last executing test programs: 12.472662361s ago: executing program 3 (id=4): syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x8}, 0xbe}}}, 0x7) 12.119301558s ago: executing program 3 (id=7): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) 8.396973474s ago: executing program 1 (id=2): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 8.271648546s ago: executing program 4 (id=5): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8.143921574s ago: executing program 0 (id=13): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x8001) 7.528830423s ago: executing program 0 (id=14): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="80000000ffffffffffffffffff20ffff50505050505000000000000000000000640001000006020202020202010196050882a719ccafcc53ae6521"], 0x11b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 7.500729062s ago: executing program 1 (id=15): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "8a34d6", 0x1}}}, 0xd) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4001af84, &(0x7f0000000140)={0x2}) 7.143636469s ago: executing program 4 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.80228754s ago: executing program 2 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 6.742364623s ago: executing program 4 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='2\x00', 0x2) write(r10, &(0x7f00000008e0)='1\x00', 0x2) write(r10, &(0x7f0000000900)='0\x00', 0x2) write(r9, &(0x7f0000000920)='\n\x00', 0x1) 5.735559108s ago: executing program 0 (id=19): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000280)) 5.277721858s ago: executing program 2 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x41, 0x0, 0x0) 4.229738053s ago: executing program 3 (id=21): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n\x00', 0x2) 3.235751349s ago: executing program 2 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b0}]}) 3.013048733s ago: executing program 0 (id=23): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) 2.942794089s ago: executing program 1 (id=24): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00002da000/0x1000)=nil, &(0x7f0000081000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000076e000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.185506511s ago: executing program 0 (id=25): mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./cfg\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./cfg/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f0000000900)='./cfg/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000a00)='./cfg/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./cfg/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='dummy_udc.0', 0xb) 1.964294093s ago: executing program 2 (id=26): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x1, 0x0) write(r0, &(0x7f0000000080)='maxtcpc 0x50\n\x00', 0xd) 1.719284495s ago: executing program 2 (id=27): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.113167583s ago: executing program 4 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x6, 0x0, [{0x40000080}, {0x40000081}, {0x40000082}, {0x40000083}, {0x40000084}, {0x40000090}]}) 995.372378ms ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002180)={0x30, 0x5, 0x0, {0x0, 0x4, 0xe, 0x8001}}, 0x30) 607.242449ms ago: executing program 2 (id=30): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x20000000, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 304.40384ms ago: executing program 1 (id=31): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='ffffffff', 0x8) close(r0) syz_usbip_server_init(0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000240)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000002c0)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000340)='\x00\x00\x00\x00'}) syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) 163.765143ms ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x0, 0x1}, 0x5, 0x40, &(0x7f0000000000)={0x4, 0x3e, 0x403, 0x3, 0x2}, 0x8, 0x2, 0xffff0000, 0x0, 0x3, 0x2, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xa0050000, 0xf5}]}}}}}}}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) getpid() syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x4e23, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x4004c000}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x449) 70.312742ms ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='10\x00', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 0s ago: executing program 3 (id=34): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): a failure. [ 126.522431][ T5617] name failslab, interval 1, probability 100, space 0, times 61 [ 126.522498][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.522564][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.522604][ T5617] Workqueue: hci2 hci_cmd_work [ 126.522681][ T5617] Call Trace: [ 126.522710][ T5617] [ 126.522731][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.522844][ T5617] should_fail_ex+0x467/0x600 [ 126.522944][ T5617] should_failslab+0xa8/0x100 [ 126.523013][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.523076][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.523162][ T5617] ? skb_clone+0x212/0x3a0 [ 126.523227][ T5617] ? skb_clone+0x212/0x3a0 [ 126.523360][ T5617] skb_clone+0x212/0x3a0 [ 126.523427][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.523502][ T5617] hci_cmd_work+0xc2/0x780 [ 126.523569][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.523644][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.523793][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.523874][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.523961][ T5617] worker_thread+0xa47/0xfb0 [ 126.524059][ T5617] kthread+0x388/0x470 [ 126.524093][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.524119][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.524154][ T5617] ret_from_fork+0x514/0xb70 [ 126.524185][ C1] FAULT_INJECTION: forcing a failure. [ 126.524185][ C1] name failslab, interval 1, probability 100, space 0, times 61 [ 126.524191][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.524225][ T5617] ? __switch_to+0xc89/0x1420 [ 126.524254][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.524284][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.524324][ T5617] [ 126.524336][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.524362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.524375][ C1] Call Trace: [ 126.524383][ C1] [ 126.524392][ C1] dump_stack_lvl+0xe8/0x150 [ 126.524429][ C1] should_fail_ex+0x467/0x600 [ 126.524470][ C1] should_failslab+0xa8/0x100 [ 126.524497][ T5617] FAULT_INJECTION: forcing a failure. [ 126.524497][ T5617] name failslab, interval 1, probability 100, space 0, times 60 [ 126.524500][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.524528][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.524548][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.524574][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.524599][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.524626][ C1] hsr_init_skb+0xf3/0x6d0 [ 126.524652][ C1] send_hsr_supervision_frame+0x195/0xd60 [ 126.524683][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 126.524704][ C1] hsr_announce+0x1db/0x370 [ 126.524735][ C1] ? hsr_announce+0x89/0x370 [ 126.524765][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 126.524802][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.524840][ C1] call_timer_fn+0x192/0x5e0 [ 126.524865][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 126.524893][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.524917][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.524951][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.524975][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 126.525005][ C1] __run_timer_base+0x67b/0x9b0 [ 126.525041][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.525068][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.525095][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.525125][ C1] run_timer_softirq+0xb7/0x170 [ 126.525147][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.525182][ C1] run_ktimerd+0x69/0x100 [ 126.525209][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.525239][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.525274][ C1] kthread+0x388/0x470 [ 126.525306][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.525331][ C1] ? __pfx_kthread+0x10/0x10 [ 126.525362][ C1] ret_from_fork+0x514/0xb70 [ 126.525396][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.525427][ C1] ? __switch_to+0xc89/0x1420 [ 126.525455][ C1] ? __pfx_kthread+0x10/0x10 [ 126.525486][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.525522][ C1] [ 126.525531][ C1] hsr0: HSR: Could not send supervision frame [ 126.525533][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.525557][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.525569][ T5617] Workqueue: hci2 hci_cmd_work [ 126.525574][ C1] FAULT_INJECTION: forcing a failure. [ 126.525574][ C1] name failslab, interval 1, probability 100, space 0, times 59 [ 126.525588][ T5617] [ 126.525594][ T5617] Call Trace: [ 126.525602][ T5617] [ 126.525609][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.525640][ T5617] should_fail_ex+0x467/0x600 [ 126.525676][ T5617] should_failslab+0xa8/0x100 [ 126.525700][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.525718][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.525747][ T5617] ? skb_clone+0x212/0x3a0 [ 126.525770][ T5617] ? skb_clone+0x212/0x3a0 [ 126.525800][ T5617] skb_clone+0x212/0x3a0 [ 126.525823][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.525847][ T5617] hci_cmd_work+0xc2/0x780 [ 126.525868][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.525891][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.525938][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.525968][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.525995][ T5617] worker_thread+0xa47/0xfb0 [ 126.526043][ T5617] kthread+0x388/0x470 [ 126.526071][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.526094][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.526124][ T5617] ret_from_fork+0x514/0xb70 [ 126.526155][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.526184][ T5617] ? __switch_to+0xc89/0x1420 [ 126.526212][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.526242][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.526278][ T5617] [ 126.526289][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.526317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.526330][ C1] Call Trace: [ 126.526338][ C1] [ 126.526334][ T5617] FAULT_INJECTION: forcing a failure. [ 126.526334][ T5617] name failslab, interval 1, probability 100, space 0, times 58 [ 126.526347][ C1] dump_stack_lvl+0xe8/0x150 [ 126.526382][ C1] should_fail_ex+0x467/0x600 [ 126.526417][ C1] should_failslab+0xa8/0x100 [ 126.526441][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.526463][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.526482][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.526509][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.526534][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.526566][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.526594][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.526624][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.526648][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.526676][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.526701][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.526738][ C1] call_timer_fn+0x192/0x5e0 [ 126.526762][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.526784][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.526815][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.526849][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.526872][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.526897][ C1] __run_timer_base+0x67b/0x9b0 [ 126.526933][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.526959][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.526986][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.527016][ C1] run_timer_softirq+0xb7/0x170 [ 126.527038][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.527073][ C1] run_ktimerd+0x69/0x100 [ 126.527101][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.527130][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.527165][ C1] kthread+0x388/0x470 [ 126.527195][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.527220][ C1] ? __pfx_kthread+0x10/0x10 [ 126.527252][ C1] ret_from_fork+0x514/0xb70 [ 126.527285][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.527317][ C1] ? __switch_to+0xc89/0x1420 [ 126.527346][ C1] ? __pfx_kthread+0x10/0x10 [ 126.527377][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.527411][ C1] [ 126.527422][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.527447][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.527454][ C1] FAULT_INJECTION: forcing a failure. [ 126.527454][ C1] name failslab, interval 1, probability 100, space 0, times 57 [ 126.527460][ T5617] Workqueue: hci2 hci_cmd_work [ 126.527483][ T5617] Call Trace: [ 126.527489][ T5617] [ 126.527496][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.527526][ T5617] should_fail_ex+0x467/0x600 [ 126.527559][ T5617] should_failslab+0xa8/0x100 [ 126.527583][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.527600][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.527627][ T5617] ? skb_clone+0x212/0x3a0 [ 126.527650][ T5617] ? skb_clone+0x212/0x3a0 [ 126.527679][ T5617] skb_clone+0x212/0x3a0 [ 126.527702][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.527727][ T5617] hci_cmd_work+0xc2/0x780 [ 126.527748][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.527771][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.527821][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.527851][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.527878][ T5617] worker_thread+0xa47/0xfb0 [ 126.527925][ T5617] kthread+0x388/0x470 [ 126.527954][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.527976][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.528006][ T5617] ret_from_fork+0x514/0xb70 [ 126.528038][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.528068][ T5617] ? __switch_to+0xc89/0x1420 [ 126.528095][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.528125][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.528159][ T5617] [ 126.528170][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.528185][ T5617] FAULT_INJECTION: forcing a failure. [ 126.528185][ T5617] name failslab, interval 1, probability 100, space 0, times 56 [ 126.528197][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.528210][ C1] Call Trace: [ 126.528217][ C1] [ 126.528224][ C1] dump_stack_lvl+0xe8/0x150 [ 126.528256][ C1] should_fail_ex+0x467/0x600 [ 126.528291][ C1] should_failslab+0xa8/0x100 [ 126.528317][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.528338][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.528356][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.528383][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.528407][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.528437][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.528465][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.528494][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.528517][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.528544][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.528568][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.528605][ C1] call_timer_fn+0x192/0x5e0 [ 126.528629][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.528650][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.528673][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.528707][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.528730][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.528754][ C1] __run_timer_base+0x67b/0x9b0 [ 126.528794][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.528821][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.528847][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.528877][ C1] run_timer_softirq+0xb7/0x170 [ 126.528899][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.528933][ C1] run_ktimerd+0x69/0x100 [ 126.528960][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.528989][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.529023][ C1] kthread+0x388/0x470 [ 126.529053][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.529078][ C1] ? __pfx_kthread+0x10/0x10 [ 126.529109][ C1] ret_from_fork+0x514/0xb70 [ 126.529142][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.529172][ C1] ? __switch_to+0xc89/0x1420 [ 126.529201][ C1] ? __pfx_kthread+0x10/0x10 [ 126.529232][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.529266][ C1] [ 126.529278][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.529309][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.529307][ C1] FAULT_INJECTION: forcing a failure. [ 126.529307][ C1] name failslab, interval 1, probability 100, space 0, times 55 [ 126.529322][ T5617] Workqueue: hci2 hci_cmd_work [ 126.529343][ T5617] Call Trace: [ 126.529350][ T5617] [ 126.529357][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.529386][ T5617] should_fail_ex+0x467/0x600 [ 126.529419][ T5617] should_failslab+0xa8/0x100 [ 126.529443][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.529460][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.529488][ T5617] ? skb_clone+0x212/0x3a0 [ 126.529511][ T5617] ? skb_clone+0x212/0x3a0 [ 126.529540][ T5617] skb_clone+0x212/0x3a0 [ 126.529562][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.529587][ T5617] hci_cmd_work+0xc2/0x780 [ 126.529608][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.529631][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.529679][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.529708][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.529735][ T5617] worker_thread+0xa47/0xfb0 [ 126.529783][ T5617] kthread+0x388/0x470 [ 126.529813][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.529836][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.529865][ T5617] ret_from_fork+0x514/0xb70 [ 126.529897][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.529926][ T5617] ? __switch_to+0xc89/0x1420 [ 126.529954][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.529984][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.530038][ T5617] [ 126.530049][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.530064][ T5617] FAULT_INJECTION: forcing a failure. [ 126.530064][ T5617] name failslab, interval 1, probability 100, space 0, times 54 [ 126.530076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.530089][ C1] Call Trace: [ 126.530096][ C1] [ 126.530103][ C1] dump_stack_lvl+0xe8/0x150 [ 126.530134][ C1] should_fail_ex+0x467/0x600 [ 126.530169][ C1] should_failslab+0xa8/0x100 [ 126.530193][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.530215][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.530234][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.530260][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.530285][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.530317][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.530344][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.530373][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.530396][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.530424][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.530448][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.530490][ C1] call_timer_fn+0x192/0x5e0 [ 126.530513][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.530535][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.530558][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.530592][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.530615][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.530639][ C1] __run_timer_base+0x67b/0x9b0 [ 126.530674][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.530701][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.530727][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.530756][ C1] run_timer_softirq+0xb7/0x170 [ 126.530779][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.530820][ C1] run_ktimerd+0x69/0x100 [ 126.530847][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.530876][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.530910][ C1] kthread+0x388/0x470 [ 126.530940][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.530965][ C1] ? __pfx_kthread+0x10/0x10 [ 126.530996][ C1] ret_from_fork+0x514/0xb70 [ 126.531029][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.531059][ C1] ? __switch_to+0xc89/0x1420 [ 126.531088][ C1] ? __pfx_kthread+0x10/0x10 [ 126.531118][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.531153][ C1] [ 126.531164][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.531188][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.531192][ C1] FAULT_INJECTION: forcing a failure. [ 126.531192][ C1] name failslab, interval 1, probability 100, space 0, times 53 [ 126.531202][ T5617] Workqueue: hci2 hci_cmd_work [ 126.531225][ T5617] Call Trace: [ 126.531231][ T5617] [ 126.531238][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.531268][ T5617] should_fail_ex+0x467/0x600 [ 126.531308][ T5617] should_failslab+0xa8/0x100 [ 126.531332][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.531349][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.531378][ T5617] ? skb_clone+0x212/0x3a0 [ 126.531400][ T5617] ? skb_clone+0x212/0x3a0 [ 126.531429][ T5617] skb_clone+0x212/0x3a0 [ 126.531451][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.531476][ T5617] hci_cmd_work+0xc2/0x780 [ 126.531497][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.531520][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.531567][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.531596][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.531623][ T5617] worker_thread+0xa47/0xfb0 [ 126.531671][ T5617] kthread+0x388/0x470 [ 126.531700][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.531722][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.531752][ T5617] ret_from_fork+0x514/0xb70 [ 126.531783][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.531814][ T5617] ? __switch_to+0xc89/0x1420 [ 126.531842][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.531872][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.531906][ T5617] [ 126.531917][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.531932][ T5617] FAULT_INJECTION: forcing a failure. [ 126.531932][ T5617] name failslab, interval 1, probability 100, space 0, times 52 [ 126.531944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.531959][ C1] Call Trace: [ 126.531966][ C1] [ 126.531973][ C1] dump_stack_lvl+0xe8/0x150 [ 126.532005][ C1] should_fail_ex+0x467/0x600 [ 126.532040][ C1] should_failslab+0xa8/0x100 [ 126.532065][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.532087][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.532106][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.532133][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.532157][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.532188][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.532216][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.532245][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.532269][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.532297][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.532321][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.532358][ C1] call_timer_fn+0x192/0x5e0 [ 126.532382][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.532404][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.532427][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.532461][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.532485][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.532509][ C1] __run_timer_base+0x67b/0x9b0 [ 126.532544][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.532571][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.532597][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.532627][ C1] run_timer_softirq+0xb7/0x170 [ 126.532650][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.532685][ C1] run_ktimerd+0x69/0x100 [ 126.532712][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.532741][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.532776][ C1] kthread+0x388/0x470 [ 126.532824][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.532849][ C1] ? __pfx_kthread+0x10/0x10 [ 126.532880][ C1] ret_from_fork+0x514/0xb70 [ 126.532914][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.532945][ C1] ? __switch_to+0xc89/0x1420 [ 126.532974][ C1] ? __pfx_kthread+0x10/0x10 [ 126.533005][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.533040][ C1] [ 126.533052][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.533076][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.533082][ C1] FAULT_INJECTION: forcing a failure. [ 126.533082][ C1] name failslab, interval 1, probability 100, space 0, times 51 [ 126.533090][ T5617] Workqueue: hci2 hci_cmd_work [ 126.533113][ T5617] Call Trace: [ 126.533120][ T5617] [ 126.533127][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.533157][ T5617] should_fail_ex+0x467/0x600 [ 126.533190][ T5617] should_failslab+0xa8/0x100 [ 126.533214][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.533232][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.533261][ T5617] ? skb_clone+0x212/0x3a0 [ 126.533284][ T5617] ? skb_clone+0x212/0x3a0 [ 126.533320][ T5617] skb_clone+0x212/0x3a0 [ 126.533355][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.533381][ T5617] hci_cmd_work+0xc2/0x780 [ 126.533402][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.533425][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.533474][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.533503][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.533531][ T5617] worker_thread+0xa47/0xfb0 [ 126.533579][ T5617] kthread+0x388/0x470 [ 126.533608][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.533631][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.533660][ T5617] ret_from_fork+0x514/0xb70 [ 126.533693][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.533723][ T5617] ? __switch_to+0xc89/0x1420 [ 126.533751][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.533781][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.533816][ T5617] [ 126.533827][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.533844][ T5617] FAULT_INJECTION: forcing a failure. [ 126.533844][ T5617] name failslab, interval 1, probability 100, space 0, times 50 [ 126.533854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.533869][ C1] Call Trace: [ 126.533876][ C1] [ 126.533883][ C1] dump_stack_lvl+0xe8/0x150 [ 126.533914][ C1] should_fail_ex+0x467/0x600 [ 126.533950][ C1] should_failslab+0xa8/0x100 [ 126.533974][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.533996][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.534018][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.534047][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.534076][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.534111][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.534143][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.534175][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.534203][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.534235][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.534265][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.534309][ C1] call_timer_fn+0x192/0x5e0 [ 126.534338][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.534366][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.534396][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.534439][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.534469][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.534500][ C1] __run_timer_base+0x67b/0x9b0 [ 126.534544][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.534578][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.534612][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.534649][ C1] run_timer_softirq+0xb7/0x170 [ 126.534678][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.534721][ C1] run_ktimerd+0x69/0x100 [ 126.534756][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.534801][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.534845][ C1] kthread+0x388/0x470 [ 126.534883][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.534915][ C1] ? __pfx_kthread+0x10/0x10 [ 126.534954][ C1] ret_from_fork+0x514/0xb70 [ 126.534996][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.535035][ C1] ? __switch_to+0xc89/0x1420 [ 126.535071][ C1] ? __pfx_kthread+0x10/0x10 [ 126.535111][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.535155][ C1] [ 126.542713][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.542744][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.542760][ T5617] Workqueue: hci2 hci_cmd_work [ 126.542790][ T5617] Call Trace: [ 126.542801][ T5617] [ 126.542820][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.542939][ T5617] should_fail_ex+0x467/0x600 [ 126.543064][ T5617] should_failslab+0xa8/0x100 [ 126.543141][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.543204][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.543301][ T5617] ? skb_clone+0x212/0x3a0 [ 126.543386][ T5617] ? skb_clone+0x212/0x3a0 [ 126.543474][ T5617] skb_clone+0x212/0x3a0 [ 126.543548][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.543624][ T5617] hci_cmd_work+0xc2/0x780 [ 126.543696][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.543773][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.543928][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.544019][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.544051][ T5617] worker_thread+0xa47/0xfb0 [ 126.544196][ T5617] kthread+0x388/0x470 [ 126.544301][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.544404][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.544498][ T5617] ret_from_fork+0x514/0xb70 [ 126.544626][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.544661][ T5617] ? __switch_to+0xc89/0x1420 [ 126.544748][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.544838][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.544957][ T5617] [ 126.545639][ T5617] FAULT_INJECTION: forcing a failure. [ 126.545639][ T5617] name failslab, interval 1, probability 100, space 0, times 48 [ 126.545792][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.545857][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.545893][ T5617] Workqueue: hci2 hci_cmd_work [ 126.545966][ T5617] Call Trace: [ 126.545988][ T5617] [ 126.546010][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.546099][ T5617] should_fail_ex+0x467/0x600 [ 126.546207][ T5617] should_failslab+0xa8/0x100 [ 126.546283][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.546346][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.546442][ T5617] ? skb_clone+0x212/0x3a0 [ 126.546516][ T5617] ? skb_clone+0x212/0x3a0 [ 126.546612][ T5617] skb_clone+0x212/0x3a0 [ 126.546678][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.546752][ T5617] hci_cmd_work+0xc2/0x780 [ 126.546817][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.546885][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.547057][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.547189][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.547268][ T5617] worker_thread+0xa47/0xfb0 [ 126.547428][ T5617] kthread+0x388/0x470 [ 126.547520][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.547586][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.547682][ T5617] ret_from_fork+0x514/0xb70 [ 126.547780][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.547868][ T5617] ? __switch_to+0xc89/0x1420 [ 126.547969][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.548072][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.548159][ T5617] [ 126.548320][ T5617] FAULT_INJECTION: forcing a failure. [ 126.548320][ T5617] name failslab, interval 1, probability 100, space 0, times 47 [ 126.548398][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.548445][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.548458][ T5617] Workqueue: hci2 hci_cmd_work [ 126.548481][ T5617] Call Trace: [ 126.548514][ T5617] [ 126.548544][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.548670][ T5617] should_fail_ex+0x467/0x600 [ 126.548767][ T5617] should_failslab+0xa8/0x100 [ 126.548840][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.548882][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.548973][ T5617] ? skb_clone+0x212/0x3a0 [ 126.549039][ T5617] ? skb_clone+0x212/0x3a0 [ 126.549132][ T5617] skb_clone+0x212/0x3a0 [ 126.549197][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.549281][ T5617] hci_cmd_work+0xc2/0x780 [ 126.549346][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.549429][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.549575][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.549662][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.549746][ T5617] worker_thread+0xa47/0xfb0 [ 126.549881][ T5617] kthread+0x388/0x470 [ 126.549990][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.550101][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.550189][ T5617] ret_from_fork+0x514/0xb70 [ 126.550293][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.550390][ T5617] ? __switch_to+0xc89/0x1420 [ 126.550475][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.550571][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.550677][ T5617] [ 126.550753][ T5617] FAULT_INJECTION: forcing a failure. [ 126.550753][ T5617] name failslab, interval 1, probability 100, space 0, times 46 [ 126.550825][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.550883][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.550917][ T5617] Workqueue: hci2 hci_cmd_work [ 126.550974][ T5617] Call Trace: [ 126.550994][ T5617] [ 126.551017][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.551112][ T5617] should_fail_ex+0x467/0x600 [ 126.551212][ T5617] should_failslab+0xa8/0x100 [ 126.551280][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.551359][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.551475][ T5617] ? skb_clone+0x212/0x3a0 [ 126.551541][ T5617] ? skb_clone+0x212/0x3a0 [ 126.551629][ T5617] skb_clone+0x212/0x3a0 [ 126.551697][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.551778][ T5617] hci_cmd_work+0xc2/0x780 [ 126.551842][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.551913][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.552062][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.552157][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.552242][ T5617] worker_thread+0xa47/0xfb0 [ 126.552381][ T5617] kthread+0x388/0x470 [ 126.552476][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.552542][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.552631][ T5617] ret_from_fork+0x514/0xb70 [ 126.552736][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.552851][ T5617] ? __switch_to+0xc89/0x1420 [ 126.552937][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.553026][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.553134][ T5617] [ 126.553201][ T5617] FAULT_INJECTION: forcing a failure. [ 126.553201][ T5617] name failslab, interval 1, probability 100, space 0, times 45 [ 126.553274][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.553332][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.553380][ T5617] Workqueue: hci2 hci_cmd_work [ 126.553435][ T5617] Call Trace: [ 126.553456][ T5617] [ 126.553478][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.553570][ T5617] should_fail_ex+0x467/0x600 [ 126.553668][ T5617] should_failslab+0xa8/0x100 [ 126.553742][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.553803][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.553883][ T5617] ? skb_clone+0x212/0x3a0 [ 126.553939][ T5617] ? skb_clone+0x212/0x3a0 [ 126.554029][ T5617] skb_clone+0x212/0x3a0 [ 126.554055][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.554085][ T5617] hci_cmd_work+0xc2/0x780 [ 126.554174][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.554257][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.554408][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.554495][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.554581][ T5617] worker_thread+0xa47/0xfb0 [ 126.554731][ T5617] kthread+0x388/0x470 [ 126.554818][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.554884][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.554972][ T5617] ret_from_fork+0x514/0xb70 [ 126.555068][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.555163][ T5617] ? __switch_to+0xc89/0x1420 [ 126.555251][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.555332][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.555462][ T5617] [ 126.555980][ T5617] FAULT_INJECTION: forcing a failure. [ 126.555980][ T5617] name failslab, interval 1, probability 100, space 0, times 44 [ 126.556056][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.556120][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.556161][ T5617] Workqueue: hci2 hci_cmd_work [ 126.556226][ T5617] Call Trace: [ 126.556247][ T5617] [ 126.556269][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.556365][ T5617] should_fail_ex+0x467/0x600 [ 126.556470][ T5617] should_failslab+0xa8/0x100 [ 126.556545][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.556599][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.556686][ T5617] ? skb_clone+0x212/0x3a0 [ 126.556752][ T5617] ? skb_clone+0x212/0x3a0 [ 126.556878][ T5617] skb_clone+0x212/0x3a0 [ 126.556959][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.557035][ T5617] hci_cmd_work+0xc2/0x780 [ 126.557110][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.557177][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.557330][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.557429][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.557516][ T5617] worker_thread+0xa47/0xfb0 [ 126.557665][ T5617] kthread+0x388/0x470 [ 126.557751][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.557816][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.557918][ T5617] ret_from_fork+0x514/0xb70 [ 126.558015][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.558123][ T5617] ? __switch_to+0xc89/0x1420 [ 126.558212][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.558322][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.558433][ T5617] [ 126.558577][ T5617] FAULT_INJECTION: forcing a failure. [ 126.558577][ T5617] name failslab, interval 1, probability 100, space 0, times 43 [ 126.558647][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.558712][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.558744][ T5617] Workqueue: hci2 hci_cmd_work [ 126.558808][ T5617] Call Trace: [ 126.558829][ T5617] [ 126.558852][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.558934][ T5617] should_fail_ex+0x467/0x600 [ 126.559007][ T5617] should_failslab+0xa8/0x100 [ 126.559058][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.559137][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.559248][ T5617] ? skb_clone+0x212/0x3a0 [ 126.559321][ T5617] ? skb_clone+0x212/0x3a0 [ 126.559419][ T5617] skb_clone+0x212/0x3a0 [ 126.559494][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.559569][ T5617] hci_cmd_work+0xc2/0x780 [ 126.559635][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.559710][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.559853][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.559922][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.559994][ T5617] worker_thread+0xa47/0xfb0 [ 126.560111][ T5617] kthread+0x388/0x470 [ 126.560185][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.560240][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.560322][ T5617] ret_from_fork+0x514/0xb70 [ 126.560404][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.560483][ T5617] ? __switch_to+0xc89/0x1420 [ 126.560573][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.560694][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.560789][ T5617] [ 126.560858][ T5617] FAULT_INJECTION: forcing a failure. [ 126.560858][ T5617] name failslab, interval 1, probability 100, space 0, times 42 [ 126.560933][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.560998][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.561032][ T5617] Workqueue: hci2 hci_cmd_work [ 126.561082][ T5617] Call Trace: [ 126.561105][ T5617] [ 126.561126][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.561221][ T5617] should_fail_ex+0x467/0x600 [ 126.561318][ T5617] should_failslab+0xa8/0x100 [ 126.561396][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.561459][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.561554][ T5617] ? skb_clone+0x212/0x3a0 [ 126.561619][ T5617] ? skb_clone+0x212/0x3a0 [ 126.561715][ T5617] skb_clone+0x212/0x3a0 [ 126.561781][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.561865][ T5617] hci_cmd_work+0xc2/0x780 [ 126.561952][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.562048][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.562188][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.562283][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.562371][ T5617] worker_thread+0xa47/0xfb0 [ 126.562520][ T5617] kthread+0x388/0x470 [ 126.562617][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.562681][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.562734][ T5617] ret_from_fork+0x514/0xb70 [ 126.562784][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.562855][ T5617] ? __switch_to+0xc89/0x1420 [ 126.562935][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.563030][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.563141][ T5617] [ 126.563207][ T5617] FAULT_INJECTION: forcing a failure. [ 126.563207][ T5617] name failslab, interval 1, probability 100, space 0, times 41 [ 126.563307][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.563389][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.563423][ T5617] Workqueue: hci2 hci_cmd_work [ 126.563480][ T5617] Call Trace: [ 126.563502][ T5617] [ 126.563523][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.563611][ T5617] should_fail_ex+0x467/0x600 [ 126.563716][ T5617] should_failslab+0xa8/0x100 [ 126.563791][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.563845][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.563910][ T5617] ? skb_clone+0x212/0x3a0 [ 126.563976][ T5617] ? skb_clone+0x212/0x3a0 [ 126.564039][ T5617] skb_clone+0x212/0x3a0 [ 126.564064][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.564109][ T5617] hci_cmd_work+0xc2/0x780 [ 126.564133][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.564197][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.564307][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.564395][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.564429][ T5617] worker_thread+0xa47/0xfb0 [ 126.564575][ T5617] kthread+0x388/0x470 [ 126.564686][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.564757][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.564844][ T5617] ret_from_fork+0x514/0xb70 [ 126.564942][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.565030][ T5617] ? __switch_to+0xc89/0x1420 [ 126.565127][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.565216][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.565324][ T5617] [ 126.566054][ T5617] FAULT_INJECTION: forcing a failure. [ 126.566054][ T5617] name failslab, interval 1, probability 100, space 0, times 40 [ 126.566138][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.566202][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.566235][ T5617] Workqueue: hci2 hci_cmd_work [ 126.566298][ T5617] Call Trace: [ 126.566320][ T5617] [ 126.566342][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.566569][ T5617] should_fail_ex+0x467/0x600 [ 126.566677][ T5617] should_failslab+0xa8/0x100 [ 126.566754][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.566810][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.566893][ T5617] ? skb_clone+0x212/0x3a0 [ 126.566968][ T5617] ? skb_clone+0x212/0x3a0 [ 126.567064][ T5617] skb_clone+0x212/0x3a0 [ 126.567139][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.567213][ T5617] hci_cmd_work+0xc2/0x780 [ 126.567286][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.567383][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.567542][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.567631][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.567716][ T5617] worker_thread+0xa47/0xfb0 [ 126.567852][ T5617] kthread+0x388/0x470 [ 126.567903][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.567977][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.568064][ T5617] ret_from_fork+0x514/0xb70 [ 126.568172][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.568261][ T5617] ? __switch_to+0xc89/0x1420 [ 126.568359][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.568449][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.568564][ T5617] [ 126.568733][ T5617] FAULT_INJECTION: forcing a failure. [ 126.568733][ T5617] name failslab, interval 1, probability 100, space 0, times 39 [ 126.568806][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.568865][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.568900][ T5617] Workqueue: hci2 hci_cmd_work [ 126.568964][ T5617] Call Trace: [ 126.568986][ T5617] [ 126.569007][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.569106][ T5617] should_fail_ex+0x467/0x600 [ 126.569181][ T5617] should_failslab+0xa8/0x100 [ 126.569264][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.569340][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.569436][ T5617] ? skb_clone+0x212/0x3a0 [ 126.569509][ T5617] ? skb_clone+0x212/0x3a0 [ 126.569596][ T5617] skb_clone+0x212/0x3a0 [ 126.569668][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.569754][ T5617] hci_cmd_work+0xc2/0x780 [ 126.569819][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.569878][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.570073][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.570170][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.570256][ T5617] worker_thread+0xa47/0xfb0 [ 126.570417][ T5617] kthread+0x388/0x470 [ 126.570504][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.570569][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.570695][ T5617] ret_from_fork+0x514/0xb70 [ 126.570802][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.570896][ T5617] ? __switch_to+0xc89/0x1420 [ 126.570989][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.571077][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.571175][ T5617] [ 126.571261][ T5617] FAULT_INJECTION: forcing a failure. [ 126.571261][ T5617] name failslab, interval 1, probability 100, space 0, times 38 [ 126.571327][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.571391][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.571431][ T5617] Workqueue: hci2 hci_cmd_work [ 126.571487][ T5617] Call Trace: [ 126.571507][ T5617] [ 126.571528][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.571615][ T5617] should_fail_ex+0x467/0x600 [ 126.571721][ T5617] should_failslab+0xa8/0x100 [ 126.571794][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.571849][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.571927][ T5617] ? skb_clone+0x212/0x3a0 [ 126.572009][ T5617] ? skb_clone+0x212/0x3a0 [ 126.572133][ T5617] skb_clone+0x212/0x3a0 [ 126.572200][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.572276][ T5617] hci_cmd_work+0xc2/0x780 [ 126.572346][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.572422][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.572572][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.572663][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.572749][ T5617] worker_thread+0xa47/0xfb0 [ 126.572896][ T5617] kthread+0x388/0x470 [ 126.572991][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.573056][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.573151][ T5617] ret_from_fork+0x514/0xb70 [ 126.573249][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.573338][ T5617] ? __switch_to+0xc89/0x1420 [ 126.573440][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.573536][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.573630][ T5617] [ 126.573696][ T5617] FAULT_INJECTION: forcing a failure. [ 126.573696][ T5617] name failslab, interval 1, probability 100, space 0, times 37 [ 126.573784][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.573861][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.573895][ T5617] Workqueue: hci2 hci_cmd_work [ 126.573958][ T5617] Call Trace: [ 126.573979][ T5617] [ 126.574001][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.574053][ T5617] should_fail_ex+0x467/0x600 [ 126.574090][ T5617] should_failslab+0xa8/0x100 [ 126.574166][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.574220][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.574313][ T5617] ? skb_clone+0x212/0x3a0 [ 126.574388][ T5617] ? skb_clone+0x212/0x3a0 [ 126.574481][ T5617] skb_clone+0x212/0x3a0 [ 126.574546][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.574623][ T5617] hci_cmd_work+0xc2/0x780 [ 126.574696][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.574768][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.574948][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.575036][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.575137][ T5617] worker_thread+0xa47/0xfb0 [ 126.575316][ T5617] kthread+0x388/0x470 [ 126.575413][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.575487][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.575576][ T5617] ret_from_fork+0x514/0xb70 [ 126.575674][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.575767][ T5617] ? __switch_to+0xc89/0x1420 [ 126.575853][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.575941][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.576046][ T5617] [ 126.577529][ T5617] FAULT_INJECTION: forcing a failure. [ 126.577529][ T5617] name failslab, interval 1, probability 100, space 0, times 36 [ 126.577607][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.577670][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.577711][ T5617] Workqueue: hci2 hci_cmd_work [ 126.577776][ T5617] Call Trace: [ 126.577798][ T5617] [ 126.577820][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.577911][ T5617] should_fail_ex+0x467/0x600 [ 126.578021][ T5617] should_failslab+0xa8/0x100 [ 126.578050][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.578088][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.578216][ T5617] ? skb_clone+0x212/0x3a0 [ 126.578298][ T5617] ? skb_clone+0x212/0x3a0 [ 126.578402][ T5617] skb_clone+0x212/0x3a0 [ 126.578468][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.578545][ T5617] hci_cmd_work+0xc2/0x780 [ 126.578619][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.578687][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.578845][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.578921][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.579007][ T5617] worker_thread+0xa47/0xfb0 [ 126.579157][ T5617] kthread+0x388/0x470 [ 126.579247][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.579319][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.579428][ T5617] ret_from_fork+0x514/0xb70 [ 126.579527][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.579610][ T5617] ? __switch_to+0xc89/0x1420 [ 126.579693][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.579798][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.579909][ T5617] [ 126.580249][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.580321][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.580359][ T5952] Call Trace: [ 126.580381][ T5952] [ 126.580403][ T5952] dump_stack_lvl+0xe8/0x150 [ 126.580500][ T5952] should_fail_ex+0x467/0x600 [ 126.580620][ T5952] should_failslab+0xa8/0x100 [ 126.580704][ T5952] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.580768][ T5952] ? configfs_new_dirent+0x59/0x470 [ 126.580830][ T5952] ? configfs_new_dirent+0x59/0x470 [ 126.580865][ T5952] configfs_new_dirent+0x59/0x470 [ 126.580898][ T5952] configfs_make_dirent+0x35/0x160 [ 126.580906][ C1] FAULT_INJECTION: forcing a failure. [ 126.580906][ C1] name failslab, interval 1, probability 100, space 0, times 36 [ 126.580930][ T5952] configfs_create_file+0xe3/0x130 [ 126.580959][ T5952] configfs_attach_item+0x8df/0xd60 [ 126.580993][ T5952] configfs_mkdir+0x73d/0x9e0 [ 126.581026][ T5952] ? __pfx_configfs_mkdir+0x10/0x10 [ 126.581050][ T5952] ? generic_permission+0x2bf/0x670 [ 126.581079][ T5952] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 126.581110][ T5952] vfs_mkdir+0x402/0x620 [ 126.581144][ T5952] filename_mkdirat+0x289/0x520 [ 126.581177][ T5952] ? __pfx_filename_mkdirat+0x10/0x10 [ 126.581208][ T5952] ? do_getname+0x151/0x250 [ 126.581239][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.581260][ T5952] __se_sys_mkdirat+0x35/0x150 [ 126.581287][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.581308][ T5952] do_syscall_64+0x174/0x580 [ 126.581332][ T5952] ? trace_irq_disable+0x3b/0x140 [ 126.581359][ T5952] ? clear_bhb_loop+0x40/0x90 [ 126.581384][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.581404][ T5952] RIP: 0033:0x7f3013e4df99 [ 126.581422][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.581439][ T5952] RSP: 002b:00007f30120a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.581459][ T5952] RAX: ffffffffffffffda RBX: 00007f30140d5fa0 RCX: 00007f3013e4df99 [ 126.581473][ T5952] RDX: 00000000000001c0 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 126.581486][ T5952] RBP: 00007f3013ee4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 126.581498][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.581508][ T5952] R13: 00007f30140d6038 R14: 00007f30140d5fa0 R15: 00007ffc51c27a98 [ 126.581538][ T5952] [ 126.581551][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.581578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.581592][ C1] Call Trace: [ 126.581600][ C1] [ 126.581602][ C0] FAULT_INJECTION: forcing a failure. [ 126.581602][ C0] name failslab, interval 1, probability 100, space 0, times 36 [ 126.581610][ C1] dump_stack_lvl+0xe8/0x150 [ 126.581646][ C1] should_fail_ex+0x467/0x600 [ 126.581689][ C1] should_failslab+0xa8/0x100 [ 126.581720][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.581742][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.581762][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.581792][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.581818][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.581845][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 126.581883][ C1] ? __lock_acquire+0x683/0x2ce0 [ 126.581904][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.581929][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.581957][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.581993][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.582023][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.582049][ C1] __iterate_interfaces+0x2af/0x5a0 [ 126.582070][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.582097][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.582120][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.582147][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.582173][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.582195][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.582218][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.582267][ C1] hrtimer_run_softirq+0x18f/0x260 [ 126.582303][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.582339][ C1] run_ktimerd+0x69/0x100 [ 126.582369][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.582399][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.582435][ C1] kthread+0x388/0x470 [ 126.582465][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.582491][ C1] ? __pfx_kthread+0x10/0x10 [ 126.582523][ C1] ret_from_fork+0x514/0xb70 [ 126.582558][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.582589][ C1] ? __switch_to+0xc89/0x1420 [ 126.582619][ C1] ? __pfx_kthread+0x10/0x10 [ 126.582651][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.582687][ C1] [ 126.582699][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.582725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.582724][ C1] FAULT_INJECTION: forcing a failure. [ 126.582724][ C1] name failslab, interval 1, probability 100, space 0, times 35 [ 126.582739][ C0] Call Trace: [ 126.582747][ C0] [ 126.582754][ C0] dump_stack_lvl+0xe8/0x150 [ 126.582786][ C0] should_fail_ex+0x467/0x600 [ 126.582821][ C0] should_failslab+0xa8/0x100 [ 126.582846][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.582870][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.582889][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.582916][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.582941][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 126.582967][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 126.582995][ C0] ? __lock_acquire+0x683/0x2ce0 [ 126.583016][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.583041][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.583068][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.583104][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.583133][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.583159][ C0] __iterate_interfaces+0x2af/0x5a0 [ 126.583179][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.583206][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.583230][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.583256][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.583282][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.583303][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.583328][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.583405][ C0] hrtimer_run_softirq+0x18f/0x260 [ 126.583440][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.583476][ C0] run_ktimerd+0x69/0x100 [ 126.583504][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.583535][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.583570][ C0] kthread+0x388/0x470 [ 126.583600][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.583626][ C0] ? __pfx_kthread+0x10/0x10 [ 126.583659][ C0] ret_from_fork+0x514/0xb70 [ 126.583692][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.583723][ C0] ? __switch_to+0xc89/0x1420 [ 126.583752][ C0] ? __pfx_kthread+0x10/0x10 [ 126.583784][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.583820][ C0] [ 126.583831][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.583852][ C0] FAULT_INJECTION: forcing a failure. [ 126.583852][ C0] name failslab, interval 1, probability 100, space 0, times 34 [ 126.583864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.583877][ C1] Call Trace: [ 126.583884][ C1] [ 126.583892][ C1] dump_stack_lvl+0xe8/0x150 [ 126.583923][ C1] should_fail_ex+0x467/0x600 [ 126.583959][ C1] should_failslab+0xa8/0x100 [ 126.583984][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.584006][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.584030][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.584062][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.584087][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.584113][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 126.584142][ C1] ? __lock_acquire+0x683/0x2ce0 [ 126.584162][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.584187][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.584215][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.584239][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.584278][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.584306][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.584332][ C1] __iterate_interfaces+0x2af/0x5a0 [ 126.584354][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.584382][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.584405][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.584432][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.584458][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.584479][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.584503][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.584550][ C1] hrtimer_run_softirq+0x18f/0x260 [ 126.584585][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.584621][ C1] run_ktimerd+0x69/0x100 [ 126.584649][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.584678][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.584714][ C1] kthread+0x388/0x470 [ 126.584745][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.584770][ C1] ? __pfx_kthread+0x10/0x10 [ 126.584802][ C1] ret_from_fork+0x514/0xb70 [ 126.584836][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.584874][ C1] ? __switch_to+0xc89/0x1420 [ 126.584903][ C1] ? __pfx_kthread+0x10/0x10 [ 126.584935][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.584970][ C1] [ 126.584982][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.585009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.585022][ C0] Call Trace: [ 126.585030][ C0] [ 126.585033][ C1] FAULT_INJECTION: forcing a failure. [ 126.585033][ C1] name failslab, interval 1, probability 100, space 0, times 33 [ 126.585039][ C0] dump_stack_lvl+0xe8/0x150 [ 126.585074][ C0] should_fail_ex+0x467/0x600 [ 126.585110][ C0] should_failslab+0xa8/0x100 [ 126.585135][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.585157][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.585176][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.585204][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.585229][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 126.585255][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 126.585282][ C0] ? __lock_acquire+0x683/0x2ce0 [ 126.585303][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.585328][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.585362][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.585387][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.585425][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.585453][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.585479][ C0] __iterate_interfaces+0x2af/0x5a0 [ 126.585500][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.585527][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.585550][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.585577][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.585603][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.585624][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.585648][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.585696][ C0] hrtimer_run_softirq+0x18f/0x260 [ 126.585732][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.585767][ C0] run_ktimerd+0x69/0x100 [ 126.585795][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.585826][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.585863][ C0] kthread+0x388/0x470 [ 126.585893][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.585920][ C0] ? __pfx_kthread+0x10/0x10 [ 126.585951][ C0] ret_from_fork+0x514/0xb70 [ 126.585985][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.586017][ C0] ? __switch_to+0xc89/0x1420 [ 126.586046][ C0] ? __pfx_kthread+0x10/0x10 [ 126.586078][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.586113][ C0] [ 126.586125][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.586144][ C0] FAULT_INJECTION: forcing a failure. [ 126.586144][ C0] name failslab, interval 1, probability 100, space 0, times 32 [ 126.586150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.586164][ C1] Call Trace: [ 126.586172][ C1] [ 126.586180][ C1] dump_stack_lvl+0xe8/0x150 [ 126.586212][ C1] should_fail_ex+0x467/0x600 [ 126.586247][ C1] should_failslab+0xa8/0x100 [ 126.586272][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.586294][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.586313][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.586340][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.586367][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.586393][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 126.586421][ C1] ? __lock_acquire+0x683/0x2ce0 [ 126.586441][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.586467][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.586494][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.586519][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.586557][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.586585][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.586611][ C1] __iterate_interfaces+0x2af/0x5a0 [ 126.586632][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.586659][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.586682][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.586709][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.586735][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.586757][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.586780][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.586828][ C1] hrtimer_run_softirq+0x18f/0x260 [ 126.586868][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.586904][ C1] run_ktimerd+0x69/0x100 [ 126.586931][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.586961][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.586996][ C1] kthread+0x388/0x470 [ 126.587025][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.587051][ C1] ? __pfx_kthread+0x10/0x10 [ 126.587083][ C1] ret_from_fork+0x514/0xb70 [ 126.587116][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.587147][ C1] ? __switch_to+0xc89/0x1420 [ 126.587176][ C1] ? __pfx_kthread+0x10/0x10 [ 126.587208][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.587243][ C1] [ 126.587255][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.587274][ C1] FAULT_INJECTION: forcing a failure. [ 126.587274][ C1] name failslab, interval 1, probability 100, space 0, times 31 [ 126.587281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.587295][ C0] Call Trace: [ 126.587303][ C0] [ 126.587310][ C0] dump_stack_lvl+0xe8/0x150 [ 126.587342][ C0] should_fail_ex+0x467/0x600 [ 126.587384][ C0] should_failslab+0xa8/0x100 [ 126.587408][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.587430][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.587449][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.587476][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.587501][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 126.587527][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 126.587555][ C0] ? __lock_acquire+0x683/0x2ce0 [ 126.587576][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.587601][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.587628][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.587653][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.587691][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.587720][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.587746][ C0] __iterate_interfaces+0x2af/0x5a0 [ 126.587766][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.587793][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.587816][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.587842][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.587869][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.587890][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.587914][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.587961][ C0] hrtimer_run_softirq+0x18f/0x260 [ 126.587996][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.588031][ C0] run_ktimerd+0x69/0x100 [ 126.588059][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.588088][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.588123][ C0] kthread+0x388/0x470 [ 126.588153][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.588178][ C0] ? __pfx_kthread+0x10/0x10 [ 126.588210][ C0] ret_from_fork+0x514/0xb70 [ 126.588243][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.588274][ C0] ? __switch_to+0xc89/0x1420 [ 126.588304][ C0] ? __pfx_kthread+0x10/0x10 [ 126.588334][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.588375][ C0] [ 126.588386][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.588405][ C0] FAULT_INJECTION: forcing a failure. [ 126.588405][ C0] name failslab, interval 1, probability 100, space 0, times 30 [ 126.588413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.588425][ C1] Call Trace: [ 126.588433][ C1] [ 126.588440][ C1] dump_stack_lvl+0xe8/0x150 [ 126.588472][ C1] should_fail_ex+0x467/0x600 [ 126.588507][ C1] should_failslab+0xa8/0x100 [ 126.588532][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.588554][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.588573][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.588600][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.588626][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.588652][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 126.588679][ C1] ? __lock_acquire+0x683/0x2ce0 [ 126.588700][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.588725][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.588752][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.588777][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.588815][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.588844][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.588876][ C1] __iterate_interfaces+0x2af/0x5a0 [ 126.588897][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.588923][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.588946][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.588973][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.588999][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.589020][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.589043][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.589090][ C1] hrtimer_run_softirq+0x18f/0x260 [ 126.589125][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.589160][ C1] run_ktimerd+0x69/0x100 [ 126.589187][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.589217][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.589252][ C1] kthread+0x388/0x470 [ 126.589281][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.589307][ C1] ? __pfx_kthread+0x10/0x10 [ 126.589338][ C1] ret_from_fork+0x514/0xb70 [ 126.589373][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.589404][ C1] ? __switch_to+0xc89/0x1420 [ 126.589434][ C1] ? __pfx_kthread+0x10/0x10 [ 126.589466][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.589501][ C1] [ 126.589513][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.589532][ C1] FAULT_INJECTION: forcing a failure. [ 126.589532][ C1] name failslab, interval 1, probability 100, space 0, times 29 [ 126.589538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.589551][ C0] Call Trace: [ 126.589558][ C0] [ 126.589566][ C0] dump_stack_lvl+0xe8/0x150 [ 126.589597][ C0] should_fail_ex+0x467/0x600 [ 126.589632][ C0] should_failslab+0xa8/0x100 [ 126.589657][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.589679][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.589698][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.589725][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.589750][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 126.589776][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 126.589804][ C0] ? __lock_acquire+0x683/0x2ce0 [ 126.589824][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.589850][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.589878][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.589903][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.589941][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.589969][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.589995][ C0] __iterate_interfaces+0x2af/0x5a0 [ 126.590038][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.590065][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.590088][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.590115][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.590140][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.590162][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.590185][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.590232][ C0] hrtimer_run_softirq+0x18f/0x260 [ 126.590268][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.590302][ C0] run_ktimerd+0x69/0x100 [ 126.590330][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.590366][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.590401][ C0] kthread+0x388/0x470 [ 126.590431][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.590456][ C0] ? __pfx_kthread+0x10/0x10 [ 126.590487][ C0] ret_from_fork+0x514/0xb70 [ 126.590521][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.590551][ C0] ? __switch_to+0xc89/0x1420 [ 126.590580][ C0] ? __pfx_kthread+0x10/0x10 [ 126.590612][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.590647][ C0] [ 126.590658][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.590685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.590697][ C1] Call Trace: [ 126.590705][ C1] [ 126.590713][ C1] dump_stack_lvl+0xe8/0x150 [ 126.590748][ C1] should_fail_ex+0x467/0x600 [ 126.590787][ C1] should_failslab+0xa8/0x100 [ 126.590817][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.590842][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.590872][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.590876][ T5617] FAULT_INJECTION: forcing a failure. [ 126.590876][ T5617] name failslab, interval 1, probability 100, space 0, times 27 [ 126.590906][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.590932][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 126.590959][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 126.590987][ C1] ? __lock_acquire+0x683/0x2ce0 [ 126.591007][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 126.591033][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 126.591060][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 126.591085][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.591123][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 126.591152][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.591179][ C1] __iterate_interfaces+0x2af/0x5a0 [ 126.591199][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.591230][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 126.591253][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 126.591280][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 126.591306][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 126.591327][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 126.591351][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 126.591399][ C1] hrtimer_run_softirq+0x18f/0x260 [ 126.591434][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.591469][ C1] run_ktimerd+0x69/0x100 [ 126.591496][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.591526][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.591561][ C1] kthread+0x388/0x470 [ 126.591591][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.591616][ C1] ? __pfx_kthread+0x10/0x10 [ 126.591648][ C1] ret_from_fork+0x514/0xb70 [ 126.591681][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.591712][ C1] ? __switch_to+0xc89/0x1420 [ 126.591741][ C1] ? __pfx_kthread+0x10/0x10 [ 126.591773][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.591808][ C1] [ 126.591820][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.591846][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.591861][ T5617] Workqueue: hci2 hci_cmd_work [ 126.591887][ T5617] Call Trace: [ 126.591894][ T5617] [ 126.591902][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.592041][ T5617] should_fail_ex+0x467/0x600 [ 126.592135][ T5617] should_failslab+0xa8/0x100 [ 126.592209][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.592264][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.592362][ T5617] ? skb_clone+0x212/0x3a0 [ 126.592437][ T5617] ? skb_clone+0x212/0x3a0 [ 126.592533][ T5617] skb_clone+0x212/0x3a0 [ 126.592606][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.592686][ T5617] hci_cmd_work+0xc2/0x780 [ 126.592754][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.592827][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.592972][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.593060][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.593147][ T5617] worker_thread+0xa47/0xfb0 [ 126.593293][ T5617] kthread+0x388/0x470 [ 126.593411][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.593477][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.593566][ T5617] ret_from_fork+0x514/0xb70 [ 126.593683][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.593770][ T5617] ? __switch_to+0xc89/0x1420 [ 126.593851][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.593940][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.594001][ T5617] [ 126.594092][ C1] FAULT_INJECTION: forcing a failure. [ 126.594092][ C1] name failslab, interval 1, probability 100, space 0, times 26 [ 126.594121][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.594145][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.594148][ C0] FAULT_INJECTION: forcing a failure. [ 126.594148][ C0] name failslab, interval 1, probability 100, space 0, times 26 [ 126.594159][ C1] Call Trace: [ 126.594167][ C1] [ 126.594176][ C1] dump_stack_lvl+0xe8/0x150 [ 126.594209][ C1] should_fail_ex+0x467/0x600 [ 126.594244][ C1] should_failslab+0xa8/0x100 [ 126.594269][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.594291][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.594310][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.594336][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.594363][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 126.594391][ C1] call_timer_fn+0x192/0x5e0 [ 126.594415][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 126.594437][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.594459][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.594494][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.594518][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 126.594541][ C1] __run_timer_base+0x67b/0x9b0 [ 126.594576][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.594635][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.594662][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.594692][ C1] run_timer_softirq+0xb7/0x170 [ 126.594715][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.594757][ C1] run_ktimerd+0x69/0x100 [ 126.594785][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.594815][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.594856][ C1] kthread+0x388/0x470 [ 126.594886][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.594912][ C1] ? __pfx_kthread+0x10/0x10 [ 126.594943][ C1] ret_from_fork+0x514/0xb70 [ 126.594977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.595008][ C1] ? __switch_to+0xc89/0x1420 [ 126.595037][ C1] ? __pfx_kthread+0x10/0x10 [ 126.595068][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.595103][ C1] [ 126.595115][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.595132][ C1] FAULT_INJECTION: forcing a failure. [ 126.595132][ C1] name failslab, interval 1, probability 100, space 0, times 25 [ 126.595141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.595154][ C0] Call Trace: [ 126.595161][ C0] [ 126.595169][ C0] dump_stack_lvl+0xe8/0x150 [ 126.595201][ C0] should_fail_ex+0x467/0x600 [ 126.595236][ C0] should_failslab+0xa8/0x100 [ 126.595261][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.595283][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.595301][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.595328][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.595359][ C0] ndisc_alloc_skb+0xa0/0x480 [ 126.595392][ C0] ndisc_send_rs+0x28e/0x6b0 [ 126.595420][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 126.595450][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 126.595474][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.595502][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.595527][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.595564][ C0] call_timer_fn+0x192/0x5e0 [ 126.595588][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.595610][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.595633][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.595667][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.595693][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.595718][ C0] __run_timer_base+0x67b/0x9b0 [ 126.595754][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.595781][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.595816][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.595848][ C0] run_timer_softirq+0xb7/0x170 [ 126.595872][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.595907][ C0] run_ktimerd+0x69/0x100 [ 126.595934][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.595967][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.596002][ C0] kthread+0x388/0x470 [ 126.596033][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.596058][ C0] ? __pfx_kthread+0x10/0x10 [ 126.596089][ C0] ret_from_fork+0x514/0xb70 [ 126.596122][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.596154][ C0] ? __switch_to+0xc89/0x1420 [ 126.596182][ C0] ? __pfx_kthread+0x10/0x10 [ 126.596213][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.596248][ C0] [ 126.596260][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.596285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.596299][ C1] Call Trace: [ 126.596291][ C0] FAULT_INJECTION: forcing a failure. [ 126.596291][ C0] name failslab, interval 1, probability 100, space 0, times 24 [ 126.596307][ C1] [ 126.596318][ C1] dump_stack_lvl+0xe8/0x150 [ 126.596349][ C1] should_fail_ex+0x467/0x600 [ 126.596385][ C1] should_failslab+0xa8/0x100 [ 126.596410][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.596432][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.596451][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.596477][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.596502][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.596532][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.596561][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.596590][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.596614][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.596642][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.596667][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.596704][ C1] call_timer_fn+0x192/0x5e0 [ 126.596728][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.596751][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.596774][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.596809][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.596832][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.596863][ C1] __run_timer_base+0x67b/0x9b0 [ 126.596899][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.596926][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.596952][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.596982][ C1] run_timer_softirq+0xb7/0x170 [ 126.597005][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.597039][ C1] run_ktimerd+0x69/0x100 [ 126.597066][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.597096][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.597131][ C1] kthread+0x388/0x470 [ 126.597161][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.597186][ C1] ? __pfx_kthread+0x10/0x10 [ 126.597218][ C1] ret_from_fork+0x514/0xb70 [ 126.597251][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.597282][ C1] ? __switch_to+0xc89/0x1420 [ 126.597312][ C1] ? __pfx_kthread+0x10/0x10 [ 126.597343][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.597379][ C1] [ 126.597413][ C1] FAULT_INJECTION: forcing a failure. [ 126.597413][ C1] name failslab, interval 1, probability 100, space 0, times 23 [ 126.597425][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.597449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.597460][ C0] Call Trace: [ 126.597467][ C0] [ 126.597474][ C0] dump_stack_lvl+0xe8/0x150 [ 126.597506][ C0] should_fail_ex+0x467/0x600 [ 126.597540][ C0] should_failslab+0xa8/0x100 [ 126.597565][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.597587][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.597606][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.597633][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.597657][ C0] ndisc_alloc_skb+0xa0/0x480 [ 126.597688][ C0] ndisc_send_rs+0x28e/0x6b0 [ 126.597716][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 126.597745][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 126.597769][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.597796][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.597821][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.597860][ C0] call_timer_fn+0x192/0x5e0 [ 126.597884][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.597906][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.597929][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.597964][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.597987][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.598012][ C0] __run_timer_base+0x67b/0x9b0 [ 126.598047][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.598074][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.598100][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.598130][ C0] run_timer_softirq+0xb7/0x170 [ 126.598153][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.598187][ C0] run_ktimerd+0x69/0x100 [ 126.598215][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.598244][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.598279][ C0] kthread+0x388/0x470 [ 126.598309][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.598334][ C0] ? __pfx_kthread+0x10/0x10 [ 126.598372][ C0] ret_from_fork+0x514/0xb70 [ 126.598406][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.598437][ C0] ? __switch_to+0xc89/0x1420 [ 126.598466][ C0] ? __pfx_kthread+0x10/0x10 [ 126.598497][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.598532][ C0] [ 126.598543][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.598568][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.598571][ C0] FAULT_INJECTION: forcing a failure. [ 126.598571][ C0] name failslab, interval 1, probability 100, space 0, times 22 [ 126.598582][ C1] Call Trace: [ 126.598589][ C1] [ 126.598600][ C1] dump_stack_lvl+0xe8/0x150 [ 126.598631][ C1] should_fail_ex+0x467/0x600 [ 126.598667][ C1] should_failslab+0xa8/0x100 [ 126.598691][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.598713][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.598732][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.598759][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.598784][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.598815][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.598843][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.598897][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.598920][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.598948][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.598973][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.599010][ C1] call_timer_fn+0x192/0x5e0 [ 126.599034][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.599056][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.599079][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.599113][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.599136][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.599161][ C1] __run_timer_base+0x67b/0x9b0 [ 126.599196][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.599223][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.599249][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.599279][ C1] run_timer_softirq+0xb7/0x170 [ 126.599302][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.599337][ C1] run_ktimerd+0x69/0x100 [ 126.599366][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.599395][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.599430][ C1] kthread+0x388/0x470 [ 126.599460][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.599486][ C1] ? __pfx_kthread+0x10/0x10 [ 126.599517][ C1] ret_from_fork+0x514/0xb70 [ 126.599550][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.599582][ C1] ? __switch_to+0xc89/0x1420 [ 126.599611][ C1] ? __pfx_kthread+0x10/0x10 [ 126.599642][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.599677][ C1] [ 126.599689][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.599714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.599716][ C1] FAULT_INJECTION: forcing a failure. [ 126.599716][ C1] name failslab, interval 1, probability 100, space 0, times 21 [ 126.599728][ C0] Call Trace: [ 126.599736][ C0] [ 126.599744][ C0] dump_stack_lvl+0xe8/0x150 [ 126.599775][ C0] should_fail_ex+0x467/0x600 [ 126.599810][ C0] should_failslab+0xa8/0x100 [ 126.599835][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.599858][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.599877][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.599904][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.599928][ C0] ndisc_alloc_skb+0xa0/0x480 [ 126.599959][ C0] ndisc_send_rs+0x28e/0x6b0 [ 126.599987][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 126.600016][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 126.600040][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.600068][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.600092][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.600130][ C0] call_timer_fn+0x192/0x5e0 [ 126.600153][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.600177][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.600200][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.600234][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.600258][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.600281][ C0] __run_timer_base+0x67b/0x9b0 [ 126.600318][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.600344][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.600375][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.600406][ C0] run_timer_softirq+0xb7/0x170 [ 126.600429][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.600463][ C0] run_ktimerd+0x69/0x100 [ 126.600490][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.600520][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.600555][ C0] kthread+0x388/0x470 [ 126.600585][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.600611][ C0] ? __pfx_kthread+0x10/0x10 [ 126.600642][ C0] ret_from_fork+0x514/0xb70 [ 126.600675][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.600707][ C0] ? __switch_to+0xc89/0x1420 [ 126.600735][ C0] ? __pfx_kthread+0x10/0x10 [ 126.600767][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.600802][ C0] [ 126.600812][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.600838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.600839][ C0] FAULT_INJECTION: forcing a failure. [ 126.600839][ C0] name failslab, interval 1, probability 100, space 0, times 20 [ 126.600858][ C1] Call Trace: [ 126.600866][ C1] [ 126.600873][ C1] dump_stack_lvl+0xe8/0x150 [ 126.600904][ C1] should_fail_ex+0x467/0x600 [ 126.600939][ C1] should_failslab+0xa8/0x100 [ 126.600964][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.600985][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.601004][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.601031][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.601056][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.601086][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.601115][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.601145][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.601168][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.601197][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.601227][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.601264][ C1] call_timer_fn+0x192/0x5e0 [ 126.601288][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.601310][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.601333][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.601369][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.601392][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.601416][ C1] __run_timer_base+0x67b/0x9b0 [ 126.601452][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.601479][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.601505][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.601536][ C1] run_timer_softirq+0xb7/0x170 [ 126.601559][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.601595][ C1] run_ktimerd+0x69/0x100 [ 126.601623][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.601653][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.601688][ C1] kthread+0x388/0x470 [ 126.601718][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.601744][ C1] ? __pfx_kthread+0x10/0x10 [ 126.601775][ C1] ret_from_fork+0x514/0xb70 [ 126.601809][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.601840][ C1] ? __switch_to+0xc89/0x1420 [ 126.601875][ C1] ? __pfx_kthread+0x10/0x10 [ 126.601906][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.601942][ C1] [ 126.601953][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.601978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.601979][ C1] FAULT_INJECTION: forcing a failure. [ 126.601979][ C1] name failslab, interval 1, probability 100, space 0, times 19 [ 126.601992][ C0] Call Trace: [ 126.601999][ C0] [ 126.602008][ C0] dump_stack_lvl+0xe8/0x150 [ 126.602039][ C0] should_fail_ex+0x467/0x600 [ 126.602074][ C0] should_failslab+0xa8/0x100 [ 126.602098][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.602120][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.602139][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 126.602166][ C0] __alloc_skb+0x1d7/0x7a0 [ 126.602191][ C0] ndisc_alloc_skb+0xa0/0x480 [ 126.602220][ C0] ndisc_send_rs+0x28e/0x6b0 [ 126.602249][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 126.602278][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 126.602302][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.602330][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.602361][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.602397][ C0] call_timer_fn+0x192/0x5e0 [ 126.602422][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.602443][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.602467][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.602501][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.602524][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.602549][ C0] __run_timer_base+0x67b/0x9b0 [ 126.602584][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.602611][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.602637][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 126.602668][ C0] run_timer_softirq+0xb7/0x170 [ 126.602690][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.602725][ C0] run_ktimerd+0x69/0x100 [ 126.602752][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.602782][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.602816][ C0] kthread+0x388/0x470 [ 126.602846][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.602872][ C0] ? __pfx_kthread+0x10/0x10 [ 126.602904][ C0] ret_from_fork+0x514/0xb70 [ 126.602937][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.602969][ C0] ? __switch_to+0xc89/0x1420 [ 126.602998][ C0] ? __pfx_kthread+0x10/0x10 [ 126.603029][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.603064][ C0] [ 126.603075][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.603100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.603112][ C1] Call Trace: [ 126.603120][ C1] [ 126.603128][ C1] dump_stack_lvl+0xe8/0x150 [ 126.603160][ C1] should_fail_ex+0x467/0x600 [ 126.603188][ T5617] FAULT_INJECTION: forcing a failure. [ 126.603188][ T5617] name failslab, interval 1, probability 100, space 0, times 17 [ 126.603200][ C1] should_failslab+0xa8/0x100 [ 126.603230][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.603252][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.603271][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 126.603299][ C1] __alloc_skb+0x1d7/0x7a0 [ 126.603323][ C1] ndisc_alloc_skb+0xa0/0x480 [ 126.603356][ C1] ndisc_send_rs+0x28e/0x6b0 [ 126.603385][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 126.603414][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 126.603438][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.603465][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.603490][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.603528][ C1] call_timer_fn+0x192/0x5e0 [ 126.603551][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.603574][ C1] ? call_timer_fn+0xd4/0x5e0 [ 126.603597][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.603648][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.603671][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.603696][ C1] __run_timer_base+0x67b/0x9b0 [ 126.603732][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.603758][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.603785][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 126.603815][ C1] run_timer_softirq+0xb7/0x170 [ 126.603838][ C1] handle_softirqs+0x1d9/0x6c0 [ 126.603878][ C1] run_ktimerd+0x69/0x100 [ 126.603906][ C1] smpboot_thread_fn+0x57c/0xa80 [ 126.603935][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 126.603970][ C1] kthread+0x388/0x470 [ 126.603999][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.604030][ C1] ? __pfx_kthread+0x10/0x10 [ 126.604065][ C1] ret_from_fork+0x514/0xb70 [ 126.604105][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 126.604140][ C1] ? __switch_to+0xc89/0x1420 [ 126.604174][ C1] ? __pfx_kthread+0x10/0x10 [ 126.604207][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.604242][ C1] [ 126.604254][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.604282][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.604297][ T5617] Workqueue: hci2 hci_cmd_work [ 126.604323][ T5617] Call Trace: [ 126.604330][ T5617] [ 126.604338][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.604381][ T5617] should_fail_ex+0x467/0x600 [ 126.604457][ T5617] should_failslab+0xa8/0x100 [ 126.604551][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.604634][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.604721][ T5617] ? skb_clone+0x212/0x3a0 [ 126.604797][ T5617] ? skb_clone+0x212/0x3a0 [ 126.604894][ T5617] skb_clone+0x212/0x3a0 [ 126.604970][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.605053][ T5617] hci_cmd_work+0xc2/0x780 [ 126.605120][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.605197][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.605334][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.605433][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.605519][ T5617] worker_thread+0xa47/0xfb0 [ 126.605680][ T5617] kthread+0x388/0x470 [ 126.605762][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.605815][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.605920][ T5617] ret_from_fork+0x514/0xb70 [ 126.606056][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.606155][ T5617] ? __switch_to+0xc89/0x1420 [ 126.606234][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.606324][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.606435][ T5617] [ 126.606608][ T5617] FAULT_INJECTION: forcing a failure. [ 126.606608][ T5617] name failslab, interval 1, probability 100, space 0, times 15 [ 126.606682][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.606747][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.606788][ T5617] Workqueue: hci2 hci_cmd_work [ 126.606826][ T5617] Call Trace: [ 126.606833][ T5617] [ 126.606841][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.606911][ T5617] should_fail_ex+0x467/0x600 [ 126.607011][ T5617] should_failslab+0xa8/0x100 [ 126.607085][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.607149][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.607237][ T5617] ? skb_clone+0x212/0x3a0 [ 126.607318][ T5617] ? skb_clone+0x212/0x3a0 [ 126.607443][ T5617] skb_clone+0x212/0x3a0 [ 126.607511][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.607594][ T5617] hci_cmd_work+0xc2/0x780 [ 126.607660][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.607730][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.607867][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.607961][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.608058][ T5617] worker_thread+0xa47/0xfb0 [ 126.608199][ T5617] kthread+0x388/0x470 [ 126.608292][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.608367][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.608463][ T5617] ret_from_fork+0x514/0xb70 [ 126.608548][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.608645][ T5617] ? __switch_to+0xc89/0x1420 [ 126.608747][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.608837][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.608938][ T5617] [ 126.609016][ T5617] FAULT_INJECTION: forcing a failure. [ 126.609016][ T5617] name failslab, interval 1, probability 100, space 0, times 14 [ 126.609091][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.609157][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.609194][ T5617] Workqueue: hci2 hci_cmd_work [ 126.609217][ T5617] Call Trace: [ 126.609225][ T5617] [ 126.609241][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.609366][ T5617] should_fail_ex+0x467/0x600 [ 126.609482][ T5617] should_failslab+0xa8/0x100 [ 126.609557][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.609612][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.609698][ T5617] ? skb_clone+0x212/0x3a0 [ 126.609772][ T5617] ? skb_clone+0x212/0x3a0 [ 126.609855][ T5617] skb_clone+0x212/0x3a0 [ 126.609923][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.610026][ T5617] hci_cmd_work+0xc2/0x780 [ 126.610092][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.610160][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.610309][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.610407][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.610494][ T5617] worker_thread+0xa47/0xfb0 [ 126.610655][ T5617] kthread+0x388/0x470 [ 126.610765][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.610858][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.610954][ T5617] ret_from_fork+0x514/0xb70 [ 126.611052][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.611143][ T5617] ? __switch_to+0xc89/0x1420 [ 126.611226][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.611320][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.611427][ T5617] [ 126.611503][ T5617] FAULT_INJECTION: forcing a failure. [ 126.611503][ T5617] name failslab, interval 1, probability 100, space 0, times 13 [ 126.611577][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.611639][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.611673][ T5617] Workqueue: hci2 hci_cmd_work [ 126.611735][ T5617] Call Trace: [ 126.611756][ T5617] [ 126.611778][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.611859][ T5617] should_fail_ex+0x467/0x600 [ 126.611966][ T5617] should_failslab+0xa8/0x100 [ 126.612050][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.612129][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.612237][ T5617] ? skb_clone+0x212/0x3a0 [ 126.612302][ T5617] ? skb_clone+0x212/0x3a0 [ 126.612404][ T5617] skb_clone+0x212/0x3a0 [ 126.612470][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.612545][ T5617] hci_cmd_work+0xc2/0x780 [ 126.612618][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.612686][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.612833][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.612916][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.612996][ T5617] worker_thread+0xa47/0xfb0 [ 126.613145][ T5617] kthread+0x388/0x470 [ 126.613240][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.613307][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.613413][ T5617] ret_from_fork+0x514/0xb70 [ 126.613525][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.613642][ T5617] ? __switch_to+0xc89/0x1420 [ 126.613728][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.613822][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.613915][ T5617] [ 126.613983][ T5617] FAULT_INJECTION: forcing a failure. [ 126.613983][ T5617] name failslab, interval 1, probability 100, space 0, times 12 [ 126.614211][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.614283][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.614304][ T5617] Workqueue: hci2 hci_cmd_work [ 126.614381][ T5617] Call Trace: [ 126.614402][ T5617] [ 126.614425][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.614521][ T5617] should_fail_ex+0x467/0x600 [ 126.614620][ T5617] should_failslab+0xa8/0x100 [ 126.614697][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.614752][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.614844][ T5617] ? skb_clone+0x212/0x3a0 [ 126.614912][ T5617] ? skb_clone+0x212/0x3a0 [ 126.615007][ T5617] skb_clone+0x212/0x3a0 [ 126.615073][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.615148][ T5617] hci_cmd_work+0xc2/0x780 [ 126.615219][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.615289][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.615408][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.615536][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.615623][ T5617] worker_thread+0xa47/0xfb0 [ 126.615774][ T5617] kthread+0x388/0x470 [ 126.615866][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.615937][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.616026][ T5617] ret_from_fork+0x514/0xb70 [ 126.616125][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.616221][ T5617] ? __switch_to+0xc89/0x1420 [ 126.616299][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.616399][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.616506][ T5617] [ 126.616652][ T5617] FAULT_INJECTION: forcing a failure. [ 126.616652][ T5617] name failslab, interval 1, probability 100, space 0, times 11 [ 126.616725][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.616796][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.616831][ T5617] Workqueue: hci2 hci_cmd_work [ 126.616919][ T5617] Call Trace: [ 126.616940][ T5617] [ 126.616962][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.617050][ T5617] should_fail_ex+0x467/0x600 [ 126.617155][ T5617] should_failslab+0xa8/0x100 [ 126.617229][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.617289][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.617376][ T5617] ? skb_clone+0x212/0x3a0 [ 126.617448][ T5617] ? skb_clone+0x212/0x3a0 [ 126.617536][ T5617] skb_clone+0x212/0x3a0 [ 126.617608][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.617684][ T5617] hci_cmd_work+0xc2/0x780 [ 126.617749][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.617823][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.617959][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.618027][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.618112][ T5617] worker_thread+0xa47/0xfb0 [ 126.618295][ T5617] kthread+0x388/0x470 [ 126.618397][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.618463][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.618557][ T5617] ret_from_fork+0x514/0xb70 [ 126.618653][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.618748][ T5617] ? __switch_to+0xc89/0x1420 [ 126.618833][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.618921][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.619020][ T5617] [ 126.619094][ T5617] FAULT_INJECTION: forcing a failure. [ 126.619094][ T5617] name failslab, interval 1, probability 100, space 0, times 10 [ 126.619168][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.619225][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.619257][ T5617] Workqueue: hci2 hci_cmd_work [ 126.619312][ T5617] Call Trace: [ 126.619332][ T5617] [ 126.619361][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.619447][ T5617] should_fail_ex+0x467/0x600 [ 126.619553][ T5617] should_failslab+0xa8/0x100 [ 126.619628][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.619682][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.619774][ T5617] ? skb_clone+0x212/0x3a0 [ 126.619829][ T5617] ? skb_clone+0x212/0x3a0 [ 126.619933][ T5617] skb_clone+0x212/0x3a0 [ 126.620012][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.620094][ T5617] hci_cmd_work+0xc2/0x780 [ 126.620159][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.620233][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.620383][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.620478][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.620561][ T5617] worker_thread+0xa47/0xfb0 [ 126.620708][ T5617] kthread+0x388/0x470 [ 126.620793][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.620852][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.620948][ T5617] ret_from_fork+0x514/0xb70 [ 126.621046][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.621134][ T5617] ? __switch_to+0xc89/0x1420 [ 126.621220][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.621315][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.621460][ T5617] [ 126.621526][ T5617] FAULT_INJECTION: forcing a failure. [ 126.621526][ T5617] name failslab, interval 1, probability 100, space 0, times 9 [ 126.621598][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.621662][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.621695][ T5617] Workqueue: hci2 hci_cmd_work [ 126.621757][ T5617] Call Trace: [ 126.621778][ T5617] [ 126.621799][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.621890][ T5617] should_fail_ex+0x467/0x600 [ 126.621995][ T5617] should_failslab+0xa8/0x100 [ 126.622071][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.622127][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.622214][ T5617] ? skb_clone+0x212/0x3a0 [ 126.622280][ T5617] ? skb_clone+0x212/0x3a0 [ 126.622380][ T5617] skb_clone+0x212/0x3a0 [ 126.622448][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.622524][ T5617] hci_cmd_work+0xc2/0x780 [ 126.622589][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.622655][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.622846][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.622934][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.623014][ T5617] worker_thread+0xa47/0xfb0 [ 126.623160][ T5617] kthread+0x388/0x470 [ 126.623247][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.623313][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.623447][ T5617] ret_from_fork+0x514/0xb70 [ 126.623551][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.623647][ T5617] ? __switch_to+0xc89/0x1420 [ 126.623733][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.623829][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.623930][ T5617] [ 126.624005][ T5617] FAULT_INJECTION: forcing a failure. [ 126.624005][ T5617] name failslab, interval 1, probability 100, space 0, times 8 [ 126.625146][ T4956] FAULT_INJECTION: forcing a failure. [ 126.625146][ T4956] name failslab, interval 1, probability 100, space 0, times 8 [ 126.625225][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.625282][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.625315][ T4956] Call Trace: [ 126.625336][ T4956] [ 126.625375][ T4956] dump_stack_lvl+0xe8/0x150 [ 126.625464][ T4956] should_fail_ex+0x467/0x600 [ 126.625571][ T4956] should_failslab+0xa8/0x100 [ 126.625648][ T4956] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.625714][ T4956] ? __alloc_skb+0x1d7/0x7a0 [ 126.625784][ T4956] ? __alloc_skb+0x1d7/0x7a0 [ 126.625865][ T4956] __alloc_skb+0x1d7/0x7a0 [ 126.625948][ T4956] alloc_skb_with_frags+0xc6/0x760 [ 126.626061][ T4956] ? kasan_save_track+0x4f/0x80 [ 126.626126][ T4956] ? kasan_save_track+0x3e/0x80 [ 126.626174][ T4956] ? kasan_save_free_info+0x40/0x50 [ 126.626257][ T4956] ? __kasan_slab_free+0x5c/0x80 [ 126.626312][ T4956] ? kfree+0x1c5/0x6c0 [ 126.626367][ T4956] ? syslog_print+0x57c/0x610 [ 126.626442][ T4956] ? do_syslog+0x583/0x7d0 [ 126.626501][ T4956] ? __x64_sys_syslog+0x7c/0x90 [ 126.626580][ T4956] sock_alloc_send_pskb+0x884/0x9a0 [ 126.626708][ T4956] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 126.626806][ T4956] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 126.626916][ T4956] unix_dgram_sendmsg+0x4da/0x17b0 [ 126.627007][ T4956] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.627094][ T4956] ? kfree+0x1c5/0x6c0 [ 126.627150][ T4956] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 126.627248][ T4956] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 126.627424][ T4956] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 126.627519][ T4956] sock_sendmsg_nosec+0x13a/0x180 [ 126.627618][ T4956] __sys_sendto+0x41e/0x5d0 [ 126.627683][ T4956] ? smack_privileged_cred+0x33c/0x380 [ 126.627790][ T4956] ? __pfx___sys_sendto+0x10/0x10 [ 126.627874][ T4956] ? ktime_get+0x1f5/0x220 [ 126.627962][ T4956] ? rcu_is_watching+0x15/0xb0 [ 126.628059][ T4956] __x64_sys_sendto+0xde/0x100 [ 126.628124][ T4956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.628190][ T4956] do_syscall_64+0x174/0x580 [ 126.628271][ T4956] ? clear_bhb_loop+0x40/0x90 [ 126.628338][ T4956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.628479][ T4956] RIP: 0033:0x7f9a3acc0407 [ 126.628535][ T4956] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 126.628587][ T4956] RSP: 002b:00007ffff9d9dd30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 126.628650][ T4956] RAX: ffffffffffffffda RBX: 00007f9a3ab70c80 RCX: 00007f9a3acc0407 [ 126.628701][ T4956] RDX: 0000000000000055 RSI: 00007ffff9d9de70 RDI: 0000000000000003 [ 126.628749][ T4956] RBP: 00007ffff9d9e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.628790][ T4956] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffff9d9e2b8 [ 126.628824][ T4956] R13: 00007ffff9d9de70 R14: 000000000000003a R15: 00007ffff9d9de70 [ 126.628910][ T4956] [ 126.629279][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.629399][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.629442][ T5617] Workqueue: hci2 hci_cmd_work [ 126.629491][ T5617] Call Trace: [ 126.629499][ T5617] [ 126.629531][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.629642][ T5617] should_fail_ex+0x467/0x600 [ 126.629761][ T5617] should_failslab+0xa8/0x100 [ 126.629839][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.629921][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.630028][ T5617] ? skb_clone+0x212/0x3a0 [ 126.630097][ T5617] ? skb_clone+0x212/0x3a0 [ 126.630195][ T5617] skb_clone+0x212/0x3a0 [ 126.630267][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.630351][ T5617] hci_cmd_work+0xc2/0x780 [ 126.630418][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.630494][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.630644][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.630733][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.630821][ T5617] worker_thread+0xa47/0xfb0 [ 126.630973][ T5617] kthread+0x388/0x470 [ 126.631098][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.631169][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.631257][ T5617] ret_from_fork+0x514/0xb70 [ 126.631362][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.631449][ T5617] ? __switch_to+0xc89/0x1420 [ 126.631528][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.631623][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.631732][ T5617] [ 126.631896][ T5617] FAULT_INJECTION: forcing a failure. [ 126.631896][ T5617] name failslab, interval 1, probability 100, space 0, times 6 [ 126.631978][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.632043][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.632077][ T5617] Workqueue: hci2 hci_cmd_work [ 126.632140][ T5617] Call Trace: [ 126.632160][ T5617] [ 126.632182][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.632271][ T5617] should_fail_ex+0x467/0x600 [ 126.632401][ T5617] should_failslab+0xa8/0x100 [ 126.632496][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.632550][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.632636][ T5617] ? skb_clone+0x212/0x3a0 [ 126.632709][ T5617] ? skb_clone+0x212/0x3a0 [ 126.632804][ T5617] skb_clone+0x212/0x3a0 [ 126.632873][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.632950][ T5617] hci_cmd_work+0xc2/0x780 [ 126.633022][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.633095][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.633249][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.633336][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.633432][ T5617] worker_thread+0xa47/0xfb0 [ 126.633578][ T5617] kthread+0x388/0x470 [ 126.633672][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.633752][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.633841][ T5617] ret_from_fork+0x514/0xb70 [ 126.633942][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.634027][ T5617] ? __switch_to+0xc89/0x1420 [ 126.634059][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.634109][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.634185][ T5617] [ 126.634503][ T5617] FAULT_INJECTION: forcing a failure. [ 126.634503][ T5617] name failslab, interval 1, probability 100, space 0, times 5 [ 126.634577][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.634647][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.634680][ T5617] Workqueue: hci2 hci_cmd_work [ 126.634742][ T5617] Call Trace: [ 126.634763][ T5617] [ 126.634786][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.634878][ T5617] should_fail_ex+0x467/0x600 [ 126.634984][ T5617] should_failslab+0xa8/0x100 [ 126.635058][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.635113][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.635198][ T5617] ? skb_clone+0x212/0x3a0 [ 126.635270][ T5617] ? skb_clone+0x212/0x3a0 [ 126.635370][ T5617] skb_clone+0x212/0x3a0 [ 126.635435][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.635511][ T5617] hci_cmd_work+0xc2/0x780 [ 126.635584][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.635660][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.635844][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.635932][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.636012][ T5617] worker_thread+0xa47/0xfb0 [ 126.636161][ T5617] kthread+0x388/0x470 [ 126.636260][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.636332][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.636429][ T5617] ret_from_fork+0x514/0xb70 [ 126.636531][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.636626][ T5617] ? __switch_to+0xc89/0x1420 [ 126.636702][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.636796][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.636895][ T5617] [ 126.637011][ T5617] FAULT_INJECTION: forcing a failure. [ 126.637011][ T5617] name failslab, interval 1, probability 100, space 0, times 4 [ 126.637103][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.637171][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.637220][ T5617] Workqueue: hci2 hci_cmd_work [ 126.637310][ T5617] Call Trace: [ 126.637319][ T5617] [ 126.637341][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.637444][ T5617] should_fail_ex+0x467/0x600 [ 126.637530][ T5617] should_failslab+0xa8/0x100 [ 126.637590][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.637640][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.637726][ T5617] ? skb_clone+0x212/0x3a0 [ 126.637798][ T5617] ? skb_clone+0x212/0x3a0 [ 126.637881][ T5617] skb_clone+0x212/0x3a0 [ 126.637948][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.638027][ T5617] hci_cmd_work+0xc2/0x780 [ 126.638095][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.638169][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.638319][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.638412][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.638498][ T5617] worker_thread+0xa47/0xfb0 [ 126.638695][ T5617] kthread+0x388/0x470 [ 126.638788][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.638848][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.638943][ T5617] ret_from_fork+0x514/0xb70 [ 126.639041][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.639136][ T5617] ? __switch_to+0xc89/0x1420 [ 126.639221][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.639309][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.639413][ T5617] [ 126.639489][ T5617] FAULT_INJECTION: forcing a failure. [ 126.639489][ T5617] name failslab, interval 1, probability 100, space 0, times 3 [ 126.639558][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.639622][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.639655][ T5617] Workqueue: hci2 hci_cmd_work [ 126.639718][ T5617] Call Trace: [ 126.639739][ T5617] [ 126.639761][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.639855][ T5617] should_fail_ex+0x467/0x600 [ 126.639967][ T5617] should_failslab+0xa8/0x100 [ 126.640037][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.640091][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.640175][ T5617] ? skb_clone+0x212/0x3a0 [ 126.640233][ T5617] ? skb_clone+0x212/0x3a0 [ 126.640371][ T5617] skb_clone+0x212/0x3a0 [ 126.640448][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.640517][ T5617] hci_cmd_work+0xc2/0x780 [ 126.640585][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.640659][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.640805][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.640898][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.640992][ T5617] worker_thread+0xa47/0xfb0 [ 126.641136][ T5617] kthread+0x388/0x470 [ 126.641224][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.641290][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.641390][ T5617] ret_from_fork+0x514/0xb70 [ 126.641486][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.641573][ T5617] ? __switch_to+0xc89/0x1420 [ 126.641675][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.641798][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.641897][ T5617] [ 126.641963][ T5617] FAULT_INJECTION: forcing a failure. [ 126.641963][ T5617] name failslab, interval 1, probability 100, space 0, times 2 [ 126.642028][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.642092][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.642132][ T5617] Workqueue: hci2 hci_cmd_work [ 126.642189][ T5617] Call Trace: [ 126.642209][ T5617] [ 126.642231][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.642319][ T5617] should_fail_ex+0x467/0x600 [ 126.642430][ T5617] should_failslab+0xa8/0x100 [ 126.642505][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.642560][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.642645][ T5617] ? skb_clone+0x212/0x3a0 [ 126.642713][ T5617] ? skb_clone+0x212/0x3a0 [ 126.642809][ T5617] skb_clone+0x212/0x3a0 [ 126.642870][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.642946][ T5617] hci_cmd_work+0xc2/0x780 [ 126.643010][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.643106][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.643271][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.643361][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.643446][ T5617] worker_thread+0xa47/0xfb0 [ 126.643590][ T5617] kthread+0x388/0x470 [ 126.643684][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.643738][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.643838][ T5617] ret_from_fork+0x514/0xb70 [ 126.643941][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.644025][ T5617] ? __switch_to+0xc89/0x1420 [ 126.644056][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.644090][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.644127][ T5617] [ 126.645723][ T1414] FAULT_INJECTION: forcing a failure. [ 126.645723][ T1414] name failslab, interval 1, probability 100, space 0, times 2 [ 126.645802][ T1414] CPU: 0 UID: 0 PID: 1414 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.645860][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.645896][ T1414] Workqueue: events_unbound nsim_dev_trap_report_work [ 126.645990][ T1414] Call Trace: [ 126.646013][ T1414] [ 126.646034][ T1414] dump_stack_lvl+0xe8/0x150 [ 126.646155][ T1414] should_fail_ex+0x467/0x600 [ 126.646286][ T1414] should_failslab+0xa8/0x100 [ 126.646364][ T1414] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.646439][ T1414] ? __alloc_skb+0x1d7/0x7a0 [ 126.646493][ T1414] ? __alloc_skb+0x1d7/0x7a0 [ 126.646578][ T1414] __alloc_skb+0x1d7/0x7a0 [ 126.646655][ T1414] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 126.646777][ T1414] ? process_scheduled_works+0xa20/0x14e0 [ 126.646854][ T1414] process_scheduled_works+0xa8e/0x14e0 [ 126.647007][ T1414] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.647095][ T1414] ? assign_work+0x3cf/0x5d0 [ 126.647182][ T1414] worker_thread+0xa47/0xfb0 [ 126.647336][ T1414] kthread+0x388/0x470 [ 126.647441][ T1414] ? __pfx_worker_thread+0x10/0x10 [ 126.647528][ T1414] ? __pfx_kthread+0x10/0x10 [ 126.647647][ T1414] ret_from_fork+0x514/0xb70 [ 126.647747][ T1414] ? __pfx_ret_from_fork+0x10/0x10 [ 126.647841][ T1414] ? __switch_to+0xc89/0x1420 [ 126.647915][ T1414] ? __pfx_kthread+0x10/0x10 [ 126.648013][ T1414] ret_from_fork_asm+0x1a/0x30 [ 126.648121][ T1414] [ 126.648466][ T5617] FAULT_INJECTION: forcing a failure. [ 126.648466][ T5617] name failslab, interval 1, probability 100, space 0, times 1 [ 126.648526][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.648590][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.648624][ T5617] Workqueue: hci2 hci_cmd_work [ 126.648688][ T5617] Call Trace: [ 126.648710][ T5617] [ 126.648732][ T5617] dump_stack_lvl+0xe8/0x150 [ 126.648819][ T5617] should_fail_ex+0x467/0x600 [ 126.648951][ T5617] should_failslab+0xa8/0x100 [ 126.649047][ T5617] kmem_cache_alloc_noprof+0xa4/0x650 [ 126.649101][ T5617] ? rt_spin_unlock+0x157/0x200 [ 126.649187][ T5617] ? skb_clone+0x212/0x3a0 [ 126.649260][ T5617] ? skb_clone+0x212/0x3a0 [ 126.649357][ T5617] skb_clone+0x212/0x3a0 [ 126.649430][ T5617] ? sk_skb_reason_drop+0xf2/0x110 [ 126.649507][ T5617] hci_cmd_work+0xc2/0x780 [ 126.649580][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 126.649646][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 126.649795][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.649884][ T5617] ? assign_work+0x3cf/0x5d0 [ 126.649970][ T5617] worker_thread+0xa47/0xfb0 [ 126.650137][ T5617] kthread+0x388/0x470 [ 126.650225][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 126.650313][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.650429][ T5617] ret_from_fork+0x514/0xb70 [ 126.650532][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 126.650624][ T5617] ? __switch_to+0xc89/0x1420 [ 126.650699][ T5617] ? __pfx_kthread+0x10/0x10 [ 126.650769][ T5617] ret_from_fork_asm+0x1a/0x30 [ 126.650883][ T5617] [ 126.651061][ T3433] FAULT_INJECTION: forcing a failure. [ 126.651061][ T3433] name failslab, interval 1, probability 100, space 0, times 1 [ 126.651134][ T3433] CPU: 0 UID: 0 PID: 3433 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.651197][ T3433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.651224][ T3433] Workqueue: events_unbound nsim_dev_trap_report_work [ 126.651310][ T3433] Call Trace: [ 126.651331][ T3433] [ 126.651362][ T3433] dump_stack_lvl+0xe8/0x150 [ 126.651451][ T3433] should_fail_ex+0x467/0x600 [ 126.651560][ T3433] should_failslab+0xa8/0x100 [ 126.651636][ T3433] kmem_cache_alloc_node_noprof+0xae/0x670 [ 126.651722][ T3433] ? __alloc_skb+0x1d7/0x7a0 [ 126.651799][ T3433] ? __alloc_skb+0x1d7/0x7a0 [ 126.651872][ T3433] __alloc_skb+0x1d7/0x7a0 [ 126.651948][ T3433] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 126.652061][ T3433] ? process_scheduled_works+0xa20/0x14e0 [ 126.652134][ T3433] process_scheduled_works+0xa8e/0x14e0 [ 126.652285][ T3433] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.652382][ T3433] ? assign_work+0x3cf/0x5d0 [ 126.652454][ T3433] worker_thread+0xa47/0xfb0 [ 126.652571][ T3433] ? __kthread_parkme+0x71/0x1f0 [ 126.652690][ T3433] kthread+0x388/0x470 [ 126.652771][ T3433] ? __pfx_worker_thread+0x10/0x10 [ 126.652850][ T3433] ? __pfx_kthread+0x10/0x10 [ 126.652938][ T3433] ret_from_fork+0x514/0xb70 [ 126.653048][ T3433] ? __pfx_ret_from_fork+0x10/0x10 [ 126.653175][ T3433] ? __switch_to+0xc89/0x1420 [ 126.653287][ T3433] ? __pfx_kthread+0x10/0x10 [ 126.653396][ T3433] ret_from_fork_asm+0x1a/0x30 [ 126.653507][ T3433] [ 127.574093][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.666537][ T5952] ================================================================== [ 127.666613][ T5952] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190 [ 127.666745][ T5952] Read of size 8 at addr ffff8880343c1158 by task syz.4.33/5952 [ 127.666804][ T5952] [ 127.666841][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.666922][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.666968][ T5952] Call Trace: [ 127.666991][ T5952] [ 127.667016][ T5952] dump_stack_lvl+0xe8/0x150 [ 127.667132][ T5952] print_address_description+0x55/0x1e0 [ 127.667200][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.667222][ T5952] print_report+0x58/0x70 [ 127.667271][ T5952] kasan_report+0x117/0x150 [ 127.667355][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.667446][ T5952] __list_del_entry_valid_or_report+0x31/0x190 [ 127.667530][ T5952] uvcg_extension_drop+0x81/0x1f0 [ 127.667622][ T5952] configfs_mkdir+0x7e9/0x9e0 [ 127.667729][ T5952] ? __pfx_configfs_mkdir+0x10/0x10 [ 127.667821][ T5952] ? generic_permission+0x2bf/0x670 [ 127.667905][ T5952] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 127.667950][ T5952] vfs_mkdir+0x402/0x620 [ 127.668037][ T5952] filename_mkdirat+0x289/0x520 [ 127.668176][ T5952] ? __pfx_filename_mkdirat+0x10/0x10 [ 127.668282][ T5952] ? do_getname+0x151/0x250 [ 127.668474][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.668560][ T5952] __se_sys_mkdirat+0x35/0x150 [ 127.668689][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.668760][ T5952] do_syscall_64+0x174/0x580 [ 127.668845][ T5952] ? trace_irq_disable+0x3b/0x140 [ 127.668915][ T5952] ? clear_bhb_loop+0x40/0x90 [ 127.668988][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.669067][ T5952] RIP: 0033:0x7f3013e4df99 [ 127.669130][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.669184][ T5952] RSP: 002b:00007f30120a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.669258][ T5952] RAX: ffffffffffffffda RBX: 00007f30140d5fa0 RCX: 00007f3013e4df99 [ 127.669316][ T5952] RDX: 00000000000001c0 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 127.669373][ T5952] RBP: 00007f3013ee4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 127.669405][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.669421][ T5952] R13: 00007f30140d6038 R14: 00007f30140d5fa0 R15: 00007ffc51c27a98 [ 127.669520][ T5952] [ 127.669553][ T5952] [ 127.669574][ T5952] Allocated by task 5952: [ 127.669612][ T5952] kasan_save_track+0x3e/0x80 [ 127.669673][ T5952] __kasan_kmalloc+0x93/0xb0 [ 127.669753][ T5952] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 127.669816][ T5952] uvcg_extension_make+0x95/0x300 [ 127.669888][ T5952] configfs_mkdir+0x580/0x9e0 [ 127.670009][ T5952] vfs_mkdir+0x402/0x620 [ 127.670084][ T5952] filename_mkdirat+0x289/0x520 [ 127.670175][ T5952] __se_sys_mkdirat+0x35/0x150 [ 127.670264][ T5952] do_syscall_64+0x174/0x580 [ 127.670335][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.670395][ T5952] [ 127.670408][ T5952] Freed by task 5952: [ 127.670442][ T5952] kasan_save_track+0x3e/0x80 [ 127.670504][ T5952] kasan_save_free_info+0x40/0x50 [ 127.670588][ T5952] __kasan_slab_free+0x5c/0x80 [ 127.670655][ T5952] kfree+0x1c5/0x6c0 [ 127.670704][ T5952] config_item_release+0x13a/0x2d0 [ 127.670814][ T5952] uvcg_extension_drop+0x75/0x1f0 [ 127.670908][ T5952] configfs_mkdir+0x7e9/0x9e0 [ 127.670981][ T5952] vfs_mkdir+0x402/0x620 [ 127.671066][ T5952] filename_mkdirat+0x289/0x520 [ 127.671150][ T5952] __se_sys_mkdirat+0x35/0x150 [ 127.671229][ T5952] do_syscall_64+0x174/0x580 [ 127.671301][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.671369][ T5952] [ 127.671383][ T5952] The buggy address belongs to the object at ffff8880343c1100 [ 127.671383][ T5952] which belongs to the cache kmalloc-192 of size 192 [ 127.671443][ T5952] The buggy address is located 88 bytes inside of [ 127.671443][ T5952] freed 192-byte region [ffff8880343c1100, ffff8880343c11c0) [ 127.671512][ T5952] [ 127.671534][ T5952] The buggy address belongs to the physical page: [ 127.671593][ T5952] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x343c1 [ 127.671659][ T5952] flags: 0x80000000000000(node=0|zone=1) [ 127.671741][ T5952] page_type: f5(slab) [ 127.671809][ T5952] raw: 0080000000000000 ffff88813ffb13c0 dead000000000100 dead000000000122 [ 127.671869][ T5952] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 127.671906][ T5952] page dumped because: kasan: bad access detected [ 127.671941][ T5952] page_owner tracks the page as allocated [ 127.671966][ T5952] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28098951672, free_ts 0 [ 127.672076][ T5952] post_alloc_hook+0x1f9/0x250 [ 127.672136][ T5952] get_page_from_freelist+0x262a/0x26a0 [ 127.672213][ T5952] __alloc_frozen_pages_noprof+0x18d/0x380 [ 127.672289][ T5952] allocate_slab+0x79/0x5e0 [ 127.672339][ T5952] refill_objects+0x2d8/0x350 [ 127.672373][ T5952] __pcs_replace_empty_main+0x330/0x690 [ 127.672471][ T5952] __kmalloc_cache_noprof+0x468/0x6b0 [ 127.672563][ T5952] call_usermodehelper_setup+0x8e/0x270 [ 127.672645][ T5952] kobject_uevent_env+0x665/0x9e0 [ 127.672752][ T5952] kernel_add_sysfs_param+0xb1/0xe0 [ 127.672835][ T5952] param_sysfs_builtin+0x199/0x250 [ 127.672917][ T5952] param_sysfs_builtin_init+0x23/0x30 [ 127.672989][ T5952] do_one_initcall+0x250/0x870 [ 127.673040][ T5952] do_initcall_level+0x10a/0x1a0 [ 127.673123][ T5952] do_initcalls+0x59/0xa0 [ 127.673194][ T5952] kernel_init_freeable+0x29d/0x3e0 [ 127.673278][ T5952] page_owner free stack trace missing [ 127.673295][ T5952] [ 127.673317][ T5952] Memory state around the buggy address: [ 127.673354][ T5952] ffff8880343c1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.673402][ T5952] ffff8880343c1080: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 127.673448][ T5952] >ffff8880343c1100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.673484][ T5952] ^ [ 127.673522][ T5952] ffff8880343c1180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.673569][ T5952] ffff8880343c1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.673605][ T5952] ================================================================== [ 127.861058][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.933964][ T5952] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.934026][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.934052][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.934067][ T5952] Call Trace: [ 127.934086][ T5952] [ 127.934117][ T5952] vpanic+0x56c/0xa60 [ 127.934186][ T5952] ? rcu_is_watching+0x15/0xb0 [ 127.934274][ T5952] ? __pfx_vpanic+0x10/0x10 [ 127.934324][ T5952] panic+0xc5/0xd0 [ 127.934397][ T5952] ? __pfx_panic+0x10/0x10 [ 127.934472][ T5952] ? preempt_schedule_thunk+0x16/0x40 [ 127.934556][ T5952] ? preempt_schedule_thunk+0x16/0x40 [ 127.934630][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.934695][ T5952] check_panic_on_warn+0x89/0xb0 [ 127.934764][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.934827][ T5952] end_report+0x73/0x170 [ 127.934893][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.934958][ T5952] kasan_report+0x128/0x150 [ 127.935039][ T5952] ? __list_del_entry_valid_or_report+0x31/0x190 [ 127.935107][ T5952] __list_del_entry_valid_or_report+0x31/0x190 [ 127.935180][ T5952] uvcg_extension_drop+0x81/0x1f0 [ 127.935265][ T5952] configfs_mkdir+0x7e9/0x9e0 [ 127.935366][ T5952] ? __pfx_configfs_mkdir+0x10/0x10 [ 127.935440][ T5952] ? generic_permission+0x2bf/0x670 [ 127.935515][ T5952] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 127.935599][ T5952] vfs_mkdir+0x402/0x620 [ 127.935700][ T5952] filename_mkdirat+0x289/0x520 [ 127.935810][ T5952] ? __pfx_filename_mkdirat+0x10/0x10 [ 127.935902][ T5952] ? do_getname+0x151/0x250 [ 127.935996][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.936060][ T5952] __se_sys_mkdirat+0x35/0x150 [ 127.936146][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.936204][ T5952] do_syscall_64+0x174/0x580 [ 127.936294][ T5952] ? trace_irq_disable+0x3b/0x140 [ 127.936351][ T5952] ? clear_bhb_loop+0x40/0x90 [ 127.936423][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.936479][ T5952] RIP: 0033:0x7f3013e4df99 [ 127.936533][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.936588][ T5952] RSP: 002b:00007f30120a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.936654][ T5952] RAX: ffffffffffffffda RBX: 00007f30140d5fa0 RCX: 00007f3013e4df99 [ 127.936706][ T5952] RDX: 00000000000001c0 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 127.936754][ T5952] RBP: 00007f3013ee4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 127.936788][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.936830][ T5952] R13: 00007f30140d6038 R14: 00007f30140d5fa0 R15: 00007ffc51c27a98 [ 127.936898][ T5952] [ 127.937516][ T5952] Kernel Offset: disabled