.789185][ T4259] alloc_empty_file+0x90/0x180 [ 1459.793983][ T4259] alloc_file+0x5b/0x5f0 [ 1459.798313][ T4259] alloc_file_pseudo+0x180/0x200 [ 1459.803294][ T4259] ? alloc_empty_file_noaccount+0x80/0x80 [ 1459.809166][ T4259] ? atime_needs_update+0x770/0x770 [ 1459.814407][ T4259] ? debug_mutex_init+0x34/0x70 [ 1459.819310][ T4259] ? create_pipe_files+0x2b9/0x6b0 [ 1459.824476][ T4259] create_pipe_files+0x390/0x6b0 [ 1459.829462][ T4259] __do_pipe_flags+0x46/0x1f0 [ 1459.834183][ T4259] do_pipe2+0xa7/0x190 [ 1459.838307][ T4259] ? _compound_head+0x120/0x120 [ 1459.843389][ T4259] ? lock_chain_count+0x20/0x20 [ 1459.848295][ T4259] ? syscall_enter_from_user_mode+0x21/0x80 [ 1459.854225][ T4259] __x64_sys_pipe2+0x56/0x60 [ 1459.858885][ T4259] do_syscall_64+0x4c/0xa0 [ 1459.863359][ T4259] ? clear_bhb_loop+0x60/0xb0 [ 1459.868081][ T4259] ? clear_bhb_loop+0x60/0xb0 [ 1459.872791][ T4259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.878744][ T4259] RIP: 0033:0x7fdfca39cec9 [ 1459.883208][ T4259] Code: 38 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 eb aa e8 ea 34 00 00 66 2e 0f 1f 84 00 00 00 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff [ 1459.902861][ T4259] RSP: 002b:00007ffd03f34e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1459.911413][ T4259] RAX: ffffffffffffffda RBX: 00005555885d4e60 RCX: 00007fdfca39cec9 [ 1459.919524][ T4259] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00007ffd03f34e28 [ 1459.927533][ T4259] RBP: 00007ffd03f353f0 R08: 00007fdfca5f0e20 R09: 0000000000000000 [ 1459.935541][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd03f34f50 [ 1459.943549][ T4259] R13: 00005555886420c8 R14: 00005555885d18f8 R15: 00007ffd03f34f70 [ 1459.951588][ T4259] [ 1459.954726][T17384] CPU: 1 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1459.962502][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.972684][T17384] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1459.980572][T17384] Call Trace: [ 1459.983881][T17384] [ 1459.986931][T17384] dump_stack_lvl+0x188/0x24e [ 1459.991659][T17384] ? show_regs_print_info+0x12/0x12 [ 1459.996901][T17384] ? load_image+0x410/0x410 [ 1460.001550][T17384] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1460.007226][T17384] should_fail_ex+0x390/0x4c0 [ 1460.011974][T17384] should_failslab+0x5/0x20 [ 1460.016580][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1460.021659][T17384] ? __alloc_skb+0x4e6/0x7d0 [ 1460.026303][T17384] ? batadv_forw_packet_alloc+0x174/0x360 [ 1460.032089][T17384] __kmem_cache_alloc_node+0x4f/0x270 [ 1460.037506][T17384] ? batadv_forw_packet_alloc+0x174/0x360 [ 1460.043631][T17384] kmalloc_trace+0x26/0xe0 [ 1460.048101][T17384] batadv_forw_packet_alloc+0x174/0x360 [ 1460.053694][T17384] batadv_iv_ogm_queue_add+0x86a/0xdb0 [ 1460.059208][T17384] ? read_lock_is_recursive+0x10/0x10 [ 1460.065001][T17384] batadv_iv_ogm_schedule+0xb9d/0x1080 [ 1460.070533][T17384] ? batadv_iv_ogm_schedule+0x87e/0x1080 [ 1460.076238][T17384] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1460.083507][T17384] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 1460.090605][T17384] ? process_one_work+0x7b4/0x1160 [ 1460.095796][T17384] process_one_work+0x8ab/0x1160 [ 1460.100796][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1460.106481][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1460.111670][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1460.117290][T17384] ? wq_worker_running+0x97/0x190 [ 1460.122475][T17384] worker_thread+0xaf5/0x12a0 [ 1460.127244][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1460.133420][T17384] kthread+0x29d/0x330 [ 1460.137534][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1460.142598][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1460.147318][T17384] ret_from_fork+0x1f/0x30 [ 1460.151804][T17384] [ 1460.154953][ T4888] CPU: 0 PID: 4888 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1460.162646][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1460.163071][ T3627] FAULT_INJECTION: forcing a failure. [ 1460.163071][ T3627] name failslab, interval 1, probability 1, space 0, times 858 [ 1460.172827][ T4888] Workqueue: events_unbound cfg80211_wiphy_work [ 1460.172870][ T4888] Call Trace: [ 1460.172881][ T4888] [ 1460.172892][ T4888] dump_stack_lvl+0x188/0x24e [ 1460.203055][ T4888] ? lockdep_hardirqs_on+0x94/0x140 [ 1460.208313][ T4888] ? show_regs_print_info+0x12/0x12 [ 1460.213561][ T4888] ? load_image+0x410/0x410 [ 1460.218280][ T4888] ? do_raw_spin_unlock+0x11d/0x230 [ 1460.223533][ T4888] should_fail_ex+0x390/0x4c0 [ 1460.228280][ T4888] should_failslab+0x5/0x20 [ 1460.232830][ T4888] slab_pre_alloc_hook+0x59/0x300 [ 1460.237901][ T4888] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1460.243956][ T4888] __kmem_cache_alloc_node+0x4f/0x270 [ 1460.249385][ T4888] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1460.255414][ T4888] __kmalloc+0xa3/0x240 [ 1460.259615][ T4888] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1460.265513][ T4888] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1460.271655][ T4888] ? __lock_acquire+0x138a/0x7c40 [ 1460.276801][ T4888] ? __lock_acquire+0x7c40/0x7c40 [ 1460.281875][ T4888] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1460.288010][ T4888] ieee80211_bss_info_update+0x7df/0xbf0 [ 1460.293706][ T4888] ? ieee80211_rx_bss_put+0x60/0x60 [ 1460.299022][ T4888] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1460.304771][ T4888] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1460.310653][ T4888] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1460.316871][ T4888] ? verify_lock_unused+0x140/0x140 [ 1460.322130][ T4888] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1460.328423][ T4888] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1460.332357][ T9] FAULT_INJECTION: forcing a failure. [ 1460.332357][ T9] name failslab, interval 1, probability 1, space 0, times 856 [ 1460.334216][ T4888] ? mark_lock+0x94/0x320 [ 1460.351353][ T4888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1460.357378][ T4888] ? __lock_acquire+0x7c40/0x7c40 [ 1460.362451][ T4888] ? lock_chain_count+0x20/0x20 [ 1460.367368][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1460.373326][ T4888] ? lockdep_hardirqs_on+0x94/0x140 [ 1460.378565][ T4888] ? skb_dequeue+0x120/0x150 [ 1460.383274][ T4888] ieee80211_iface_work+0x72c/0xc70 [ 1460.388526][ T4888] cfg80211_wiphy_work+0x224/0x260 [ 1460.393683][ T4888] ? process_one_work+0x7b4/0x1160 [ 1460.398869][ T4888] process_one_work+0x8ab/0x1160 [ 1460.403858][ T4888] ? worker_detach_from_pool+0x240/0x240 [ 1460.409531][ T4888] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1460.414589][ T4888] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1460.420170][ T4888] ? wq_worker_running+0x97/0x190 [ 1460.425244][ T4888] worker_thread+0xaf5/0x12a0 [ 1460.429971][ T4888] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1460.435899][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1460.441836][ T4888] kthread+0x29d/0x330 [ 1460.445934][ T4888] ? worker_clr_flags+0x1a0/0x1a0 [ 1460.450993][ T4888] ? kthread_blkcg+0xd0/0xd0 [ 1460.455621][ T4888] ret_from_fork+0x1f/0x30 [ 1460.460089][ T4888] [ 1460.463140][ T3627] CPU: 1 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1460.470132][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1460.480221][ T3627] Call Trace: [ 1460.483542][ T3627] [ 1460.486530][ T3627] dump_stack_lvl+0x188/0x24e [ 1460.491264][ T3627] ? show_regs_print_info+0x12/0x12 [ 1460.496513][ T3627] ? load_image+0x410/0x410 [ 1460.501084][ T3627] ? __might_sleep+0xd0/0xd0 [ 1460.505744][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1460.510820][ T3627] should_fail_ex+0x390/0x4c0 [ 1460.515552][ T3627] should_failslab+0x5/0x20 [ 1460.520098][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1460.525165][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1460.530408][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1460.534961][ T3627] __alloc_skb+0xf9/0x7d0 [ 1460.539352][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1460.544510][ T3627] ? rcu_read_unlock_special+0x510/0x510 [ 1460.550184][ T3627] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1460.556297][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1460.561537][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1460.566151][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1460.571228][ T3627] ? __rwlock_init+0x140/0x140 [ 1460.576021][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1460.581246][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1460.586394][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1460.590929][ T3627] ? aa_af_perm+0x340/0x340 [ 1460.595459][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1460.600420][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1460.606890][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1460.612465][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1460.617781][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1460.623296][ T3627] __sys_sendto+0x497/0x650 [ 1460.627833][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1460.633259][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1460.639285][ T3627] ? lock_chain_count+0x20/0x20 [ 1460.644177][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1460.648894][ T3627] do_syscall_64+0x4c/0xa0 [ 1460.653348][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1460.658074][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1460.662794][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.668723][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1460.673165][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1460.692902][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1460.701349][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1460.709441][ T3627] RDX: 000000000000005b RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1460.717529][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1460.725529][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1460.733588][ T3627] R13: 00007fffffe5f530 R14: 0000000000000040 R15: 00007fffffe5f530 [ 1460.741619][ T3627] [ 1460.747631][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1460.755002][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1460.765105][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1460.771409][ T9] Call Trace: [ 1460.774729][ T9] [ 1460.777823][ T9] dump_stack_lvl+0x188/0x24e [ 1460.782564][ T9] ? show_regs_print_info+0x12/0x12 [ 1460.787819][ T9] ? load_image+0x410/0x410 [ 1460.792394][ T9] should_fail_ex+0x390/0x4c0 [ 1460.797147][ T9] should_failslab+0x5/0x20 [ 1460.800193][ T3638] udevd[3638]: could not touch /run/udev/queue: Cannot allocate memory [ 1460.801680][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1460.815105][ T9] ? stack_trace_save+0xa6/0xf0 [ 1460.820025][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1460.826417][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1460.831853][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1460.838238][ T9] __kmalloc+0xa3/0x240 [ 1460.842448][ T9] ? ieee80211_get_channel_khz+0x157/0x8a0 SYZFAIL: pipe failed (errno 12: Cannot allocate memory) [ 1460.848325][ T9] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1460.854554][ T9] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1460.860669][ T9] ? __lock_acquire+0x138a/0x7c40 [ 1460.865796][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1460.870905][ T9] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1460.876778][ T9] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1460.882481][ T9] ? ieee80211_rx_bss_put+0x60/0x60 [ 1460.887750][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1460.894071][ T9] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1460.899774][ T9] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1460.905653][ T9] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1460.911866][ T9] ? verify_lock_unused+0x140/0x140 [ 1460.917141][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1460.923488][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1460.929286][ T9] ? mark_lock+0x94/0x320 [ 1460.933678][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1460.939738][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1460.944994][ T9] ? lock_chain_count+0x20/0x20 [ 1460.949898][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1460.955867][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1460.961121][ T9] ? skb_dequeue+0x120/0x150 [ 1460.965763][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1460.968381][T14781] FAULT_INJECTION: forcing a failure. [ 1460.968381][T14781] name failslab, interval 1, probability 1, space 0, times 850 [ 1460.971026][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1460.971064][ T9] ? process_one_work+0x7b4/0x1160 [ 1460.971093][ T9] process_one_work+0x8ab/0x1160 [ 1460.971135][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1460.971168][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1460.971195][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1460.971231][ T9] ? wq_worker_running+0x97/0x190 [ 1460.971271][ T9] worker_thread+0xaf5/0x12a0 [ 1460.971331][ T9] kthread+0x29d/0x330 [ 1460.971351][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1460.971376][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1460.971401][ T9] ret_from_fork+0x1f/0x30 [ 1460.971454][ T9] [ 1461.047632][T14781] CPU: 0 PID: 14781 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1461.055386][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1461.065516][T14781] Workqueue: events_unbound nsim_dev_trap_report_work [ 1461.072438][T14781] Call Trace: [ 1461.075834][T14781] [ 1461.078791][T14781] dump_stack_lvl+0x188/0x24e [ 1461.083505][T14781] ? show_regs_print_info+0x12/0x12 [ 1461.088740][T14781] ? load_image+0x410/0x410 [ 1461.093277][T14781] ? verify_lock_unused+0x140/0x140 [ 1461.098512][T14781] should_fail_ex+0x390/0x4c0 [ 1461.103232][T14781] should_failslab+0x5/0x20 [ 1461.107765][T14781] slab_pre_alloc_hook+0x59/0x300 [ 1461.112830][T14781] kmem_cache_alloc_node+0x5a/0x310 [ 1461.118057][T14781] ? __alloc_skb+0xf9/0x7d0 [ 1461.122597][T14781] __alloc_skb+0xf9/0x7d0 [ 1461.126971][T14781] nsim_dev_trap_report_work+0x24f/0xa80 [ 1461.132663][T14781] ? process_one_work+0x7b4/0x1160 [ 1461.137896][T14781] process_one_work+0x8ab/0x1160 [ 1461.142881][T14781] ? worker_detach_from_pool+0x240/0x240 [ 1461.148552][T14781] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1461.153610][T14781] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1461.159450][T14781] ? wq_worker_running+0x97/0x190 [ 1461.164602][T14781] worker_thread+0xaf5/0x12a0 [ 1461.169351][T14781] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1461.175298][T14781] kthread+0x29d/0x330 [ 1461.179398][T14781] ? worker_clr_flags+0x1a0/0x1a0 [ 1461.184541][T14781] ? kthread_blkcg+0xd0/0xd0 [ 1461.189422][T14781] ret_from_fork+0x1f/0x30 [ 1461.194234][T14781] [ 1461.198212][T14528] FAULT_INJECTION: forcing a failure. [ 1461.198212][T14528] name failslab, interval 1, probability 1, space 0, times 843 [ 1461.203654][ T5498] FAULT_INJECTION: forcing a failure. [ 1461.203654][ T5498] name failslab, interval 1, probability 1, space 0, times 842 [ 1461.221855][T14528] CPU: 1 PID: 14528 Comm: udevd Not tainted syzkaller #0 [ 1461.232194][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1461.242291][T14528] Call Trace: [ 1461.245614][T14528] [ 1461.248581][T14528] dump_stack_lvl+0x188/0x24e [ 1461.253302][T14528] ? show_regs_print_info+0x12/0x12 [ 1461.258542][T14528] ? load_image+0x410/0x410 [ 1461.263101][T14528] ? __might_sleep+0xd0/0xd0 [ 1461.268071][T14528] ? __lock_acquire+0x7c40/0x7c40 [ 1461.273137][T14528] ? seqcount_lockdep_reader_access+0x126/0x1d0 [ 1461.279447][T14528] should_fail_ex+0x390/0x4c0 [ 1461.284175][T14528] should_failslab+0x5/0x20 [ 1461.288708][T14528] slab_pre_alloc_hook+0x59/0x300 [ 1461.293779][T14528] kmem_cache_alloc_lru+0x49/0x2e0 [ 1461.298927][T14528] ? __d_alloc+0x2e/0x6e0 [ 1461.303302][T14528] __d_alloc+0x2e/0x6e0 [ 1461.307515][T14528] d_alloc_parallel+0xdc/0x1590 [ 1461.312404][T14528] ? __d_lookup+0x8b/0x7c0 [ 1461.316856][T14528] ? __lock_acquire+0x7c40/0x7c40 [ 1461.322362][T14528] ? __d_lookup+0x8b/0x7c0 [ 1461.326807][T14528] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1461.331964][T14528] path_openat+0x949/0x2f10 [ 1461.336520][T14528] ? verify_lock_unused+0x140/0x140 [ 1461.341766][T14528] ? do_filp_open+0x420/0x420 [ 1461.346493][T14528] do_filp_open+0x1ee/0x420 [ 1461.351638][T14528] ? vfs_tmpfile+0x470/0x470 [ 1461.356279][T14528] ? _raw_spin_unlock+0x24/0x40 [ 1461.361171][T14528] ? alloc_fd+0x590/0x640 [ 1461.365550][T14528] do_sys_openat2+0x14b/0x4f0 [ 1461.370279][T14528] ? do_sys_open+0xe0/0xe0 [ 1461.374906][T14528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1461.380931][T14528] ? lock_chain_count+0x20/0x20 [ 1461.385849][T14528] __x64_sys_openat+0x135/0x160 [ 1461.390744][T14528] do_syscall_64+0x4c/0xa0 [ 1461.395204][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1461.399914][T14528] ? clear_bhb_loop+0x60/0xb0 [ 1461.404637][T14528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.410567][T14528] RIP: 0033:0x7f7b336a7407 [ 1461.415020][T14528] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1461.434917][T14528] RSP: 002b:00007fffa26aa690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1461.443369][T14528] RAX: ffffffffffffffda RBX: 00007f7b33e2e880 RCX: 00007f7b336a7407 [ 1461.451402][T14528] RDX: 0000000000080000 RSI: 00007fffa26aa800 RDI: ffffffffffffff9c [ 1461.459401][T14528] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1461.467399][T14528] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a53ad777f5 [ 1461.475433][T14528] R13: 000055a53ad777f5 R14: 0000000000000001 R15: 000055a53ad92140 [ 1461.483449][T14528] [ 1461.486668][ T5498] CPU: 0 PID: 5498 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1461.494389][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1461.498719][ T9] FAULT_INJECTION: forcing a failure. [ 1461.498719][ T9] name failslab, interval 1, probability 1, space 0, times 839 [ 1461.504473][ T5498] Workqueue: events_unbound nsim_dev_trap_report_work [ 1461.504513][ T5498] Call Trace: [ 1461.504523][ T5498] [ 1461.504533][ T5498] dump_stack_lvl+0x188/0x24e [ 1461.535134][ T5498] ? show_regs_print_info+0x12/0x12 [ 1461.540383][ T5498] ? load_image+0x410/0x410 [ 1461.545358][ T5498] ? mark_lock+0x94/0x320 [ 1461.549738][ T5498] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1461.555759][ T5498] should_fail_ex+0x390/0x4c0 [ 1461.560865][ T5498] should_failslab+0x5/0x20 [ 1461.565442][ T5498] slab_pre_alloc_hook+0x59/0x300 [ 1461.570520][ T5498] kmem_cache_alloc_node+0x5a/0x310 [ 1461.572499][ T3627] FAULT_INJECTION: forcing a failure. [ 1461.572499][ T3627] name failslab, interval 1, probability 1, space 0, times 838 [ 1461.575755][ T5498] ? slab_free_freelist_hook+0x133/0x1b0 [ 1461.594212][ T5498] ? __alloc_skb+0xf9/0x7d0 [ 1461.598770][ T5498] __alloc_skb+0xf9/0x7d0 [ 1461.603178][ T5498] nsim_dev_trap_report_work+0x24f/0xa80 [ 1461.608880][ T5498] ? process_one_work+0x7b4/0x1160 [ 1461.614036][ T5498] process_one_work+0x8ab/0x1160 [ 1461.619029][ T5498] ? worker_detach_from_pool+0x240/0x240 [ 1461.624710][ T5498] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1461.629777][ T5498] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1461.635371][ T5498] ? wq_worker_running+0x97/0x190 [ 1461.640447][ T5498] worker_thread+0xaf5/0x12a0 [ 1461.645176][ T5498] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1461.651119][ T5498] kthread+0x29d/0x330 [ 1461.655242][ T5498] ? worker_clr_flags+0x1a0/0x1a0 [ 1461.660329][ T5498] ? kthread_blkcg+0xd0/0xd0 [ 1461.664949][ T5498] ret_from_fork+0x1f/0x30 [ 1461.669427][ T5498] [ 1461.672472][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1461.679810][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1461.689905][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1461.696196][ T9] Call Trace: [ 1461.699495][ T9] [ 1461.702453][ T9] dump_stack_lvl+0x188/0x24e [ 1461.707185][ T9] ? show_regs_print_info+0x12/0x12 [ 1461.712444][ T9] ? load_image+0x410/0x410 [ 1461.716989][ T9] ? stack_trace_save+0xa6/0xf0 [ 1461.721879][ T9] ? __stack_depot_save+0x35/0x480 [ 1461.727032][ T9] should_fail_ex+0x390/0x4c0 [ 1461.731756][ T9] should_failslab+0x5/0x20 [ 1461.736339][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1461.741960][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1461.747990][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1461.753402][ T9] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1461.759420][ T9] __kmalloc+0xa3/0x240 [ 1461.763619][ T9] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1461.769474][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1461.775667][ T9] ? trace_contention_end+0x5f/0x170 [ 1461.781015][ T9] ? __mutex_lock+0x1ab/0xae0 [ 1461.785734][ T9] ? __lock_acquire+0x1465/0x7c40 [ 1461.790873][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1461.797158][ T9] ? mutex_lock_nested+0x10/0x10 [ 1461.802143][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1461.808255][ T9] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1461.814357][ T9] ? verify_lock_unused+0x140/0x140 [ 1461.819691][ T9] ? verify_lock_unused+0x140/0x140 [ 1461.824960][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1461.830749][ T9] ? mark_lock+0x94/0x320 [ 1461.835115][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1461.841136][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1461.846200][ T9] ? lock_chain_count+0x20/0x20 [ 1461.851082][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1461.857014][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1461.862237][ T9] ? skb_dequeue+0x120/0x150 [ 1461.866883][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1461.872130][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1461.877277][ T9] ? process_one_work+0x7b4/0x1160 [ 1461.882425][ T9] process_one_work+0x8ab/0x1160 [ 1461.887418][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1461.893085][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1461.898134][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1461.903709][ T9] ? wq_worker_running+0x97/0x190 [ 1461.908777][ T9] worker_thread+0xaf5/0x12a0 [ 1461.913528][ T9] kthread+0x29d/0x330 [ 1461.917620][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1461.922688][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1461.927315][ T9] ret_from_fork+0x1f/0x30 [ 1461.931806][ T9] [ 1461.954542][ C0] FAULT_INJECTION: forcing a failure. [ 1461.954542][ C0] name failslab, interval 1, probability 1, space 0, times 834 [ 1461.967607][ C0] CPU: 0 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1461.975443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1461.985559][ C0] Workqueue: bat_events batadv_nc_worker [ 1461.991238][ C0] Call Trace: [ 1461.994543][ C0] [ 1461.997436][ C0] dump_stack_lvl+0x188/0x24e [ 1462.002168][ C0] ? show_regs_print_info+0x12/0x12 [ 1462.007404][ C0] ? load_image+0x410/0x410 [ 1462.011949][ C0] ? mark_lock+0x94/0x320 [ 1462.016427][ C0] should_fail_ex+0x390/0x4c0 [ 1462.021189][ C0] should_failslab+0x5/0x20 [ 1462.025721][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1462.030783][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1462.036008][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1462.040797][ C0] __alloc_skb+0xf9/0x7d0 [ 1462.045246][ C0] skb_copy+0x122/0x6f0 [ 1462.049434][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1462.055535][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1462.061459][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1462.067738][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1462.073056][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1462.078916][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1462.084599][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1462.090188][ C0] __iterate_interfaces+0x225/0x4c0 [ 1462.095442][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1462.101713][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1462.108935][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1462.115298][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1462.122405][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1462.127685][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1462.133113][ C0] ? hw_scan_work+0xf00/0xf00 [ 1462.137862][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1462.143069][ C0] hrtimer_run_softirq+0x173/0x290 [ 1462.148306][ C0] handle_softirqs+0x291/0x910 [ 1462.153103][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1462.157984][ C0] ? do_softirq+0x210/0x210 [ 1462.162606][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1462.167758][ C0] __irq_exit_rcu+0x13b/0x230 [ 1462.172545][ C0] ? irq_exit_rcu+0x20/0x20 [ 1462.177084][ C0] irq_exit_rcu+0x5/0x20 [ 1462.181352][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1462.187050][ C0] [ 1462.190012][ C0] [ 1462.192962][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1462.198971][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 1462.205081][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 30 d9 9e 0c 48 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 44 3b 80 7e 65 8b 15 45 3b 80 7e 81 e2 00 01 ff 00 74 [ 1462.224798][ C0] RSP: 0018:ffffc90004e3fb70 EFLAGS: 00000202 [ 1462.230893][ C0] RAX: ffffffff89f9dd03 RBX: ffffffff89f9e2b0 RCX: 05383fec39436500 [ 1462.238925][ C0] RDX: ffff88802d53da00 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 1462.246935][ C0] RBP: ffff88807ba7c980 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 1462.255033][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: dffffc0000000000 [ 1462.263037][ C0] R13: 000000010001a745 R14: 0000000000000001 R15: ffff88805b6c4c80 [ 1462.271050][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 1462.276372][ C0] ? batadv_nc_process_nc_paths+0x103/0x380 [ 1462.282326][ C0] batadv_nc_process_nc_paths+0x103/0x380 [ 1462.288075][ C0] ? batadv_nc_process_nc_paths+0xba/0x380 [ 1462.294264][ C0] batadv_nc_worker+0x521/0x600 [ 1462.299152][ C0] ? process_one_work+0x7b4/0x1160 [ 1462.304385][ C0] process_one_work+0x8ab/0x1160 [ 1462.309374][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1462.315041][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1462.320113][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1462.325714][ C0] ? wq_worker_running+0x97/0x190 [ 1462.330790][ C0] worker_thread+0xaf5/0x12a0 [ 1462.335488][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1462.341436][ C0] kthread+0x29d/0x330 [ 1462.345537][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1462.350598][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1462.355229][ C0] ret_from_fork+0x1f/0x30 [ 1462.359678][ C0] [ 1462.365659][ T11] FAULT_INJECTION: forcing a failure. [ 1462.365659][ T11] name failslab, interval 1, probability 1, space 0, times 831 [ 1462.378542][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1462.385959][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1462.396063][ T11] Workqueue: events_unbound nsim_dev_trap_report_work [ 1462.402890][ T11] Call Trace: [ 1462.406207][ T11] [ 1462.409172][ T11] dump_stack_lvl+0x188/0x24e [ 1462.413907][ T11] ? show_regs_print_info+0x12/0x12 [ 1462.419158][ T11] ? load_image+0x410/0x410 [ 1462.423714][ T11] ? mark_lock+0x94/0x320 [ 1462.428107][ T11] should_fail_ex+0x390/0x4c0 [ 1462.432865][ T11] should_failslab+0x5/0x20 [ 1462.437411][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1462.442493][ T11] kmem_cache_alloc_node+0x5a/0x310 [ 1462.447739][ T11] ? __alloc_skb+0xf9/0x7d0 [ 1462.452284][ T11] __alloc_skb+0xf9/0x7d0 [ 1462.456662][ T11] nsim_dev_trap_report_work+0x24f/0xa80 [ 1462.462364][ T11] ? process_one_work+0x7b4/0x1160 [ 1462.467529][ T11] process_one_work+0x8ab/0x1160 [ 1462.472560][ T11] ? worker_detach_from_pool+0x240/0x240 [ 1462.478248][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1462.483320][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1462.488914][ T11] ? wq_worker_running+0x97/0x190 [ 1462.493979][ T11] worker_thread+0xaf5/0x12a0 [ 1462.498716][ T11] kthread+0x29d/0x330 [ 1462.502819][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 1462.507895][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1462.512540][ T11] ret_from_fork+0x1f/0x30 [ 1462.517013][ T11] [ 1462.520099][ T3627] CPU: 0 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1462.522715][ T11] FAULT_INJECTION: forcing a failure. [ 1462.522715][ T11] name failslab, interval 1, probability 1, space 0, times 829 [ 1462.527075][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1462.549932][ T3627] Call Trace: [ 1462.553236][ T3627] [ 1462.556207][ T3627] dump_stack_lvl+0x188/0x24e [ 1462.560923][ T3627] ? show_regs_print_info+0x12/0x12 [ 1462.566164][ T3627] ? load_image+0x410/0x410 [ 1462.570718][ T3627] ? __might_sleep+0xd0/0xd0 [ 1462.575338][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1462.580398][ T3627] should_fail_ex+0x390/0x4c0 [ 1462.585118][ T3627] should_failslab+0x5/0x20 [ 1462.589651][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1462.594715][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1462.599945][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1462.604488][ T3627] __alloc_skb+0xf9/0x7d0 [ 1462.608854][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1462.614094][ T3627] ? rcu_read_unlock_special+0x510/0x510 [ 1462.619757][ T3627] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1462.625777][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1462.631025][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1462.635643][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1462.640700][ T3627] ? __rwlock_init+0x140/0x140 [ 1462.645506][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1462.650738][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1462.655913][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1462.660455][ T3627] ? aa_af_perm+0x340/0x340 [ 1462.664992][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1462.669960][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1462.676414][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1462.681998][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1462.687334][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1462.692839][ T3627] __sys_sendto+0x497/0x650 [ 1462.697379][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1462.702807][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1462.708826][ T3627] ? lock_chain_count+0x20/0x20 [ 1462.713814][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1462.718531][ T3627] do_syscall_64+0x4c/0xa0 [ 1462.723068][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1462.727787][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1462.732515][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.738504][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1462.742974][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1462.762618][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1462.771253][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1462.779261][ T3627] RDX: 000000000000004d RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1462.787354][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1462.795357][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1462.803364][ T3627] R13: 00007fffffe5f530 R14: 0000000000000032 R15: 00007fffffe5f530 [ 1462.811574][ T3627] [ 1462.814642][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1462.822076][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1462.832294][ T11] Workqueue: events_unbound nsim_dev_trap_report_work [ 1462.839122][ T11] Call Trace: [ 1462.842451][ T11] [ 1462.845433][ T11] dump_stack_lvl+0x188/0x24e [ 1462.850204][ T11] ? show_regs_print_info+0x12/0x12 [ 1462.855487][ T11] ? load_image+0x410/0x410 [ 1462.860054][ T11] ? mark_lock+0x94/0x320 [ 1462.864451][ T11] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1462.870491][ T11] should_fail_ex+0x390/0x4c0 [ 1462.875233][ T11] should_failslab+0x5/0x20 [ 1462.879774][ T11] slab_pre_alloc_hook+0x59/0x300 [ 1462.884856][ T11] kmem_cache_alloc_node+0x5a/0x310 [ 1462.890106][ T11] ? slab_free_freelist_hook+0x133/0x1b0 [ 1462.895787][ T11] ? __alloc_skb+0xf9/0x7d0 [ 1462.900347][ T11] __alloc_skb+0xf9/0x7d0 [ 1462.904729][ T11] nsim_dev_trap_report_work+0x24f/0xa80 [ 1462.910428][ T11] ? process_one_work+0x7b4/0x1160 [ 1462.915598][ T11] process_one_work+0x8ab/0x1160 [ 1462.920607][ T11] ? worker_detach_from_pool+0x240/0x240 [ 1462.926293][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1462.931361][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1462.936964][ T11] ? wq_worker_running+0x97/0x190 [ 1462.942055][ T11] worker_thread+0xaf5/0x12a0 [ 1462.946815][ T11] kthread+0x29d/0x330 [ 1462.950930][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 1462.956005][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1462.960647][ T11] ret_from_fork+0x1f/0x30 [ 1462.965157][ T11] [ 1463.141078][ T9] FAULT_INJECTION: forcing a failure. [ 1463.141078][ T9] name failslab, interval 1, probability 1, space 0, times 823 [ 1463.208505][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1463.215889][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.225998][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1463.232301][ T9] Call Trace: [ 1463.235611][ T9] [ 1463.238585][ T9] dump_stack_lvl+0x188/0x24e [ 1463.243326][ T9] ? show_regs_print_info+0x12/0x12 [ 1463.248662][ T9] ? load_image+0x410/0x410 [ 1463.253222][ T9] should_fail_ex+0x390/0x4c0 [ 1463.257956][ T9] should_failslab+0x5/0x20 [ 1463.262498][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1463.267567][ T9] ? stack_trace_save+0xa6/0xf0 [ 1463.272477][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1463.274213][ T4455] FAULT_INJECTION: forcing a failure. [ 1463.274213][ T4455] name failslab, interval 1, probability 1, space 0, times 823 [ 1463.278855][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1463.278897][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1463.303473][ T9] __kmalloc+0xa3/0x240 [ 1463.307672][ T9] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1463.313525][ T9] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1463.319728][ T9] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1463.325856][ T9] ? __lock_acquire+0x138a/0x7c40 [ 1463.330938][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1463.336018][ T9] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1463.341885][ T9] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1463.347568][ T9] ? ieee80211_rx_bss_put+0x60/0x60 [ 1463.352827][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1463.359236][ T9] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1463.364914][ T9] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1463.370771][ T9] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1463.376993][ T9] ? verify_lock_unused+0x140/0x140 [ 1463.382252][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1463.388537][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1463.394329][ T9] ? mark_lock+0x94/0x320 [ 1463.398705][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1463.404735][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1463.409822][ T9] ? lock_chain_count+0x20/0x20 [ 1463.414709][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1463.420645][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.425879][ T9] ? skb_dequeue+0x120/0x150 [ 1463.430503][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1463.435761][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1463.440926][ T9] ? process_one_work+0x7b4/0x1160 [ 1463.446082][ T9] process_one_work+0x8ab/0x1160 [ 1463.451154][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1463.456827][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1463.461973][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1463.467557][ T9] ? wq_worker_running+0x97/0x190 [ 1463.472620][ T9] worker_thread+0xaf5/0x12a0 [ 1463.477358][ T9] kthread+0x29d/0x330 [ 1463.481457][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1463.486511][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1463.491127][ T9] ret_from_fork+0x1f/0x30 [ 1463.495590][ T9] [ 1463.498640][ T4455] CPU: 0 PID: 4455 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1463.503422][ C1] FAULT_INJECTION: forcing a failure. [ 1463.503422][ C1] name failslab, interval 1, probability 1, space 0, times 823 [ 1463.506307][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.529208][ T4455] Workqueue: events_unbound nsim_dev_trap_report_work [ 1463.536030][ T4455] Call Trace: [ 1463.539337][ T4455] [ 1463.542302][ T4455] dump_stack_lvl+0x188/0x24e [ 1463.547028][ T4455] ? show_regs_print_info+0x12/0x12 [ 1463.552270][ T4455] ? load_image+0x410/0x410 [ 1463.556819][ T4455] ? mark_lock+0x94/0x320 [ 1463.561187][ T4455] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1463.567381][ T4455] should_fail_ex+0x390/0x4c0 [ 1463.572097][ T4455] should_failslab+0x5/0x20 [ 1463.576632][ T4455] slab_pre_alloc_hook+0x59/0x300 [ 1463.581702][ T4455] kmem_cache_alloc_node+0x5a/0x310 [ 1463.586926][ T4455] ? slab_free_freelist_hook+0x133/0x1b0 [ 1463.592610][ T4455] ? __alloc_skb+0xf9/0x7d0 [ 1463.597152][ T4455] __alloc_skb+0xf9/0x7d0 [ 1463.601612][ T4455] nsim_dev_trap_report_work+0x24f/0xa80 [ 1463.607296][ T4455] ? process_one_work+0x7b4/0x1160 [ 1463.612440][ T4455] process_one_work+0x8ab/0x1160 [ 1463.617426][ T4455] ? worker_detach_from_pool+0x240/0x240 [ 1463.623091][ T4455] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1463.628154][ T4455] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1463.633736][ T4455] ? wq_worker_running+0x97/0x190 [ 1463.638802][ T4455] worker_thread+0xaf5/0x12a0 [ 1463.643529][ T4455] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1463.649463][ T4455] kthread+0x29d/0x330 [ 1463.653561][ T4455] ? worker_clr_flags+0x1a0/0x1a0 [ 1463.658617][ T4455] ? kthread_blkcg+0xd0/0xd0 [ 1463.663255][ T4455] ret_from_fork+0x1f/0x30 [ 1463.667719][ T4455] [ 1463.670761][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1463.678192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.688290][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1463.694585][ C1] Call Trace: [ 1463.697905][ C1] [ 1463.700785][ C1] dump_stack_lvl+0x188/0x24e [ 1463.705516][ C1] ? show_regs_print_info+0x12/0x12 [ 1463.710774][ C1] ? load_image+0x410/0x410 [ 1463.715332][ C1] ? mark_lock+0x94/0x320 [ 1463.719714][ C1] ? verify_lock_unused+0x140/0x140 [ 1463.724972][ C1] should_fail_ex+0x390/0x4c0 [ 1463.729738][ C1] should_failslab+0x5/0x20 [ 1463.734301][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1463.739377][ C1] kmem_cache_alloc_node+0x5a/0x310 [ 1463.744621][ C1] ? __alloc_skb+0xf9/0x7d0 [ 1463.749181][ C1] __alloc_skb+0xf9/0x7d0 [ 1463.753567][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 1463.758655][ C1] ? __alloc_skb+0x7d0/0x7d0 [ 1463.763305][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 1463.768820][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1463.774563][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1463.780084][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1463.785696][ C1] __iterate_interfaces+0x225/0x4c0 [ 1463.790956][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1463.797260][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1463.804524][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1463.810818][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1463.817897][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1463.823165][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1463.828426][ C1] ? hw_scan_work+0xf00/0xf00 [ 1463.833179][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1463.838373][ C1] hrtimer_run_softirq+0x173/0x290 [ 1463.843552][ C1] handle_softirqs+0x291/0x910 [ 1463.848369][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1463.853271][ C1] ? do_softirq+0x210/0x210 [ 1463.857818][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1463.863007][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1463.868251][ C1] __irq_exit_rcu+0x13b/0x230 [ 1463.872975][ C1] ? irq_exit_rcu+0x20/0x20 [ 1463.877537][ C1] irq_exit_rcu+0x5/0x20 [ 1463.881819][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1463.887503][ C1] [ 1463.890474][ C1] [ 1463.893461][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1463.899491][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 1463.905444][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 a5 01 20 f7 e8 60 de 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1463.925102][ C1] RSP: 0018:ffffc900000e7080 EFLAGS: 00000282 [ 1463.931223][ C1] RAX: f9a17baf1d9dbe00 RBX: 0000000000000000 RCX: f9a17baf1d9dbe00 [ 1463.939243][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1463.947267][ C1] RBP: ffffc900000e7120 R08: ffffffff90b0f2a7 R09: 1ffffffff2161e54 [ 1463.955279][ C1] R10: dffffc0000000000 R11: fffffbfff2161e55 R12: 0000000000000000 [ 1463.963274][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200001ce10 [ 1463.971285][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 1463.977050][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1463.982893][ C1] irqentry_exit+0x63/0x70 [ 1463.987338][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1463.992913][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x24e [ 1463.998400][ C1] Code: e8 75 7a 52 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 61 7a 52 f7 eb 06 e8 5a 7a 52 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 1464.018119][ C1] RSP: 0018:ffffc900000e71e0 EFLAGS: 00000293 [ 1464.024208][ C1] RAX: ffffffff8a2fb996 RBX: dffffc0000000000 RCX: ffff88813fec0000 [ 1464.032209][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.040214][ C1] RBP: ffffc900000e72d0 R08: ffffffff90b0f2a7 R09: 1ffffffff2161e54 [ 1464.048214][ C1] R10: dffffc0000000000 R11: fffffbfff2161e55 R12: dffffc0000000004 [ 1464.056307][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200001ce40 [ 1464.064306][ C1] ? dump_stack_lvl+0x204/0x24e [ 1464.069200][ C1] ? show_regs_print_info+0x12/0x12 [ 1464.074516][ C1] ? load_image+0x410/0x410 [ 1464.079050][ C1] should_fail_ex+0x390/0x4c0 [ 1464.083764][ C1] should_failslab+0x5/0x20 [ 1464.088288][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1464.093339][ C1] ? stack_trace_save+0xa6/0xf0 [ 1464.098221][ C1] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1464.104576][ C1] __kmem_cache_alloc_node+0x4f/0x270 [ 1464.109978][ C1] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1464.116336][ C1] __kmalloc+0xa3/0x240 [ 1464.120559][ C1] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1464.126516][ C1] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1464.132722][ C1] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1464.138818][ C1] ? __lock_acquire+0x138a/0x7c40 [ 1464.143892][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1464.148961][ C1] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1464.154791][ C1] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1464.160457][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 1464.165711][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1464.172004][ C1] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1464.177723][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1464.183569][ C1] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1464.189760][ C1] ? verify_lock_unused+0x140/0x140 [ 1464.195001][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1464.201281][ C1] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1464.207040][ C1] ? mark_lock+0x94/0x320 [ 1464.211406][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1464.217421][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1464.222483][ C1] ? lock_chain_count+0x20/0x20 [ 1464.227362][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1464.233307][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1464.238551][ C1] ? skb_dequeue+0x120/0x150 [ 1464.243181][ C1] ieee80211_iface_work+0x72c/0xc70 [ 1464.248427][ C1] cfg80211_wiphy_work+0x224/0x260 [ 1464.253574][ C1] ? process_one_work+0x7b4/0x1160 [ 1464.258733][ C1] process_one_work+0x8ab/0x1160 [ 1464.263715][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1464.269414][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1464.274468][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1464.280063][ C1] ? wq_worker_running+0x97/0x190 [ 1464.285121][ C1] worker_thread+0xaf5/0x12a0 [ 1464.289849][ C1] kthread+0x29d/0x330 [ 1464.293954][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1464.299028][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1464.303639][ C1] ret_from_fork+0x1f/0x30 [ 1464.308099][ C1] [ 1464.313895][T17384] FAULT_INJECTION: forcing a failure. [ 1464.313895][T17384] name failslab, interval 1, probability 1, space 0, times 820 [ 1464.326869][T17384] CPU: 1 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1464.334633][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1464.344727][T17384] Workqueue: events_unbound nsim_dev_trap_report_work [ 1464.351550][T17384] Call Trace: [ 1464.354868][T17384] [ 1464.357832][T17384] dump_stack_lvl+0x188/0x24e [ 1464.362570][T17384] ? show_regs_print_info+0x12/0x12 [ 1464.367822][T17384] ? load_image+0x410/0x410 [ 1464.372380][T17384] ? mark_lock+0x94/0x320 [ 1464.376765][T17384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1464.382805][T17384] should_fail_ex+0x390/0x4c0 [ 1464.387539][T17384] should_failslab+0x5/0x20 [ 1464.392130][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1464.397213][T17384] kmem_cache_alloc_node+0x5a/0x310 [ 1464.397240][ T4722] FAULT_INJECTION: forcing a failure. [ 1464.397240][ T4722] name failslab, interval 1, probability 1, space 0, times 820 [ 1464.402476][T17384] ? slab_free_freelist_hook+0x133/0x1b0 [ 1464.402506][T17384] ? __alloc_skb+0xf9/0x7d0 [ 1464.402545][T17384] __alloc_skb+0xf9/0x7d0 [ 1464.430420][T17384] nsim_dev_trap_report_work+0x24f/0xa80 [ 1464.436128][T17384] ? process_one_work+0x7b4/0x1160 [ 1464.441290][T17384] process_one_work+0x8ab/0x1160 [ 1464.446735][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1464.452430][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1464.457501][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1464.463106][T17384] ? wq_worker_running+0x97/0x190 [ 1464.468278][T17384] worker_thread+0xaf5/0x12a0 [ 1464.473086][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1464.479037][T17384] kthread+0x29d/0x330 [ 1464.483141][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1464.488204][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1464.492824][T17384] ret_from_fork+0x1f/0x30 [ 1464.497290][T17384] [ 1464.502103][ T4888] FAULT_INJECTION: forcing a failure. [ 1464.502103][ T4888] name failslab, interval 1, probability 1, space 0, times 819 [ 1464.515885][T14715] FAULT_INJECTION: forcing a failure. [ 1464.515885][T14715] name failslab, interval 1, probability 1, space 0, times 819 [ 1464.529043][T14715] CPU: 1 PID: 14715 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1464.536822][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1464.546955][T14715] Workqueue: events_unbound nsim_dev_trap_report_work [ 1464.553830][T14715] Call Trace: [ 1464.557153][T14715] [ 1464.560120][T14715] dump_stack_lvl+0x188/0x24e [ 1464.564891][T14715] ? show_regs_print_info+0x12/0x12 [ 1464.570138][T14715] ? load_image+0x410/0x410 [ 1464.574690][T14715] ? mark_lock+0x94/0x320 [ 1464.579074][T14715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1464.585119][T14715] should_fail_ex+0x390/0x4c0 [ 1464.589885][T14715] should_failslab+0x5/0x20 [ 1464.594433][T14715] slab_pre_alloc_hook+0x59/0x300 [ 1464.599512][T14715] kmem_cache_alloc_node+0x5a/0x310 [ 1464.604751][T14715] ? slab_free_freelist_hook+0x133/0x1b0 [ 1464.610434][T14715] ? __alloc_skb+0xf9/0x7d0 [ 1464.615005][T14715] __alloc_skb+0xf9/0x7d0 [ 1464.619398][T14715] nsim_dev_trap_report_work+0x24f/0xa80 [ 1464.625088][T14715] ? process_one_work+0x7b4/0x1160 [ 1464.630245][T14715] process_one_work+0x8ab/0x1160 [ 1464.635247][T14715] ? worker_detach_from_pool+0x240/0x240 [ 1464.640936][T14715] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1464.646014][T14715] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1464.651634][T14715] ? wq_worker_running+0x97/0x190 [ 1464.656716][T14715] worker_thread+0xaf5/0x12a0 [ 1464.661450][T14715] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1464.667505][T14715] kthread+0x29d/0x330 [ 1464.671793][T14715] ? worker_clr_flags+0x1a0/0x1a0 [ 1464.676869][T14715] ? kthread_blkcg+0xd0/0xd0 [ 1464.681507][T14715] ret_from_fork+0x1f/0x30 [ 1464.685974][T14715] [ 1464.689115][ T4888] CPU: 0 PID: 4888 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1464.696808][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1464.706918][ T4888] Workqueue: bat_events batadv_mcast_mla_update [ 1464.713320][ T4888] Call Trace: [ 1464.716636][ T4888] [ 1464.719606][ T4888] dump_stack_lvl+0x188/0x24e [ 1464.724353][ T4888] ? worker_thread+0xaf5/0x12a0 [ 1464.729259][ T4888] ? ret_from_fork+0x1f/0x30 [ 1464.734024][ T4888] ? show_regs_print_info+0x12/0x12 [ 1464.739346][ T4888] ? load_image+0x410/0x410 [ 1464.743917][ T4888] should_fail_ex+0x390/0x4c0 [ 1464.748661][ T4888] should_failslab+0x5/0x20 [ 1464.753208][ T4888] slab_pre_alloc_hook+0x59/0x300 [ 1464.758331][ T4888] ? batadv_mcast_mla_update+0x1498/0x3280 [ 1464.764184][ T4888] __kmem_cache_alloc_node+0x4f/0x270 [ 1464.769643][ T4888] ? batadv_mcast_mla_update+0x1498/0x3280 [ 1464.775502][ T4888] kmalloc_trace+0x26/0xe0 [ 1464.780006][ T4888] batadv_mcast_mla_update+0x1498/0x3280 [ 1464.785685][ T4888] ? batadv_mcast_mla_update+0x139/0x3280 [ 1464.791473][ T4888] ? batadv_mcast_tvlv_ogm_handler+0x230/0x230 [ 1464.797689][ T4888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1464.803819][ T4888] ? __lock_acquire+0x7c40/0x7c40 [ 1464.808905][ T4888] ? read_lock_is_recursive+0x10/0x10 [ 1464.814352][ T3627] FAULT_INJECTION: forcing a failure. [ 1464.814352][ T3627] name failslab, interval 1, probability 1, space 0, times 817 [ 1464.814353][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1464.814392][ T4888] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1464.838437][ T4888] ? process_one_work+0x7b4/0x1160 [ 1464.843624][ T4888] process_one_work+0x8ab/0x1160 [ 1464.848726][ T4888] ? worker_detach_from_pool+0x240/0x240 [ 1464.854421][ T4888] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1464.859505][ T4888] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1464.865100][ T4888] ? wq_worker_running+0x97/0x190 [ 1464.870188][ T4888] worker_thread+0xaf5/0x12a0 [ 1464.874957][ T4888] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1464.880890][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1464.886870][ T4888] kthread+0x29d/0x330 [ 1464.890979][ T4888] ? worker_clr_flags+0x1a0/0x1a0 [ 1464.896053][ T4888] ? kthread_blkcg+0xd0/0xd0 [ 1464.900674][ T4888] ret_from_fork+0x1f/0x30 [ 1464.905151][ T4888] [ 1464.909567][ T4722] CPU: 0 PID: 4722 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1464.917272][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1464.927383][ T4722] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1464.934369][ T4722] Call Trace: [ 1464.937706][ T4722] [ 1464.940689][ T4722] dump_stack_lvl+0x188/0x24e [ 1464.945500][ T4722] ? show_regs_print_info+0x12/0x12 [ 1464.950741][ T4722] ? load_image+0x410/0x410 [ 1464.955295][ T4722] ? mark_lock+0x94/0x320 [ 1464.959675][ T4722] should_fail_ex+0x390/0x4c0 [ 1464.964393][ T4722] should_failslab+0x5/0x20 [ 1464.968932][ T4722] slab_pre_alloc_hook+0x59/0x300 [ 1464.974012][ T4722] ? lockdep_hardirqs_on+0x94/0x140 [ 1464.979259][ T4722] kmem_cache_alloc_node+0x5a/0x310 [ 1464.984577][ T4722] ? ktime_get_real_ts64+0x440/0x440 [ 1464.989903][ T4722] ? __alloc_skb+0xf9/0x7d0 [ 1464.994457][ T4722] __alloc_skb+0xf9/0x7d0 [ 1464.998844][ T4722] wg_socket_send_buffer_to_peer+0x34/0x170 [ 1465.004785][ T4722] ? ktime_get_coarse_with_offset+0x141/0x190 [ 1465.010914][ T4722] wg_packet_handshake_send_worker+0x203/0x360 [ 1465.017137][ T4722] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 1465.022672][ T4722] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1465.028633][ T4722] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1465.030292][T14715] FAULT_INJECTION: forcing a failure. [ 1465.030292][T14715] name failslab, interval 1, probability 1, space 0, times 817 [ 1465.033866][ T4722] ? process_one_work+0x7b4/0x1160 [ 1465.033899][ T4722] process_one_work+0x8ab/0x1160 [ 1465.033940][ T4722] ? worker_detach_from_pool+0x240/0x240 [ 1465.033972][ T4722] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1465.067617][ T4722] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1465.073212][ T4722] ? wq_worker_running+0x97/0x190 [ 1465.078283][ T4722] worker_thread+0xaf5/0x12a0 [ 1465.083009][ T4722] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1465.088954][ T4722] kthread+0x29d/0x330 [ 1465.093055][ T4722] ? worker_clr_flags+0x1a0/0x1a0 [ 1465.098113][ T4722] ? kthread_blkcg+0xd0/0xd0 [ 1465.102731][ T4722] ret_from_fork+0x1f/0x30 [ 1465.107197][ T4722] [ 1465.110240][T14715] CPU: 1 PID: 14715 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1465.115471][T17384] FAULT_INJECTION: forcing a failure. [ 1465.115471][T17384] name failslab, interval 1, probability 1, space 0, times 817 [ 1465.118008][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1465.118025][T14715] Workqueue: events_unbound nsim_dev_trap_report_work [ 1465.147784][T14715] Call Trace: [ 1465.151104][T14715] [ 1465.154062][T14715] dump_stack_lvl+0x188/0x24e [ 1465.158788][T14715] ? show_regs_print_info+0x12/0x12 [ 1465.164039][T14715] ? load_image+0x410/0x410 [ 1465.168601][T14715] ? mark_lock+0x94/0x320 [ 1465.172973][T14715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1465.179016][T14715] should_fail_ex+0x390/0x4c0 [ 1465.183831][T14715] should_failslab+0x5/0x20 [ 1465.188369][T14715] slab_pre_alloc_hook+0x59/0x300 [ 1465.193437][T14715] kmem_cache_alloc_node+0x5a/0x310 [ 1465.198675][T14715] ? slab_free_freelist_hook+0x133/0x1b0 [ 1465.204344][T14715] ? __alloc_skb+0xf9/0x7d0 [ 1465.208889][T14715] __alloc_skb+0xf9/0x7d0 [ 1465.213261][T14715] nsim_dev_trap_report_work+0x24f/0xa80 [ 1465.218946][T14715] ? process_one_work+0x7b4/0x1160 [ 1465.224116][T14715] process_one_work+0x8ab/0x1160 [ 1465.229105][T14715] ? worker_detach_from_pool+0x240/0x240 [ 1465.234780][T14715] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1465.239846][T14715] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1465.245454][T14715] ? wq_worker_running+0x97/0x190 [ 1465.250523][T14715] worker_thread+0xaf5/0x12a0 [ 1465.255251][T14715] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1465.261212][T14715] kthread+0x29d/0x330 [ 1465.265361][T14715] ? worker_clr_flags+0x1a0/0x1a0 [ 1465.270430][T14715] ? kthread_blkcg+0xd0/0xd0 [ 1465.275063][T14715] ret_from_fork+0x1f/0x30 [ 1465.279538][T14715] [ 1465.282601][T17384] CPU: 0 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1465.285402][ T5740] FAULT_INJECTION: forcing a failure. [ 1465.285402][ T5740] name failslab, interval 1, probability 1, space 0, times 816 [ 1465.290358][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1465.290375][T17384] Workqueue: events_unbound nsim_dev_trap_report_work [ 1465.290414][T17384] Call Trace: [ 1465.309693][ C1] FAULT_INJECTION: forcing a failure. [ 1465.309693][ C1] name failslab, interval 1, probability 1, space 0, times 816 [ 1465.313289][T17384] [ 1465.313303][T17384] dump_stack_lvl+0x188/0x24e [ 1465.344045][T17384] ? show_regs_print_info+0x12/0x12 [ 1465.349294][T17384] ? load_image+0x410/0x410 [ 1465.354027][T17384] ? mark_lock+0x94/0x320 [ 1465.358415][T17384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1465.364445][T17384] should_fail_ex+0x390/0x4c0 [ 1465.369207][T17384] should_failslab+0x5/0x20 [ 1465.373750][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1465.378815][T17384] kmem_cache_alloc_node+0x5a/0x310 [ 1465.384042][T17384] ? slab_free_freelist_hook+0x133/0x1b0 [ 1465.389707][T17384] ? __alloc_skb+0xf9/0x7d0 [ 1465.394252][T17384] __alloc_skb+0xf9/0x7d0 [ 1465.398634][T17384] nsim_dev_trap_report_work+0x24f/0xa80 [ 1465.404314][T17384] ? process_one_work+0x7b4/0x1160 [ 1465.409459][T17384] process_one_work+0x8ab/0x1160 [ 1465.414441][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1465.420121][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1465.425176][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1465.430769][T17384] ? wq_worker_running+0x97/0x190 [ 1465.435838][T17384] worker_thread+0xaf5/0x12a0 [ 1465.440591][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1465.446531][T17384] kthread+0x29d/0x330 [ 1465.450659][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1465.455744][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1465.460388][T17384] ret_from_fork+0x1f/0x30 [ 1465.464869][T17384] [ 1465.467920][ C1] CPU: 1 PID: 15081 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1465.475890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1465.485997][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1465.492831][ C1] Call Trace: [ 1465.496151][ C1] [ 1465.499026][ C1] dump_stack_lvl+0x188/0x24e [ 1465.503769][ C1] ? show_regs_print_info+0x12/0x12 [ 1465.509027][ C1] ? load_image+0x410/0x410 [ 1465.513591][ C1] ? kasan_set_track+0x60/0x70 [ 1465.518444][ C1] ? __kasan_slab_alloc+0x6b/0x80 [ 1465.523515][ C1] ? slab_post_alloc_hook+0x4b/0x490 [ 1465.528846][ C1] ? kmem_cache_alloc+0x18b/0x2f0 [ 1465.533912][ C1] ? dst_alloc+0x101/0x160 [ 1465.538370][ C1] ? icmp6_dst_alloc+0x7c/0x490 [ 1465.543327][ C1] ? ndisc_send_skb+0x41b/0x1520 [ 1465.548364][ C1] should_fail_ex+0x390/0x4c0 [ 1465.553099][ C1] should_failslab+0x5/0x20 [ 1465.557646][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1465.562718][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 1465.568573][ C1] ? process_one_work+0x8ab/0x1160 [ 1465.573756][ C1] ? worker_thread+0xaf5/0x12a0 [ 1465.578653][ C1] ? ref_tracker_alloc+0x14f/0x490 [ 1465.583813][ C1] __kmem_cache_alloc_node+0x4f/0x270 [ 1465.589235][ C1] ? ref_tracker_alloc+0x14f/0x490 [ 1465.594393][ C1] kmalloc_trace+0x26/0xe0 [ 1465.598864][ C1] ref_tracker_alloc+0x14f/0x490 [ 1465.603848][ C1] ? ref_tracker_dir_print+0x150/0x150 [ 1465.609361][ C1] ? __kasan_slab_alloc+0x6b/0x80 [ 1465.614440][ C1] ? slab_post_alloc_hook+0x67/0x490 [ 1465.619773][ C1] ? kmem_cache_alloc+0x268/0x2f0 [ 1465.624843][ C1] ? rcu_is_watching+0x11/0xa0 [ 1465.629659][ C1] dst_init+0xb1/0x400 [ 1465.633774][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 1465.639454][ C1] dst_alloc+0x12a/0x160 [ 1465.643749][ C1] icmp6_dst_alloc+0x7c/0x490 [ 1465.648482][ C1] ? icmpv6_flow_init+0x5e/0x120 [ 1465.653471][ C1] ndisc_send_skb+0x41b/0x1520 [ 1465.658284][ C1] ? ndisc_send_skb+0x1f0/0x1520 [ 1465.663274][ C1] ? ndisc_mc_map+0x800/0x800 [ 1465.667993][ C1] ? rcu_is_watching+0x11/0xa0 [ 1465.672823][ C1] ? ndisc_alloc_skb+0xa6/0x450 [ 1465.677750][ C1] addrconf_rs_timer+0x367/0x640 [ 1465.682746][ C1] ? detach_timer+0x30/0x350 [ 1465.687391][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 1465.693520][ C1] call_timer_fn+0x1ac/0x670 [ 1465.698158][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 1465.704276][ C1] ? call_timer_fn+0xcf/0x670 [ 1465.709002][ C1] ? __run_timers+0x810/0x810 [ 1465.713728][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1465.719005][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1465.724241][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 1465.730358][ C1] __run_timers+0x56c/0x810 [ 1465.734954][ C1] ? detach_timer+0x350/0x350 [ 1465.739679][ C1] ? lock_chain_count+0x20/0x20 [ 1465.744583][ C1] run_timer_softirq+0x63/0xf0 [ 1465.749479][ C1] handle_softirqs+0x291/0x910 [ 1465.754294][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1465.759235][ C1] ? do_softirq+0x210/0x210 [ 1465.763784][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1465.768939][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1465.774192][ C1] __irq_exit_rcu+0x13b/0x230 [ 1465.778914][ C1] ? irq_exit_rcu+0x20/0x20 [ 1465.783472][ C1] irq_exit_rcu+0x5/0x20 [ 1465.787749][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1465.793534][ C1] [ 1465.796507][ C1] [ 1465.799475][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1465.805512][ C1] RIP: 0010:unwind_next_frame+0x62a/0x1fd0 [ 1465.811370][ C1] Code: 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 ea 14 00 00 49 0f bf 04 24 49 01 c6 e9 a8 08 00 00 4c 8d 73 40 4c 89 f0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 f7 e8 d8 5f 9a 00 49 8b 16 4d 8d 74 24 01 [ 1465.831048][ C1] RSP: 0018:ffffc900037c7630 EFLAGS: 00000a06 [ 1465.837190][ C1] RAX: 1ffff920006f8eed RBX: ffffc900037c7728 RCX: ffffffff8e2fb43c [ 1465.845211][ C1] RDX: ffffffff8e9efca2 RSI: ffffffff8e2fb438 RDI: 0000000000000001 [ 1465.853225][ C1] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffc900037c7778 [ 1465.861240][ C1] R10: dffffc0000000000 R11: fffff520006f8ef1 R12: ffffffff8e9efca2 [ 1465.869255][ C1] R13: ffffffff8e9efca6 R14: ffffc900037c7768 R15: 1ffffffff1d3df94 [ 1465.877282][ C1] ? arch_stack_walk+0xda/0x140 [ 1465.882177][ C1] __unwind_start+0x51a/0x650 [ 1465.886889][ C1] ? stack_trace_save+0xf0/0xf0 [ 1465.891787][ C1] arch_stack_walk+0xda/0x140 [ 1465.896509][ C1] ? arch_stack_walk+0xda/0x140 [ 1465.901418][ C1] stack_trace_save+0xa6/0xf0 [ 1465.906153][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 1465.911317][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 1465.917016][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 1465.922869][ C1] ? process_one_work+0x8ab/0x1160 [ 1465.928012][ C1] ? worker_thread+0xaf5/0x12a0 [ 1465.932932][ C1] kasan_set_track+0x4b/0x70 [ 1465.937630][ C1] ? skb_release_data+0x5e9/0x7e0 [ 1465.942835][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 1465.947734][ C1] kasan_save_free_info+0x27/0x40 [ 1465.953408][ C1] ____kasan_slab_free+0x126/0x1f0 [ 1465.958557][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 1465.964066][ C1] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 1465.969924][ C1] kmem_cache_free+0xf7/0x2a0 [ 1465.974649][ C1] nsim_dev_trap_report_work+0x71f/0xa80 [ 1465.980341][ C1] ? process_one_work+0x7b4/0x1160 [ 1465.985507][ C1] process_one_work+0x8ab/0x1160 [ 1465.990505][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1465.996183][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1466.001251][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1466.006832][ C1] ? wq_worker_running+0x97/0x190 [ 1466.011955][ C1] worker_thread+0xaf5/0x12a0 [ 1466.016728][ C1] kthread+0x29d/0x330 [ 1466.020839][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1466.026001][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1466.030634][ C1] ret_from_fork+0x1f/0x30 [ 1466.035109][ C1] [ 1466.038158][ T5740] CPU: 0 PID: 5740 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1466.045860][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1466.056142][ T5740] Workqueue: events_unbound cfg80211_wiphy_work [ 1466.062441][ T5740] Call Trace: [ 1466.065756][ T5740] [ 1466.068765][ T5740] dump_stack_lvl+0x188/0x24e [ 1466.073531][ T5740] ? lockdep_hardirqs_on+0x94/0x140 [ 1466.078765][ T5740] ? show_regs_print_info+0x12/0x12 [ 1466.084002][ T5740] ? load_image+0x410/0x410 [ 1466.088542][ T5740] ? do_raw_spin_unlock+0x11d/0x230 [ 1466.093779][ T5740] should_fail_ex+0x390/0x4c0 [ 1466.098530][ T5740] should_failslab+0x5/0x20 [ 1466.103065][ T5740] slab_pre_alloc_hook+0x59/0x300 [ 1466.108131][ T5740] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1466.114176][ T5740] __kmem_cache_alloc_node+0x4f/0x270 [ 1466.119593][ T5740] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1466.125615][ T5740] __kmalloc+0xa3/0x240 [ 1466.129817][ T5740] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1466.135683][ T5740] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1466.141785][ T5740] ? __lock_acquire+0x138a/0x7c40 [ 1466.146874][ T5740] ? __lock_acquire+0x7c40/0x7c40 [ 1466.151941][ T5740] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1466.158075][ T5740] ieee80211_bss_info_update+0x7df/0xbf0 [ 1466.163760][ T5740] ? ieee80211_rx_bss_put+0x60/0x60 [ 1466.169006][ T5740] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1466.174684][ T5740] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1466.180540][ T5740] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1466.186738][ T5740] ? verify_lock_unused+0x140/0x140 [ 1466.191985][ T5740] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1466.198273][ T5740] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1466.204043][ T5740] ? mark_lock+0x94/0x320 [ 1466.208437][ T5740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1466.214462][ T5740] ? __lock_acquire+0x7c40/0x7c40 [ 1466.219532][ T5740] ? lock_chain_count+0x20/0x20 [ 1466.224417][ T5740] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1466.230357][ T5740] ? lockdep_hardirqs_on+0x94/0x140 [ 1466.235623][ T5740] ? skb_dequeue+0x120/0x150 [ 1466.240249][ T5740] ieee80211_iface_work+0x72c/0xc70 [ 1466.245501][ T5740] cfg80211_wiphy_work+0x224/0x260 [ 1466.250653][ T5740] ? process_one_work+0x7b4/0x1160 [ 1466.255827][ T5740] process_one_work+0x8ab/0x1160 [ 1466.260838][ T5740] ? worker_detach_from_pool+0x240/0x240 [ 1466.266511][ T5740] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1466.271572][ T5740] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1466.277237][ T5740] ? wq_worker_running+0x97/0x190 [ 1466.282307][ T5740] worker_thread+0xaf5/0x12a0 [ 1466.287045][ T5740] kthread+0x29d/0x330 [ 1466.291151][ T5740] ? worker_clr_flags+0x1a0/0x1a0 [ 1466.296220][ T5740] ? kthread_blkcg+0xd0/0xd0 [ 1466.300849][ T5740] ret_from_fork+0x1f/0x30 [ 1466.305320][ T5740] [ 1466.308375][ T3627] CPU: 1 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1466.315375][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1466.317659][T14241] FAULT_INJECTION: forcing a failure. [ 1466.317659][T14241] name failslab, interval 1, probability 1, space 0, times 812 [ 1466.325451][ T3627] Call Trace: [ 1466.325462][ T3627] [ 1466.325473][ T3627] dump_stack_lvl+0x188/0x24e [ 1466.349386][ T3627] ? show_regs_print_info+0x12/0x12 [ 1466.354646][ T3627] ? load_image+0x410/0x410 [ 1466.359196][ T3627] ? __might_sleep+0xd0/0xd0 [ 1466.363834][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1466.368922][ T3627] should_fail_ex+0x390/0x4c0 [ 1466.373662][ T3627] should_failslab+0x5/0x20 [ 1466.378207][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1466.383285][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1466.388555][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1466.393122][ T3627] __alloc_skb+0xf9/0x7d0 [ 1466.397519][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1466.402676][ T3627] ? rcu_read_unlock_special+0x510/0x510 [ 1466.408361][ T3627] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1466.414422][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1466.419692][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1466.424356][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1466.429422][ T3627] ? __rwlock_init+0x140/0x140 [ 1466.434224][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1466.439465][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1466.444628][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1466.445971][ C0] FAULT_INJECTION: forcing a failure. [ 1466.445971][ C0] name failslab, interval 1, probability 1, space 0, times 812 [ 1466.449171][ T3627] ? aa_af_perm+0x340/0x340 [ 1466.466513][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1466.471490][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1466.477945][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1466.483533][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1466.488857][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1466.494450][ T3627] __sys_sendto+0x497/0x650 [ 1466.499084][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1466.504512][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1466.510588][ T3627] ? lock_chain_count+0x20/0x20 [ 1466.515504][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1466.520222][ T3627] do_syscall_64+0x4c/0xa0 [ 1466.524675][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1466.529412][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1466.534149][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1466.540086][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1466.544533][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1466.564257][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1466.572717][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1466.580714][ T3627] RDX: 000000000000004d RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1466.588716][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1466.596722][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1466.604727][ T3627] R13: 00007fffffe5f530 R14: 0000000000000032 R15: 00007fffffe5f530 [ 1466.612737][ T3627] [ 1466.615805][ C0] CPU: 0 PID: 13955 Comm: syz-executor Not tainted syzkaller #0 [ 1466.623476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1466.633541][ C0] Call Trace: [ 1466.636832][ C0] [ 1466.639697][ C0] dump_stack_lvl+0x188/0x24e [ 1466.644406][ C0] ? show_regs_print_info+0x12/0x12 [ 1466.649660][ C0] ? load_image+0x410/0x410 [ 1466.654193][ C0] should_fail_ex+0x390/0x4c0 [ 1466.658891][ C0] should_failslab+0x5/0x20 [ 1466.663406][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1466.668456][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1466.673670][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1466.678304][ C0] __alloc_skb+0xf9/0x7d0 [ 1466.682666][ C0] skb_copy+0x122/0x6f0 [ 1466.686850][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1466.692946][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1466.698851][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1466.705117][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1466.710422][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1466.716261][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1466.721739][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1466.727312][ C0] __iterate_interfaces+0x225/0x4c0 [ 1466.732528][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1466.738788][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1466.745998][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1466.752271][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1466.759308][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1466.764533][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1466.769753][ C0] ? hw_scan_work+0xf00/0xf00 [ 1466.774462][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1466.779687][ C0] hrtimer_run_softirq+0x173/0x290 [ 1466.784822][ C0] handle_softirqs+0x291/0x910 [ 1466.789615][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1466.794659][ C0] ? do_softirq+0x210/0x210 [ 1466.799189][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1466.804324][ C0] __irq_exit_rcu+0x13b/0x230 [ 1466.809015][ C0] ? irq_exit_rcu+0x20/0x20 [ 1466.813557][ C0] irq_exit_rcu+0x5/0x20 [ 1466.817812][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1466.823464][ C0] [ 1466.826401][ C0] [ 1466.829367][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1466.835383][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 1466.841132][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1466.860764][ C0] RSP: 0018:ffffc90003b8f698 EFLAGS: 00000206 [ 1466.866856][ C0] RAX: 6b6ae98086010100 RBX: ffff88802de45a00 RCX: 6b6ae98086010100 [ 1466.874863][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 1466.882853][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 1466.890843][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 1466.898821][ C0] R13: 0000000000000246 R14: ffffffff8cb2db60 R15: ffff88802de464e0 [ 1466.906822][ C0] ? page_ext_get+0x1e/0x2a0 [ 1466.911459][ C0] page_ext_get+0x18f/0x2a0 [ 1466.915986][ C0] __page_table_check_zero+0x134/0x4b0 [ 1466.921489][ C0] free_unref_page_prepare+0x8f5/0x9e0 [ 1466.926966][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 1466.932197][ C0] free_unref_page+0x2e/0x3f0 [ 1466.936987][ C0] __vunmap+0x874/0xa40 [ 1466.941276][ C0] ? integrity_iint_find+0x51/0x120 [ 1466.946514][ C0] ? kcov_open+0x80/0x80 [ 1466.950859][ C0] kcov_close+0x27/0x50 [ 1466.955183][ C0] __fput+0x20a/0x8b0 [ 1466.959209][ C0] task_work_run+0x1d0/0x260 [ 1466.963833][ C0] ? task_work_cancel+0x220/0x220 [ 1466.968893][ C0] ? do_exit+0x9d0/0x2570 [ 1466.973255][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 1466.978142][ C0] do_exit+0x9d5/0x2570 [ 1466.982390][ C0] ? put_task_struct+0x80/0x80 [ 1466.987215][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1466.993238][ C0] ? lock_chain_count+0x20/0x20 [ 1466.998142][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1467.003211][ C0] do_group_exit+0x229/0x2e0 [ 1467.007839][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1467.013088][ C0] get_signal+0x1259/0x1340 [ 1467.017638][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 1467.023293][ C0] ? __ia32_sys_waitid+0xc0/0xc0 [ 1467.028266][ C0] ? kernel_waitid+0x3d0/0x3d0 [ 1467.033055][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1467.039082][ C0] ? get_sigframe_size+0x10/0x10 [ 1467.044038][ C0] ? __x64_sys_wait4+0x1b4/0x230 [ 1467.049017][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1467.054515][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1467.059831][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1467.065402][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1467.070881][ C0] do_syscall_64+0x58/0xa0 [ 1467.075337][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1467.080228][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1467.084924][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.090836][ C0] RIP: 0033:0x7f9801559017 [ 1467.095304][ C0] Code: Unable to access opcode bytes at 0x7f9801558fed. [ 1467.102530][ C0] RSP: 002b:00007ffdd48f1ed0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1467.110968][ C0] RAX: fffffffffffffe00 RBX: 000055556008d500 RCX: 00007f9801559017 [ 1467.118985][ C0] RDX: 0000000040000000 RSI: 00007ffdd48f1f2c RDI: ffffffffffffffff [ 1467.127166][ C0] RBP: 00007ffdd48f1f2c R08: 0000000000000000 R09: 0000000000000000 [ 1467.135267][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1467.143285][ C0] R13: 0000000000000003 R14: 00007ffdd48f2188 R15: 0000000000000000 [ 1467.151292][ C0] [ 1467.156508][ T5145] FAULT_INJECTION: forcing a failure. [ 1467.156508][ T5145] name failslab, interval 1, probability 1, space 0, times 810 [ 1467.171464][ T4324] FAULT_INJECTION: forcing a failure. [ 1467.171464][ T4324] name failslab, interval 1, probability 1, space 0, times 810 [ 1467.184433][T14241] CPU: 1 PID: 14241 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1467.192107][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1467.202200][T14241] Workqueue: events_unbound cfg80211_wiphy_work [ 1467.208486][T14241] Call Trace: [ 1467.211829][T14241] [ 1467.214821][T14241] dump_stack_lvl+0x188/0x24e [ 1467.219541][T14241] ? lockdep_hardirqs_on+0x94/0x140 [ 1467.224777][T14241] ? show_regs_print_info+0x12/0x12 [ 1467.230034][T14241] ? load_image+0x410/0x410 [ 1467.234569][T14241] ? do_raw_spin_unlock+0x11d/0x230 [ 1467.239824][T14241] should_fail_ex+0x390/0x4c0 [ 1467.244558][T14241] should_failslab+0x5/0x20 [ 1467.249099][T14241] slab_pre_alloc_hook+0x59/0x300 [ 1467.254162][T14241] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.260196][T14241] __kmem_cache_alloc_node+0x4f/0x270 [ 1467.265608][T14241] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.271628][T14241] __kmalloc+0xa3/0x240 [ 1467.275853][T14241] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.281712][T14241] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1467.287810][T14241] ? __lock_acquire+0x138a/0x7c40 [ 1467.292889][T14241] ? __lock_acquire+0x7c40/0x7c40 [ 1467.297949][T14241] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1467.304060][T14241] ieee80211_bss_info_update+0x7df/0xbf0 [ 1467.309736][T14241] ? ieee80211_rx_bss_put+0x60/0x60 [ 1467.314978][T14241] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1467.320651][T14241] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1467.326500][T14241] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1467.332697][T14241] ? verify_lock_unused+0x140/0x140 [ 1467.337941][T14241] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1467.344218][T14241] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1467.349981][T14241] ? mark_lock+0x94/0x320 [ 1467.354786][T14241] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1467.360821][T14241] ? __lock_acquire+0x7c40/0x7c40 [ 1467.365883][T14241] ? lock_chain_count+0x20/0x20 [ 1467.370760][T14241] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1467.376692][T14241] ? lockdep_hardirqs_on+0x94/0x140 [ 1467.381919][T14241] ? skb_dequeue+0x120/0x150 [ 1467.386538][T14241] ieee80211_iface_work+0x72c/0xc70 [ 1467.391780][T14241] cfg80211_wiphy_work+0x224/0x260 [ 1467.396923][T14241] ? process_one_work+0x7b4/0x1160 [ 1467.402065][T14241] process_one_work+0x8ab/0x1160 [ 1467.407050][T14241] ? worker_detach_from_pool+0x240/0x240 [ 1467.412711][T14241] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1467.417848][T14241] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1467.423428][T14241] ? wq_worker_running+0x97/0x190 [ 1467.428491][T14241] worker_thread+0xaf5/0x12a0 [ 1467.433236][T14241] kthread+0x29d/0x330 [ 1467.437345][T14241] ? worker_clr_flags+0x1a0/0x1a0 [ 1467.442398][T14241] ? kthread_blkcg+0xd0/0xd0 [ 1467.447038][T14241] ret_from_fork+0x1f/0x30 [ 1467.451506][T14241] [ 1467.455999][ T4524] FAULT_INJECTION: forcing a failure. [ 1467.455999][ T4524] name failslab, interval 1, probability 1, space 0, times 810 [ 1467.468888][ T5145] CPU: 0 PID: 5145 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 1467.476596][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1467.486790][ T5145] Workqueue: events_unbound cfg80211_wiphy_work [ 1467.493117][ T5145] Call Trace: [ 1467.496436][ T5145] [ 1467.499408][ T5145] dump_stack_lvl+0x188/0x24e [ 1467.504145][ T5145] ? show_regs_print_info+0x12/0x12 [ 1467.509393][ T5145] ? load_image+0x410/0x410 [ 1467.513990][ T5145] should_fail_ex+0x390/0x4c0 [ 1467.518730][ T5145] should_failslab+0x5/0x20 [ 1467.523274][ T5145] slab_pre_alloc_hook+0x59/0x300 [ 1467.528334][ T5145] ? stack_trace_save+0xa6/0xf0 [ 1467.533233][ T5145] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1467.539611][ T5145] __kmem_cache_alloc_node+0x4f/0x270 [ 1467.545066][ T5145] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1467.551451][ T5145] __kmalloc+0xa3/0x240 [ 1467.555646][ T5145] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1467.561501][ T5145] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1467.567703][ T5145] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1467.574125][ T5145] ? __lock_acquire+0x138a/0x7c40 [ 1467.579202][ T5145] ? __lock_acquire+0x7c40/0x7c40 [ 1467.584271][ T5145] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1467.590110][ T5145] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1467.595778][ T5145] ? ieee80211_rx_bss_put+0x60/0x60 [ 1467.601017][ T5145] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1467.607303][ T5145] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1467.612980][ T5145] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1467.618827][ T5145] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1467.625037][ T5145] ? verify_lock_unused+0x140/0x140 [ 1467.630316][ T5145] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1467.636592][ T5145] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1467.642357][ T5145] ? mark_lock+0x94/0x320 [ 1467.646722][ T5145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1467.652745][ T5145] ? __lock_acquire+0x7c40/0x7c40 [ 1467.657802][ T5145] ? lock_chain_count+0x20/0x20 [ 1467.662685][ T5145] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1467.668611][ T5145] ? lockdep_hardirqs_on+0x94/0x140 [ 1467.673840][ T5145] ? skb_dequeue+0x120/0x150 [ 1467.678459][ T5145] ieee80211_iface_work+0x72c/0xc70 [ 1467.683702][ T5145] cfg80211_wiphy_work+0x224/0x260 [ 1467.688845][ T5145] ? process_one_work+0x7b4/0x1160 [ 1467.693984][ T5145] process_one_work+0x8ab/0x1160 [ 1467.698966][ T5145] ? worker_detach_from_pool+0x240/0x240 [ 1467.704636][ T5145] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1467.709694][ T5145] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1467.715361][ T5145] ? wq_worker_running+0x97/0x190 [ 1467.720420][ T5145] worker_thread+0xaf5/0x12a0 [ 1467.725155][ T5145] kthread+0x29d/0x330 [ 1467.729251][ T5145] ? worker_clr_flags+0x1a0/0x1a0 [ 1467.734304][ T5145] ? kthread_blkcg+0xd0/0xd0 [ 1467.738942][ T5145] ret_from_fork+0x1f/0x30 [ 1467.743401][ T5145] [ 1467.753087][ T4524] CPU: 0 PID: 4524 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1467.760802][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1467.770901][ T4524] Workqueue: events_unbound cfg80211_wiphy_work [ 1467.777201][ T4524] Call Trace: [ 1467.780512][ T4524] [ 1467.781494][T13600] FAULT_INJECTION: forcing a failure. [ 1467.781494][T13600] name failslab, interval 1, probability 1, space 0, times 809 [ 1467.783467][ T4524] dump_stack_lvl+0x188/0x24e [ 1467.800956][ T4524] ? show_regs_print_info+0x12/0x12 [ 1467.806194][ T4524] ? load_image+0x410/0x410 [ 1467.810748][ T4524] ? stack_trace_save+0xa6/0xf0 [ 1467.815650][ T4524] ? __stack_depot_save+0x35/0x480 [ 1467.820802][ T4524] should_fail_ex+0x390/0x4c0 [ 1467.825535][ T4524] should_failslab+0x5/0x20 [ 1467.830070][ T4524] slab_pre_alloc_hook+0x59/0x300 [ 1467.835154][ T4524] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.841362][ T4524] __kmem_cache_alloc_node+0x4f/0x270 [ 1467.846778][ T4524] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.852881][ T4524] __kmalloc+0xa3/0x240 [ 1467.857079][ T4524] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1467.862921][ T4524] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1467.869123][ T4524] ? trace_contention_end+0x5f/0x170 [ 1467.874535][ T4524] ? __mutex_lock+0x1ab/0xae0 [ 1467.879260][ T4524] ? __lock_acquire+0x1465/0x7c40 [ 1467.884353][ T4524] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 1467.890652][ T4524] ? mutex_lock_nested+0x10/0x10 [ 1467.895642][ T4524] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1467.901758][ T4524] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 1467.907867][ T4524] ? verify_lock_unused+0x140/0x140 [ 1467.913130][ T4524] ? verify_lock_unused+0x140/0x140 [ 1467.918447][ T4524] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1467.924263][ T4524] ? mark_lock+0x94/0x320 [ 1467.928644][ T4524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1467.934666][ T4524] ? __lock_acquire+0x7c40/0x7c40 [ 1467.939744][ T4524] ? lock_chain_count+0x20/0x20 [ 1467.944721][ T4524] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1467.950664][ T4524] ? lockdep_hardirqs_on+0x94/0x140 [ 1467.955899][ T4524] ? skb_dequeue+0x120/0x150 [ 1467.960524][ T4524] ieee80211_iface_work+0x72c/0xc70 [ 1467.965793][ T4524] cfg80211_wiphy_work+0x224/0x260 [ 1467.970967][ T4524] ? process_one_work+0x7b4/0x1160 [ 1467.976150][ T4524] process_one_work+0x8ab/0x1160 [ 1467.981160][ T4524] ? worker_detach_from_pool+0x240/0x240 [ 1467.986867][ T4524] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1467.991937][ T4524] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1467.997615][ T4524] ? wq_worker_running+0x97/0x190 [ 1468.002692][ T4524] worker_thread+0xaf5/0x12a0 [ 1468.007425][ T4524] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1468.013371][ T4524] kthread+0x29d/0x330 [ 1468.017644][ T4524] ? worker_clr_flags+0x1a0/0x1a0 [ 1468.022707][ T4524] ? kthread_blkcg+0xd0/0xd0 [ 1468.027791][ T4524] ret_from_fork+0x1f/0x30 [ 1468.032257][ T4524] [ 1468.035305][T13600] CPU: 1 PID: 13600 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1468.041198][T13451] FAULT_INJECTION: forcing a failure. [ 1468.041198][T13451] name failslab, interval 1, probability 1, space 0, times 809 [ 1468.042983][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1468.043003][T13600] Workqueue: events_unbound nsim_dev_trap_report_work [ 1468.072683][T13600] Call Trace: [ 1468.076010][T13600] [ 1468.078973][T13600] dump_stack_lvl+0x188/0x24e [ 1468.083706][T13600] ? show_regs_print_info+0x12/0x12 [ 1468.089039][T13600] ? load_image+0x410/0x410 [ 1468.093583][T13600] ? mark_lock+0x94/0x320 [ 1468.097962][T13600] should_fail_ex+0x390/0x4c0 [ 1468.102688][T13600] should_failslab+0x5/0x20 [ 1468.107227][T13600] slab_pre_alloc_hook+0x59/0x300 [ 1468.112300][T13600] kmem_cache_alloc_node+0x5a/0x310 [ 1468.117535][T13600] ? __alloc_skb+0xf9/0x7d0 [ 1468.122087][T13600] __alloc_skb+0xf9/0x7d0 [ 1468.126458][T13600] nsim_dev_trap_report_work+0x24f/0xa80 [ 1468.132158][T13600] ? process_one_work+0x7b4/0x1160 [ 1468.137322][T13600] process_one_work+0x8ab/0x1160 [ 1468.142306][T13600] ? worker_detach_from_pool+0x240/0x240 [ 1468.147977][T13600] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1468.153059][T13600] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1468.158642][T13600] ? wq_worker_running+0x97/0x190 [ 1468.163707][T13600] worker_thread+0xaf5/0x12a0 [ 1468.168543][T13600] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1468.174474][T13600] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1468.180424][T13600] kthread+0x29d/0x330 [ 1468.184548][T13600] ? worker_clr_flags+0x1a0/0x1a0 [ 1468.189608][T13600] ? kthread_blkcg+0xd0/0xd0 [ 1468.194229][T13600] ret_from_fork+0x1f/0x30 [ 1468.198691][T13600] [ 1468.201755][T13451] CPU: 0 PID: 13451 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1468.204732][ C1] FAULT_INJECTION: forcing a failure. [ 1468.204732][ C1] name failslab, interval 1, probability 1, space 0, times 808 [ 1468.209517][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1468.209539][T13451] Workqueue: events_unbound nsim_dev_trap_report_work [ 1468.209584][T13451] Call Trace: [ 1468.209595][T13451] [ 1468.245488][T13451] dump_stack_lvl+0x188/0x24e [ 1468.250225][T13451] ? show_regs_print_info+0x12/0x12 [ 1468.255467][T13451] ? load_image+0x410/0x410 [ 1468.260003][T13451] ? mark_lock+0x94/0x320 [ 1468.264396][T13451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1468.270422][T13451] should_fail_ex+0x390/0x4c0 [ 1468.275147][T13451] should_failslab+0x5/0x20 [ 1468.279764][T13451] slab_pre_alloc_hook+0x59/0x300 [ 1468.284829][T13451] kmem_cache_alloc_node+0x5a/0x310 [ 1468.290087][T13451] ? slab_free_freelist_hook+0x133/0x1b0 [ 1468.295774][T13451] ? __alloc_skb+0xf9/0x7d0 [ 1468.300409][T13451] __alloc_skb+0xf9/0x7d0 [ 1468.304782][T13451] nsim_dev_trap_report_work+0x24f/0xa80 [ 1468.310465][T13451] ? process_one_work+0x7b4/0x1160 [ 1468.315618][T13451] process_one_work+0x8ab/0x1160 [ 1468.320614][T13451] ? worker_detach_from_pool+0x240/0x240 [ 1468.326286][T13451] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1468.331364][T13451] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1468.336961][T13451] ? wq_worker_running+0x97/0x190 [ 1468.342033][T13451] worker_thread+0xaf5/0x12a0 [ 1468.346801][T13451] kthread+0x29d/0x330 [ 1468.350925][T13451] ? worker_clr_flags+0x1a0/0x1a0 [ 1468.355987][T13451] ? kthread_blkcg+0xd0/0xd0 [ 1468.360612][T13451] ret_from_fork+0x1f/0x30 [ 1468.365089][T13451] [ 1468.368139][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1468.375574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1468.385680][ C1] Call Trace: [ 1468.388999][ C1] [ 1468.391583][ T3627] FAULT_INJECTION: forcing a failure. [ 1468.391583][ T3627] name failslab, interval 1, probability 1, space 0, times 806 [ 1468.391957][ C1] dump_stack_lvl+0x188/0x24e [ 1468.409440][ C1] ? show_regs_print_info+0x12/0x12 [ 1468.414683][ C1] ? load_image+0x410/0x410 [ 1468.419225][ C1] ? mark_lock+0x94/0x320 [ 1468.423608][ C1] ? verify_lock_unused+0x140/0x140 [ 1468.428846][ C1] should_fail_ex+0x390/0x4c0 [ 1468.433570][ C1] should_failslab+0x5/0x20 [ 1468.438099][ C1] slab_pre_alloc_hook+0x59/0x300 [ 1468.443163][ C1] kmem_cache_alloc_node+0x5a/0x310 [ 1468.448404][ C1] ? __alloc_skb+0xf9/0x7d0 [ 1468.452970][ C1] __alloc_skb+0xf9/0x7d0 [ 1468.457360][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 1468.462431][ C1] ? __alloc_skb+0x7d0/0x7d0 [ 1468.467084][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 1468.472598][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1468.478210][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1468.483727][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1468.489330][ C1] __iterate_interfaces+0x225/0x4c0 [ 1468.494583][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1468.500871][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1468.508116][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1468.514442][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1468.521520][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1468.526771][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1468.532023][ C1] ? hw_scan_work+0xf00/0xf00 [ 1468.536750][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1468.541908][ C1] hrtimer_run_softirq+0x173/0x290 [ 1468.547069][ C1] handle_softirqs+0x291/0x910 [ 1468.551874][ C1] ? run_ksoftirqd+0xa4/0x100 [ 1468.556669][ C1] ? do_softirq+0x210/0x210 [ 1468.561217][ C1] run_ksoftirqd+0xa4/0x100 [ 1468.565772][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1468.571013][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1468.576451][ C1] ? takeover_tasklets+0x770/0x770 [ 1468.581589][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1468.586819][ C1] smpboot_thread_fn+0x667/0xa30 [ 1468.591802][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 1468.596875][ C1] kthread+0x29d/0x330 [ 1468.600965][ C1] ? cpu_report_death+0x250/0x250 [ 1468.606024][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1468.610648][ C1] ret_from_fork+0x1f/0x30 [ 1468.615125][ C1] [ 1468.618174][ T3627] CPU: 0 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 1468.625174][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1468.635304][ T3627] Call Trace: [ 1468.638629][ T3627] [ 1468.641601][ T3627] dump_stack_lvl+0x188/0x24e [ 1468.646347][ T3627] ? show_regs_print_info+0x12/0x12 [ 1468.651599][ T3627] ? load_image+0x410/0x410 [ 1468.656161][ T3627] ? __might_sleep+0xd0/0xd0 [ 1468.660808][ T3627] ? __lock_acquire+0x7c40/0x7c40 [ 1468.665897][ T3627] should_fail_ex+0x390/0x4c0 [ 1468.670643][ T3627] should_failslab+0x5/0x20 [ 1468.675201][ T3627] slab_pre_alloc_hook+0x59/0x300 [ 1468.680297][ T3627] kmem_cache_alloc_node+0x5a/0x310 [ 1468.685527][ T3627] ? __alloc_skb+0xf9/0x7d0 [ 1468.690098][ T3627] __alloc_skb+0xf9/0x7d0 [ 1468.694484][ T3627] alloc_skb_with_frags+0xa7/0x710 [ 1468.699652][ T3627] ? rcu_read_unlock_special+0x510/0x510 [ 1468.705360][ T3627] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1468.711387][ T3627] sock_alloc_send_pskb+0x87f/0x9a0 [ 1468.716652][ T3627] ? sock_kzfree_s+0x50/0x50 [ 1468.721288][ T3627] ? do_raw_spin_lock+0x128/0x2f0 [ 1468.726358][ T3627] ? __rwlock_init+0x140/0x140 [ 1468.731161][ T3627] ? do_raw_spin_unlock+0x11d/0x230 [ 1468.736443][ T3627] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1468.741606][ T3627] ? aa_sk_perm+0x81f/0x950 [ 1468.746163][ T3627] ? aa_af_perm+0x340/0x340 [ 1468.750717][ T3627] ? unix_dgram_poll+0x680/0x680 [ 1468.755710][ T3627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1468.762182][ T3627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1468.767787][ T3627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1468.773113][ T3627] ? security_socket_sendmsg+0x7c/0xa0 [ 1468.779410][ T3627] __sys_sendto+0x497/0x650 [ 1468.783969][ T3627] ? __ia32_sys_getpeername+0x80/0x80 [ 1468.789403][ T3627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1468.795429][ T3627] ? lock_chain_count+0x20/0x20 [ 1468.800333][ T3627] __x64_sys_sendto+0xda/0xf0 [ 1468.805063][ T3627] do_syscall_64+0x4c/0xa0 [ 1468.809526][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1468.814250][ T3627] ? clear_bhb_loop+0x60/0xb0 [ 1468.818980][ T3627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.824934][ T3627] RIP: 0033:0x7fa3fc7d5407 [ 1468.829385][ T3627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1468.849029][ T3627] RSP: 002b:00007fffffe5f3f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1468.857483][ T3627] RAX: ffffffffffffffda RBX: 00007fa3fc685c80 RCX: 00007fa3fc7d5407 [ 1468.865497][ T3627] RDX: 000000000000004d RSI: 00007fffffe5f530 RDI: 0000000000000003 [ 1468.873514][ T3627] RBP: 00007fffffe5f960 R08: 0000000000000000 R09: 0000000000000000 [ 1468.881538][ T3627] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffffe5f978 [ 1468.889551][ T3627] R13: 00007fffffe5f530 R14: 0000000000000032 R15: 00007fffffe5f530 [ 1468.897577][ T3627] [ 1468.900628][ T4324] CPU: 1 PID: 4324 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1468.908234][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1468.918333][ T4324] Workqueue: events_unbound cfg80211_wiphy_work [ 1468.923276][ T9] FAULT_INJECTION: forcing a failure. [ 1468.923276][ T9] name failslab, interval 1, probability 1, space 0, times 802 [ 1468.924657][ T4324] Call Trace: [ 1468.924668][ T4324] [ 1468.924679][ T4324] dump_stack_lvl+0x188/0x24e [ 1468.948490][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 1468.953725][ T4324] ? show_regs_print_info+0x12/0x12 [ 1468.958956][ T4324] ? load_image+0x410/0x410 [ 1468.962662][ C0] FAULT_INJECTION: forcing a failure. [ 1468.962662][ C0] name failslab, interval 1, probability 1, space 0, times 802 [ 1468.963484][ T4324] ? do_raw_spin_unlock+0x11d/0x230 [ 1468.981493][ T4324] should_fail_ex+0x390/0x4c0 [ 1468.986216][ T4324] should_failslab+0x5/0x20 [ 1468.990783][ T4324] slab_pre_alloc_hook+0x59/0x300 [ 1468.995849][ T4324] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1469.001876][ T4324] __kmem_cache_alloc_node+0x4f/0x270 [ 1469.007321][ T4324] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 1469.013425][ T4324] __kmalloc+0xa3/0x240 [ 1469.017630][ T4324] ieee802_11_parse_elems_full+0xb4/0x1240 [ 1469.023486][ T4324] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1469.029608][ T4324] ? __lock_acquire+0x138a/0x7c40 [ 1469.034687][ T4324] ? __lock_acquire+0x7c40/0x7c40 [ 1469.039834][ T4324] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1469.045952][ T4324] ieee80211_bss_info_update+0x7df/0xbf0 [ 1469.051635][ T4324] ? ieee80211_rx_bss_put+0x60/0x60 [ 1469.056886][ T4324] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1469.062565][ T4324] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1469.068437][ T4324] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1469.074630][ T4324] ? verify_lock_unused+0x140/0x140 [ 1469.079900][ T4324] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1469.086186][ T4324] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1469.091952][ T4324] ? mark_lock+0x94/0x320 [ 1469.096353][ T4324] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1469.102377][ T4324] ? __lock_acquire+0x7c40/0x7c40 [ 1469.107445][ T4324] ? lock_chain_count+0x20/0x20 [ 1469.112345][ T4324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1469.118296][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 1469.123617][ T4324] ? skb_dequeue+0x120/0x150 [ 1469.128240][ T4324] ieee80211_iface_work+0x72c/0xc70 [ 1469.133493][ T4324] cfg80211_wiphy_work+0x224/0x260 [ 1469.138648][ T4324] ? process_one_work+0x7b4/0x1160 [ 1469.143806][ T4324] process_one_work+0x8ab/0x1160 [ 1469.148796][ T4324] ? worker_detach_from_pool+0x240/0x240 [ 1469.154470][ T4324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1469.159527][ T4324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1469.165107][ T4324] ? wq_worker_running+0x97/0x190 [ 1469.170173][ T4324] worker_thread+0xaf5/0x12a0 [ 1469.174911][ T4324] kthread+0x29d/0x330 [ 1469.179010][ T4324] ? worker_clr_flags+0x1a0/0x1a0 [ 1469.184153][ T4324] ? kthread_blkcg+0xd0/0xd0 [ 1469.188781][ T4324] ret_from_fork+0x1f/0x30 [ 1469.193268][ T4324] [ 1469.196316][ C0] CPU: 0 PID: 5069 Comm: kworker/0:11 Not tainted syzkaller #0 [ 1469.203924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1469.214024][ C0] Workqueue: events drain_vmap_area_work [ 1469.219724][ C0] Call Trace: [ 1469.223042][ C0] [ 1469.225964][ C0] dump_stack_lvl+0x188/0x24e [ 1469.230715][ C0] ? show_regs_print_info+0x12/0x12 [ 1469.235971][ C0] ? load_image+0x410/0x410 [ 1469.240527][ C0] ? mark_lock+0x94/0x320 [ 1469.244918][ C0] ? verify_lock_unused+0x140/0x140 [ 1469.250191][ C0] should_fail_ex+0x390/0x4c0 [ 1469.254938][ C0] should_failslab+0x5/0x20 [ 1469.259494][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1469.264574][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1469.269816][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1469.274376][ C0] __alloc_skb+0xf9/0x7d0 [ 1469.278872][ C0] __netdev_alloc_skb+0x114/0x4f0 [ 1469.283950][ C0] ? __alloc_skb+0x7d0/0x7d0 [ 1469.288603][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 1469.294126][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1469.299726][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1469.305239][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1469.310848][ C0] __iterate_interfaces+0x225/0x4c0 [ 1469.316100][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1469.322405][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1469.329683][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1469.336055][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1469.343152][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1469.348416][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1469.353677][ C0] ? hw_scan_work+0xf00/0xf00 [ 1469.358416][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1469.363614][ C0] hrtimer_run_softirq+0x173/0x290 [ 1469.368783][ C0] handle_softirqs+0x291/0x910 [ 1469.373593][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1469.378507][ C0] ? do_softirq+0x210/0x210 [ 1469.383046][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1469.388208][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1469.393466][ C0] __irq_exit_rcu+0x13b/0x230 [ 1469.398186][ C0] ? irq_exit_rcu+0x20/0x20 [ 1469.402749][ C0] irq_exit_rcu+0x5/0x20 [ 1469.407032][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1469.412793][ C0] [ 1469.415797][ C0] [ 1469.418769][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1469.424818][ C0] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250 [ 1469.431632][ C0] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 73 ff 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 ff fb 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff [ 1469.451381][ C0] RSP: 0018:ffffc9000390f920 EFLAGS: 00000293 [ 1469.457524][ C0] RAX: ffffffff81773813 RBX: dffffc0000000000 RCX: ffff888027591e00 [ 1469.465540][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1469.473558][ C0] RBP: ffffc9000390fa70 R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 1469.481614][ C0] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: 1ffff110171e8219 [ 1469.489658][ C0] R13: ffff8880b8e3bdc0 R14: 0000000000000001 R15: ffff8880b8f410c8 [ 1469.497690][ C0] ? smp_call_function_many_cond+0x1163/0x1250 [ 1469.503916][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 1469.509639][ C0] ? smp_call_function_many+0x30/0x30 [ 1469.515059][ C0] ? kasan_depopulate_vmalloc_pte+0x73/0x80 [ 1469.520990][ C0] ? __apply_to_page_range+0xc40/0xd10 [ 1469.526500][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 1469.532095][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 1469.537258][ C0] flush_tlb_kernel_range+0x1b5/0x260 [ 1469.542685][ C0] __purge_vmap_area_lazy+0xf72/0x1920 [ 1469.548222][ C0] ? purge_fragmented_blocks_allcpus+0x930/0x930 [ 1469.554596][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1469.560531][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1469.565460][ C0] ? process_one_work+0x7b4/0x1160 [ 1469.570624][ C0] drain_vmap_area_work+0x3c/0xd0 [ 1469.575706][ C0] process_one_work+0x8ab/0x1160 [ 1469.580715][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1469.586401][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1469.591470][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1469.597057][ C0] ? wq_worker_running+0x97/0x190 [ 1469.602142][ C0] worker_thread+0xaf5/0x12a0 [ 1469.606885][ C0] kthread+0x29d/0x330 [ 1469.610994][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1469.616065][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1469.620700][ C0] ret_from_fork+0x1f/0x30 [ 1469.625179][ C0] [ 1469.640577][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1469.647943][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1469.658041][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 1469.664347][ T9] Call Trace: [ 1469.667663][ T9] [ 1469.670638][ T9] dump_stack_lvl+0x188/0x24e [ 1469.675378][ T9] ? show_regs_print_info+0x12/0x12 [ 1469.680632][ T9] ? load_image+0x410/0x410 [ 1469.685215][ T9] should_fail_ex+0x390/0x4c0 [ 1469.689944][ T9] should_failslab+0x5/0x20 [ 1469.694483][ T9] slab_pre_alloc_hook+0x59/0x300 [ 1469.699553][ T9] ? stack_trace_save+0xa6/0xf0 [ 1469.704459][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1469.710846][ T9] __kmem_cache_alloc_node+0x4f/0x270 [ 1469.716278][ T9] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1469.722659][ T9] __kmalloc+0xa3/0x240 [ 1469.727333][ T9] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 1469.733260][ T9] cfg80211_inform_bss_frame_data+0x728/0x1390 [ 1469.739574][ T9] ? cfg80211_parse_mbssid_data+0x2330/0x2330 [ 1469.745684][ T9] ? __lock_acquire+0x138a/0x7c40 [ 1469.750777][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1469.755943][ T9] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 1469.761783][ T9] ieee80211_bss_info_update+0x6ef/0xbf0 [ 1469.767458][ T9] ? ieee80211_rx_bss_put+0x60/0x60 [ 1469.772718][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1469.778990][ T9] ? ieee80211_vif_get_shift+0x22b/0x290 [ 1469.785037][ T9] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1469.790918][ T9] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 1469.797122][ T9] ? verify_lock_unused+0x140/0x140 [ 1469.802385][ T9] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 1469.808665][ T9] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 1469.814454][ T9] ? mark_lock+0x94/0x320 [ 1469.818823][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1469.824864][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 1469.829927][ T9] ? lock_chain_count+0x20/0x20 [ 1469.834811][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1469.840742][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 1469.845967][ T9] ? skb_dequeue+0x120/0x150 [ 1469.850583][ T9] ieee80211_iface_work+0x72c/0xc70 [ 1469.855829][ T9] cfg80211_wiphy_work+0x224/0x260 [ 1469.860973][ T9] ? process_one_work+0x7b4/0x1160 [ 1469.866110][ T9] process_one_work+0x8ab/0x1160 [ 1469.871176][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1469.877275][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1469.882323][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1469.887905][ T9] ? wq_worker_running+0x97/0x190 [ 1469.892963][ T9] worker_thread+0xaf5/0x12a0 [ 1469.897695][ T9] kthread+0x29d/0x330 [ 1469.901783][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1469.906832][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1469.911449][ T9] ret_from_fork+0x1f/0x30 [ 1469.915924][ T9] [ 1469.919616][T17384] FAULT_INJECTION: forcing a failure. [ 1469.919616][T17384] name failslab, interval 1, probability 1, space 0, times 801 [ 1469.932499][T17384] CPU: 1 PID: 17384 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 1469.940266][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1469.940604][ T4888] FAULT_INJECTION: forcing a failure. [ 1469.940604][ T4888] name failslab, interval 1, probability 1, space 0, times 798 [ 1469.950342][T17384] Workqueue: events_unbound nsim_dev_trap_report_work [ 1469.950384][T17384] Call Trace: [ 1469.950393][T17384] [ 1469.950405][T17384] dump_stack_lvl+0x188/0x24e [ 1469.950443][T17384] ? show_regs_print_info+0x12/0x12 [ 1469.950477][T17384] ? load_image+0x410/0x410 [ 1469.950504][T17384] ? mark_lock+0x94/0x320 [ 1469.950543][T17384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1469.950584][T17384] should_fail_ex+0x390/0x4c0 [ 1469.950622][T17384] should_failslab+0x5/0x20 [ 1469.950645][T17384] slab_pre_alloc_hook+0x59/0x300 [ 1469.950677][T17384] kmem_cache_alloc_node+0x5a/0x310 [ 1469.950702][T17384] ? slab_free_freelist_hook+0x133/0x1b0 [ 1469.950729][T17384] ? __alloc_skb+0xf9/0x7d0 [ 1469.950772][T17384] __alloc_skb+0xf9/0x7d0 [ 1469.950809][T17384] nsim_dev_trap_report_work+0x24f/0xa80 [ 1469.950855][T17384] ? process_one_work+0x7b4/0x1160 [ 1469.950905][T17384] process_one_work+0x8ab/0x1160 [ 1469.950949][T17384] ? worker_detach_from_pool+0x240/0x240 [ 1469.950980][T17384] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1469.951006][T17384] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1469.951037][T17384] ? wq_worker_running+0x97/0x190 [ 1469.951075][T17384] worker_thread+0xaf5/0x12a0 [ 1469.951150][T17384] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1470.057862][ C0] FAULT_INJECTION: forcing a failure. [ 1470.057862][ C0] name failslab, interval 1, probability 1, space 0, times 797 [ 1470.062085][T17384] kthread+0x29d/0x330 [ 1470.100347][T17384] ? worker_clr_flags+0x1a0/0x1a0 [ 1470.105432][T17384] ? kthread_blkcg+0xd0/0xd0 [ 1470.110057][T17384] ret_from_fork+0x1f/0x30 [ 1470.114528][T17384] [ 1470.117587][ C0] CPU: 0 PID: 5069 Comm: kworker/0:11 Not tainted syzkaller #0 [ 1470.125196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1470.135298][ C0] Workqueue: events drain_vmap_area_work [ 1470.141108][ C0] Call Trace: [ 1470.144434][ C0] [ 1470.147323][ C0] dump_stack_lvl+0x188/0x24e [ 1470.152067][ C0] ? show_regs_print_info+0x12/0x12 [ 1470.157331][ C0] ? load_image+0x410/0x410 [ 1470.161894][ C0] ? mark_lock+0x94/0x320 [ 1470.166289][ C0] should_fail_ex+0x390/0x4c0 [ 1470.171004][ C0] should_failslab+0x5/0x20 [ 1470.175528][ C0] slab_pre_alloc_hook+0x59/0x300 [ 1470.180584][ C0] kmem_cache_alloc_node+0x5a/0x310 [ 1470.185811][ C0] ? __alloc_skb+0xf9/0x7d0 [ 1470.190358][ C0] __alloc_skb+0xf9/0x7d0 [ 1470.194725][ C0] skb_copy+0x122/0x6f0 [ 1470.198940][ C0] mac80211_hwsim_tx_frame_no_nl+0xd04/0x12f0 [ 1470.205052][ C0] ? mac80211_hwsim_tx_frame_nl+0xba0/0xba0 [ 1470.210971][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1470.217238][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1470.222556][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1470.228399][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1470.233893][ C0] mac80211_hwsim_beacon_tx+0x608/0xae0 [ 1470.239472][ C0] __iterate_interfaces+0x225/0x4c0 [ 1470.244705][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1470.250997][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1470.258245][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1470.264531][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1470.271706][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1470.276984][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1470.282222][ C0] ? hw_scan_work+0xf00/0xf00 [ 1470.286948][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1470.292092][ C0] hrtimer_run_softirq+0x173/0x290 [ 1470.297262][ C0] handle_softirqs+0x291/0x910 [ 1470.302053][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1470.306947][ C0] ? do_softirq+0x210/0x210 [ 1470.311471][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1470.316698][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1470.321956][ C0] __irq_exit_rcu+0x13b/0x230 [ 1470.326657][ C0] ? irq_exit_rcu+0x20/0x20 [ 1470.331213][ C0] irq_exit_rcu+0x5/0x20 [ 1470.335495][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1470.341168][ C0] [ 1470.344212][ C0] [ 1470.347166][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1470.353180][ C0] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250 [ 1470.359972][ C0] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 73 ff 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 ff fb 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff [ 1470.379628][ C0] RSP: 0018:ffffc9000390f920 EFLAGS: 00000293 [ 1470.386163][ C0] RAX: ffffffff81773813 RBX: dffffc0000000000 RCX: ffff888027591e00 [ 1470.394246][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1470.402241][ C0] RBP: ffffc9000390fa70 R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 1470.410247][ C0] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: 1ffff110171e8219 [ 1470.418242][ C0] R13: ffff8880b8e3bdc0 R14: 0000000000000001 R15: ffff8880b8f410c8 [ 1470.426244][ C0] ? smp_call_function_many_cond+0x1163/0x1250 [ 1470.432443][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 1470.438026][ C0] ? smp_call_function_many+0x30/0x30 [ 1470.443433][ C0] ? kasan_depopulate_vmalloc_pte+0x73/0x80 [ 1470.449466][ C0] ? __apply_to_page_range+0xc40/0xd10 [ 1470.455090][ C0] ? flush_tlb_kernel_range+0x260/0x260 [ 1470.460682][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 1470.465835][ C0] flush_tlb_kernel_range+0x1b5/0x260 [ 1470.471246][ C0] __purge_vmap_area_lazy+0xf72/0x1920 [ 1470.476756][ C0] ? purge_fragmented_blocks_allcpus+0x930/0x930 [ 1470.483139][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1470.489065][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1470.493961][ C0] ? process_one_work+0x7b4/0x1160 [ 1470.499101][ C0] drain_vmap_area_work+0x3c/0xd0 [ 1470.504182][ C0] process_one_work+0x8ab/0x1160 [ 1470.509165][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1470.514848][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1470.519905][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1470.525513][ C0] ? wq_worker_running+0x97/0x190 [ 1470.530577][ C0] worker_thread+0xaf5/0x12a0 [ 1470.535330][ C0] kthread+0x29d/0x330 [ 1470.539856][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1470.544915][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1470.549583][ C0] ret_from_fork+0x1f/0x30 [ 1470.554044][ C0] [ 1470.562791][ T4888] CPU: 0 PID: 4888 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1470.570519][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1470.580713][ T4888] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1470.588672][ T4888] Call Trace: [ 1470.591998][ T4888] [ 1470.594992][ T4888] dump_stack_lvl+0x188/0x24e [ 1470.599734][ T4888] ? __lock_acquire+0x7c40/0x7c40 [ 1470.604833][ T4888] ? show_regs_print_info+0x12/0x12 [ 1470.610263][ T4888] ? load_image+0x410/0x410 [ 1470.614819][ T4888] ? verify_lock_unused+0x140/0x140 [ 1470.620194][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1470.626144][ T4888] should_fail_ex+0x390/0x4c0 [ 1470.630884][ T4888] should_failslab+0x5/0x20 [ 1470.635437][ T4888] slab_pre_alloc_hook+0x59/0x300 [ 1470.640512][ T4888] ? mark_lock+0x94/0x320 [ 1470.644896][ T4888] kmem_cache_alloc_node+0x5a/0x310 [ 1470.650141][ T4888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1470.656253][ T4888] ? __alloc_skb+0xf9/0x7d0 [ 1470.660819][ T4888] __alloc_skb+0xf9/0x7d0 [ 1470.665209][ T4888] __netdev_alloc_skb+0x114/0x4f0 [ 1470.670291][ T4888] ? __local_bh_enable_ip+0x136/0x1c0 [ 1470.675711][ T4888] ? __alloc_skb+0x7d0/0x7d0 [ 1470.680356][ T4888] ? do_raw_spin_unlock+0x11d/0x230 [ 1470.685610][ T4888] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 1470.691144][ T4888] batadv_iv_ogm_schedule+0xb9d/0x1080 [ 1470.696665][ T4888] ? batadv_iv_ogm_schedule+0x87e/0x1080 [ 1470.702475][ T4888] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1470.709776][ T4888] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 1470.716974][ T4888] ? process_one_work+0x7b4/0x1160 [ 1470.722145][ T4888] process_one_work+0x8ab/0x1160 [ 1470.727149][ T4888] ? worker_detach_from_pool+0x240/0x240 [ 1470.732849][ T4888] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1470.737923][ T4888] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1470.743621][ T4888] ? wq_worker_running+0x97/0x190 [ 1470.748811][ T4888] worker_thread+0xaf5/0x12a0 [ 1470.753553][ T4888] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1470.759502][ T4888] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1470.765635][ T4888] kthread+0x29d/0x330 [ 1470.769746][ T4888] ? worker_clr_flags+0x1a0/0x1a0 [ 1470.774911][ T4888] ? kthread_blkcg+0xd0/0xd0 [ 1470.779553][ T4888] ret_from_fork+0x1f/0x30 [ 1470.784046][ T4888] [ 1470.791459][ T5740] FAULT_INJECTION: forcing a failure. [ 1470.791459][ T5740] name failslab, interval 1, probability 1, space 0, times 793 [ 1470.804681][ T5740] CPU: 0 PID: 5740 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1470.812385][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1470.822519][ T5740] Workqueue: events_unbound cfg80211_wiphy_work [ 1470.829131][ T5740] Call Trace: [ 1470.832453][ T5740] [ 1470.835447][ T5740] dump_stack_lvl+0x188/0x24e [ 1470.840296][ T5740] ? show_regs_print_info+0x12/0x12