/0x1d0 [ 486.908633][T14081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.908644][T14081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.908655][T14081] __sock_sendmsg+0x21c/0x270 [ 486.908674][T14081] ____sys_sendmsg+0x505/0x830 [ 486.908691][T14081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.908709][T14081] ? import_iovec+0x74/0xa0 [ 486.908726][T14081] ___sys_sendmsg+0x21f/0x2a0 [ 486.908740][T14081] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.908757][T14081] ? rcu_read_lock_any_held+0xb3/0x120 [ 486.908781][T14081] ? sb_end_write+0xe9/0x1c0 [ 486.908799][T14081] ? __pfx_vfs_write+0x10/0x10 [ 486.908819][T14081] __x64_sys_sendmsg+0x19b/0x260 [ 486.908834][T14081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.908853][T14081] ? __pfx_ksys_write+0x10/0x10 [ 486.908870][T14081] ? do_syscall_64+0xbe/0x3b0 [ 486.908884][T14081] do_syscall_64+0xfa/0x3b0 [ 486.908895][T14081] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.908905][T14081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.908916][T14081] ? clear_bhb_loop+0x60/0xb0 [ 486.908929][T14081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.908940][T14081] RIP: 0033:0x7fd5538a2519 [ 486.908951][T14081] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.908960][T14081] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.908972][T14081] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 486.908981][T14081] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 486.908987][T14081] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 486.908993][T14081] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 486.909000][T14081] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000000e [ 486.909016][T14081] [ 486.914944][T14084] FAULT_INJECTION: forcing a failure. [ 486.914944][T14084] name failslab, interval 1, probability 0, space 0, times 0 [ 487.416184][T14084] CPU: 1 UID: 0 PID: 14084 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 487.416201][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.416209][T14084] Call Trace: [ 487.416216][T14084] [ 487.416222][T14084] dump_stack_lvl+0x189/0x250 [ 487.416239][T14084] ? __pfx____ratelimit+0x10/0x10 [ 487.416251][T14084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.416264][T14084] ? __pfx__printk+0x10/0x10 [ 487.416280][T14084] ? __lock_acquire+0xab9/0xd20 [ 487.416300][T14084] should_fail_ex+0x414/0x560 [ 487.416319][T14084] should_failslab+0xa8/0x100 [ 487.416337][T14084] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.416354][T14084] ? __alloc_skb+0x112/0x2d0 [ 487.416369][T14084] __alloc_skb+0x112/0x2d0 [ 487.416389][T14084] skb_copy+0x188/0x800 [ 487.416419][T14084] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 487.416456][T14084] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 487.416488][T14084] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 487.416510][T14084] mac80211_hwsim_tx+0x1855/0x25d0 [ 487.416576][T14084] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 487.416602][T14084] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 487.416618][T14084] ? __local_bh_enable_ip+0x12d/0x1c0 [ 487.416634][T14084] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 487.416651][T14084] ? do_raw_spin_unlock+0x122/0x240 [ 487.416675][T14084] ieee80211_queue_skb+0x1a31/0x21c0 [ 487.416717][T14084] ieee80211_tx+0x297/0x420 [ 487.416736][T14084] ? __pfx_ieee80211_tx+0x10/0x10 [ 487.416770][T14084] ? ieee80211_xmit+0x315/0x400 [ 487.416791][T14084] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 487.416813][T14084] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 487.416842][T14084] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 487.416867][T14084] ? ieee80211_tx_control_port+0x765/0xcc0 [ 487.416890][T14084] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 487.416911][T14084] ieee80211_tx_control_port+0xabd/0xcc0 [ 487.416942][T14084] nl80211_tx_control_port+0x610/0x980 [ 487.416979][T14084] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 487.417002][T14084] ? nl80211_pre_doit+0x4f1/0x930 [ 487.417027][T14084] genl_family_rcv_msg_doit+0x212/0x300 [ 487.417053][T14084] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.417083][T14084] ? bpf_lsm_capable+0x9/0x20 [ 487.417103][T14084] ? security_capable+0x7e/0x2e0 [ 487.417132][T14084] genl_rcv_msg+0x60e/0x790 [ 487.417157][T14084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.417176][T14084] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 487.417194][T14084] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 487.417212][T14084] ? __pfx_nl80211_post_doit+0x10/0x10 [ 487.417242][T14084] netlink_rcv_skb+0x208/0x470 [ 487.417256][T14084] ? __lock_acquire+0xab9/0xd20 [ 487.417279][T14084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.417298][T14084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.417319][T14084] ? down_read+0x1ad/0x2e0 [ 487.417333][T14084] genl_rcv+0x28/0x40 [ 487.417346][T14084] netlink_unicast+0x82f/0x9e0 [ 487.417367][T14084] ? __pfx_netlink_unicast+0x10/0x10 [ 487.417384][T14084] ? netlink_sendmsg+0x642/0xb30 [ 487.417394][T14084] ? skb_put+0x11b/0x210 [ 487.417408][T14084] netlink_sendmsg+0x805/0xb30 [ 487.417425][T14084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.417438][T14084] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.417450][T14084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.417461][T14084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.417473][T14084] __sock_sendmsg+0x21c/0x270 [ 487.417491][T14084] ____sys_sendmsg+0x505/0x830 [ 487.417508][T14084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.417531][T14084] ? import_iovec+0x74/0xa0 [ 487.417547][T14084] ___sys_sendmsg+0x21f/0x2a0 [ 487.417562][T14084] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.417579][T14084] ? rcu_read_lock_any_held+0xb3/0x120 [ 487.417599][T14084] ? sb_end_write+0xe9/0x1c0 [ 487.417617][T14084] ? __pfx_vfs_write+0x10/0x10 [ 487.417636][T14084] __x64_sys_sendmsg+0x19b/0x260 [ 487.417651][T14084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.417670][T14084] ? __pfx_ksys_write+0x10/0x10 [ 487.417686][T14084] ? do_syscall_64+0xbe/0x3b0 [ 487.417700][T14084] do_syscall_64+0xfa/0x3b0 [ 487.417711][T14084] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.417722][T14084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.417732][T14084] ? clear_bhb_loop+0x60/0xb0 [ 487.417745][T14084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.417755][T14084] RIP: 0033:0x7fd5538a2519 [ 487.417767][T14084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 487.417777][T14084] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.417789][T14084] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 487.417797][T14084] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 487.417804][T14084] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 487.417810][T14084] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 487.417817][T14084] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000000e [ 487.417833][T14084] [ 487.904812][T14083] FAULT_INJECTION: forcing a failure. [ 487.904812][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 487.917441][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 487.917458][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.917466][T14083] Call Trace: [ 487.917471][T14083] [ 487.917477][T14083] dump_stack_lvl+0x189/0x250 [ 487.917495][T14083] ? __pfx____ratelimit+0x10/0x10 [ 487.917507][T14083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.917519][T14083] ? __pfx__printk+0x10/0x10 [ 487.917540][T14083] ? rcu_is_watching+0x15/0xb0 [ 487.917553][T14083] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 487.917568][T14083] should_fail_ex+0x414/0x560 [ 487.917587][T14083] should_failslab+0xa8/0x100 [ 487.917606][T14083] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.917621][T14083] ? __alloc_skb+0x112/0x2d0 [ 487.917636][T14083] __alloc_skb+0x112/0x2d0 [ 487.917650][T14083] skb_copy+0x188/0x800 [ 487.917671][T14083] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 487.917693][T14083] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 487.917713][T14083] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 487.917728][T14083] mac80211_hwsim_tx+0x1855/0x25d0 [ 487.917749][T14083] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 487.917767][T14083] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 487.917778][T14083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 487.917789][T14083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 487.917801][T14083] ? do_raw_spin_unlock+0x122/0x240 [ 487.917817][T14083] ieee80211_queue_skb+0x1a31/0x21c0 [ 487.917845][T14083] ieee80211_tx+0x297/0x420 [ 487.917859][T14083] ? __pfx_ieee80211_tx+0x10/0x10 [ 487.917883][T14083] ? ieee80211_xmit+0x315/0x400 [ 487.917897][T14083] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 487.917911][T14083] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 487.917932][T14083] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 487.917949][T14083] ? ieee80211_tx_control_port+0x765/0xcc0 [ 487.917965][T14083] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 487.917980][T14083] ieee80211_tx_control_port+0xabd/0xcc0 [ 487.918002][T14083] nl80211_tx_control_port+0x610/0x980 [ 487.918023][T14083] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 487.918039][T14083] ? nl80211_pre_doit+0x4f1/0x930 [ 487.918057][T14083] genl_family_rcv_msg_doit+0x212/0x300 [ 487.918076][T14083] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.918097][T14083] ? bpf_lsm_capable+0x9/0x20 [ 487.918112][T14083] ? security_capable+0x7e/0x2e0 [ 487.918131][T14083] genl_rcv_msg+0x60e/0x790 [ 487.918150][T14083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.918163][T14083] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 487.918175][T14083] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 487.918188][T14083] ? __pfx_nl80211_post_doit+0x10/0x10 [ 487.918209][T14083] netlink_rcv_skb+0x208/0x470 [ 487.918219][T14083] ? __lock_acquire+0xab9/0xd20 [ 487.918235][T14083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.918250][T14083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.918272][T14083] ? down_read+0x1ad/0x2e0 [ 487.918285][T14083] genl_rcv+0x28/0x40 [ 487.918298][T14083] netlink_unicast+0x82f/0x9e0 [ 487.918319][T14083] ? __pfx_netlink_unicast+0x10/0x10 [ 487.918336][T14083] ? netlink_sendmsg+0x642/0xb30 [ 487.918346][T14083] ? skb_put+0x11b/0x210 [ 487.918360][T14083] netlink_sendmsg+0x805/0xb30 [ 487.918376][T14083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.918389][T14083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.918401][T14083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.918413][T14083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.918425][T14083] __sock_sendmsg+0x21c/0x270 [ 487.918443][T14083] ____sys_sendmsg+0x505/0x830 [ 487.918460][T14083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.918478][T14083] ? import_iovec+0x74/0xa0 [ 487.918495][T14083] ___sys_sendmsg+0x21f/0x2a0 [ 487.918509][T14083] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.918531][T14083] ? rcu_read_lock_any_held+0xb3/0x120 [ 487.918553][T14083] ? sb_end_write+0xe9/0x1c0 [ 487.918571][T14083] ? __pfx_vfs_write+0x10/0x10 [ 487.918590][T14083] __x64_sys_sendmsg+0x19b/0x260 [ 487.918605][T14083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.918624][T14083] ? __pfx_ksys_write+0x10/0x10 [ 487.918641][T14083] ? do_syscall_64+0xbe/0x3b0 [ 487.918654][T14083] do_syscall_64+0xfa/0x3b0 [ 487.918665][T14083] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.918676][T14083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.918687][T14083] ? clear_bhb_loop+0x60/0xb0 [ 487.918699][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.918710][T14083] RIP: 0033:0x7fd5538a2519 [ 487.918721][T14083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 487.918730][T14083] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.918742][T14083] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 487.918750][T14083] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 487.918757][T14083] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 487.918764][T14083] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 487.918771][T14083] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000008 [ 487.918787][T14083] [ 488.554504][T14090] FAULT_INJECTION: forcing a failure. [ 488.554504][T14090] name failslab, interval 1, probability 0, space 0, times 0 [ 488.567159][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 488.567181][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.567191][T14090] Call Trace: [ 488.567198][T14090] [ 488.567206][T14090] dump_stack_lvl+0x189/0x250 [ 488.567226][T14090] ? __pfx____ratelimit+0x10/0x10 [ 488.567238][T14090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.567250][T14090] ? __pfx__printk+0x10/0x10 [ 488.567267][T14090] ? __lock_acquire+0xab9/0xd20 [ 488.567288][T14090] should_fail_ex+0x414/0x560 [ 488.567307][T14090] should_failslab+0xa8/0x100 [ 488.567331][T14090] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 488.567356][T14090] ? __alloc_skb+0x112/0x2d0 [ 488.567376][T14090] __alloc_skb+0x112/0x2d0 [ 488.567396][T14090] skb_copy+0x188/0x800 [ 488.567426][T14090] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 488.567458][T14090] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 488.567486][T14090] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 488.567508][T14090] mac80211_hwsim_tx+0x1855/0x25d0 [ 488.567538][T14090] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 488.567563][T14090] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 488.567579][T14090] ? __local_bh_enable_ip+0x12d/0x1c0 [ 488.567595][T14090] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 488.567612][T14090] ? do_raw_spin_unlock+0x122/0x240 [ 488.567635][T14090] ieee80211_queue_skb+0x1a31/0x21c0 [ 488.567682][T14090] ieee80211_tx+0x297/0x420 [ 488.567701][T14090] ? __pfx_ieee80211_tx+0x10/0x10 [ 488.567735][T14090] ? ieee80211_xmit+0x315/0x400 [ 488.567755][T14090] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 488.567776][T14090] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 488.567806][T14090] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 488.567830][T14090] ? ieee80211_tx_control_port+0x765/0xcc0 [ 488.567853][T14090] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 488.567874][T14090] ieee80211_tx_control_port+0xabd/0xcc0 [ 488.567905][T14090] nl80211_tx_control_port+0x610/0x980 [ 488.567935][T14090] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 488.567958][T14090] ? nl80211_pre_doit+0x4f1/0x930 [ 488.567983][T14090] genl_family_rcv_msg_doit+0x212/0x300 [ 488.568009][T14090] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.568040][T14090] ? bpf_lsm_capable+0x9/0x20 [ 488.568060][T14090] ? security_capable+0x7e/0x2e0 [ 488.568091][T14090] genl_rcv_msg+0x60e/0x790 [ 488.568110][T14090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.568123][T14090] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 488.568135][T14090] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 488.568148][T14090] ? __pfx_nl80211_post_doit+0x10/0x10 [ 488.568169][T14090] netlink_rcv_skb+0x208/0x470 [ 488.568179][T14090] ? __lock_acquire+0xab9/0xd20 [ 488.568195][T14090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.568209][T14090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.568230][T14090] ? down_read+0x1ad/0x2e0 [ 488.568245][T14090] genl_rcv+0x28/0x40 [ 488.568258][T14090] netlink_unicast+0x82f/0x9e0 [ 488.568280][T14090] ? __pfx_netlink_unicast+0x10/0x10 [ 488.568297][T14090] ? netlink_sendmsg+0x642/0xb30 [ 488.568307][T14090] ? skb_put+0x11b/0x210 [ 488.568321][T14090] netlink_sendmsg+0x805/0xb30 [ 488.568338][T14090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.568351][T14090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 488.568364][T14090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.568375][T14090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.568387][T14090] __sock_sendmsg+0x21c/0x270 [ 488.568406][T14090] ____sys_sendmsg+0x505/0x830 [ 488.568423][T14090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.568441][T14090] ? import_iovec+0x74/0xa0 [ 488.568457][T14090] ___sys_sendmsg+0x21f/0x2a0 [ 488.568472][T14090] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.568489][T14090] ? rcu_read_lock_any_held+0xb3/0x120 [ 488.568509][T14090] ? sb_end_write+0xe9/0x1c0 [ 488.568527][T14090] ? __pfx_vfs_write+0x10/0x10 [ 488.568546][T14090] __x64_sys_sendmsg+0x19b/0x260 [ 488.568561][T14090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.568580][T14090] ? __pfx_ksys_write+0x10/0x10 [ 488.568597][T14090] ? do_syscall_64+0xbe/0x3b0 [ 488.568611][T14090] do_syscall_64+0xfa/0x3b0 [ 488.568621][T14090] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.568632][T14090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.568643][T14090] ? clear_bhb_loop+0x60/0xb0 [ 488.568661][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.568672][T14090] RIP: 0033:0x7fd5538a2519 [ 488.568683][T14090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 488.568692][T14090] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.568704][T14090] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 488.568713][T14090] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 488.568719][T14090] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 488.568726][T14090] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 488.568733][T14090] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000009 [ 488.568749][T14090] [ 488.583036][T14092] FAULT_INJECTION: forcing a failure. [ 488.583036][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 489.077283][T14092] CPU: 1 UID: 0 PID: 14092 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 489.077299][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.077308][T14092] Call Trace: [ 489.077315][T14092] [ 489.077322][T14092] dump_stack_lvl+0x189/0x250 [ 489.077340][T14092] ? __pfx____ratelimit+0x10/0x10 [ 489.077356][T14092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.077369][T14092] ? __pfx__printk+0x10/0x10 [ 489.077388][T14092] ? __lock_acquire+0xab9/0xd20 [ 489.077410][T14092] should_fail_ex+0x414/0x560 [ 489.077429][T14092] should_failslab+0xa8/0x100 [ 489.077450][T14092] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 489.077465][T14092] ? __alloc_skb+0x112/0x2d0 [ 489.077480][T14092] __alloc_skb+0x112/0x2d0 [ 489.077494][T14092] skb_copy+0x188/0x800 [ 489.077515][T14092] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 489.077539][T14092] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 489.077558][T14092] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 489.077574][T14092] mac80211_hwsim_tx+0x1855/0x25d0 [ 489.077610][T14092] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 489.077629][T14092] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 489.077641][T14092] ? __local_bh_enable_ip+0x12d/0x1c0 [ 489.077653][T14092] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 489.077664][T14092] ? do_raw_spin_unlock+0x122/0x240 [ 489.077681][T14092] ieee80211_queue_skb+0x1a31/0x21c0 [ 489.077710][T14092] ieee80211_tx+0x297/0x420 [ 489.077724][T14092] ? __pfx_ieee80211_tx+0x10/0x10 [ 489.077749][T14092] ? ieee80211_xmit+0x315/0x400 [ 489.077764][T14092] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 489.077778][T14092] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 489.077802][T14092] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 489.077819][T14092] ? ieee80211_tx_control_port+0x765/0xcc0 [ 489.077835][T14092] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 489.077850][T14092] ieee80211_tx_control_port+0xabd/0xcc0 [ 489.077873][T14092] nl80211_tx_control_port+0x610/0x980 [ 489.077895][T14092] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 489.077911][T14092] ? nl80211_pre_doit+0x4f1/0x930 [ 489.077929][T14092] genl_family_rcv_msg_doit+0x212/0x300 [ 489.077949][T14092] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 489.077970][T14092] ? bpf_lsm_capable+0x9/0x20 [ 489.077984][T14092] ? security_capable+0x7e/0x2e0 [ 489.078004][T14092] genl_rcv_msg+0x60e/0x790 [ 489.078022][T14092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.078035][T14092] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 489.078047][T14092] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 489.078060][T14092] ? __pfx_nl80211_post_doit+0x10/0x10 [ 489.078081][T14092] netlink_rcv_skb+0x208/0x470 [ 489.078091][T14092] ? __lock_acquire+0xab9/0xd20 [ 489.078106][T14092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.078121][T14092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.078142][T14092] ? down_read+0x1ad/0x2e0 [ 489.078156][T14092] genl_rcv+0x28/0x40 [ 489.078169][T14092] netlink_unicast+0x82f/0x9e0 [ 489.078190][T14092] ? __pfx_netlink_unicast+0x10/0x10 [ 489.078207][T14092] ? netlink_sendmsg+0x642/0xb30 [ 489.078217][T14092] ? skb_put+0x11b/0x210 [ 489.078231][T14092] netlink_sendmsg+0x805/0xb30 [ 489.078248][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.078262][T14092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 489.078274][T14092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.078285][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.078297][T14092] __sock_sendmsg+0x21c/0x270 [ 489.078316][T14092] ____sys_sendmsg+0x505/0x830 [ 489.078332][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.078354][T14092] ? import_iovec+0x74/0xa0 [ 489.078370][T14092] ___sys_sendmsg+0x21f/0x2a0 [ 489.078385][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.078402][T14092] ? rcu_read_lock_any_held+0xb3/0x120 [ 489.078422][T14092] ? sb_end_write+0xe9/0x1c0 [ 489.078440][T14092] ? __pfx_vfs_write+0x10/0x10 [ 489.078459][T14092] __x64_sys_sendmsg+0x19b/0x260 [ 489.078474][T14092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.078493][T14092] ? __pfx_ksys_write+0x10/0x10 [ 489.078510][T14092] ? do_syscall_64+0xbe/0x3b0 [ 489.078524][T14092] do_syscall_64+0xfa/0x3b0 [ 489.078535][T14092] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.078545][T14092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.078556][T14092] ? clear_bhb_loop+0x60/0xb0 [ 489.078568][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.078578][T14092] RIP: 0033:0x7fd5538a2519 [ 489.078590][T14092] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 489.078605][T14092] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.078618][T14092] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 489.078626][T14092] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 489.078633][T14092] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 489.078639][T14092] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 489.078646][T14092] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000000f [ 489.078662][T14092] [ 489.629347][T14095] FAULT_INJECTION: forcing a failure. [ 489.629347][T14095] name failslab, interval 1, probability 0, space 0, times 0 [ 489.642062][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 489.642089][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.642102][T14095] Call Trace: [ 489.642111][T14095] [ 489.642120][T14095] dump_stack_lvl+0x189/0x250 [ 489.642149][T14095] ? __pfx____ratelimit+0x10/0x10 [ 489.642172][T14095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.642197][T14095] ? __pfx__printk+0x10/0x10 [ 489.642227][T14095] ? __lock_acquire+0xab9/0xd20 [ 489.642268][T14095] should_fail_ex+0x414/0x560 [ 489.642304][T14095] should_failslab+0xa8/0x100 [ 489.642335][T14095] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 489.642362][T14095] ? __alloc_skb+0x112/0x2d0 [ 489.642395][T14095] __alloc_skb+0x112/0x2d0 [ 489.642422][T14095] skb_copy+0x188/0x800 [ 489.642460][T14095] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 489.642503][T14095] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 489.642542][T14095] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 489.642569][T14095] mac80211_hwsim_tx+0x1855/0x25d0 [ 489.642610][T14095] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 489.642640][T14095] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 489.642662][T14095] ? __local_bh_enable_ip+0x12d/0x1c0 [ 489.642683][T14095] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 489.642705][T14095] ? do_raw_spin_unlock+0x122/0x240 [ 489.642735][T14095] ieee80211_queue_skb+0x1a31/0x21c0 [ 489.642786][T14095] ieee80211_tx+0x297/0x420 [ 489.642810][T14095] ? __pfx_ieee80211_tx+0x10/0x10 [ 489.642855][T14095] ? ieee80211_xmit+0x315/0x400 [ 489.642882][T14095] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 489.642909][T14095] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 489.642948][T14095] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 489.642980][T14095] ? ieee80211_tx_control_port+0x765/0xcc0 [ 489.643012][T14095] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 489.643039][T14095] ieee80211_tx_control_port+0xabd/0xcc0 [ 489.643082][T14095] nl80211_tx_control_port+0x610/0x980 [ 489.643122][T14095] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 489.643153][T14095] ? nl80211_pre_doit+0x4f1/0x930 [ 489.643186][T14095] genl_family_rcv_msg_doit+0x212/0x300 [ 489.643220][T14095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 489.643261][T14095] ? bpf_lsm_capable+0x9/0x20 [ 489.643286][T14095] ? security_capable+0x7e/0x2e0 [ 489.643322][T14095] genl_rcv_msg+0x60e/0x790 [ 489.643355][T14095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.643388][T14095] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 489.643411][T14095] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 489.643431][T14095] ? __pfx_nl80211_post_doit+0x10/0x10 [ 489.643468][T14095] netlink_rcv_skb+0x208/0x470 [ 489.643487][T14095] ? __lock_acquire+0xab9/0xd20 [ 489.643517][T14095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.643545][T14095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.643586][T14095] ? down_read+0x1ad/0x2e0 [ 489.643612][T14095] genl_rcv+0x28/0x40 [ 489.643635][T14095] netlink_unicast+0x82f/0x9e0 [ 489.643676][T14095] ? __pfx_netlink_unicast+0x10/0x10 [ 489.643708][T14095] ? netlink_sendmsg+0x642/0xb30 [ 489.643728][T14095] ? skb_put+0x11b/0x210 [ 489.643756][T14095] netlink_sendmsg+0x805/0xb30 [ 489.643789][T14095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.643815][T14095] ? aa_sock_msg_perm+0xf1/0x1d0 [ 489.643838][T14095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.643858][T14095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.643880][T14095] __sock_sendmsg+0x21c/0x270 [ 489.643913][T14095] ____sys_sendmsg+0x505/0x830 [ 489.643943][T14095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.643978][T14095] ? import_iovec+0x74/0xa0 [ 489.644008][T14095] ___sys_sendmsg+0x21f/0x2a0 [ 489.644035][T14095] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.644067][T14095] ? rcu_read_lock_any_held+0xb3/0x120 [ 489.644103][T14095] ? sb_end_write+0xe9/0x1c0 [ 489.644136][T14095] ? __pfx_vfs_write+0x10/0x10 [ 489.644174][T14095] __x64_sys_sendmsg+0x19b/0x260 [ 489.644204][T14095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.644239][T14095] ? __pfx_ksys_write+0x10/0x10 [ 489.644268][T14095] ? do_syscall_64+0xbe/0x3b0 [ 489.644293][T14095] do_syscall_64+0xfa/0x3b0 [ 489.644314][T14095] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.644335][T14095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.644353][T14095] ? clear_bhb_loop+0x60/0xb0 [ 489.644376][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.644403][T14095] RIP: 0033:0x7fd5538a2519 [ 489.644420][T14095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 489.644438][T14095] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.644460][T14095] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 489.644476][T14095] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 489.644489][T14095] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 489.644502][T14095] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 489.644516][T14095] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000000a [ 489.644546][T14095] [ 490.144228][T14097] FAULT_INJECTION: forcing a failure. [ 490.144228][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 490.156919][T14097] CPU: 0 UID: 0 PID: 14097 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 490.156944][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.156956][T14097] Call Trace: [ 490.156965][T14097] [ 490.156972][T14097] dump_stack_lvl+0x189/0x250 [ 490.156999][T14097] ? __pfx____ratelimit+0x10/0x10 [ 490.157018][T14097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.157039][T14097] ? __pfx__printk+0x10/0x10 [ 490.157065][T14097] ? __lock_acquire+0xab9/0xd20 [ 490.157100][T14097] should_fail_ex+0x414/0x560 [ 490.157132][T14097] should_failslab+0xa8/0x100 [ 490.157162][T14097] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 490.157188][T14097] ? __alloc_skb+0x112/0x2d0 [ 490.157214][T14097] __alloc_skb+0x112/0x2d0 [ 490.157240][T14097] skb_copy+0x188/0x800 [ 490.157276][T14097] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 490.157320][T14097] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 490.157357][T14097] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 490.157387][T14097] mac80211_hwsim_tx+0x1855/0x25d0 [ 490.157428][T14097] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 490.157460][T14097] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 490.157483][T14097] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.157503][T14097] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 490.157532][T14097] ? do_raw_spin_unlock+0x122/0x240 [ 490.157562][T14097] ieee80211_queue_skb+0x1a31/0x21c0 [ 490.157618][T14097] ieee80211_tx+0x297/0x420 [ 490.157642][T14097] ? __pfx_ieee80211_tx+0x10/0x10 [ 490.157689][T14097] ? ieee80211_xmit+0x315/0x400 [ 490.157716][T14097] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 490.157743][T14097] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 490.157784][T14097] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 490.157815][T14097] ? ieee80211_tx_control_port+0x765/0xcc0 [ 490.157846][T14097] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 490.157874][T14097] ieee80211_tx_control_port+0xabd/0xcc0 [ 490.157917][T14097] nl80211_tx_control_port+0x610/0x980 [ 490.157955][T14097] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 490.157984][T14097] ? nl80211_pre_doit+0x4f1/0x930 [ 490.158017][T14097] genl_family_rcv_msg_doit+0x212/0x300 [ 490.158073][T14097] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.158113][T14097] ? bpf_lsm_capable+0x9/0x20 [ 490.158139][T14097] ? security_capable+0x7e/0x2e0 [ 490.158176][T14097] genl_rcv_msg+0x60e/0x790 [ 490.158215][T14097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.158239][T14097] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 490.158263][T14097] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 490.158286][T14097] ? __pfx_nl80211_post_doit+0x10/0x10 [ 490.158328][T14097] netlink_rcv_skb+0x208/0x470 [ 490.158347][T14097] ? __lock_acquire+0xab9/0xd20 [ 490.158376][T14097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.158405][T14097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.158445][T14097] ? down_read+0x1ad/0x2e0 [ 490.158471][T14097] genl_rcv+0x28/0x40 [ 490.158495][T14097] netlink_unicast+0x82f/0x9e0 [ 490.158542][T14097] ? __pfx_netlink_unicast+0x10/0x10 [ 490.158574][T14097] ? netlink_sendmsg+0x642/0xb30 [ 490.158593][T14097] ? skb_put+0x11b/0x210 [ 490.158620][T14097] netlink_sendmsg+0x805/0xb30 [ 490.158660][T14097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.158686][T14097] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.158709][T14097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.158730][T14097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.158753][T14097] __sock_sendmsg+0x21c/0x270 [ 490.158787][T14097] ____sys_sendmsg+0x505/0x830 [ 490.158819][T14097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.158855][T14097] ? import_iovec+0x74/0xa0 [ 490.158885][T14097] ___sys_sendmsg+0x21f/0x2a0 [ 490.158914][T14097] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.158947][T14097] ? rcu_read_lock_any_held+0xb3/0x120 [ 490.158984][T14097] ? sb_end_write+0xe9/0x1c0 [ 490.159018][T14097] ? __pfx_vfs_write+0x10/0x10 [ 490.159054][T14097] __x64_sys_sendmsg+0x19b/0x260 [ 490.159081][T14097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.159115][T14097] ? __pfx_ksys_write+0x10/0x10 [ 490.159147][T14097] ? do_syscall_64+0xbe/0x3b0 [ 490.159173][T14097] do_syscall_64+0xfa/0x3b0 [ 490.159193][T14097] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.159214][T14097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.159234][T14097] ? clear_bhb_loop+0x60/0xb0 [ 490.159259][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.159278][T14097] RIP: 0033:0x7fd5538a2519 [ 490.159295][T14097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.159313][T14097] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.159334][T14097] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 490.159348][T14097] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 490.159361][T14097] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 490.159373][T14097] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 490.159387][T14097] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000000f [ 490.159420][T14097] [ 490.261327][T14096] FAULT_INJECTION: forcing a failure. [ 490.261327][T14096] name failslab, interval 1, probability 0, space 0, times 0 [ 490.667422][T14096] CPU: 1 UID: 0 PID: 14096 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 490.667440][T14096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.667448][T14096] Call Trace: [ 490.667455][T14096] [ 490.667461][T14096] dump_stack_lvl+0x189/0x250 [ 490.667479][T14096] ? __pfx____ratelimit+0x10/0x10 [ 490.667491][T14096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.667504][T14096] ? __pfx__printk+0x10/0x10 [ 490.667520][T14096] ? __lock_acquire+0xab9/0xd20 [ 490.667541][T14096] should_fail_ex+0x414/0x560 [ 490.667560][T14096] should_failslab+0xa8/0x100 [ 490.667578][T14096] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 490.667595][T14096] ? __alloc_skb+0x112/0x2d0 [ 490.667610][T14096] __alloc_skb+0x112/0x2d0 [ 490.667624][T14096] skb_copy+0x188/0x800 [ 490.667645][T14096] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 490.667667][T14096] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 490.667687][T14096] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 490.667702][T14096] mac80211_hwsim_tx+0x1855/0x25d0 [ 490.667723][T14096] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 490.667740][T14096] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 490.667752][T14096] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.667763][T14096] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 490.667774][T14096] ? do_raw_spin_unlock+0x122/0x240 [ 490.667790][T14096] ieee80211_queue_skb+0x1a31/0x21c0 [ 490.667818][T14096] ieee80211_tx+0x297/0x420 [ 490.667832][T14096] ? __pfx_ieee80211_tx+0x10/0x10 [ 490.667855][T14096] ? ieee80211_xmit+0x315/0x400 [ 490.667869][T14096] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 490.667884][T14096] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 490.667904][T14096] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 490.667921][T14096] ? ieee80211_tx_control_port+0x765/0xcc0 [ 490.667937][T14096] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 490.667951][T14096] ieee80211_tx_control_port+0xabd/0xcc0 [ 490.667974][T14096] nl80211_tx_control_port+0x610/0x980 [ 490.667995][T14096] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 490.668012][T14096] ? nl80211_pre_doit+0x4f1/0x930 [ 490.668029][T14096] genl_family_rcv_msg_doit+0x212/0x300 [ 490.668049][T14096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.668070][T14096] ? bpf_lsm_capable+0x9/0x20 [ 490.668085][T14096] ? security_capable+0x7e/0x2e0 [ 490.668105][T14096] genl_rcv_msg+0x60e/0x790 [ 490.668123][T14096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.668136][T14096] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 490.668149][T14096] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 490.668162][T14096] ? __pfx_nl80211_post_doit+0x10/0x10 [ 490.668184][T14096] netlink_rcv_skb+0x208/0x470 [ 490.668194][T14096] ? __lock_acquire+0xab9/0xd20 [ 490.668210][T14096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.668225][T14096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.668246][T14096] ? down_read+0x1ad/0x2e0 [ 490.668260][T14096] genl_rcv+0x28/0x40 [ 490.668279][T14096] netlink_unicast+0x82f/0x9e0 [ 490.668300][T14096] ? __pfx_netlink_unicast+0x10/0x10 [ 490.668317][T14096] ? netlink_sendmsg+0x642/0xb30 [ 490.668328][T14096] ? skb_put+0x11b/0x210 [ 490.668342][T14096] netlink_sendmsg+0x805/0xb30 [ 490.668359][T14096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.668372][T14096] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.668384][T14096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.668396][T14096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.668408][T14096] __sock_sendmsg+0x21c/0x270 [ 490.668426][T14096] ____sys_sendmsg+0x505/0x830 [ 490.668444][T14096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.668462][T14096] ? import_iovec+0x74/0xa0 [ 490.668478][T14096] ___sys_sendmsg+0x21f/0x2a0 [ 490.668493][T14096] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.668510][T14096] ? rcu_read_lock_any_held+0xb3/0x120 [ 490.668529][T14096] ? sb_end_write+0xe9/0x1c0 [ 490.668546][T14096] ? __pfx_vfs_write+0x10/0x10 [ 490.668565][T14096] __x64_sys_sendmsg+0x19b/0x260 [ 490.668581][T14096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.668599][T14096] ? __pfx_ksys_write+0x10/0x10 [ 490.668616][T14096] ? do_syscall_64+0xbe/0x3b0 [ 490.668629][T14096] do_syscall_64+0xfa/0x3b0 [ 490.668641][T14096] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.668651][T14096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.668661][T14096] ? clear_bhb_loop+0x60/0xb0 [ 490.668674][T14096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.668684][T14096] RIP: 0033:0x7fd5538a2519 [ 490.668696][T14096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.668705][T14096] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.668717][T14096] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 490.668725][T14096] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 490.668732][T14096] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 490.668738][T14096] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 490.668745][T14096] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000007 [ 490.668762][T14096] [ 491.173348][T14099] FAULT_INJECTION: forcing a failure. [ 491.173348][T14099] name failslab, interval 1, probability 0, space 0, times 0 [ 491.186048][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 491.186074][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.186087][T14099] Call Trace: [ 491.186096][T14099] [ 491.186104][T14099] dump_stack_lvl+0x189/0x250 [ 491.186133][T14099] ? __pfx____ratelimit+0x10/0x10 [ 491.186153][T14099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.186177][T14099] ? __pfx__printk+0x10/0x10 [ 491.186214][T14099] ? __lock_acquire+0xab9/0xd20 [ 491.186251][T14099] should_fail_ex+0x414/0x560 [ 491.186284][T14099] should_failslab+0xa8/0x100 [ 491.186314][T14099] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 491.186341][T14099] ? __alloc_skb+0x112/0x2d0 [ 491.186367][T14099] __alloc_skb+0x112/0x2d0 [ 491.186396][T14099] skb_copy+0x188/0x800 [ 491.186432][T14099] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 491.186467][T14099] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 491.186499][T14099] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 491.186527][T14099] mac80211_hwsim_tx+0x1855/0x25d0 [ 491.186568][T14099] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 491.186599][T14099] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 491.186620][T14099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 491.186640][T14099] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 491.186662][T14099] ? do_raw_spin_unlock+0x122/0x240 [ 491.186692][T14099] ieee80211_queue_skb+0x1a31/0x21c0 [ 491.186745][T14099] ieee80211_tx+0x297/0x420 [ 491.186770][T14099] ? __pfx_ieee80211_tx+0x10/0x10 [ 491.186817][T14099] ? ieee80211_xmit+0x315/0x400 [ 491.186844][T14099] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 491.186871][T14099] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 491.186911][T14099] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 491.186943][T14099] ? ieee80211_tx_control_port+0x765/0xcc0 [ 491.186975][T14099] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 491.187003][T14099] ieee80211_tx_control_port+0xabd/0xcc0 [ 491.187047][T14099] nl80211_tx_control_port+0x610/0x980 [ 491.187088][T14099] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 491.187118][T14099] ? nl80211_pre_doit+0x4f1/0x930 [ 491.187151][T14099] genl_family_rcv_msg_doit+0x212/0x300 [ 491.187189][T14099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.187288][T14099] ? bpf_lsm_capable+0x9/0x20 [ 491.187312][T14099] ? security_capable+0x7e/0x2e0 [ 491.187347][T14099] genl_rcv_msg+0x60e/0x790 [ 491.187379][T14099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.187403][T14099] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 491.187427][T14099] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 491.187449][T14099] ? __pfx_nl80211_post_doit+0x10/0x10 [ 491.187487][T14099] netlink_rcv_skb+0x208/0x470 [ 491.187504][T14099] ? __lock_acquire+0xab9/0xd20 [ 491.187532][T14099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.187558][T14099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.187596][T14099] ? down_read+0x1ad/0x2e0 [ 491.187621][T14099] genl_rcv+0x28/0x40 [ 491.187644][T14099] netlink_unicast+0x82f/0x9e0 [ 491.187684][T14099] ? __pfx_netlink_unicast+0x10/0x10 [ 491.187715][T14099] ? netlink_sendmsg+0x642/0xb30 [ 491.187731][T14099] ? skb_put+0x11b/0x210 [ 491.187754][T14099] netlink_sendmsg+0x805/0xb30 [ 491.187786][T14099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.187811][T14099] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.187833][T14099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.187853][T14099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.187876][T14099] __sock_sendmsg+0x21c/0x270 [ 491.187908][T14099] ____sys_sendmsg+0x505/0x830 [ 491.187938][T14099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.187973][T14099] ? import_iovec+0x74/0xa0 [ 491.188004][T14099] ___sys_sendmsg+0x21f/0x2a0 [ 491.188030][T14099] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.188063][T14099] ? rcu_read_lock_any_held+0xb3/0x120 [ 491.188099][T14099] ? sb_end_write+0xe9/0x1c0 [ 491.188133][T14099] ? __pfx_vfs_write+0x10/0x10 [ 491.188169][T14099] __x64_sys_sendmsg+0x19b/0x260 [ 491.188204][T14099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.188240][T14099] ? __pfx_ksys_write+0x10/0x10 [ 491.188277][T14099] ? do_syscall_64+0xbe/0x3b0 [ 491.188304][T14099] do_syscall_64+0xfa/0x3b0 [ 491.188324][T14099] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.188344][T14099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.188365][T14099] ? clear_bhb_loop+0x60/0xb0 [ 491.188390][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.188410][T14099] RIP: 0033:0x7fd5538a2519 [ 491.188427][T14099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 491.188444][T14099] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.188465][T14099] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 491.188480][T14099] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 491.188492][T14099] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 491.188505][T14099] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 491.188518][T14099] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000010 [ 491.188552][T14099] [ 491.714904][T14102] FAULT_INJECTION: forcing a failure. [ 491.714904][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 491.727736][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 491.727763][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.727776][T14102] Call Trace: [ 491.727785][T14102] [ 491.727794][T14102] dump_stack_lvl+0x189/0x250 [ 491.727823][T14102] ? __pfx____ratelimit+0x10/0x10 [ 491.727849][T14102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.727872][T14102] ? __pfx__printk+0x10/0x10 [ 491.727902][T14102] ? __lock_acquire+0xab9/0xd20 [ 491.727941][T14102] should_fail_ex+0x414/0x560 [ 491.727976][T14102] should_failslab+0xa8/0x100 [ 491.728007][T14102] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 491.728035][T14102] ? __alloc_skb+0x112/0x2d0 [ 491.728062][T14102] __alloc_skb+0x112/0x2d0 [ 491.728089][T14102] skb_copy+0x188/0x800 [ 491.728130][T14102] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 491.728171][T14102] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 491.728210][T14102] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 491.728246][T14102] mac80211_hwsim_tx+0x1855/0x25d0 [ 491.728289][T14102] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 491.728322][T14102] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 491.728344][T14102] ? __local_bh_enable_ip+0x12d/0x1c0 [ 491.728365][T14102] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 491.728387][T14102] ? do_raw_spin_unlock+0x122/0x240 [ 491.728417][T14102] ieee80211_queue_skb+0x1a31/0x21c0 [ 491.728472][T14102] ieee80211_tx+0x297/0x420 [ 491.728498][T14102] ? __pfx_ieee80211_tx+0x10/0x10 [ 491.728545][T14102] ? ieee80211_xmit+0x315/0x400 [ 491.728573][T14102] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 491.728600][T14102] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 491.728640][T14102] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 491.728673][T14102] ? ieee80211_tx_control_port+0x765/0xcc0 [ 491.728704][T14102] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 491.728732][T14102] ieee80211_tx_control_port+0xabd/0xcc0 [ 491.728775][T14102] nl80211_tx_control_port+0x610/0x980 [ 491.728816][T14102] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 491.728847][T14102] ? nl80211_pre_doit+0x4f1/0x930 [ 491.728881][T14102] genl_family_rcv_msg_doit+0x212/0x300 [ 491.728916][T14102] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.728958][T14102] ? bpf_lsm_capable+0x9/0x20 [ 491.728983][T14102] ? security_capable+0x7e/0x2e0 [ 491.729021][T14102] genl_rcv_msg+0x60e/0x790 [ 491.729055][T14102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.729079][T14102] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 491.729103][T14102] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 491.729127][T14102] ? __pfx_nl80211_post_doit+0x10/0x10 [ 491.729169][T14102] netlink_rcv_skb+0x208/0x470 [ 491.729189][T14102] ? __lock_acquire+0xab9/0xd20 [ 491.729217][T14102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.729251][T14102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.729293][T14102] ? down_read+0x1ad/0x2e0 [ 491.729320][T14102] genl_rcv+0x28/0x40 [ 491.729344][T14102] netlink_unicast+0x82f/0x9e0 [ 491.729384][T14102] ? __pfx_netlink_unicast+0x10/0x10 [ 491.729416][T14102] ? netlink_sendmsg+0x642/0xb30 [ 491.729435][T14102] ? skb_put+0x11b/0x210 [ 491.729462][T14102] netlink_sendmsg+0x805/0xb30 [ 491.729494][T14102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.729519][T14102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.729542][T14102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.729562][T14102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.729585][T14102] __sock_sendmsg+0x21c/0x270 [ 491.729618][T14102] ____sys_sendmsg+0x505/0x830 [ 491.729649][T14102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.729685][T14102] ? import_iovec+0x74/0xa0 [ 491.729716][T14102] ___sys_sendmsg+0x21f/0x2a0 [ 491.729744][T14102] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.729777][T14102] ? rcu_read_lock_any_held+0xb3/0x120 [ 491.729814][T14102] ? sb_end_write+0xe9/0x1c0 [ 491.729848][T14102] ? __pfx_vfs_write+0x10/0x10 [ 491.729885][T14102] __x64_sys_sendmsg+0x19b/0x260 [ 491.729914][T14102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.729950][T14102] ? __pfx_ksys_write+0x10/0x10 [ 491.729982][T14102] ? do_syscall_64+0xbe/0x3b0 [ 491.730009][T14102] do_syscall_64+0xfa/0x3b0 [ 491.730029][T14102] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.730048][T14102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.730069][T14102] ? clear_bhb_loop+0x60/0xb0 [ 491.730093][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.730112][T14102] RIP: 0033:0x7fd5538a2519 [ 491.730129][T14102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 491.730148][T14102] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.730169][T14102] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 491.730185][T14102] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 491.730198][T14102] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 491.730211][T14102] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 491.730224][T14102] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000010 [ 491.730262][T14102] [ 492.251275][T14116] FAULT_INJECTION: forcing a failure. [ 492.251275][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 492.263918][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 492.263934][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.263942][T14116] Call Trace: [ 492.263947][T14116] [ 492.263952][T14116] dump_stack_lvl+0x189/0x250 [ 492.263969][T14116] ? __pfx____ratelimit+0x10/0x10 [ 492.263981][T14116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.263993][T14116] ? __pfx__printk+0x10/0x10 [ 492.264009][T14116] ? __lock_acquire+0xab9/0xd20 [ 492.264033][T14116] should_fail_ex+0x414/0x560 [ 492.264051][T14116] should_failslab+0xa8/0x100 [ 492.264068][T14116] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 492.264084][T14116] ? __alloc_skb+0x112/0x2d0 [ 492.264098][T14116] __alloc_skb+0x112/0x2d0 [ 492.264111][T14116] skb_copy+0x188/0x800 [ 492.264132][T14116] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 492.264154][T14116] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 492.264173][T14116] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 492.264193][T14116] mac80211_hwsim_tx+0x1855/0x25d0 [ 492.264215][T14116] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 492.264232][T14116] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 492.264244][T14116] ? __local_bh_enable_ip+0x12d/0x1c0 [ 492.264255][T14116] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 492.264266][T14116] ? do_raw_spin_unlock+0x122/0x240 [ 492.264282][T14116] ieee80211_queue_skb+0x1a31/0x21c0 [ 492.264310][T14116] ieee80211_tx+0x297/0x420 [ 492.264323][T14116] ? __pfx_ieee80211_tx+0x10/0x10 [ 492.264347][T14116] ? ieee80211_xmit+0x315/0x400 [ 492.264361][T14116] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 492.264376][T14116] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 492.264398][T14116] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 492.264415][T14116] ? ieee80211_tx_control_port+0x765/0xcc0 [ 492.264431][T14116] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 492.264446][T14116] ieee80211_tx_control_port+0xabd/0xcc0 [ 492.264468][T14116] nl80211_tx_control_port+0x610/0x980 [ 492.264489][T14116] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 492.264505][T14116] ? nl80211_pre_doit+0x4f1/0x930 [ 492.264523][T14116] genl_family_rcv_msg_doit+0x212/0x300 [ 492.264543][T14116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.264564][T14116] ? bpf_lsm_capable+0x9/0x20 [ 492.264578][T14116] ? security_capable+0x7e/0x2e0 [ 492.264599][T14116] genl_rcv_msg+0x60e/0x790 [ 492.264617][T14116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.264630][T14116] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 492.264642][T14116] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 492.264655][T14116] ? __pfx_nl80211_post_doit+0x10/0x10 [ 492.264676][T14116] netlink_rcv_skb+0x208/0x470 [ 492.264686][T14116] ? __lock_acquire+0xab9/0xd20 [ 492.264701][T14116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.264716][T14116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.264737][T14116] ? down_read+0x1ad/0x2e0 [ 492.264751][T14116] genl_rcv+0x28/0x40 [ 492.264764][T14116] netlink_unicast+0x82f/0x9e0 [ 492.264785][T14116] ? __pfx_netlink_unicast+0x10/0x10 [ 492.264802][T14116] ? netlink_sendmsg+0x642/0xb30 [ 492.264812][T14116] ? skb_put+0x11b/0x210 [ 492.264826][T14116] netlink_sendmsg+0x805/0xb30 [ 492.264843][T14116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.264856][T14116] ? aa_sock_msg_perm+0xf1/0x1d0 [ 492.264867][T14116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.264879][T14116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.264890][T14116] __sock_sendmsg+0x21c/0x270 [ 492.264908][T14116] ____sys_sendmsg+0x505/0x830 [ 492.264925][T14116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.264943][T14116] ? import_iovec+0x74/0xa0 [ 492.264959][T14116] ___sys_sendmsg+0x21f/0x2a0 [ 492.264974][T14116] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.264991][T14116] ? rcu_read_lock_any_held+0xb3/0x120 [ 492.265010][T14116] ? sb_end_write+0xe9/0x1c0 [ 492.265027][T14116] ? __pfx_vfs_write+0x10/0x10 [ 492.265046][T14116] __x64_sys_sendmsg+0x19b/0x260 [ 492.265061][T14116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.265079][T14116] ? __pfx_ksys_write+0x10/0x10 [ 492.265096][T14116] ? do_syscall_64+0xbe/0x3b0 [ 492.265110][T14116] do_syscall_64+0xfa/0x3b0 [ 492.265120][T14116] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.265131][T14116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.265141][T14116] ? clear_bhb_loop+0x60/0xb0 [ 492.265154][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.265164][T14116] RIP: 0033:0x7fd5538a2519 [ 492.265175][T14116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 492.265189][T14116] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.265201][T14116] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 492.265209][T14116] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 492.265216][T14116] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 492.265222][T14116] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 492.265229][T14116] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000011 [ 492.265245][T14116] [ 492.269687][T14117] FAULT_INJECTION: forcing a failure. [ 492.269687][T14117] name failslab, interval 1, probability 0, space 0, times 0 [ 492.767539][T14117] CPU: 1 UID: 0 PID: 14117 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 492.767556][T14117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.767563][T14117] Call Trace: [ 492.767571][T14117] [ 492.767576][T14117] dump_stack_lvl+0x189/0x250 [ 492.767594][T14117] ? __pfx____ratelimit+0x10/0x10 [ 492.767606][T14117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.767619][T14117] ? __pfx__printk+0x10/0x10 [ 492.767635][T14117] ? __lock_acquire+0xab9/0xd20 [ 492.767655][T14117] should_fail_ex+0x414/0x560 [ 492.767675][T14117] should_failslab+0xa8/0x100 [ 492.767692][T14117] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 492.767708][T14117] ? __alloc_skb+0x112/0x2d0 [ 492.767722][T14117] __alloc_skb+0x112/0x2d0 [ 492.767736][T14117] skb_copy+0x188/0x800 [ 492.767757][T14117] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 492.767779][T14117] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 492.767799][T14117] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 492.767814][T14117] mac80211_hwsim_tx+0x1855/0x25d0 [ 492.767835][T14117] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 492.767852][T14117] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 492.767864][T14117] ? __local_bh_enable_ip+0x12d/0x1c0 [ 492.767875][T14117] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 492.767886][T14117] ? do_raw_spin_unlock+0x122/0x240 [ 492.767902][T14117] ieee80211_queue_skb+0x1a31/0x21c0 [ 492.767931][T14117] ieee80211_tx+0x297/0x420 [ 492.767944][T14117] ? __pfx_ieee80211_tx+0x10/0x10 [ 492.767967][T14117] ? ieee80211_xmit+0x315/0x400 [ 492.767982][T14117] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 492.767997][T14117] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 492.768017][T14117] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 492.768034][T14117] ? ieee80211_tx_control_port+0x765/0xcc0 [ 492.768050][T14117] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 492.768064][T14117] ieee80211_tx_control_port+0xabd/0xcc0 [ 492.768086][T14117] nl80211_tx_control_port+0x610/0x980 [ 492.768109][T14117] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 492.768125][T14117] ? nl80211_pre_doit+0x4f1/0x930 [ 492.768143][T14117] genl_family_rcv_msg_doit+0x212/0x300 [ 492.768162][T14117] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.768183][T14117] ? bpf_lsm_capable+0x9/0x20 [ 492.768198][T14117] ? security_capable+0x7e/0x2e0 [ 492.768217][T14117] genl_rcv_msg+0x60e/0x790 [ 492.768235][T14117] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.768248][T14117] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 492.768261][T14117] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 492.768273][T14117] ? __pfx_nl80211_post_doit+0x10/0x10 [ 492.768295][T14117] netlink_rcv_skb+0x208/0x470 [ 492.768305][T14117] ? __lock_acquire+0xab9/0xd20 [ 492.768320][T14117] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.768335][T14117] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.768356][T14117] ? down_read+0x1ad/0x2e0 [ 492.768370][T14117] genl_rcv+0x28/0x40 [ 492.768388][T14117] netlink_unicast+0x82f/0x9e0 [ 492.768409][T14117] ? __pfx_netlink_unicast+0x10/0x10 [ 492.768426][T14117] ? netlink_sendmsg+0x642/0xb30 [ 492.768436][T14117] ? skb_put+0x11b/0x210 [ 492.768449][T14117] netlink_sendmsg+0x805/0xb30 [ 492.768466][T14117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.768479][T14117] ? aa_sock_msg_perm+0xf1/0x1d0 [ 492.768491][T14117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.768502][T14117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.768514][T14117] __sock_sendmsg+0x21c/0x270 [ 492.768533][T14117] ____sys_sendmsg+0x505/0x830 [ 492.768549][T14117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.768567][T14117] ? import_iovec+0x74/0xa0 [ 492.768583][T14117] ___sys_sendmsg+0x21f/0x2a0 [ 492.768598][T14117] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.768615][T14117] ? rcu_read_lock_any_held+0xb3/0x120 [ 492.768634][T14117] ? sb_end_write+0xe9/0x1c0 [ 492.768651][T14117] ? __pfx_vfs_write+0x10/0x10 [ 492.768670][T14117] __x64_sys_sendmsg+0x19b/0x260 [ 492.768685][T14117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.768703][T14117] ? __pfx_ksys_write+0x10/0x10 [ 492.768720][T14117] ? do_syscall_64+0xbe/0x3b0 [ 492.768734][T14117] do_syscall_64+0xfa/0x3b0 [ 492.768744][T14117] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.768755][T14117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.768765][T14117] ? clear_bhb_loop+0x60/0xb0 [ 492.768778][T14117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.768789][T14117] RIP: 0033:0x7fd5538a2519 [ 492.768800][T14117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 492.768810][T14117] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.768822][T14117] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 492.768830][T14117] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 492.768837][T14117] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 492.768844][T14117] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 492.768850][T14117] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000011 [ 492.768867][T14117] [ 493.315719][T14118] FAULT_INJECTION: forcing a failure. [ 493.315719][T14118] name failslab, interval 1, probability 0, space 0, times 0 [ 493.328376][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 493.328404][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.328418][T14118] Call Trace: [ 493.328426][T14118] [ 493.328435][T14118] dump_stack_lvl+0x189/0x250 [ 493.328462][T14118] ? __pfx____ratelimit+0x10/0x10 [ 493.328484][T14118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.328508][T14118] ? __pfx__printk+0x10/0x10 [ 493.328538][T14118] ? __lock_acquire+0xab9/0xd20 [ 493.328576][T14118] should_fail_ex+0x414/0x560 [ 493.328611][T14118] should_failslab+0xa8/0x100 [ 493.328642][T14118] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 493.328670][T14118] ? __alloc_skb+0x112/0x2d0 [ 493.328697][T14118] __alloc_skb+0x112/0x2d0 [ 493.328724][T14118] skb_copy+0x188/0x800 [ 493.328763][T14118] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 493.328806][T14118] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 493.328845][T14118] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 493.328873][T14118] mac80211_hwsim_tx+0x1855/0x25d0 [ 493.328915][T14118] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 493.328946][T14118] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 493.328969][T14118] ? __local_bh_enable_ip+0x12d/0x1c0 [ 493.328988][T14118] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 493.329010][T14118] ? do_raw_spin_unlock+0x122/0x240 [ 493.329041][T14118] ieee80211_queue_skb+0x1a31/0x21c0 [ 493.329104][T14118] ieee80211_tx+0x297/0x420 [ 493.329130][T14118] ? __pfx_ieee80211_tx+0x10/0x10 [ 493.329177][T14118] ? ieee80211_xmit+0x315/0x400 [ 493.329205][T14118] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 493.329234][T14118] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 493.329274][T14118] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 493.329306][T14118] ? ieee80211_tx_control_port+0x765/0xcc0 [ 493.329337][T14118] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 493.329364][T14118] ieee80211_tx_control_port+0xabd/0xcc0 [ 493.329408][T14118] nl80211_tx_control_port+0x610/0x980 [ 493.329449][T14118] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 493.329480][T14118] ? nl80211_pre_doit+0x4f1/0x930 [ 493.329515][T14118] genl_family_rcv_msg_doit+0x212/0x300 [ 493.329548][T14118] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.329590][T14118] ? bpf_lsm_capable+0x9/0x20 [ 493.329615][T14118] ? security_capable+0x7e/0x2e0 [ 493.329653][T14118] genl_rcv_msg+0x60e/0x790 [ 493.329687][T14118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.329712][T14118] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 493.329734][T14118] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 493.329757][T14118] ? __pfx_nl80211_post_doit+0x10/0x10 [ 493.329797][T14118] netlink_rcv_skb+0x208/0x470 [ 493.329816][T14118] ? __lock_acquire+0xab9/0xd20 [ 493.329843][T14118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.329870][T14118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.329911][T14118] ? down_read+0x1ad/0x2e0 [ 493.329937][T14118] genl_rcv+0x28/0x40 [ 493.329960][T14118] netlink_unicast+0x82f/0x9e0 [ 493.329999][T14118] ? __pfx_netlink_unicast+0x10/0x10 [ 493.330030][T14118] ? netlink_sendmsg+0x642/0xb30 [ 493.330048][T14118] ? skb_put+0x11b/0x210 [ 493.330075][T14118] netlink_sendmsg+0x805/0xb30 [ 493.330112][T14118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.330138][T14118] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.330161][T14118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.330182][T14118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.330205][T14118] __sock_sendmsg+0x21c/0x270 [ 493.330238][T14118] ____sys_sendmsg+0x505/0x830 [ 493.330269][T14118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.330305][T14118] ? import_iovec+0x74/0xa0 [ 493.330334][T14118] ___sys_sendmsg+0x21f/0x2a0 [ 493.330362][T14118] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.330395][T14118] ? rcu_read_lock_any_held+0xb3/0x120 [ 493.330432][T14118] ? sb_end_write+0xe9/0x1c0 [ 493.330466][T14118] ? __pfx_vfs_write+0x10/0x10 [ 493.330503][T14118] __x64_sys_sendmsg+0x19b/0x260 [ 493.330532][T14118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.330568][T14118] ? __pfx_ksys_write+0x10/0x10 [ 493.330600][T14118] ? do_syscall_64+0xbe/0x3b0 [ 493.330626][T14118] do_syscall_64+0xfa/0x3b0 [ 493.330646][T14118] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.330666][T14118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.330686][T14118] ? clear_bhb_loop+0x60/0xb0 [ 493.330710][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.330730][T14118] RIP: 0033:0x7fd5538a2519 [ 493.330748][T14118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 493.330766][T14118] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.330788][T14118] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 493.330804][T14118] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 493.330816][T14118] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 493.330829][T14118] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 493.330841][T14118] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000008 [ 493.330873][T14118] [ 493.880805][T14120] FAULT_INJECTION: forcing a failure. [ 493.880805][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 493.893461][T14120] CPU: 1 UID: 0 PID: 14120 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 493.893477][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.893484][T14120] Call Trace: [ 493.893490][T14120] [ 493.893495][T14120] dump_stack_lvl+0x189/0x250 [ 493.893512][T14120] ? __pfx____ratelimit+0x10/0x10 [ 493.893524][T14120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.893537][T14120] ? __pfx__printk+0x10/0x10 [ 493.893553][T14120] ? __lock_acquire+0xab9/0xd20 [ 493.893573][T14120] should_fail_ex+0x414/0x560 [ 493.893592][T14120] should_failslab+0xa8/0x100 [ 493.893610][T14120] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 493.893625][T14120] ? __alloc_skb+0x112/0x2d0 [ 493.893639][T14120] __alloc_skb+0x112/0x2d0 [ 493.893653][T14120] skb_copy+0x188/0x800 [ 493.893673][T14120] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 493.893697][T14120] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 493.893716][T14120] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 493.893731][T14120] mac80211_hwsim_tx+0x1855/0x25d0 [ 493.893752][T14120] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 493.893770][T14120] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 493.893781][T14120] ? __local_bh_enable_ip+0x12d/0x1c0 [ 493.893792][T14120] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 493.893803][T14120] ? do_raw_spin_unlock+0x122/0x240 [ 493.893836][T14120] ieee80211_queue_skb+0x1a31/0x21c0 [ 493.893866][T14120] ieee80211_tx+0x297/0x420 [ 493.893879][T14120] ? __pfx_ieee80211_tx+0x10/0x10 [ 493.893902][T14120] ? ieee80211_xmit+0x315/0x400 [ 493.893916][T14120] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 493.893931][T14120] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 493.893951][T14120] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 493.893968][T14120] ? ieee80211_tx_control_port+0x765/0xcc0 [ 493.893984][T14120] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 493.893999][T14120] ieee80211_tx_control_port+0xabd/0xcc0 [ 493.894021][T14120] nl80211_tx_control_port+0x610/0x980 [ 493.894045][T14120] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 493.894062][T14120] ? nl80211_pre_doit+0x4f1/0x930 [ 493.894079][T14120] genl_family_rcv_msg_doit+0x212/0x300 [ 493.894099][T14120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.894120][T14120] ? bpf_lsm_capable+0x9/0x20 [ 493.894135][T14120] ? security_capable+0x7e/0x2e0 [ 493.894155][T14120] genl_rcv_msg+0x60e/0x790 [ 493.894173][T14120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.894186][T14120] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 493.894199][T14120] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 493.894212][T14120] ? __pfx_nl80211_post_doit+0x10/0x10 [ 493.894233][T14120] netlink_rcv_skb+0x208/0x470 [ 493.894243][T14120] ? __lock_acquire+0xab9/0xd20 [ 493.894258][T14120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.894273][T14120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.894300][T14120] ? down_read+0x1ad/0x2e0 [ 493.894314][T14120] genl_rcv+0x28/0x40 [ 493.894327][T14120] netlink_unicast+0x82f/0x9e0 [ 493.894348][T14120] ? __pfx_netlink_unicast+0x10/0x10 [ 493.894365][T14120] ? netlink_sendmsg+0x642/0xb30 [ 493.894375][T14120] ? skb_put+0x11b/0x210 [ 493.894389][T14120] netlink_sendmsg+0x805/0xb30 [ 493.894406][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.894419][T14120] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.894430][T14120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.894442][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.894454][T14120] __sock_sendmsg+0x21c/0x270 [ 493.894472][T14120] ____sys_sendmsg+0x505/0x830 [ 493.894489][T14120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.894507][T14120] ? import_iovec+0x74/0xa0 [ 493.894524][T14120] ___sys_sendmsg+0x21f/0x2a0 [ 493.894539][T14120] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.894556][T14120] ? rcu_read_lock_any_held+0xb3/0x120 [ 493.894574][T14120] ? sb_end_write+0xe9/0x1c0 [ 493.894592][T14120] ? __pfx_vfs_write+0x10/0x10 [ 493.894611][T14120] __x64_sys_sendmsg+0x19b/0x260 [ 493.894626][T14120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.894644][T14120] ? __pfx_ksys_write+0x10/0x10 [ 493.894661][T14120] ? do_syscall_64+0xbe/0x3b0 [ 493.894675][T14120] do_syscall_64+0xfa/0x3b0 [ 493.894685][T14120] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.894695][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.894706][T14120] ? clear_bhb_loop+0x60/0xb0 [ 493.894718][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.894729][T14120] RIP: 0033:0x7fd5538a2519 [ 493.894739][T14120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 493.894749][T14120] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.894761][T14120] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 493.894768][T14120] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 493.894775][T14120] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 493.894782][T14120] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 493.894789][T14120] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000009 [ 493.894805][T14120] [ 493.895626][T14119] FAULT_INJECTION: forcing a failure. [ 493.895626][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 494.396948][T14119] CPU: 1 UID: 0 PID: 14119 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 494.396970][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.396981][T14119] Call Trace: [ 494.396990][T14119] [ 494.396998][T14119] dump_stack_lvl+0x189/0x250 [ 494.397023][T14119] ? __pfx____ratelimit+0x10/0x10 [ 494.397039][T14119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.397057][T14119] ? __pfx__printk+0x10/0x10 [ 494.397081][T14119] ? __lock_acquire+0xab9/0xd20 [ 494.397110][T14119] should_fail_ex+0x414/0x560 [ 494.397137][T14119] should_failslab+0xa8/0x100 [ 494.397160][T14119] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.397183][T14119] ? __alloc_skb+0x112/0x2d0 [ 494.397203][T14119] __alloc_skb+0x112/0x2d0 [ 494.397223][T14119] skb_copy+0x188/0x800 [ 494.397260][T14119] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 494.397284][T14119] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 494.397304][T14119] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 494.397319][T14119] mac80211_hwsim_tx+0x1855/0x25d0 [ 494.397340][T14119] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 494.397358][T14119] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 494.397370][T14119] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.397381][T14119] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 494.397392][T14119] ? do_raw_spin_unlock+0x122/0x240 [ 494.397408][T14119] ieee80211_queue_skb+0x1a31/0x21c0 [ 494.397437][T14119] ieee80211_tx+0x297/0x420 [ 494.397450][T14119] ? __pfx_ieee80211_tx+0x10/0x10 [ 494.397473][T14119] ? ieee80211_xmit+0x315/0x400 [ 494.397487][T14119] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 494.397502][T14119] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 494.397523][T14119] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 494.397540][T14119] ? ieee80211_tx_control_port+0x765/0xcc0 [ 494.397556][T14119] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 494.397571][T14119] ieee80211_tx_control_port+0xabd/0xcc0 [ 494.397593][T14119] nl80211_tx_control_port+0x610/0x980 [ 494.397615][T14119] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 494.397632][T14119] ? nl80211_pre_doit+0x4f1/0x930 [ 494.397650][T14119] genl_family_rcv_msg_doit+0x212/0x300 [ 494.397669][T14119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.397691][T14119] ? bpf_lsm_capable+0x9/0x20 [ 494.397705][T14119] ? security_capable+0x7e/0x2e0 [ 494.397725][T14119] genl_rcv_msg+0x60e/0x790 [ 494.397743][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.397756][T14119] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 494.397769][T14119] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 494.397782][T14119] ? __pfx_nl80211_post_doit+0x10/0x10 [ 494.397803][T14119] netlink_rcv_skb+0x208/0x470 [ 494.397814][T14119] ? __lock_acquire+0xab9/0xd20 [ 494.397829][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.397844][T14119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.397865][T14119] ? down_read+0x1ad/0x2e0 [ 494.397879][T14119] genl_rcv+0x28/0x40 [ 494.397892][T14119] netlink_unicast+0x82f/0x9e0 [ 494.397913][T14119] ? __pfx_netlink_unicast+0x10/0x10 [ 494.397931][T14119] ? netlink_sendmsg+0x642/0xb30 [ 494.397941][T14119] ? skb_put+0x11b/0x210 [ 494.397954][T14119] netlink_sendmsg+0x805/0xb30 [ 494.397971][T14119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.397984][T14119] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.397996][T14119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.398011][T14119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.398023][T14119] __sock_sendmsg+0x21c/0x270 [ 494.398041][T14119] ____sys_sendmsg+0x505/0x830 [ 494.398057][T14119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.398076][T14119] ? import_iovec+0x74/0xa0 [ 494.398092][T14119] ___sys_sendmsg+0x21f/0x2a0 [ 494.398107][T14119] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.398124][T14119] ? rcu_read_lock_any_held+0xb3/0x120 [ 494.398143][T14119] ? sb_end_write+0xe9/0x1c0 [ 494.398160][T14119] ? __pfx_vfs_write+0x10/0x10 [ 494.398179][T14119] __x64_sys_sendmsg+0x19b/0x260 [ 494.398193][T14119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.398212][T14119] ? __pfx_ksys_write+0x10/0x10 [ 494.398228][T14119] ? do_syscall_64+0xbe/0x3b0 [ 494.398242][T14119] do_syscall_64+0xfa/0x3b0 [ 494.398258][T14119] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.398268][T14119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.398279][T14119] ? clear_bhb_loop+0x60/0xb0 [ 494.398291][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.398302][T14119] RIP: 0033:0x7fd5538a2519 [ 494.398313][T14119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.398323][T14119] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.398335][T14119] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 494.398343][T14119] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 494.398350][T14119] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 494.398357][T14119] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 494.398364][T14119] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000012 [ 494.398380][T14119] [ 494.399225][T14121] FAULT_INJECTION: forcing a failure. [ 494.399225][T14121] name failslab, interval 1, probability 0, space 0, times 0 [ 494.900596][T14121] CPU: 1 UID: 0 PID: 14121 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 494.900613][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.900620][T14121] Call Trace: [ 494.900627][T14121] [ 494.900634][T14121] dump_stack_lvl+0x189/0x250 [ 494.900652][T14121] ? __pfx____ratelimit+0x10/0x10 [ 494.900664][T14121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.900676][T14121] ? __pfx__printk+0x10/0x10 [ 494.900692][T14121] ? __lock_acquire+0xab9/0xd20 [ 494.900713][T14121] should_fail_ex+0x414/0x560 [ 494.900732][T14121] should_failslab+0xa8/0x100 [ 494.900749][T14121] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.900765][T14121] ? __alloc_skb+0x112/0x2d0 [ 494.900779][T14121] __alloc_skb+0x112/0x2d0 [ 494.900794][T14121] skb_copy+0x188/0x800 [ 494.900814][T14121] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 494.900837][T14121] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 494.900856][T14121] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 494.900871][T14121] mac80211_hwsim_tx+0x1855/0x25d0 [ 494.900893][T14121] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 494.900910][T14121] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 494.900922][T14121] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.900933][T14121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 494.900945][T14121] ? do_raw_spin_unlock+0x122/0x240 [ 494.900966][T14121] ieee80211_queue_skb+0x1a31/0x21c0 [ 494.900995][T14121] ieee80211_tx+0x297/0x420 [ 494.901008][T14121] ? __pfx_ieee80211_tx+0x10/0x10 [ 494.901032][T14121] ? ieee80211_xmit+0x315/0x400 [ 494.901046][T14121] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 494.901061][T14121] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 494.901081][T14121] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 494.901101][T14121] ? ieee80211_tx_control_port+0x765/0xcc0 [ 494.901118][T14121] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 494.901133][T14121] ieee80211_tx_control_port+0xabd/0xcc0 [ 494.901155][T14121] nl80211_tx_control_port+0x610/0x980 [ 494.901177][T14121] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 494.901193][T14121] ? nl80211_pre_doit+0x4f1/0x930 [ 494.901211][T14121] genl_family_rcv_msg_doit+0x212/0x300 [ 494.901230][T14121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.901252][T14121] ? bpf_lsm_capable+0x9/0x20 [ 494.901266][T14121] ? security_capable+0x7e/0x2e0 [ 494.901286][T14121] genl_rcv_msg+0x60e/0x790 [ 494.901304][T14121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.901317][T14121] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 494.901330][T14121] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 494.901343][T14121] ? __pfx_nl80211_post_doit+0x10/0x10 [ 494.901364][T14121] netlink_rcv_skb+0x208/0x470 [ 494.901375][T14121] ? __lock_acquire+0xab9/0xd20 [ 494.901390][T14121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.901405][T14121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.901426][T14121] ? down_read+0x1ad/0x2e0 [ 494.901441][T14121] genl_rcv+0x28/0x40 [ 494.901454][T14121] netlink_unicast+0x82f/0x9e0 [ 494.901476][T14121] ? __pfx_netlink_unicast+0x10/0x10 [ 494.901493][T14121] ? netlink_sendmsg+0x642/0xb30 [ 494.901503][T14121] ? skb_put+0x11b/0x210 [ 494.901517][T14121] netlink_sendmsg+0x805/0xb30 [ 494.901534][T14121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.901547][T14121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.901559][T14121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.901571][T14121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.901583][T14121] __sock_sendmsg+0x21c/0x270 [ 494.901601][T14121] ____sys_sendmsg+0x505/0x830 [ 494.901618][T14121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.901636][T14121] ? import_iovec+0x74/0xa0 [ 494.901653][T14121] ___sys_sendmsg+0x21f/0x2a0 [ 494.901668][T14121] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.901685][T14121] ? rcu_read_lock_any_held+0xb3/0x120 [ 494.901704][T14121] ? sb_end_write+0xe9/0x1c0 [ 494.901721][T14121] ? __pfx_vfs_write+0x10/0x10 [ 494.901740][T14121] __x64_sys_sendmsg+0x19b/0x260 [ 494.901755][T14121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.901773][T14121] ? __pfx_ksys_write+0x10/0x10 [ 494.901790][T14121] ? do_syscall_64+0xbe/0x3b0 [ 494.901804][T14121] do_syscall_64+0xfa/0x3b0 [ 494.901815][T14121] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.901825][T14121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.901836][T14121] ? clear_bhb_loop+0x60/0xb0 [ 494.901848][T14121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.901859][T14121] RIP: 0033:0x7fd5538a2519 [ 494.901870][T14121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.901880][T14121] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.901892][T14121] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 494.901900][T14121] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 494.901906][T14121] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 494.901913][T14121] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 494.901920][T14121] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000012 [ 494.901937][T14121] [ 495.471934][T14126] FAULT_INJECTION: forcing a failure. [ 495.471934][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 495.484658][T14126] CPU: 0 UID: 0 PID: 14126 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 495.484684][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.484697][T14126] Call Trace: [ 495.484706][T14126] [ 495.484715][T14126] dump_stack_lvl+0x189/0x250 [ 495.484744][T14126] ? __pfx____ratelimit+0x10/0x10 [ 495.484766][T14126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.484789][T14126] ? __pfx__printk+0x10/0x10 [ 495.484819][T14126] ? __lock_acquire+0xab9/0xd20 [ 495.484857][T14126] should_fail_ex+0x414/0x560 [ 495.484892][T14126] should_failslab+0xa8/0x100 [ 495.484923][T14126] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 495.484953][T14126] ? __alloc_skb+0x112/0x2d0 [ 495.484979][T14126] __alloc_skb+0x112/0x2d0 [ 495.485004][T14126] skb_copy+0x188/0x800 [ 495.485043][T14126] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 495.485087][T14126] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 495.485134][T14126] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 495.485164][T14126] mac80211_hwsim_tx+0x1855/0x25d0 [ 495.485204][T14126] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 495.485235][T14126] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 495.485257][T14126] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.485277][T14126] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 495.485299][T14126] ? do_raw_spin_unlock+0x122/0x240 [ 495.485327][T14126] ieee80211_queue_skb+0x1a31/0x21c0 [ 495.485380][T14126] ieee80211_tx+0x297/0x420 [ 495.485404][T14126] ? __pfx_ieee80211_tx+0x10/0x10 [ 495.485448][T14126] ? ieee80211_xmit+0x315/0x400 [ 495.485476][T14126] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 495.485503][T14126] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 495.485544][T14126] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 495.485578][T14126] ? ieee80211_tx_control_port+0x765/0xcc0 [ 495.485610][T14126] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 495.485637][T14126] ieee80211_tx_control_port+0xabd/0xcc0 [ 495.485680][T14126] nl80211_tx_control_port+0x610/0x980 [ 495.485721][T14126] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 495.485753][T14126] ? nl80211_pre_doit+0x4f1/0x930 [ 495.485789][T14126] genl_family_rcv_msg_doit+0x212/0x300 [ 495.485823][T14126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 495.485864][T14126] ? bpf_lsm_capable+0x9/0x20 [ 495.485888][T14126] ? security_capable+0x7e/0x2e0 [ 495.485925][T14126] genl_rcv_msg+0x60e/0x790 [ 495.485958][T14126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.485983][T14126] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 495.486008][T14126] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 495.486032][T14126] ? __pfx_nl80211_post_doit+0x10/0x10 [ 495.486075][T14126] netlink_rcv_skb+0x208/0x470 [ 495.486095][T14126] ? __lock_acquire+0xab9/0xd20 [ 495.486131][T14126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.486158][T14126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.486201][T14126] ? down_read+0x1ad/0x2e0 [ 495.486227][T14126] genl_rcv+0x28/0x40 [ 495.486252][T14126] netlink_unicast+0x82f/0x9e0 [ 495.486293][T14126] ? __pfx_netlink_unicast+0x10/0x10 [ 495.486324][T14126] ? netlink_sendmsg+0x642/0xb30 [ 495.486343][T14126] ? skb_put+0x11b/0x210 [ 495.486370][T14126] netlink_sendmsg+0x805/0xb30 [ 495.486403][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.486427][T14126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.486447][T14126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.486468][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.486491][T14126] __sock_sendmsg+0x21c/0x270 [ 495.486523][T14126] ____sys_sendmsg+0x505/0x830 [ 495.486551][T14126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.486584][T14126] ? import_iovec+0x74/0xa0 [ 495.486614][T14126] ___sys_sendmsg+0x21f/0x2a0 [ 495.486643][T14126] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.486676][T14126] ? rcu_read_lock_any_held+0xb3/0x120 [ 495.486714][T14126] ? sb_end_write+0xe9/0x1c0 [ 495.486749][T14126] ? __pfx_vfs_write+0x10/0x10 [ 495.486784][T14126] __x64_sys_sendmsg+0x19b/0x260 [ 495.486813][T14126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.486849][T14126] ? __pfx_ksys_write+0x10/0x10 [ 495.486879][T14126] ? do_syscall_64+0xbe/0x3b0 [ 495.486907][T14126] do_syscall_64+0xfa/0x3b0 [ 495.486927][T14126] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.486947][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.486968][T14126] ? clear_bhb_loop+0x60/0xb0 [ 495.486992][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.487012][T14126] RIP: 0033:0x7fd5538a2519 [ 495.487030][T14126] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.487048][T14126] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.487069][T14126] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 495.487085][T14126] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 495.487097][T14126] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 495.487110][T14126] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 495.487129][T14126] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000013 [ 495.487163][T14126] [ 496.042364][T14130] FAULT_INJECTION: forcing a failure. [ 496.042364][T14130] name failslab, interval 1, probability 0, space 0, times 0 [ 496.055029][T14130] CPU: 1 UID: 0 PID: 14130 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 496.055046][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.055053][T14130] Call Trace: [ 496.055059][T14130] [ 496.055064][T14130] dump_stack_lvl+0x189/0x250 [ 496.055082][T14130] ? __pfx____ratelimit+0x10/0x10 [ 496.055094][T14130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.055106][T14130] ? __pfx__printk+0x10/0x10 [ 496.055122][T14130] ? __lock_acquire+0xab9/0xd20 [ 496.055143][T14130] should_fail_ex+0x414/0x560 [ 496.055163][T14130] should_failslab+0xa8/0x100 [ 496.055180][T14130] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 496.055196][T14130] ? __alloc_skb+0x112/0x2d0 [ 496.055211][T14130] __alloc_skb+0x112/0x2d0 [ 496.055225][T14130] skb_copy+0x188/0x800 [ 496.055246][T14130] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 496.055268][T14130] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 496.055287][T14130] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 496.055302][T14130] mac80211_hwsim_tx+0x1855/0x25d0 [ 496.055324][T14130] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 496.055342][T14130] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 496.055353][T14130] ? __local_bh_enable_ip+0x12d/0x1c0 [ 496.055365][T14130] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 496.055376][T14130] ? do_raw_spin_unlock+0x122/0x240 [ 496.055392][T14130] ieee80211_queue_skb+0x1a31/0x21c0 [ 496.055421][T14130] ieee80211_tx+0x297/0x420 [ 496.055434][T14130] ? __pfx_ieee80211_tx+0x10/0x10 [ 496.055458][T14130] ? ieee80211_xmit+0x315/0x400 [ 496.055472][T14130] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 496.055487][T14130] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 496.055507][T14130] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 496.055524][T14130] ? ieee80211_tx_control_port+0x765/0xcc0 [ 496.055540][T14130] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 496.055555][T14130] ieee80211_tx_control_port+0xabd/0xcc0 [ 496.055577][T14130] nl80211_tx_control_port+0x610/0x980 [ 496.055599][T14130] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 496.055616][T14130] ? nl80211_pre_doit+0x4f1/0x930 [ 496.055633][T14130] genl_family_rcv_msg_doit+0x212/0x300 [ 496.055652][T14130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.055674][T14130] ? bpf_lsm_capable+0x9/0x20 [ 496.055688][T14130] ? security_capable+0x7e/0x2e0 [ 496.055708][T14130] genl_rcv_msg+0x60e/0x790 [ 496.055726][T14130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.055739][T14130] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 496.055752][T14130] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 496.055764][T14130] ? __pfx_nl80211_post_doit+0x10/0x10 [ 496.055786][T14130] netlink_rcv_skb+0x208/0x470 [ 496.055796][T14130] ? __lock_acquire+0xab9/0xd20 [ 496.055812][T14130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.055826][T14130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.055847][T14130] ? down_read+0x1ad/0x2e0 [ 496.055862][T14130] genl_rcv+0x28/0x40 [ 496.055880][T14130] netlink_unicast+0x82f/0x9e0 [ 496.055901][T14130] ? __pfx_netlink_unicast+0x10/0x10 [ 496.055918][T14130] ? netlink_sendmsg+0x642/0xb30 [ 496.055928][T14130] ? skb_put+0x11b/0x210 [ 496.055942][T14130] netlink_sendmsg+0x805/0xb30 [ 496.055959][T14130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.055972][T14130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.055984][T14130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.055996][T14130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.056007][T14130] __sock_sendmsg+0x21c/0x270 [ 496.056026][T14130] ____sys_sendmsg+0x505/0x830 [ 496.056043][T14130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.056061][T14130] ? import_iovec+0x74/0xa0 [ 496.056077][T14130] ___sys_sendmsg+0x21f/0x2a0 [ 496.056092][T14130] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.056109][T14130] ? rcu_read_lock_any_held+0xb3/0x120 [ 496.056128][T14130] ? sb_end_write+0xe9/0x1c0 [ 496.056146][T14130] ? __pfx_vfs_write+0x10/0x10 [ 496.056165][T14130] __x64_sys_sendmsg+0x19b/0x260 [ 496.056180][T14130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.056199][T14130] ? __pfx_ksys_write+0x10/0x10 [ 496.056215][T14130] ? do_syscall_64+0xbe/0x3b0 [ 496.056229][T14130] do_syscall_64+0xfa/0x3b0 [ 496.056239][T14130] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.056250][T14130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.056260][T14130] ? clear_bhb_loop+0x60/0xb0 [ 496.056273][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.056283][T14130] RIP: 0033:0x7fd5538a2519 [ 496.056294][T14130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.056304][T14130] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.056316][T14130] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 496.056324][T14130] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 496.056331][T14130] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 496.056338][T14130] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 496.056344][T14130] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000013 [ 496.056361][T14130] [ 496.604695][T14133] FAULT_INJECTION: forcing a failure. [ 496.604695][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 496.617386][T14133] CPU: 0 UID: 0 PID: 14133 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 496.617413][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.617426][T14133] Call Trace: [ 496.617435][T14133] [ 496.617444][T14133] dump_stack_lvl+0x189/0x250 [ 496.617473][T14133] ? __pfx____ratelimit+0x10/0x10 [ 496.617494][T14133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.617519][T14133] ? __pfx__printk+0x10/0x10 [ 496.617548][T14133] ? __lock_acquire+0xab9/0xd20 [ 496.617587][T14133] should_fail_ex+0x414/0x560 [ 496.617622][T14133] should_failslab+0xa8/0x100 [ 496.617654][T14133] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 496.617681][T14133] ? __alloc_skb+0x112/0x2d0 [ 496.617709][T14133] __alloc_skb+0x112/0x2d0 [ 496.617735][T14133] skb_copy+0x188/0x800 [ 496.617773][T14133] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 496.617814][T14133] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 496.617848][T14133] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 496.617877][T14133] mac80211_hwsim_tx+0x1855/0x25d0 [ 496.617917][T14133] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 496.617949][T14133] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 496.617970][T14133] ? __local_bh_enable_ip+0x12d/0x1c0 [ 496.617989][T14133] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 496.618009][T14133] ? do_raw_spin_unlock+0x122/0x240 [ 496.618038][T14133] ieee80211_queue_skb+0x1a31/0x21c0 [ 496.618099][T14133] ieee80211_tx+0x297/0x420 [ 496.618123][T14133] ? __pfx_ieee80211_tx+0x10/0x10 [ 496.618168][T14133] ? ieee80211_xmit+0x315/0x400 [ 496.618195][T14133] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 496.618222][T14133] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 496.618261][T14133] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 496.618288][T14133] ? ieee80211_tx_control_port+0x765/0xcc0 [ 496.618315][T14133] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 496.618338][T14133] ieee80211_tx_control_port+0xabd/0xcc0 [ 496.618374][T14133] nl80211_tx_control_port+0x610/0x980 [ 496.618413][T14133] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 496.618444][T14133] ? nl80211_pre_doit+0x4f1/0x930 [ 496.618475][T14133] genl_family_rcv_msg_doit+0x212/0x300 [ 496.618509][T14133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.618548][T14133] ? bpf_lsm_capable+0x9/0x20 [ 496.618572][T14133] ? security_capable+0x7e/0x2e0 [ 496.618607][T14133] genl_rcv_msg+0x60e/0x790 [ 496.618638][T14133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.618661][T14133] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 496.618684][T14133] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 496.618705][T14133] ? __pfx_nl80211_post_doit+0x10/0x10 [ 496.618743][T14133] netlink_rcv_skb+0x208/0x470 [ 496.618771][T14133] ? __lock_acquire+0xab9/0xd20 [ 496.618800][T14133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.618827][T14133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.618870][T14133] ? down_read+0x1ad/0x2e0 [ 496.618896][T14133] genl_rcv+0x28/0x40 [ 496.618920][T14133] netlink_unicast+0x82f/0x9e0 [ 496.618960][T14133] ? __pfx_netlink_unicast+0x10/0x10 [ 496.618993][T14133] ? netlink_sendmsg+0x642/0xb30 [ 496.619011][T14133] ? skb_put+0x11b/0x210 [ 496.619036][T14133] netlink_sendmsg+0x805/0xb30 [ 496.619065][T14133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.619095][T14133] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.619117][T14133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.619137][T14133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.619158][T14133] __sock_sendmsg+0x21c/0x270 [ 496.619190][T14133] ____sys_sendmsg+0x505/0x830 [ 496.619220][T14133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.619254][T14133] ? import_iovec+0x74/0xa0 [ 496.619283][T14133] ___sys_sendmsg+0x21f/0x2a0 [ 496.619311][T14133] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.619342][T14133] ? rcu_read_lock_any_held+0xb3/0x120 [ 496.619377][T14133] ? sb_end_write+0xe9/0x1c0 [ 496.619408][T14133] ? __pfx_vfs_write+0x10/0x10 [ 496.619445][T14133] __x64_sys_sendmsg+0x19b/0x260 [ 496.619471][T14133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.619503][T14133] ? __pfx_ksys_write+0x10/0x10 [ 496.619533][T14133] ? do_syscall_64+0xbe/0x3b0 [ 496.619559][T14133] do_syscall_64+0xfa/0x3b0 [ 496.619579][T14133] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.619598][T14133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.619618][T14133] ? clear_bhb_loop+0x60/0xb0 [ 496.619641][T14133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.619659][T14133] RIP: 0033:0x7fd5538a2519 [ 496.619676][T14133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.619694][T14133] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.619713][T14133] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 496.619727][T14133] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 496.619741][T14133] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 496.619754][T14133] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 496.619767][T14133] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000014 [ 496.619797][T14133] [ 497.172782][T14134] FAULT_INJECTION: forcing a failure. [ 497.172782][T14134] name failslab, interval 1, probability 0, space 0, times 0 [ 497.185422][T14134] CPU: 1 UID: 0 PID: 14134 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 497.185437][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.185445][T14134] Call Trace: [ 497.185450][T14134] [ 497.185455][T14134] dump_stack_lvl+0x189/0x250 [ 497.185473][T14134] ? __pfx____ratelimit+0x10/0x10 [ 497.185484][T14134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.185497][T14134] ? __pfx__printk+0x10/0x10 [ 497.185514][T14134] ? __lock_acquire+0xab9/0xd20 [ 497.185534][T14134] should_fail_ex+0x414/0x560 [ 497.185553][T14134] should_failslab+0xa8/0x100 [ 497.185571][T14134] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 497.185586][T14134] ? __alloc_skb+0x112/0x2d0 [ 497.185601][T14134] __alloc_skb+0x112/0x2d0 [ 497.185614][T14134] skb_copy+0x188/0x800 [ 497.185634][T14134] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 497.185657][T14134] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 497.185677][T14134] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 497.185691][T14134] mac80211_hwsim_tx+0x1855/0x25d0 [ 497.185717][T14134] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 497.185735][T14134] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 497.185747][T14134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 497.185758][T14134] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 497.185770][T14134] ? do_raw_spin_unlock+0x122/0x240 [ 497.185786][T14134] ieee80211_queue_skb+0x1a31/0x21c0 [ 497.185814][T14134] ieee80211_tx+0x297/0x420 [ 497.185828][T14134] ? __pfx_ieee80211_tx+0x10/0x10 [ 497.185851][T14134] ? ieee80211_xmit+0x315/0x400 [ 497.185865][T14134] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 497.185880][T14134] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 497.185900][T14134] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 497.185917][T14134] ? ieee80211_tx_control_port+0x765/0xcc0 [ 497.185933][T14134] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 497.185948][T14134] ieee80211_tx_control_port+0xabd/0xcc0 [ 497.185975][T14134] nl80211_tx_control_port+0x610/0x980 [ 497.185997][T14134] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 497.186013][T14134] ? nl80211_pre_doit+0x4f1/0x930 [ 497.186031][T14134] genl_family_rcv_msg_doit+0x212/0x300 [ 497.186050][T14134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.186071][T14134] ? bpf_lsm_capable+0x9/0x20 [ 497.186086][T14134] ? security_capable+0x7e/0x2e0 [ 497.186106][T14134] genl_rcv_msg+0x60e/0x790 [ 497.186124][T14134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.186137][T14134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.186150][T14134] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 497.186163][T14134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.186184][T14134] netlink_rcv_skb+0x208/0x470 [ 497.186195][T14134] ? __lock_acquire+0xab9/0xd20 [ 497.186210][T14134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.186225][T14134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.186247][T14134] ? down_read+0x1ad/0x2e0 [ 497.186261][T14134] genl_rcv+0x28/0x40 [ 497.186274][T14134] netlink_unicast+0x82f/0x9e0 [ 497.186295][T14134] ? __pfx_netlink_unicast+0x10/0x10 [ 497.186312][T14134] ? netlink_sendmsg+0x642/0xb30 [ 497.186326][T14134] ? skb_put+0x11b/0x210 [ 497.186340][T14134] netlink_sendmsg+0x805/0xb30 [ 497.186356][T14134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.186370][T14134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.186387][T14134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.186406][T14134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.186426][T14134] __sock_sendmsg+0x21c/0x270 [ 497.186453][T14134] ____sys_sendmsg+0x505/0x830 [ 497.186477][T14134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.186504][T14134] ? import_iovec+0x74/0xa0 [ 497.186526][T14134] ___sys_sendmsg+0x21f/0x2a0 [ 497.186547][T14134] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.186571][T14134] ? rcu_read_lock_any_held+0xb3/0x120 [ 497.186599][T14134] ? sb_end_write+0xe9/0x1c0 [ 497.186624][T14134] ? __pfx_vfs_write+0x10/0x10 [ 497.186655][T14134] __x64_sys_sendmsg+0x19b/0x260 [ 497.186677][T14134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.186703][T14134] ? __pfx_ksys_write+0x10/0x10 [ 497.186728][T14134] ? do_syscall_64+0xbe/0x3b0 [ 497.186748][T14134] do_syscall_64+0xfa/0x3b0 [ 497.186763][T14134] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.186778][T14134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.186793][T14134] ? clear_bhb_loop+0x60/0xb0 [ 497.186814][T14134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.186829][T14134] RIP: 0033:0x7fd5538a2519 [ 497.186843][T14134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.186857][T14134] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.186873][T14134] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 497.186885][T14134] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 497.186894][T14134] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 497.186904][T14134] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 497.186913][T14134] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000014 [ 497.186936][T14134] [ 497.675180][T14139] FAULT_INJECTION: forcing a failure. [ 497.675180][T14139] name failslab, interval 1, probability 0, space 0, times 0 [ 497.687892][T14139] CPU: 0 UID: 0 PID: 14139 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 497.687908][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.687916][T14139] Call Trace: [ 497.687922][T14139] [ 497.687927][T14139] dump_stack_lvl+0x189/0x250 [ 497.687945][T14139] ? __pfx____ratelimit+0x10/0x10 [ 497.687957][T14139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.687970][T14139] ? __pfx__printk+0x10/0x10 [ 497.687992][T14139] ? rcu_is_watching+0x15/0xb0 [ 497.688005][T14139] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 497.688020][T14139] should_fail_ex+0x414/0x560 [ 497.688040][T14139] should_failslab+0xa8/0x100 [ 497.688057][T14139] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 497.688073][T14139] ? __alloc_skb+0x112/0x2d0 [ 497.688088][T14139] __alloc_skb+0x112/0x2d0 [ 497.688101][T14139] skb_copy+0x188/0x800 [ 497.688122][T14139] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 497.688145][T14139] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 497.688164][T14139] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 497.688179][T14139] mac80211_hwsim_tx+0x1855/0x25d0 [ 497.688200][T14139] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 497.688218][T14139] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 497.688230][T14139] ? __local_bh_enable_ip+0x12d/0x1c0 [ 497.688241][T14139] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 497.688253][T14139] ? do_raw_spin_unlock+0x122/0x240 [ 497.688269][T14139] ieee80211_queue_skb+0x1a31/0x21c0 [ 497.688298][T14139] ieee80211_tx+0x297/0x420 [ 497.688311][T14139] ? __pfx_ieee80211_tx+0x10/0x10 [ 497.688335][T14139] ? ieee80211_xmit+0x315/0x400 [ 497.688349][T14139] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 497.688363][T14139] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 497.688384][T14139] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 497.688401][T14139] ? ieee80211_tx_control_port+0x765/0xcc0 [ 497.688417][T14139] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 497.688432][T14139] ieee80211_tx_control_port+0xabd/0xcc0 [ 497.688454][T14139] nl80211_tx_control_port+0x610/0x980 [ 497.688475][T14139] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 497.688491][T14139] ? nl80211_pre_doit+0x4f1/0x930 [ 497.688509][T14139] genl_family_rcv_msg_doit+0x212/0x300 [ 497.688528][T14139] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.688549][T14139] ? bpf_lsm_capable+0x9/0x20 [ 497.688564][T14139] ? security_capable+0x7e/0x2e0 [ 497.688584][T14139] genl_rcv_msg+0x60e/0x790 [ 497.688602][T14139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.688615][T14139] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.688632][T14139] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 497.688645][T14139] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.688666][T14139] netlink_rcv_skb+0x208/0x470 [ 497.688676][T14139] ? __lock_acquire+0xab9/0xd20 [ 497.688692][T14139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.688707][T14139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.688729][T14139] ? down_read+0x1ad/0x2e0 [ 497.688742][T14139] genl_rcv+0x28/0x40 [ 497.688755][T14139] netlink_unicast+0x82f/0x9e0 [ 497.688777][T14139] ? __pfx_netlink_unicast+0x10/0x10 [ 497.688794][T14139] ? netlink_sendmsg+0x642/0xb30 [ 497.688804][T14139] ? skb_put+0x11b/0x210 [ 497.688818][T14139] netlink_sendmsg+0x805/0xb30 [ 497.688835][T14139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.688848][T14139] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.688860][T14139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.688872][T14139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.688884][T14139] __sock_sendmsg+0x21c/0x270 [ 497.688901][T14139] ____sys_sendmsg+0x505/0x830 [ 497.688918][T14139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.688937][T14139] ? import_iovec+0x74/0xa0 [ 497.688953][T14139] ___sys_sendmsg+0x21f/0x2a0 [ 497.688968][T14139] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.688988][T14139] ? rcu_read_lock_any_held+0xb3/0x120 [ 497.689008][T14139] ? sb_end_write+0xe9/0x1c0 [ 497.689026][T14139] ? __pfx_vfs_write+0x10/0x10 [ 497.689045][T14139] __x64_sys_sendmsg+0x19b/0x260 [ 497.689060][T14139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.689079][T14139] ? __pfx_ksys_write+0x10/0x10 [ 497.689096][T14139] ? do_syscall_64+0xbe/0x3b0 [ 497.689110][T14139] do_syscall_64+0xfa/0x3b0 [ 497.689121][T14139] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.689131][T14139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.689142][T14139] ? clear_bhb_loop+0x60/0xb0 [ 497.689155][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.689165][T14139] RIP: 0033:0x7fd5538a2519 [ 497.689176][T14139] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.689186][T14139] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.689197][T14139] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 497.689205][T14139] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 497.689212][T14139] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 497.689219][T14139] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 497.689225][T14139] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000015 [ 497.689242][T14139] [ 498.323772][T14146] FAULT_INJECTION: forcing a failure. [ 498.323772][T14146] name failslab, interval 1, probability 0, space 0, times 0 [ 498.336451][T14146] CPU: 1 UID: 0 PID: 14146 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 498.336473][T14146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.336484][T14146] Call Trace: [ 498.336491][T14146] [ 498.336498][T14146] dump_stack_lvl+0x189/0x250 [ 498.336521][T14146] ? __pfx____ratelimit+0x10/0x10 [ 498.336538][T14146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.336556][T14146] ? __pfx__printk+0x10/0x10 [ 498.336578][T14146] ? __lock_acquire+0xab9/0xd20 [ 498.336606][T14146] should_fail_ex+0x414/0x560 [ 498.336632][T14146] should_failslab+0xa8/0x100 [ 498.336662][T14146] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 498.336683][T14146] ? __alloc_skb+0x112/0x2d0 [ 498.336703][T14146] __alloc_skb+0x112/0x2d0 [ 498.336723][T14146] skb_copy+0x188/0x800 [ 498.336752][T14146] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 498.336784][T14146] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 498.336812][T14146] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 498.336833][T14146] mac80211_hwsim_tx+0x1855/0x25d0 [ 498.336864][T14146] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 498.336888][T14146] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 498.336906][T14146] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.336922][T14146] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.336938][T14146] ? do_raw_spin_unlock+0x122/0x240 [ 498.336961][T14146] ieee80211_queue_skb+0x1a31/0x21c0 [ 498.337001][T14146] ieee80211_tx+0x297/0x420 [ 498.337020][T14146] ? __pfx_ieee80211_tx+0x10/0x10 [ 498.337053][T14146] ? ieee80211_xmit+0x315/0x400 [ 498.337074][T14146] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 498.337095][T14146] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 498.337124][T14146] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 498.337147][T14146] ? ieee80211_tx_control_port+0x765/0xcc0 [ 498.337173][T14146] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 498.337190][T14146] ieee80211_tx_control_port+0xabd/0xcc0 [ 498.337212][T14146] nl80211_tx_control_port+0x610/0x980 [ 498.337234][T14146] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 498.337250][T14146] ? nl80211_pre_doit+0x4f1/0x930 [ 498.337268][T14146] genl_family_rcv_msg_doit+0x212/0x300 [ 498.337288][T14146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.337309][T14146] ? bpf_lsm_capable+0x9/0x20 [ 498.337324][T14146] ? security_capable+0x7e/0x2e0 [ 498.337344][T14146] genl_rcv_msg+0x60e/0x790 [ 498.337362][T14146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.337375][T14146] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 498.337388][T14146] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 498.337400][T14146] ? __pfx_nl80211_post_doit+0x10/0x10 [ 498.337422][T14146] netlink_rcv_skb+0x208/0x470 [ 498.337432][T14146] ? __lock_acquire+0xab9/0xd20 [ 498.337448][T14146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.337463][T14146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.337484][T14146] ? down_read+0x1ad/0x2e0 [ 498.337498][T14146] genl_rcv+0x28/0x40 [ 498.337511][T14146] netlink_unicast+0x82f/0x9e0 [ 498.337533][T14146] ? __pfx_netlink_unicast+0x10/0x10 [ 498.337550][T14146] ? netlink_sendmsg+0x642/0xb30 [ 498.337560][T14146] ? skb_put+0x11b/0x210 [ 498.337574][T14146] netlink_sendmsg+0x805/0xb30 [ 498.337590][T14146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.337604][T14146] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.337616][T14146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.337628][T14146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.337645][T14146] __sock_sendmsg+0x21c/0x270 [ 498.337663][T14146] ____sys_sendmsg+0x505/0x830 [ 498.337681][T14146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.337699][T14146] ? import_iovec+0x74/0xa0 [ 498.337716][T14146] ___sys_sendmsg+0x21f/0x2a0 [ 498.337731][T14146] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.337748][T14146] ? rcu_read_lock_any_held+0xb3/0x120 [ 498.337767][T14146] ? sb_end_write+0xe9/0x1c0 [ 498.337785][T14146] ? __pfx_vfs_write+0x10/0x10 [ 498.337805][T14146] __x64_sys_sendmsg+0x19b/0x260 [ 498.337819][T14146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.337838][T14146] ? __pfx_ksys_write+0x10/0x10 [ 498.337855][T14146] ? do_syscall_64+0xbe/0x3b0 [ 498.337868][T14146] do_syscall_64+0xfa/0x3b0 [ 498.337878][T14146] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.337889][T14146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.337899][T14146] ? clear_bhb_loop+0x60/0xb0 [ 498.337911][T14146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.337922][T14146] RIP: 0033:0x7fd5538a2519 [ 498.337933][T14146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.337942][T14146] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.337954][T14146] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 498.337962][T14146] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 498.337969][T14146] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 498.337975][T14146] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 498.337982][T14146] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000016 [ 498.337998][T14146] [ 498.339078][T14147] FAULT_INJECTION: forcing a failure. [ 498.339078][T14147] name failslab, interval 1, probability 0, space 0, times 0 [ 498.840261][T14147] CPU: 0 UID: 0 PID: 14147 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 498.840277][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.840285][T14147] Call Trace: [ 498.840292][T14147] [ 498.840298][T14147] dump_stack_lvl+0x189/0x250 [ 498.840316][T14147] ? __pfx____ratelimit+0x10/0x10 [ 498.840328][T14147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.840340][T14147] ? __pfx__printk+0x10/0x10 [ 498.840356][T14147] ? __lock_acquire+0xab9/0xd20 [ 498.840377][T14147] should_fail_ex+0x414/0x560 [ 498.840396][T14147] should_failslab+0xa8/0x100 [ 498.840413][T14147] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 498.840428][T14147] ? __alloc_skb+0x112/0x2d0 [ 498.840443][T14147] __alloc_skb+0x112/0x2d0 [ 498.840457][T14147] skb_copy+0x188/0x800 [ 498.840477][T14147] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 498.840500][T14147] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 498.840519][T14147] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 498.840534][T14147] mac80211_hwsim_tx+0x1855/0x25d0 [ 498.840556][T14147] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 498.840573][T14147] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 498.840585][T14147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.840596][T14147] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.840607][T14147] ? do_raw_spin_unlock+0x122/0x240 [ 498.840623][T14147] ieee80211_queue_skb+0x1a31/0x21c0 [ 498.840659][T14147] ieee80211_tx+0x297/0x420 [ 498.840673][T14147] ? __pfx_ieee80211_tx+0x10/0x10 [ 498.840697][T14147] ? ieee80211_xmit+0x315/0x400 [ 498.840711][T14147] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 498.840726][T14147] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 498.840747][T14147] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 498.840764][T14147] ? ieee80211_tx_control_port+0x765/0xcc0 [ 498.840780][T14147] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 498.840795][T14147] ieee80211_tx_control_port+0xabd/0xcc0 [ 498.840818][T14147] nl80211_tx_control_port+0x610/0x980 [ 498.840840][T14147] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 498.840856][T14147] ? nl80211_pre_doit+0x4f1/0x930 [ 498.840873][T14147] genl_family_rcv_msg_doit+0x212/0x300 [ 498.840893][T14147] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.840914][T14147] ? bpf_lsm_capable+0x9/0x20 [ 498.840928][T14147] ? security_capable+0x7e/0x2e0 [ 498.840949][T14147] genl_rcv_msg+0x60e/0x790 [ 498.840966][T14147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.840980][T14147] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 498.840993][T14147] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 498.841005][T14147] ? __pfx_nl80211_post_doit+0x10/0x10 [ 498.841027][T14147] netlink_rcv_skb+0x208/0x470 [ 498.841037][T14147] ? __lock_acquire+0xab9/0xd20 [ 498.841052][T14147] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.841067][T14147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.841089][T14147] ? down_read+0x1ad/0x2e0 [ 498.841106][T14147] genl_rcv+0x28/0x40 [ 498.841119][T14147] netlink_unicast+0x82f/0x9e0 [ 498.841140][T14147] ? __pfx_netlink_unicast+0x10/0x10 [ 498.841157][T14147] ? netlink_sendmsg+0x642/0xb30 [ 498.841168][T14147] ? skb_put+0x11b/0x210 [ 498.841181][T14147] netlink_sendmsg+0x805/0xb30 [ 498.841198][T14147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.841211][T14147] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.841224][T14147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.841235][T14147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.841247][T14147] __sock_sendmsg+0x21c/0x270 [ 498.841265][T14147] ____sys_sendmsg+0x505/0x830 [ 498.841282][T14147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.841300][T14147] ? import_iovec+0x74/0xa0 [ 498.841316][T14147] ___sys_sendmsg+0x21f/0x2a0 [ 498.841331][T14147] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.841348][T14147] ? rcu_read_lock_any_held+0xb3/0x120 [ 498.841367][T14147] ? sb_end_write+0xe9/0x1c0 [ 498.841386][T14147] ? __pfx_vfs_write+0x10/0x10 [ 498.841405][T14147] __x64_sys_sendmsg+0x19b/0x260 [ 498.841420][T14147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.841439][T14147] ? __pfx_ksys_write+0x10/0x10 [ 498.841455][T14147] ? do_syscall_64+0xbe/0x3b0 [ 498.841469][T14147] do_syscall_64+0xfa/0x3b0 [ 498.841480][T14147] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.841490][T14147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.841500][T14147] ? clear_bhb_loop+0x60/0xb0 [ 498.841513][T14147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.841524][T14147] RIP: 0033:0x7fd5538a2519 [ 498.841535][T14147] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.841545][T14147] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.841557][T14147] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 498.841565][T14147] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 498.841572][T14147] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 498.841578][T14147] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 498.841585][T14147] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000015 [ 498.841602][T14147] [ 499.420585][T14151] FAULT_INJECTION: forcing a failure. [ 499.420585][T14151] name failslab, interval 1, probability 0, space 0, times 0 [ 499.433246][T14151] CPU: 0 UID: 0 PID: 14151 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 499.433263][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.433270][T14151] Call Trace: [ 499.433275][T14151] [ 499.433281][T14151] dump_stack_lvl+0x189/0x250 [ 499.433299][T14151] ? __pfx____ratelimit+0x10/0x10 [ 499.433311][T14151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.433324][T14151] ? __pfx__printk+0x10/0x10 [ 499.433339][T14151] ? __lock_acquire+0xab9/0xd20 [ 499.433378][T14151] should_fail_ex+0x414/0x560 [ 499.433398][T14151] should_failslab+0xa8/0x100 [ 499.433415][T14151] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 499.433430][T14151] ? __alloc_skb+0x112/0x2d0 [ 499.433445][T14151] __alloc_skb+0x112/0x2d0 [ 499.433459][T14151] skb_copy+0x188/0x800 [ 499.433479][T14151] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 499.433522][T14151] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 499.433541][T14151] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 499.433556][T14151] mac80211_hwsim_tx+0x1855/0x25d0 [ 499.433578][T14151] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 499.433595][T14151] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 499.433607][T14151] ? __local_bh_enable_ip+0x12d/0x1c0 [ 499.433618][T14151] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 499.433630][T14151] ? do_raw_spin_unlock+0x122/0x240 [ 499.433645][T14151] ieee80211_queue_skb+0x1a31/0x21c0 [ 499.433674][T14151] ieee80211_tx+0x297/0x420 [ 499.433688][T14151] ? __pfx_ieee80211_tx+0x10/0x10 [ 499.433711][T14151] ? ieee80211_xmit+0x315/0x400 [ 499.433725][T14151] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 499.433740][T14151] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 499.433760][T14151] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 499.433777][T14151] ? ieee80211_tx_control_port+0x765/0xcc0 [ 499.433793][T14151] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 499.433808][T14151] ieee80211_tx_control_port+0xabd/0xcc0 [ 499.433830][T14151] nl80211_tx_control_port+0x610/0x980 [ 499.433852][T14151] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 499.433869][T14151] ? nl80211_pre_doit+0x4f1/0x930 [ 499.433886][T14151] genl_family_rcv_msg_doit+0x212/0x300 [ 499.433905][T14151] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.433927][T14151] ? bpf_lsm_capable+0x9/0x20 [ 499.433941][T14151] ? security_capable+0x7e/0x2e0 [ 499.433961][T14151] genl_rcv_msg+0x60e/0x790 [ 499.433979][T14151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.433991][T14151] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 499.434004][T14151] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 499.434017][T14151] ? __pfx_nl80211_post_doit+0x10/0x10 [ 499.434039][T14151] netlink_rcv_skb+0x208/0x470 [ 499.434049][T14151] ? __lock_acquire+0xab9/0xd20 [ 499.434064][T14151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.434079][T14151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.434101][T14151] ? down_read+0x1ad/0x2e0 [ 499.434115][T14151] genl_rcv+0x28/0x40 [ 499.434128][T14151] netlink_unicast+0x82f/0x9e0 [ 499.434149][T14151] ? __pfx_netlink_unicast+0x10/0x10 [ 499.434166][T14151] ? netlink_sendmsg+0x642/0xb30 [ 499.434176][T14151] ? skb_put+0x11b/0x210 [ 499.434190][T14151] netlink_sendmsg+0x805/0xb30 [ 499.434207][T14151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.434220][T14151] ? aa_sock_msg_perm+0xf1/0x1d0 [ 499.434233][T14151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.434245][T14151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.434257][T14151] __sock_sendmsg+0x21c/0x270 [ 499.434275][T14151] ____sys_sendmsg+0x505/0x830 [ 499.434292][T14151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.434310][T14151] ? import_iovec+0x74/0xa0 [ 499.434331][T14151] ___sys_sendmsg+0x21f/0x2a0 [ 499.434346][T14151] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.434363][T14151] ? rcu_read_lock_any_held+0xb3/0x120 [ 499.434382][T14151] ? sb_end_write+0xe9/0x1c0 [ 499.434400][T14151] ? __pfx_vfs_write+0x10/0x10 [ 499.434423][T14151] __x64_sys_sendmsg+0x19b/0x260 [ 499.434438][T14151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.434457][T14151] ? __pfx_ksys_write+0x10/0x10 [ 499.434473][T14151] ? do_syscall_64+0xbe/0x3b0 [ 499.434487][T14151] do_syscall_64+0xfa/0x3b0 [ 499.434502][T14151] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.434512][T14151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.434523][T14151] ? clear_bhb_loop+0x60/0xb0 [ 499.434535][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.434545][T14151] RIP: 0033:0x7fd5538a2519 [ 499.434556][T14151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.434566][T14151] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.434578][T14151] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 499.434586][T14151] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 499.434593][T14151] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 499.434599][T14151] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 499.434606][T14151] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000017 [ 499.434622][T14151] [ 499.934931][T14150] FAULT_INJECTION: forcing a failure. [ 499.934931][T14150] name failslab, interval 1, probability 0, space 0, times 0 [ 499.947613][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 499.947629][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.947637][T14150] Call Trace: [ 499.947642][T14150] [ 499.947646][T14150] dump_stack_lvl+0x189/0x250 [ 499.947664][T14150] ? __pfx____ratelimit+0x10/0x10 [ 499.947677][T14150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.947689][T14150] ? __pfx__printk+0x10/0x10 [ 499.947705][T14150] ? __lock_acquire+0xab9/0xd20 [ 499.947726][T14150] should_fail_ex+0x414/0x560 [ 499.947744][T14150] should_failslab+0xa8/0x100 [ 499.947761][T14150] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 499.947777][T14150] ? __alloc_skb+0x112/0x2d0 [ 499.947791][T14150] __alloc_skb+0x112/0x2d0 [ 499.947805][T14150] skb_copy+0x188/0x800 [ 499.947825][T14150] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 499.947847][T14150] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 499.947867][T14150] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 499.947882][T14150] mac80211_hwsim_tx+0x1855/0x25d0 [ 499.947903][T14150] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 499.947919][T14150] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 499.947931][T14150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 499.947942][T14150] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 499.947953][T14150] ? do_raw_spin_unlock+0x122/0x240 [ 499.947969][T14150] ieee80211_queue_skb+0x1a31/0x21c0 [ 499.947998][T14150] ieee80211_tx+0x297/0x420 [ 499.948011][T14150] ? __pfx_ieee80211_tx+0x10/0x10 [ 499.948034][T14150] ? ieee80211_xmit+0x315/0x400 [ 499.948048][T14150] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 499.948063][T14150] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 499.948083][T14150] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 499.948100][T14150] ? ieee80211_tx_control_port+0x765/0xcc0 [ 499.948116][T14150] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 499.948131][T14150] ieee80211_tx_control_port+0xabd/0xcc0 [ 499.948153][T14150] nl80211_tx_control_port+0x610/0x980 [ 499.948174][T14150] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 499.948190][T14150] ? nl80211_pre_doit+0x4f1/0x930 [ 499.948208][T14150] genl_family_rcv_msg_doit+0x212/0x300 [ 499.948227][T14150] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.948248][T14150] ? bpf_lsm_capable+0x9/0x20 [ 499.948262][T14150] ? security_capable+0x7e/0x2e0 [ 499.948283][T14150] genl_rcv_msg+0x60e/0x790 [ 499.948300][T14150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.948313][T14150] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 499.948326][T14150] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 499.948338][T14150] ? __pfx_nl80211_post_doit+0x10/0x10 [ 499.948360][T14150] netlink_rcv_skb+0x208/0x470 [ 499.948370][T14150] ? __lock_acquire+0xab9/0xd20 [ 499.948385][T14150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.948400][T14150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.948421][T14150] ? down_read+0x1ad/0x2e0 [ 499.948435][T14150] genl_rcv+0x28/0x40 [ 499.948452][T14150] netlink_unicast+0x82f/0x9e0 [ 499.948473][T14150] ? __pfx_netlink_unicast+0x10/0x10 [ 499.948490][T14150] ? netlink_sendmsg+0x642/0xb30 [ 499.948500][T14150] ? skb_put+0x11b/0x210 [ 499.948514][T14150] netlink_sendmsg+0x805/0xb30 [ 499.948531][T14150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.948544][T14150] ? aa_sock_msg_perm+0xf1/0x1d0 [ 499.948556][T14150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.948568][T14150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.948580][T14150] __sock_sendmsg+0x21c/0x270 [ 499.948598][T14150] ____sys_sendmsg+0x505/0x830 [ 499.948614][T14150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.948633][T14150] ? import_iovec+0x74/0xa0 [ 499.948649][T14150] ___sys_sendmsg+0x21f/0x2a0 [ 499.948664][T14150] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.948681][T14150] ? rcu_read_lock_any_held+0xb3/0x120 [ 499.948700][T14150] ? sb_end_write+0xe9/0x1c0 [ 499.948718][T14150] ? __pfx_vfs_write+0x10/0x10 [ 499.948737][T14150] __x64_sys_sendmsg+0x19b/0x260 [ 499.948752][T14150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.948770][T14150] ? __pfx_ksys_write+0x10/0x10 [ 499.948787][T14150] ? do_syscall_64+0xbe/0x3b0 [ 499.948801][T14150] do_syscall_64+0xfa/0x3b0 [ 499.948811][T14150] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.948821][T14150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.948831][T14150] ? clear_bhb_loop+0x60/0xb0 [ 499.948844][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.948854][T14150] RIP: 0033:0x7fd5538a2519 [ 499.948864][T14150] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.948873][T14150] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.948885][T14150] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 499.948893][T14150] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 499.948901][T14150] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 499.948907][T14150] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 499.948914][T14150] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000016 [ 499.948930][T14150] [ 500.629993][T14154] FAULT_INJECTION: forcing a failure. [ 500.629993][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 500.642673][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 500.642689][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.642697][T14154] Call Trace: [ 500.642704][T14154] [ 500.642709][T14154] dump_stack_lvl+0x189/0x250 [ 500.642727][T14154] ? __pfx____ratelimit+0x10/0x10 [ 500.642744][T14154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.642756][T14154] ? __pfx__printk+0x10/0x10 [ 500.642772][T14154] ? __lock_acquire+0xab9/0xd20 [ 500.642794][T14154] should_fail_ex+0x414/0x560 [ 500.642812][T14154] should_failslab+0xa8/0x100 [ 500.642830][T14154] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 500.642846][T14154] ? __alloc_skb+0x112/0x2d0 [ 500.642860][T14154] __alloc_skb+0x112/0x2d0 [ 500.642875][T14154] skb_copy+0x188/0x800 [ 500.642895][T14154] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 500.642918][T14154] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 500.642938][T14154] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 500.642953][T14154] mac80211_hwsim_tx+0x1855/0x25d0 [ 500.642974][T14154] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 500.642992][T14154] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 500.643004][T14154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 500.643015][T14154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 500.643026][T14154] ? do_raw_spin_unlock+0x122/0x240 [ 500.643043][T14154] ieee80211_queue_skb+0x1a31/0x21c0 [ 500.643071][T14154] ieee80211_tx+0x297/0x420 [ 500.643085][T14154] ? __pfx_ieee80211_tx+0x10/0x10 [ 500.643108][T14154] ? ieee80211_xmit+0x315/0x400 [ 500.643122][T14154] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 500.643137][T14154] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 500.643158][T14154] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 500.643174][T14154] ? ieee80211_tx_control_port+0x765/0xcc0 [ 500.643191][T14154] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 500.643206][T14154] ieee80211_tx_control_port+0xabd/0xcc0 [ 500.643228][T14154] nl80211_tx_control_port+0x610/0x980 [ 500.643250][T14154] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 500.643266][T14154] ? nl80211_pre_doit+0x4f1/0x930 [ 500.643285][T14154] genl_family_rcv_msg_doit+0x212/0x300 [ 500.643304][T14154] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 500.643326][T14154] ? bpf_lsm_capable+0x9/0x20 [ 500.643340][T14154] ? security_capable+0x7e/0x2e0 [ 500.643361][T14154] genl_rcv_msg+0x60e/0x790 [ 500.643379][T14154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.643392][T14154] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 500.643405][T14154] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 500.643417][T14154] ? __pfx_nl80211_post_doit+0x10/0x10 [ 500.643439][T14154] netlink_rcv_skb+0x208/0x470 [ 500.643449][T14154] ? __lock_acquire+0xab9/0xd20 [ 500.643465][T14154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.643480][T14154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.643501][T14154] ? down_read+0x1ad/0x2e0 [ 500.643516][T14154] genl_rcv+0x28/0x40 [ 500.643529][T14154] netlink_unicast+0x82f/0x9e0 [ 500.643550][T14154] ? __pfx_netlink_unicast+0x10/0x10 [ 500.643568][T14154] ? netlink_sendmsg+0x642/0xb30 [ 500.643578][T14154] ? skb_put+0x11b/0x210 [ 500.643592][T14154] netlink_sendmsg+0x805/0xb30 [ 500.643609][T14154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.643622][T14154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 500.643635][T14154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.643647][T14154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.643659][T14154] __sock_sendmsg+0x21c/0x270 [ 500.643677][T14154] ____sys_sendmsg+0x505/0x830 [ 500.643694][T14154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.643712][T14154] ? import_iovec+0x74/0xa0 [ 500.643729][T14154] ___sys_sendmsg+0x21f/0x2a0 [ 500.643748][T14154] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.643765][T14154] ? rcu_read_lock_any_held+0xb3/0x120 [ 500.643784][T14154] ? sb_end_write+0xe9/0x1c0 [ 500.643802][T14154] ? __pfx_vfs_write+0x10/0x10 [ 500.643822][T14154] __x64_sys_sendmsg+0x19b/0x260 [ 500.643837][T14154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.643856][T14154] ? __pfx_ksys_write+0x10/0x10 [ 500.643872][T14154] ? do_syscall_64+0xbe/0x3b0 [ 500.643886][T14154] do_syscall_64+0xfa/0x3b0 [ 500.643897][T14154] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.643907][T14154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.643918][T14154] ? clear_bhb_loop+0x60/0xb0 [ 500.643930][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.643940][T14154] RIP: 0033:0x7fd5538a2519 [ 500.643951][T14154] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.643960][T14154] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.643973][T14154] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 500.643981][T14154] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 500.643988][T14154] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 500.643994][T14154] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 500.644001][T14154] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000018 [ 500.644017][T14154] [ 500.645154][T14156] FAULT_INJECTION: forcing a failure. [ 500.645154][T14156] name failslab, interval 1, probability 0, space 0, times 0 [ 501.146536][T14156] CPU: 1 UID: 0 PID: 14156 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 501.146558][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.146569][T14156] Call Trace: [ 501.146577][T14156] [ 501.146585][T14156] dump_stack_lvl+0x189/0x250 [ 501.146607][T14156] ? __pfx____ratelimit+0x10/0x10 [ 501.146624][T14156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.146641][T14156] ? __pfx__printk+0x10/0x10 [ 501.146663][T14156] ? __lock_acquire+0xab9/0xd20 [ 501.146693][T14156] should_fail_ex+0x414/0x560 [ 501.146720][T14156] should_failslab+0xa8/0x100 [ 501.146743][T14156] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 501.146764][T14156] ? __alloc_skb+0x112/0x2d0 [ 501.146785][T14156] __alloc_skb+0x112/0x2d0 [ 501.146805][T14156] skb_copy+0x188/0x800 [ 501.146833][T14156] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 501.146866][T14156] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 501.146894][T14156] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 501.146915][T14156] mac80211_hwsim_tx+0x1855/0x25d0 [ 501.146946][T14156] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 501.146970][T14156] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 501.146987][T14156] ? __local_bh_enable_ip+0x12d/0x1c0 [ 501.147002][T14156] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.147019][T14156] ? do_raw_spin_unlock+0x122/0x240 [ 501.147041][T14156] ieee80211_queue_skb+0x1a31/0x21c0 [ 501.147081][T14156] ieee80211_tx+0x297/0x420 [ 501.147100][T14156] ? __pfx_ieee80211_tx+0x10/0x10 [ 501.147133][T14156] ? ieee80211_xmit+0x315/0x400 [ 501.147153][T14156] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 501.147176][T14156] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 501.147196][T14156] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 501.147213][T14156] ? ieee80211_tx_control_port+0x765/0xcc0 [ 501.147230][T14156] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 501.147245][T14156] ieee80211_tx_control_port+0xabd/0xcc0 [ 501.147267][T14156] nl80211_tx_control_port+0x610/0x980 [ 501.147289][T14156] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 501.147305][T14156] ? nl80211_pre_doit+0x4f1/0x930 [ 501.147323][T14156] genl_family_rcv_msg_doit+0x212/0x300 [ 501.147343][T14156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 501.147364][T14156] ? bpf_lsm_capable+0x9/0x20 [ 501.147378][T14156] ? security_capable+0x7e/0x2e0 [ 501.147399][T14156] genl_rcv_msg+0x60e/0x790 [ 501.147416][T14156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.147430][T14156] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 501.147447][T14156] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 501.147460][T14156] ? __pfx_nl80211_post_doit+0x10/0x10 [ 501.147481][T14156] netlink_rcv_skb+0x208/0x470 [ 501.147492][T14156] ? __lock_acquire+0xab9/0xd20 [ 501.147507][T14156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.147522][T14156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.147543][T14156] ? down_read+0x1ad/0x2e0 [ 501.147557][T14156] genl_rcv+0x28/0x40 [ 501.147570][T14156] netlink_unicast+0x82f/0x9e0 [ 501.147592][T14156] ? __pfx_netlink_unicast+0x10/0x10 [ 501.147609][T14156] ? netlink_sendmsg+0x642/0xb30 [ 501.147619][T14156] ? skb_put+0x11b/0x210 [ 501.147633][T14156] netlink_sendmsg+0x805/0xb30 [ 501.147650][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.147663][T14156] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.147676][T14156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.147688][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.147700][T14156] __sock_sendmsg+0x21c/0x270 [ 501.147718][T14156] ____sys_sendmsg+0x505/0x830 [ 501.147735][T14156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.147753][T14156] ? import_iovec+0x74/0xa0 [ 501.147770][T14156] ___sys_sendmsg+0x21f/0x2a0 [ 501.147784][T14156] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.147802][T14156] ? rcu_read_lock_any_held+0xb3/0x120 [ 501.147821][T14156] ? sb_end_write+0xe9/0x1c0 [ 501.147838][T14156] ? __pfx_vfs_write+0x10/0x10 [ 501.147858][T14156] __x64_sys_sendmsg+0x19b/0x260 [ 501.147873][T14156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.147891][T14156] ? __pfx_ksys_write+0x10/0x10 [ 501.147908][T14156] ? do_syscall_64+0xbe/0x3b0 [ 501.147922][T14156] do_syscall_64+0xfa/0x3b0 [ 501.147932][T14156] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.147943][T14156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.147953][T14156] ? clear_bhb_loop+0x60/0xb0 [ 501.147966][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.147976][T14156] RIP: 0033:0x7fd5538a2519 [ 501.147987][T14156] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.147997][T14156] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.148009][T14156] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 501.148017][T14156] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 501.148024][T14156] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 501.148030][T14156] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 501.148037][T14156] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000017 [ 501.148053][T14156] [ 501.650123][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.656531][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.727276][T14160] FAULT_INJECTION: forcing a failure. [ 501.727276][T14160] name failslab, interval 1, probability 0, space 0, times 0 [ 501.740056][T14160] CPU: 0 UID: 0 PID: 14160 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 501.740082][T14160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.740095][T14160] Call Trace: [ 501.740104][T14160] [ 501.740112][T14160] dump_stack_lvl+0x189/0x250 [ 501.740140][T14160] ? __pfx____ratelimit+0x10/0x10 [ 501.740162][T14160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.740185][T14160] ? __pfx__printk+0x10/0x10 [ 501.740215][T14160] ? __lock_acquire+0xab9/0xd20 [ 501.740255][T14160] should_fail_ex+0x414/0x560 [ 501.740291][T14160] should_failslab+0xa8/0x100 [ 501.740321][T14160] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 501.740349][T14160] ? __alloc_skb+0x112/0x2d0 [ 501.740376][T14160] __alloc_skb+0x112/0x2d0 [ 501.740404][T14160] skb_copy+0x188/0x800 [ 501.740444][T14160] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 501.740488][T14160] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 501.740527][T14160] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 501.740557][T14160] mac80211_hwsim_tx+0x1855/0x25d0 [ 501.740607][T14160] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 501.740640][T14160] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 501.740662][T14160] ? __local_bh_enable_ip+0x12d/0x1c0 [ 501.740683][T14160] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.740706][T14160] ? do_raw_spin_unlock+0x122/0x240 [ 501.740738][T14160] ieee80211_queue_skb+0x1a31/0x21c0 [ 501.740795][T14160] ieee80211_tx+0x297/0x420 [ 501.740822][T14160] ? __pfx_ieee80211_tx+0x10/0x10 [ 501.740870][T14160] ? ieee80211_xmit+0x315/0x400 [ 501.740898][T14160] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 501.740926][T14160] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 501.740967][T14160] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 501.741000][T14160] ? ieee80211_tx_control_port+0x765/0xcc0 [ 501.741032][T14160] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 501.741061][T14160] ieee80211_tx_control_port+0xabd/0xcc0 [ 501.741107][T14160] nl80211_tx_control_port+0x610/0x980 [ 501.741146][T14160] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 501.741177][T14160] ? nl80211_pre_doit+0x4f1/0x930 [ 501.741211][T14160] genl_family_rcv_msg_doit+0x212/0x300 [ 501.741247][T14160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 501.741288][T14160] ? bpf_lsm_capable+0x9/0x20 [ 501.741313][T14160] ? security_capable+0x7e/0x2e0 [ 501.741350][T14160] genl_rcv_msg+0x60e/0x790 [ 501.741384][T14160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.741409][T14160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 501.741433][T14160] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 501.741456][T14160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 501.741498][T14160] netlink_rcv_skb+0x208/0x470 [ 501.741518][T14160] ? __lock_acquire+0xab9/0xd20 [ 501.741547][T14160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.741575][T14160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.741623][T14160] ? down_read+0x1ad/0x2e0 [ 501.741650][T14160] genl_rcv+0x28/0x40 [ 501.741674][T14160] netlink_unicast+0x82f/0x9e0 [ 501.741715][T14160] ? __pfx_netlink_unicast+0x10/0x10 [ 501.741747][T14160] ? netlink_sendmsg+0x642/0xb30 [ 501.741767][T14160] ? skb_put+0x11b/0x210 [ 501.741793][T14160] netlink_sendmsg+0x805/0xb30 [ 501.741826][T14160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.741852][T14160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.741876][T14160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.741897][T14160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.741921][T14160] __sock_sendmsg+0x21c/0x270 [ 501.741955][T14160] ____sys_sendmsg+0x505/0x830 [ 501.741986][T14160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.742022][T14160] ? import_iovec+0x74/0xa0 [ 501.742053][T14160] ___sys_sendmsg+0x21f/0x2a0 [ 501.742080][T14160] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.742113][T14160] ? rcu_read_lock_any_held+0xb3/0x120 [ 501.742150][T14160] ? sb_end_write+0xe9/0x1c0 [ 501.742184][T14160] ? __pfx_vfs_write+0x10/0x10 [ 501.742219][T14160] __x64_sys_sendmsg+0x19b/0x260 [ 501.742247][T14160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.742281][T14160] ? __pfx_ksys_write+0x10/0x10 [ 501.742313][T14160] ? do_syscall_64+0xbe/0x3b0 [ 501.742338][T14160] do_syscall_64+0xfa/0x3b0 [ 501.742353][T14160] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.742368][T14160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.742387][T14160] ? clear_bhb_loop+0x60/0xb0 [ 501.742411][T14160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.742430][T14160] RIP: 0033:0x7fd5538a2519 [ 501.742449][T14160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.742466][T14160] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.742487][T14160] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 501.742503][T14160] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 501.742516][T14160] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 501.742528][T14160] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 501.742542][T14160] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000019 [ 501.742575][T14160] [ 502.325851][T14165] FAULT_INJECTION: forcing a failure. [ 502.325851][T14165] name failslab, interval 1, probability 0, space 0, times 0 [ 502.338538][T14165] CPU: 0 UID: 0 PID: 14165 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 502.338554][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.338562][T14165] Call Trace: [ 502.338568][T14165] [ 502.338574][T14165] dump_stack_lvl+0x189/0x250 [ 502.338591][T14165] ? __pfx____ratelimit+0x10/0x10 [ 502.338603][T14165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.338616][T14165] ? __pfx__printk+0x10/0x10 [ 502.338632][T14165] ? __lock_acquire+0xab9/0xd20 [ 502.338653][T14165] should_fail_ex+0x414/0x560 [ 502.338672][T14165] should_failslab+0xa8/0x100 [ 502.338690][T14165] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 502.338705][T14165] ? __alloc_skb+0x112/0x2d0 [ 502.338720][T14165] __alloc_skb+0x112/0x2d0 [ 502.338734][T14165] skb_copy+0x188/0x800 [ 502.338754][T14165] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 502.338777][T14165] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 502.338797][T14165] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 502.338812][T14165] mac80211_hwsim_tx+0x1855/0x25d0 [ 502.338833][T14165] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 502.338850][T14165] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 502.338862][T14165] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.338873][T14165] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 502.338884][T14165] ? do_raw_spin_unlock+0x122/0x240 [ 502.338900][T14165] ieee80211_queue_skb+0x1a31/0x21c0 [ 502.338929][T14165] ieee80211_tx+0x297/0x420 [ 502.338942][T14165] ? __pfx_ieee80211_tx+0x10/0x10 [ 502.338966][T14165] ? ieee80211_xmit+0x315/0x400 [ 502.338980][T14165] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 502.338995][T14165] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 502.339015][T14165] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 502.339032][T14165] ? ieee80211_tx_control_port+0x765/0xcc0 [ 502.339048][T14165] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 502.339063][T14165] ieee80211_tx_control_port+0xabd/0xcc0 [ 502.339085][T14165] nl80211_tx_control_port+0x610/0x980 [ 502.339106][T14165] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 502.339122][T14165] ? nl80211_pre_doit+0x4f1/0x930 [ 502.339140][T14165] genl_family_rcv_msg_doit+0x212/0x300 [ 502.339159][T14165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.339181][T14165] ? bpf_lsm_capable+0x9/0x20 [ 502.339195][T14165] ? security_capable+0x7e/0x2e0 [ 502.339215][T14165] genl_rcv_msg+0x60e/0x790 [ 502.339233][T14165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.339246][T14165] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 502.339259][T14165] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 502.339272][T14165] ? __pfx_nl80211_post_doit+0x10/0x10 [ 502.339293][T14165] netlink_rcv_skb+0x208/0x470 [ 502.339303][T14165] ? __lock_acquire+0xab9/0xd20 [ 502.339319][T14165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.339343][T14165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.339365][T14165] ? down_read+0x1ad/0x2e0 [ 502.339379][T14165] genl_rcv+0x28/0x40 [ 502.339392][T14165] netlink_unicast+0x82f/0x9e0 [ 502.339413][T14165] ? __pfx_netlink_unicast+0x10/0x10 [ 502.339430][T14165] ? netlink_sendmsg+0x642/0xb30 [ 502.339440][T14165] ? skb_put+0x11b/0x210 [ 502.339454][T14165] netlink_sendmsg+0x805/0xb30 [ 502.339471][T14165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.339484][T14165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.339496][T14165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.339508][T14165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.339520][T14165] __sock_sendmsg+0x21c/0x270 [ 502.339538][T14165] ____sys_sendmsg+0x505/0x830 [ 502.339555][T14165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.339573][T14165] ? import_iovec+0x74/0xa0 [ 502.339589][T14165] ___sys_sendmsg+0x21f/0x2a0 [ 502.339604][T14165] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.339621][T14165] ? rcu_read_lock_any_held+0xb3/0x120 [ 502.339640][T14165] ? sb_end_write+0xe9/0x1c0 [ 502.339658][T14165] ? __pfx_vfs_write+0x10/0x10 [ 502.339677][T14165] __x64_sys_sendmsg+0x19b/0x260 [ 502.339691][T14165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.339710][T14165] ? __pfx_ksys_write+0x10/0x10 [ 502.339726][T14165] ? do_syscall_64+0xbe/0x3b0 [ 502.339740][T14165] do_syscall_64+0xfa/0x3b0 [ 502.339750][T14165] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.339760][T14165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.339771][T14165] ? clear_bhb_loop+0x60/0xb0 [ 502.339784][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.339793][T14165] RIP: 0033:0x7fd5538a2519 [ 502.339804][T14165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.339813][T14165] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.339825][T14165] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 502.339833][T14165] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 502.339840][T14165] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 502.339846][T14165] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 502.339853][T14165] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000018 [ 502.339869][T14165] [ 502.339909][T14163] FAULT_INJECTION: forcing a failure. [ 502.339909][T14163] name failslab, interval 1, probability 0, space 0, times 0 [ 502.841916][T14163] CPU: 1 UID: 0 PID: 14163 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 502.841932][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.841940][T14163] Call Trace: [ 502.841947][T14163] [ 502.841953][T14163] dump_stack_lvl+0x189/0x250 [ 502.841971][T14163] ? __pfx____ratelimit+0x10/0x10 [ 502.841983][T14163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.841995][T14163] ? __pfx__printk+0x10/0x10 [ 502.842010][T14163] ? rcu_is_watching+0x15/0xb0 [ 502.842024][T14163] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 502.842039][T14163] should_fail_ex+0x414/0x560 [ 502.842058][T14163] should_failslab+0xa8/0x100 [ 502.842075][T14163] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 502.842090][T14163] ? __alloc_skb+0x112/0x2d0 [ 502.842105][T14163] __alloc_skb+0x112/0x2d0 [ 502.842120][T14163] skb_copy+0x188/0x800 [ 502.842141][T14163] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 502.842163][T14163] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 502.842182][T14163] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 502.842197][T14163] mac80211_hwsim_tx+0x1855/0x25d0 [ 502.842219][T14163] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 502.842236][T14163] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 502.842248][T14163] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.842259][T14163] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 502.842270][T14163] ? do_raw_spin_unlock+0x122/0x240 [ 502.842286][T14163] ieee80211_queue_skb+0x1a31/0x21c0 [ 502.842322][T14163] ieee80211_tx+0x297/0x420 [ 502.842336][T14163] ? __pfx_ieee80211_tx+0x10/0x10 [ 502.842359][T14163] ? ieee80211_xmit+0x315/0x400 [ 502.842373][T14163] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 502.842388][T14163] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 502.842409][T14163] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 502.842426][T14163] ? ieee80211_tx_control_port+0x765/0xcc0 [ 502.842442][T14163] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 502.842457][T14163] ieee80211_tx_control_port+0xabd/0xcc0 [ 502.842480][T14163] nl80211_tx_control_port+0x610/0x980 [ 502.842502][T14163] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 502.842518][T14163] ? nl80211_pre_doit+0x4f1/0x930 [ 502.842536][T14163] genl_family_rcv_msg_doit+0x212/0x300 [ 502.842555][T14163] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 502.842577][T14163] ? bpf_lsm_capable+0x9/0x20 [ 502.842592][T14163] ? security_capable+0x7e/0x2e0 [ 502.842612][T14163] genl_rcv_msg+0x60e/0x790 [ 502.842630][T14163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.842643][T14163] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 502.842656][T14163] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 502.842668][T14163] ? __pfx_nl80211_post_doit+0x10/0x10 [ 502.842690][T14163] netlink_rcv_skb+0x208/0x470 [ 502.842700][T14163] ? __lock_acquire+0xab9/0xd20 [ 502.842716][T14163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.842731][T14163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.842752][T14163] ? down_read+0x1ad/0x2e0 [ 502.842766][T14163] genl_rcv+0x28/0x40 [ 502.842779][T14163] netlink_unicast+0x82f/0x9e0 [ 502.842800][T14163] ? __pfx_netlink_unicast+0x10/0x10 [ 502.842817][T14163] ? netlink_sendmsg+0x642/0xb30 [ 502.842827][T14163] ? skb_put+0x11b/0x210 [ 502.842841][T14163] netlink_sendmsg+0x805/0xb30 [ 502.842858][T14163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.842871][T14163] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.842883][T14163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.842894][T14163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.842906][T14163] __sock_sendmsg+0x21c/0x270 [ 502.842924][T14163] ____sys_sendmsg+0x505/0x830 [ 502.842941][T14163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.842960][T14163] ? import_iovec+0x74/0xa0 [ 502.842976][T14163] ___sys_sendmsg+0x21f/0x2a0 [ 502.842991][T14163] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.843008][T14163] ? rcu_read_lock_any_held+0xb3/0x120 [ 502.843027][T14163] ? sb_end_write+0xe9/0x1c0 [ 502.843044][T14163] ? __pfx_vfs_write+0x10/0x10 [ 502.843064][T14163] __x64_sys_sendmsg+0x19b/0x260 [ 502.843079][T14163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.843097][T14163] ? __pfx_ksys_write+0x10/0x10 [ 502.843114][T14163] ? do_syscall_64+0xbe/0x3b0 [ 502.843128][T14163] do_syscall_64+0xfa/0x3b0 [ 502.843139][T14163] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.843149][T14163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.843160][T14163] ? clear_bhb_loop+0x60/0xb0 [ 502.843172][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.843183][T14163] RIP: 0033:0x7fd5538a2519 [ 502.843195][T14163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.843204][T14163] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.843216][T14163] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 502.843224][T14163] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 502.843230][T14163] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 502.843237][T14163] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 502.843244][T14163] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000001a [ 502.843260][T14163] [ 503.444704][T14169] FAULT_INJECTION: forcing a failure. [ 503.444704][T14169] name failslab, interval 1, probability 0, space 0, times 0 [ 503.457401][T14169] CPU: 0 UID: 0 PID: 14169 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 503.457433][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.457446][T14169] Call Trace: [ 503.457455][T14169] [ 503.457463][T14169] dump_stack_lvl+0x189/0x250 [ 503.457493][T14169] ? __pfx____ratelimit+0x10/0x10 [ 503.457514][T14169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.457538][T14169] ? __pfx__printk+0x10/0x10 [ 503.457568][T14169] ? __lock_acquire+0xab9/0xd20 [ 503.457607][T14169] should_fail_ex+0x414/0x560 [ 503.457643][T14169] should_failslab+0xa8/0x100 [ 503.457674][T14169] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 503.457702][T14169] ? __alloc_skb+0x112/0x2d0 [ 503.457729][T14169] __alloc_skb+0x112/0x2d0 [ 503.457757][T14169] skb_copy+0x188/0x800 [ 503.457796][T14169] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 503.457840][T14169] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 503.457877][T14169] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 503.457906][T14169] mac80211_hwsim_tx+0x1855/0x25d0 [ 503.457948][T14169] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 503.457981][T14169] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 503.458003][T14169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.458024][T14169] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.458046][T14169] ? do_raw_spin_unlock+0x122/0x240 [ 503.458077][T14169] ieee80211_queue_skb+0x1a31/0x21c0 [ 503.458133][T14169] ieee80211_tx+0x297/0x420 [ 503.458159][T14169] ? __pfx_ieee80211_tx+0x10/0x10 [ 503.458205][T14169] ? ieee80211_xmit+0x315/0x400 [ 503.458233][T14169] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 503.458261][T14169] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 503.458301][T14169] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 503.458334][T14169] ? ieee80211_tx_control_port+0x765/0xcc0 [ 503.458366][T14169] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 503.458394][T14169] ieee80211_tx_control_port+0xabd/0xcc0 [ 503.458443][T14169] nl80211_tx_control_port+0x610/0x980 [ 503.458485][T14169] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 503.458516][T14169] ? nl80211_pre_doit+0x4f1/0x930 [ 503.458550][T14169] genl_family_rcv_msg_doit+0x212/0x300 [ 503.458586][T14169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 503.458628][T14169] ? bpf_lsm_capable+0x9/0x20 [ 503.458655][T14169] ? security_capable+0x7e/0x2e0 [ 503.458693][T14169] genl_rcv_msg+0x60e/0x790 [ 503.458727][T14169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.458752][T14169] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 503.458776][T14169] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 503.458800][T14169] ? __pfx_nl80211_post_doit+0x10/0x10 [ 503.458843][T14169] netlink_rcv_skb+0x208/0x470 [ 503.458862][T14169] ? __lock_acquire+0xab9/0xd20 [ 503.458891][T14169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.458919][T14169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.458962][T14169] ? down_read+0x1ad/0x2e0 [ 503.458988][T14169] genl_rcv+0x28/0x40 [ 503.459012][T14169] netlink_unicast+0x82f/0x9e0 [ 503.459052][T14169] ? __pfx_netlink_unicast+0x10/0x10 [ 503.459085][T14169] ? netlink_sendmsg+0x642/0xb30 [ 503.459105][T14169] ? skb_put+0x11b/0x210 [ 503.459132][T14169] netlink_sendmsg+0x805/0xb30 [ 503.459164][T14169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.459190][T14169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 503.459214][T14169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.459235][T14169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.459259][T14169] __sock_sendmsg+0x21c/0x270 [ 503.459293][T14169] ____sys_sendmsg+0x505/0x830 [ 503.459325][T14169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.459360][T14169] ? import_iovec+0x74/0xa0 [ 503.459391][T14169] ___sys_sendmsg+0x21f/0x2a0 [ 503.459424][T14169] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.459457][T14169] ? rcu_read_lock_any_held+0xb3/0x120 [ 503.459494][T14169] ? sb_end_write+0xe9/0x1c0 [ 503.459528][T14169] ? __pfx_vfs_write+0x10/0x10 [ 503.459566][T14169] __x64_sys_sendmsg+0x19b/0x260 [ 503.459594][T14169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.459631][T14169] ? __pfx_ksys_write+0x10/0x10 [ 503.459663][T14169] ? do_syscall_64+0xbe/0x3b0 [ 503.459689][T14169] do_syscall_64+0xfa/0x3b0 [ 503.459710][T14169] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.459730][T14169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.459750][T14169] ? clear_bhb_loop+0x60/0xb0 [ 503.459774][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.459793][T14169] RIP: 0033:0x7fd5538a2519 [ 503.459813][T14169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.459831][T14169] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.459852][T14169] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 503.459867][T14169] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 503.459880][T14169] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 503.459893][T14169] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 503.459906][T14169] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000001b [ 503.459939][T14169] [ 503.466058][T14170] FAULT_INJECTION: forcing a failure. [ 503.466058][T14170] name failslab, interval 1, probability 0, space 0, times 0 [ 503.967096][T14170] CPU: 0 UID: 0 PID: 14170 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 503.967118][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.967128][T14170] Call Trace: [ 503.967137][T14170] [ 503.967144][T14170] dump_stack_lvl+0x189/0x250 [ 503.967167][T14170] ? __pfx____ratelimit+0x10/0x10 [ 503.967183][T14170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.967202][T14170] ? __pfx__printk+0x10/0x10 [ 503.967226][T14170] ? __lock_acquire+0xab9/0xd20 [ 503.967247][T14170] should_fail_ex+0x414/0x560 [ 503.967266][T14170] should_failslab+0xa8/0x100 [ 503.967283][T14170] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 503.967299][T14170] ? __alloc_skb+0x112/0x2d0 [ 503.967313][T14170] __alloc_skb+0x112/0x2d0 [ 503.967327][T14170] skb_copy+0x188/0x800 [ 503.967348][T14170] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 503.967371][T14170] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 503.967391][T14170] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 503.967406][T14170] mac80211_hwsim_tx+0x1855/0x25d0 [ 503.967427][T14170] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 503.967445][T14170] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 503.967456][T14170] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.967467][T14170] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.967478][T14170] ? do_raw_spin_unlock+0x122/0x240 [ 503.967494][T14170] ieee80211_queue_skb+0x1a31/0x21c0 [ 503.967523][T14170] ieee80211_tx+0x297/0x420 [ 503.967537][T14170] ? __pfx_ieee80211_tx+0x10/0x10 [ 503.967560][T14170] ? ieee80211_xmit+0x315/0x400 [ 503.967575][T14170] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 503.967589][T14170] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 503.967610][T14170] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 503.967627][T14170] ? ieee80211_tx_control_port+0x765/0xcc0 [ 503.967643][T14170] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 503.967658][T14170] ieee80211_tx_control_port+0xabd/0xcc0 [ 503.967680][T14170] nl80211_tx_control_port+0x610/0x980 [ 503.967702][T14170] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 503.967718][T14170] ? nl80211_pre_doit+0x4f1/0x930 [ 503.967736][T14170] genl_family_rcv_msg_doit+0x212/0x300 [ 503.967756][T14170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 503.967778][T14170] ? bpf_lsm_capable+0x9/0x20 [ 503.967792][T14170] ? security_capable+0x7e/0x2e0 [ 503.967812][T14170] genl_rcv_msg+0x60e/0x790 [ 503.967830][T14170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.967843][T14170] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 503.967856][T14170] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 503.967869][T14170] ? __pfx_nl80211_post_doit+0x10/0x10 [ 503.967890][T14170] netlink_rcv_skb+0x208/0x470 [ 503.967900][T14170] ? __lock_acquire+0xab9/0xd20 [ 503.967915][T14170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.967930][T14170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.967952][T14170] ? down_read+0x1ad/0x2e0 [ 503.967966][T14170] genl_rcv+0x28/0x40 [ 503.967978][T14170] netlink_unicast+0x82f/0x9e0 [ 503.967999][T14170] ? __pfx_netlink_unicast+0x10/0x10 [ 503.968017][T14170] ? netlink_sendmsg+0x642/0xb30 [ 503.968027][T14170] ? skb_put+0x11b/0x210 [ 503.968041][T14170] netlink_sendmsg+0x805/0xb30 [ 503.968057][T14170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.968070][T14170] ? aa_sock_msg_perm+0xf1/0x1d0 [ 503.968082][T14170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.968094][T14170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.968106][T14170] __sock_sendmsg+0x21c/0x270 [ 503.968124][T14170] ____sys_sendmsg+0x505/0x830 [ 503.968140][T14170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.968158][T14170] ? import_iovec+0x74/0xa0 [ 503.968175][T14170] ___sys_sendmsg+0x21f/0x2a0 [ 503.968190][T14170] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.968211][T14170] ? rcu_read_lock_any_held+0xb3/0x120 [ 503.968230][T14170] ? sb_end_write+0xe9/0x1c0 [ 503.968248][T14170] ? __pfx_vfs_write+0x10/0x10 [ 503.968267][T14170] __x64_sys_sendmsg+0x19b/0x260 [ 503.968281][T14170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.968299][T14170] ? __pfx_ksys_write+0x10/0x10 [ 503.968316][T14170] ? do_syscall_64+0xbe/0x3b0 [ 503.968330][T14170] do_syscall_64+0xfa/0x3b0 [ 503.968341][T14170] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.968351][T14170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.968362][T14170] ? clear_bhb_loop+0x60/0xb0 [ 503.968374][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.968385][T14170] RIP: 0033:0x7fd5538a2519 [ 503.968397][T14170] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.968406][T14170] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.968418][T14170] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 503.968426][T14170] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 503.968432][T14170] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 503.968440][T14170] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 503.968446][T14170] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 0000000000000019 [ 503.968463][T14170] [ 504.520260][T14173] FAULT_INJECTION: forcing a failure. [ 504.520260][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 504.533073][T14173] CPU: 1 UID: 0 PID: 14173 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 504.533099][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.533111][T14173] Call Trace: [ 504.533119][T14173] [ 504.533129][T14173] dump_stack_lvl+0x189/0x250 [ 504.533158][T14173] ? __pfx____ratelimit+0x10/0x10 [ 504.533179][T14173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.533203][T14173] ? __pfx__printk+0x10/0x10 [ 504.533233][T14173] ? __lock_acquire+0xab9/0xd20 [ 504.533272][T14173] should_fail_ex+0x414/0x560 [ 504.533307][T14173] should_failslab+0xa8/0x100 [ 504.533338][T14173] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 504.533367][T14173] ? __alloc_skb+0x112/0x2d0 [ 504.533394][T14173] __alloc_skb+0x112/0x2d0 [ 504.533421][T14173] skb_copy+0x188/0x800 [ 504.533460][T14173] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 504.533505][T14173] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 504.533543][T14173] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 504.533573][T14173] mac80211_hwsim_tx+0x1855/0x25d0 [ 504.533617][T14173] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 504.533650][T14173] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 504.533672][T14173] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.533694][T14173] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.533717][T14173] ? do_raw_spin_unlock+0x122/0x240 [ 504.533748][T14173] ieee80211_queue_skb+0x1a31/0x21c0 [ 504.533805][T14173] ieee80211_tx+0x297/0x420 [ 504.533832][T14173] ? __pfx_ieee80211_tx+0x10/0x10 [ 504.533880][T14173] ? ieee80211_xmit+0x315/0x400 [ 504.533909][T14173] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 504.533937][T14173] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 504.533978][T14173] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 504.534011][T14173] ? ieee80211_tx_control_port+0x765/0xcc0 [ 504.534043][T14173] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 504.534080][T14173] ieee80211_tx_control_port+0xabd/0xcc0 [ 504.534119][T14173] nl80211_tx_control_port+0x610/0x980 [ 504.534159][T14173] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 504.534191][T14173] ? nl80211_pre_doit+0x4f1/0x930 [ 504.534226][T14173] genl_family_rcv_msg_doit+0x212/0x300 [ 504.534262][T14173] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.534305][T14173] ? bpf_lsm_capable+0x9/0x20 [ 504.534330][T14173] ? security_capable+0x7e/0x2e0 [ 504.534368][T14173] genl_rcv_msg+0x60e/0x790 [ 504.534401][T14173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.534427][T14173] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 504.534451][T14173] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 504.534475][T14173] ? __pfx_nl80211_post_doit+0x10/0x10 [ 504.534518][T14173] netlink_rcv_skb+0x208/0x470 [ 504.534538][T14173] ? __lock_acquire+0xab9/0xd20 [ 504.534566][T14173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.534595][T14173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.534639][T14173] ? down_read+0x1ad/0x2e0 [ 504.534680][T14173] genl_rcv+0x28/0x40 [ 504.534705][T14173] netlink_unicast+0x82f/0x9e0 [ 504.534745][T14173] ? __pfx_netlink_unicast+0x10/0x10 [ 504.534777][T14173] ? netlink_sendmsg+0x642/0xb30 [ 504.534797][T14173] ? skb_put+0x11b/0x210 [ 504.534825][T14173] netlink_sendmsg+0x805/0xb30 [ 504.534858][T14173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.534884][T14173] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.534905][T14173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.534926][T14173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.534949][T14173] __sock_sendmsg+0x21c/0x270 [ 504.534981][T14173] ____sys_sendmsg+0x505/0x830 [ 504.535011][T14173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.535046][T14173] ? import_iovec+0x74/0xa0 [ 504.535084][T14173] ___sys_sendmsg+0x21f/0x2a0 [ 504.535113][T14173] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.535146][T14173] ? rcu_read_lock_any_held+0xb3/0x120 [ 504.535182][T14173] ? sb_end_write+0xe9/0x1c0 [ 504.535213][T14173] ? __pfx_vfs_write+0x10/0x10 [ 504.535248][T14173] __x64_sys_sendmsg+0x19b/0x260 [ 504.535276][T14173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.535311][T14173] ? __pfx_ksys_write+0x10/0x10 [ 504.535343][T14173] ? do_syscall_64+0xbe/0x3b0 [ 504.535369][T14173] do_syscall_64+0xfa/0x3b0 [ 504.535389][T14173] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.535410][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.535429][T14173] ? clear_bhb_loop+0x60/0xb0 [ 504.535459][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.535482][T14173] RIP: 0033:0x7fd5538a2519 [ 504.535500][T14173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.535518][T14173] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.535540][T14173] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 504.535560][T14173] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 504.535576][T14173] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 504.535589][T14173] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 504.535602][T14173] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000001c [ 504.535642][T14173] [ 505.107634][T14177] FAULT_INJECTION: forcing a failure. [ 505.107634][T14177] name failslab, interval 1, probability 0, space 0, times 0 [ 505.120312][T14177] CPU: 1 UID: 0 PID: 14177 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 505.120338][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.120350][T14177] Call Trace: [ 505.120358][T14177] [ 505.120368][T14177] dump_stack_lvl+0x189/0x250 [ 505.120397][T14177] ? __pfx____ratelimit+0x10/0x10 [ 505.120418][T14177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.120442][T14177] ? __pfx__printk+0x10/0x10 [ 505.120471][T14177] ? __lock_acquire+0xab9/0xd20 [ 505.120510][T14177] should_fail_ex+0x414/0x560 [ 505.120545][T14177] should_failslab+0xa8/0x100 [ 505.120576][T14177] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 505.120604][T14177] ? __alloc_skb+0x112/0x2d0 [ 505.120632][T14177] __alloc_skb+0x112/0x2d0 [ 505.120658][T14177] skb_copy+0x188/0x800 [ 505.120697][T14177] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 505.120742][T14177] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 505.120780][T14177] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 505.120810][T14177] mac80211_hwsim_tx+0x1855/0x25d0 [ 505.120852][T14177] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 505.120885][T14177] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 505.120907][T14177] ? __local_bh_enable_ip+0x12d/0x1c0 [ 505.120928][T14177] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.120950][T14177] ? do_raw_spin_unlock+0x122/0x240 [ 505.120980][T14177] ieee80211_queue_skb+0x1a31/0x21c0 [ 505.121035][T14177] ieee80211_tx+0x297/0x420 [ 505.121061][T14177] ? __pfx_ieee80211_tx+0x10/0x10 [ 505.121107][T14177] ? ieee80211_xmit+0x315/0x400 [ 505.121135][T14177] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 505.121163][T14177] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 505.121204][T14177] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 505.121236][T14177] ? ieee80211_tx_control_port+0x765/0xcc0 [ 505.121267][T14177] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 505.121301][T14177] ieee80211_tx_control_port+0xabd/0xcc0 [ 505.121344][T14177] nl80211_tx_control_port+0x610/0x980 [ 505.121383][T14177] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 505.121415][T14177] ? nl80211_pre_doit+0x4f1/0x930 [ 505.121448][T14177] genl_family_rcv_msg_doit+0x212/0x300 [ 505.121485][T14177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.121527][T14177] ? bpf_lsm_capable+0x9/0x20 [ 505.121553][T14177] ? security_capable+0x7e/0x2e0 [ 505.121591][T14177] genl_rcv_msg+0x60e/0x790 [ 505.121625][T14177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.121650][T14177] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 505.121674][T14177] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 505.121697][T14177] ? __pfx_nl80211_post_doit+0x10/0x10 [ 505.121739][T14177] netlink_rcv_skb+0x208/0x470 [ 505.121758][T14177] ? __lock_acquire+0xab9/0xd20 [ 505.121786][T14177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.121813][T14177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.121849][T14177] ? down_read+0x1ad/0x2e0 [ 505.121877][T14177] genl_rcv+0x28/0x40 [ 505.121901][T14177] netlink_unicast+0x82f/0x9e0 [ 505.121942][T14177] ? __pfx_netlink_unicast+0x10/0x10 [ 505.121976][T14177] ? netlink_sendmsg+0x642/0xb30 [ 505.121995][T14177] ? skb_put+0x11b/0x210 [ 505.122022][T14177] netlink_sendmsg+0x805/0xb30 [ 505.122056][T14177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.122080][T14177] ? aa_sock_msg_perm+0xf1/0x1d0 [ 505.122103][T14177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.122126][T14177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.122149][T14177] __sock_sendmsg+0x21c/0x270 [ 505.122182][T14177] ____sys_sendmsg+0x505/0x830 [ 505.122214][T14177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.122250][T14177] ? import_iovec+0x74/0xa0 [ 505.122288][T14177] ___sys_sendmsg+0x21f/0x2a0 [ 505.122317][T14177] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.122348][T14177] ? rcu_read_lock_any_held+0xb3/0x120 [ 505.122384][T14177] ? sb_end_write+0xe9/0x1c0 [ 505.122419][T14177] ? __pfx_vfs_write+0x10/0x10 [ 505.122457][T14177] __x64_sys_sendmsg+0x19b/0x260 [ 505.122486][T14177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.122522][T14177] ? __pfx_ksys_write+0x10/0x10 [ 505.122554][T14177] ? do_syscall_64+0xbe/0x3b0 [ 505.122582][T14177] do_syscall_64+0xfa/0x3b0 [ 505.122602][T14177] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.122622][T14177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.122643][T14177] ? clear_bhb_loop+0x60/0xb0 [ 505.122668][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.122687][T14177] RIP: 0033:0x7fd5538a2519 [ 505.122704][T14177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.122721][T14177] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.122741][T14177] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 505.122756][T14177] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 505.122769][T14177] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 505.122782][T14177] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 505.122794][T14177] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000001d [ 505.122826][T14177] [ 505.633322][ T2928] ------------[ cut here ]------------ [ 505.643078][ T2928] Have pending ack frames! [ 505.673573][ T2928] WARNING: CPU: 0 PID: 2928 at net/mac80211/main.c:1701 ieee80211_free_ack_frame+0x4d/0x60 [ 505.683665][ T2928] Modules linked in: [ 505.687809][ T2928] CPU: 0 UID: 0 PID: 2928 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 505.697360][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.707459][ T2928] Workqueue: netns cleanup_net [ 505.712250][ T2928] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 505.718531][ T2928] Code: 00 00 e8 76 da 73 fe 31 c0 5b c3 cc cc cc cc cc e8 08 4d d8 f6 c6 05 91 31 a6 04 01 90 48 c7 c7 a0 2c b0 8c e8 54 e8 9b f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 505.738296][ T2928] RSP: 0018:ffffc9000bc27610 EFLAGS: 00010246 [ 505.744384][ T2928] RAX: c3f82c5dc177a400 RBX: ffff888073c78140 RCX: ffff88802e835a00 [ 505.752417][ T2928] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 505.760453][ T2928] RBP: ffffc9000bc27718 R08: 0000000000000003 R09: 0000000000000004 [ 505.764277][T14183] FAULT_INJECTION: forcing a failure. [ 505.764277][T14183] name failslab, interval 1, probability 0, space 0, times 0 [ 505.768471][ T2928] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffffc9000bc27680 [ 505.781070][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz-executor155 Not tainted syzkaller #0 PREEMPT(full) [ 505.781092][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.781104][T14183] Call Trace: [ 505.781113][T14183] [ 505.781121][T14183] dump_stack_lvl+0x189/0x250 [ 505.781148][T14183] ? __pfx____ratelimit+0x10/0x10 [ 505.781169][T14183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.781191][T14183] ? __pfx__printk+0x10/0x10 [ 505.781214][T14183] ? __lock_acquire+0xab9/0xd20 [ 505.781243][T14183] should_fail_ex+0x414/0x560 [ 505.781269][T14183] should_failslab+0xa8/0x100 [ 505.781300][T14183] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 505.781321][T14183] ? __alloc_skb+0x112/0x2d0 [ 505.781341][T14183] __alloc_skb+0x112/0x2d0 [ 505.781360][T14183] skb_copy+0x188/0x800 [ 505.781389][T14183] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 505.781421][T14183] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 505.781450][T14183] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 505.781471][T14183] mac80211_hwsim_tx+0x1855/0x25d0 [ 505.781502][T14183] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 505.781526][T14183] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 505.781543][T14183] ? __local_bh_enable_ip+0x12d/0x1c0 [ 505.781559][T14183] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.781575][T14183] ? do_raw_spin_unlock+0x122/0x240 [ 505.781598][T14183] ieee80211_queue_skb+0x1a31/0x21c0 [ 505.781638][T14183] ieee80211_tx+0x297/0x420 [ 505.781657][T14183] ? __pfx_ieee80211_tx+0x10/0x10 [ 505.781690][T14183] ? ieee80211_xmit+0x315/0x400 [ 505.781711][T14183] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 505.781731][T14183] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 505.781761][T14183] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 505.781785][T14183] ? ieee80211_tx_control_port+0x765/0xcc0 [ 505.781809][T14183] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 505.781830][T14183] ieee80211_tx_control_port+0xabd/0xcc0 [ 505.781862][T14183] nl80211_tx_control_port+0x610/0x980 [ 505.781891][T14183] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 505.781914][T14183] ? nl80211_pre_doit+0x4f1/0x930 [ 505.781941][T14183] genl_family_rcv_msg_doit+0x212/0x300 [ 505.781965][T14183] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.781986][T14183] ? bpf_lsm_capable+0x9/0x20 [ 505.782001][T14183] ? security_capable+0x7e/0x2e0 [ 505.782021][T14183] genl_rcv_msg+0x60e/0x790 [ 505.782039][T14183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.782052][T14183] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 505.782065][T14183] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 505.782077][T14183] ? __pfx_nl80211_post_doit+0x10/0x10 [ 505.782098][T14183] netlink_rcv_skb+0x208/0x470 [ 505.782108][T14183] ? __lock_acquire+0xab9/0xd20 [ 505.782123][T14183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.782138][T14183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.782159][T14183] ? down_read+0x1ad/0x2e0 [ 505.782173][T14183] genl_rcv+0x28/0x40 [ 505.782185][T14183] netlink_unicast+0x82f/0x9e0 [ 505.782206][T14183] ? __pfx_netlink_unicast+0x10/0x10 [ 505.782223][T14183] ? netlink_sendmsg+0x642/0xb30 [ 505.782233][T14183] ? skb_put+0x11b/0x210 [ 505.782247][T14183] netlink_sendmsg+0x805/0xb30 [ 505.782263][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.782276][T14183] ? aa_sock_msg_perm+0xf1/0x1d0 [ 505.782293][T14183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.782304][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.782316][T14183] __sock_sendmsg+0x21c/0x270 [ 505.782334][T14183] ____sys_sendmsg+0x505/0x830 [ 505.782351][T14183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.782369][T14183] ? import_iovec+0x74/0xa0 [ 505.782385][T14183] ___sys_sendmsg+0x21f/0x2a0 [ 505.782400][T14183] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.782417][T14183] ? rcu_read_lock_any_held+0xb3/0x120 [ 505.782436][T14183] ? sb_end_write+0xe9/0x1c0 [ 505.782454][T14183] ? __pfx_vfs_write+0x10/0x10 [ 505.782473][T14183] __x64_sys_sendmsg+0x19b/0x260 [ 505.782488][T14183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.782506][T14183] ? __pfx_ksys_write+0x10/0x10 [ 505.782523][T14183] ? do_syscall_64+0xbe/0x3b0 [ 505.782537][T14183] do_syscall_64+0xfa/0x3b0 [ 505.782547][T14183] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.782558][T14183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.782569][T14183] ? clear_bhb_loop+0x60/0xb0 [ 505.782582][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.782592][T14183] RIP: 0033:0x7fd5538a2519 [ 505.782602][T14183] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.782612][T14183] RSP: 002b:00007fffe8fb9d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.782624][T14183] RAX: ffffffffffffffda RBX: 00007fffe8fb9d90 RCX: 00007fd5538a2519 [ 505.782632][T14183] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 505.782639][T14183] RBP: 0000000000000002 R08: 00007fffe8fb9b06 R09: 0000000000000000 [ 505.782645][T14183] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fffe8fb9d8c [ 505.782652][T14183] R13: 00007fffe8fb9dd0 R14: 00007fffe8fb9db0 R15: 000000000000001e [ 505.782668][T14183] [ 506.288411][ T2928] R13: ffff88802556f470 R14: ffff88803293afa0 R15: 0000000000000001 [ 506.296473][ T2928] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 506.305415][ T2928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.312067][ T2928] CR2: 00007fff211fd180 CR3: 00000000743e6000 CR4: 00000000003526f0 [ 506.320095][ T2928] Call Trace: [ 506.323388][ T2928] [ 506.326329][ T2928] idr_for_each+0x1b5/0x290 [ 506.330905][ T2928] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 506.337036][ T2928] ? __pfx_idr_for_each+0x10/0x10 [ 506.342089][ T2928] ? kobject_put+0x270/0x480 [ 506.346743][ T2928] ? kfree+0x18e/0x440 [ 506.350835][ T2928] ieee80211_free_hw+0x44/0x3d0 [ 506.355711][ T2928] mac80211_hwsim_del_radio+0x2de/0x460 [ 506.361336][ T2928] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 506.367469][ T2928] hwsim_exit_net+0x584/0x640 [ 506.372185][ T2928] ? __pfx_hwsim_exit_net+0x10/0x10 [ 506.377467][ T2928] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 506.383296][ T2928] ops_undo_list+0x49a/0x990 [ 506.388616][ T2928] ? __pfx_ops_undo_list+0x10/0x10 [ 506.393746][ T2928] ? do_raw_spin_unlock+0x122/0x240 [ 506.399495][ T2928] cleanup_net+0x4c5/0x800 [ 506.403933][ T2928] ? __pfx_cleanup_net+0x10/0x10 [ 506.409030][ T2928] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.414250][ T2928] ? process_scheduled_works+0x9ef/0x17b0 [ 506.420028][ T2928] ? process_scheduled_works+0x9ef/0x17b0 [ 506.425758][ T2928] process_scheduled_works+0xae1/0x17b0 [ 506.431389][ T2928] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.437496][ T2928] worker_thread+0x8a0/0xda0 [ 506.442199][ T2928] kthread+0x70e/0x8a0 [ 506.446296][ T2928] ? __pfx_worker_thread+0x10/0x10 [ 506.451474][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.456101][ T2928] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.461377][ T2928] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.466624][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.471252][ T2928] ret_from_fork+0x436/0x7d0 [ 506.475864][ T2928] ? __pfx_ret_from_fork+0x10/0x10 [ 506.481047][ T2928] ? __switch_to_asm+0x39/0x70 [ 506.485852][ T2928] ? __switch_to_asm+0x33/0x70 [ 506.491328][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.495955][ T2928] ret_from_fork_asm+0x1a/0x30 [ 506.501286][ T2928] [ 506.504338][ T2928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.511629][ T2928] CPU: 0 UID: 0 PID: 2928 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 506.521095][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.531172][ T2928] Workqueue: netns cleanup_net [ 506.535970][ T2928] Call Trace: [ 506.539257][ T2928] [ 506.542198][ T2928] dump_stack_lvl+0x99/0x250 [ 506.546804][ T2928] ? __asan_memcpy+0x40/0x70 [ 506.551398][ T2928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.556592][ T2928] ? __pfx__printk+0x10/0x10 [ 506.561193][ T2928] vpanic+0x281/0x750 [ 506.565186][ T2928] ? __pfx__printk+0x10/0x10 [ 506.569775][ T2928] ? __pfx_vpanic+0x10/0x10 [ 506.574289][ T2928] ? is_bpf_text_address+0x292/0x2b0 [ 506.579583][ T2928] panic+0xb9/0xc0 [ 506.583298][ T2928] ? __pfx_panic+0x10/0x10 [ 506.587723][ T2928] __warn+0x31b/0x4b0 [ 506.591697][ T2928] ? ieee80211_free_ack_frame+0x4d/0x60 [ 506.597250][ T2928] ? ieee80211_free_ack_frame+0x4d/0x60 [ 506.602799][ T2928] report_bug+0x2be/0x4f0 [ 506.607121][ T2928] ? ieee80211_free_ack_frame+0x4d/0x60 [ 506.612670][ T2928] ? ieee80211_free_ack_frame+0x4d/0x60 [ 506.618213][ T2928] ? ieee80211_free_ack_frame+0x4f/0x60 [ 506.623757][ T2928] handle_bug+0x84/0x160 [ 506.627997][ T2928] exc_invalid_op+0x1a/0x50 [ 506.632505][ T2928] asm_exc_invalid_op+0x1a/0x20 [ 506.637348][ T2928] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 506.643515][ T2928] Code: 00 00 e8 76 da 73 fe 31 c0 5b c3 cc cc cc cc cc e8 08 4d d8 f6 c6 05 91 31 a6 04 01 90 48 c7 c7 a0 2c b0 8c e8 54 e8 9b f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 506.663117][ T2928] RSP: 0018:ffffc9000bc27610 EFLAGS: 00010246 [ 506.669188][ T2928] RAX: c3f82c5dc177a400 RBX: ffff888073c78140 RCX: ffff88802e835a00 [ 506.677158][ T2928] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 506.685122][ T2928] RBP: ffffc9000bc27718 R08: 0000000000000003 R09: 0000000000000004 [ 506.693090][ T2928] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffffc9000bc27680 [ 506.701057][ T2928] R13: ffff88802556f470 R14: ffff88803293afa0 R15: 0000000000000001 [ 506.709041][ T2928] idr_for_each+0x1b5/0x290 [ 506.713542][ T2928] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 506.719610][ T2928] ? __pfx_idr_for_each+0x10/0x10 [ 506.724632][ T2928] ? kobject_put+0x270/0x480 [ 506.729215][ T2928] ? kfree+0x18e/0x440 [ 506.733290][ T2928] ieee80211_free_hw+0x44/0x3d0 [ 506.738160][ T2928] mac80211_hwsim_del_radio+0x2de/0x460 [ 506.743710][ T2928] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 506.749786][ T2928] hwsim_exit_net+0x584/0x640 [ 506.754478][ T2928] ? __pfx_hwsim_exit_net+0x10/0x10 [ 506.759678][ T2928] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 506.765507][ T2928] ops_undo_list+0x49a/0x990 [ 506.770097][ T2928] ? __pfx_ops_undo_list+0x10/0x10 [ 506.775214][ T2928] ? do_raw_spin_unlock+0x122/0x240 [ 506.780447][ T2928] cleanup_net+0x4c5/0x800 [ 506.784879][ T2928] ? __pfx_cleanup_net+0x10/0x10 [ 506.789829][ T2928] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.795028][ T2928] ? process_scheduled_works+0x9ef/0x17b0 [ 506.800832][ T2928] ? process_scheduled_works+0x9ef/0x17b0 [ 506.806599][ T2928] process_scheduled_works+0xae1/0x17b0 [ 506.812164][ T2928] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.818156][ T2928] worker_thread+0x8a0/0xda0 [ 506.822760][ T2928] kthread+0x70e/0x8a0 [ 506.826827][ T2928] ? __pfx_worker_thread+0x10/0x10 [ 506.831930][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.836516][ T2928] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.841716][ T2928] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.846906][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.851494][ T2928] ret_from_fork+0x436/0x7d0 [ 506.856080][ T2928] ? __pfx_ret_from_fork+0x10/0x10 [ 506.861190][ T2928] ? __switch_to_asm+0x39/0x70 [ 506.865949][ T2928] ? __switch_to_asm+0x33/0x70 [ 506.870705][ T2928] ? __pfx_kthread+0x10/0x10 [ 506.875292][ T2928] ret_from_fork_asm+0x1a/0x30 [ 506.880078][ T2928] [ 506.883345][ T2928] Kernel Offset: disabled [ 506.887773][ T2928] Rebooting in 86400 seconds..