last executing test programs: 7.613621724s ago: executing program 1 (id=2070): select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000240)="e3", 0x1}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fuse/parameters/max_user_bgreq\x00', 0xc0481, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='%!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250300000009000200cacd2dff11000000040012"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$auto(0x3, 0x0, 0x7) 6.509669522s ago: executing program 2 (id=2075): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x10, 0x80000, 0x7) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r0, &(0x7f0000000000)=':\xbf+,\x8a}\x00', 0x0, 0x7bf, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x2, 0x0) socket(0x2, 0x3, 0x100) 6.477968255s ago: executing program 1 (id=2076): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x13, 0x4008df3, 0x0) sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) clone$auto(0x20003b46, 0x80000001, 0x0, 0x0, 0x2) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/usermodehelper/bset\x00', 0x18b802, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket(0x29, 0x800, 0xa) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 6.259087244s ago: executing program 1 (id=2078): close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_pid\x00', 0x24af41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x43, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp8\x00', 0x800, 0x0) socketpair$auto(0x1f, 0x0, 0xfffffffd, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x800455ca, r0) 5.749876615s ago: executing program 1 (id=2081): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b45, r0) socket(0x18, 0x2, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) 5.478357604s ago: executing program 2 (id=2082): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 3.538575507s ago: executing program 3 (id=2086): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/firmware/acpi/tables/APIC\x00', 0x0, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x4020009, 0xe2, 0x4000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) madvise$auto(0x0, 0x400053, 0x9) read$auto(r2, 0x0, 0xb4d3) read$auto(r1, 0x0, 0x7) pread64$auto(r0, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) 3.383769589s ago: executing program 1 (id=2087): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2061, 0x0) write$auto(r1, 0x0, 0x80) ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000040)=0x4ec) listen$auto(0x3, 0x81) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 3.316513075s ago: executing program 0 (id=2088): pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb0xffffffffffffffff, 0xffffffff}, 0x1) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r8, 0x4f13, 0x33, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r7, 0x8004500b, 0x0) kernel console output (not intermixed with test programs): R13: 00007fdb127e6128 R14: 00007fdb127e6090 R15: 00007ffc2513b9f8 [ 297.862959][ T9396] [ 298.326878][ T5841] Bluetooth: hci0: command 0x2016 tx timeout [ 298.409378][ T5844] Bluetooth: hci3: command 0x2016 tx timeout [ 298.419164][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.486926][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.564760][ T9400] tipc: Withdrawal distribution failure [ 300.168698][ T9435] Invalid ELF header magic: != ELF [ 300.692413][ T9442] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[9442] [ 301.212665][ T9454] netlink: 306 bytes leftover after parsing attributes in process `syz.0.968'. [ 301.422852][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.449940][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.481248][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.508140][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.526124][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.544890][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.563676][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.587482][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.606284][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.631459][ T9463] netlink: 338 bytes leftover after parsing attributes in process `syz.1.970'. [ 301.637375][ T9460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.643592][ T9463] netlink: 338 bytes leftover after parsing attributes in process `syz.1.970'. [ 301.924454][ T9471] zswap: compressor not available [ 302.511541][ T9489] kvm: kvm [9488]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 302.763181][ T9494] FAULT_INJECTION: forcing a failure. [ 302.763181][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 302.825813][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.0.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.825846][ T9494] Tainted: [L]=SOFTLOCKUP [ 302.825851][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.825860][ T9494] Call Trace: [ 302.825866][ T9494] [ 302.825872][ T9494] dump_stack_lvl+0x16c/0x1f0 [ 302.825901][ T9494] should_fail_ex+0x512/0x640 [ 302.825919][ T9494] ? __kmalloc_cache_noprof+0x5f/0x800 [ 302.825937][ T9494] should_failslab+0xc2/0x120 [ 302.825959][ T9494] __kmalloc_cache_noprof+0x80/0x800 [ 302.825975][ T9494] ? file_f_owner_allocate+0x84/0x130 [ 302.825993][ T9494] ? file_f_owner_allocate+0x84/0x130 [ 302.826007][ T9494] file_f_owner_allocate+0x84/0x130 [ 302.826021][ T9494] f_setown+0x79/0x290 [ 302.826036][ T9494] do_fcntl+0x785/0x1660 [ 302.826050][ T9494] ? __pfx_do_fcntl+0x10/0x10 [ 302.826073][ T9494] ? tomoyo_file_fcntl+0x6c/0xc0 [ 302.826096][ T9494] __x64_sys_fcntl+0x163/0x200 [ 302.826112][ T9494] do_syscall_64+0xcd/0xf80 [ 302.826125][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.826139][ T9494] RIP: 0033:0x7fe233b8f7c9 [ 302.826152][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.826165][ T9494] RSP: 002b:00007fe234ad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 302.826178][ T9494] RAX: ffffffffffffffda RBX: 00007fe233de6090 RCX: 00007fe233b8f7c9 [ 302.826187][ T9494] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 302.826195][ T9494] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 302.826202][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.826210][ T9494] R13: 00007fe233de6128 R14: 00007fe233de6090 R15: 00007ffc418baa18 [ 302.826228][ T9494] [ 303.662739][ T9513] FAULT_INJECTION: forcing a failure. [ 303.662739][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 303.676830][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.0.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.676872][ T9513] Tainted: [L]=SOFTLOCKUP [ 303.676881][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.676896][ T9513] Call Trace: [ 303.676904][ T9513] [ 303.676915][ T9513] dump_stack_lvl+0x16c/0x1f0 [ 303.676971][ T9513] should_fail_ex+0x512/0x640 [ 303.677001][ T9513] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 303.677042][ T9513] should_failslab+0xc2/0x120 [ 303.677079][ T9513] __kmalloc_cache_node_noprof+0x83/0x830 [ 303.677114][ T9513] ? __alloc_workqueue+0x801/0x1810 [ 303.677158][ T9513] ? __alloc_workqueue+0x801/0x1810 [ 303.677192][ T9513] __alloc_workqueue+0x801/0x1810 [ 303.677240][ T9513] alloc_workqueue_noprof+0xd2/0x200 [ 303.677277][ T9513] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 303.677317][ T9513] ? rcu_is_watching+0x12/0xc0 [ 303.677349][ T9513] ? trace_kmalloc+0x2b/0xb0 [ 303.677382][ T9513] ? __kmalloc_noprof+0x35d/0x910 [ 303.677409][ T9513] ? ieee80211_register_hw+0x15c9/0x4160 [ 303.677441][ T9513] ieee80211_register_hw+0x1f1a/0x4160 [ 303.677472][ T9513] ? lockdep_hardirqs_on+0x11/0x110 [ 303.677509][ T9513] ? _raw_spin_unlock+0x41/0x50 [ 303.677545][ T9513] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 303.677571][ T9513] ? __pfx___debug_object_init+0x10/0x10 [ 303.677612][ T9513] ? find_held_lock+0x2b/0x80 [ 303.677643][ T9513] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 303.677680][ T9513] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 303.677715][ T9513] ? __hrtimer_setup+0x176/0x280 [ 303.677752][ T9513] mac80211_hwsim_new_radio+0x3323/0x5150 [ 303.677803][ T9513] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 303.677852][ T9513] hwsim_new_radio_nl+0xba2/0x1330 [ 303.677887][ T9513] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.677929][ T9513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 303.677968][ T9513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 303.678005][ T9513] genl_family_rcv_msg_doit+0x209/0x2f0 [ 303.678035][ T9513] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 303.678062][ T9513] ? genl_get_cmd+0x194/0x580 [ 303.678093][ T9513] ? bpf_lsm_capable+0x9/0x10 [ 303.678124][ T9513] ? security_capable+0x7e/0x260 [ 303.678160][ T9513] ? ns_capable+0xd7/0x110 [ 303.678193][ T9513] genl_rcv_msg+0x55c/0x800 [ 303.678223][ T9513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.678249][ T9513] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.678291][ T9513] netlink_rcv_skb+0x158/0x420 [ 303.678327][ T9513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.678353][ T9513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.678404][ T9513] ? netlink_deliver_tap+0x1ae/0xd30 [ 303.678444][ T9513] genl_rcv+0x28/0x40 [ 303.678465][ T9513] netlink_unicast+0x5aa/0x870 [ 303.678506][ T9513] ? __pfx_netlink_unicast+0x10/0x10 [ 303.678555][ T9513] netlink_sendmsg+0x8c8/0xdd0 [ 303.678597][ T9513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.678637][ T9513] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 303.678683][ T9513] ____sys_sendmsg+0xa5d/0xc30 [ 303.678707][ T9513] ? copy_msghdr_from_user+0x10a/0x160 [ 303.678739][ T9513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.678760][ T9513] ? preempt_schedule_thunk+0x16/0x30 [ 303.678791][ T9513] ? try_to_wake_up+0xa67/0x1860 [ 303.678829][ T9513] ___sys_sendmsg+0x134/0x1d0 [ 303.678864][ T9513] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.678897][ T9513] ? futex_private_hash_put+0x160/0x1b0 [ 303.678977][ T9513] __sys_sendmsg+0x16d/0x220 [ 303.679014][ T9513] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.679047][ T9513] ? __x64_sys_futex+0x1e0/0x4c0 [ 303.679099][ T9513] do_syscall_64+0xcd/0xf80 [ 303.679126][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.679152][ T9513] RIP: 0033:0x7fe233b8f7c9 [ 303.679174][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.679198][ T9513] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.679222][ T9513] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 303.679238][ T9513] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 303.679255][ T9513] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 303.679270][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.679285][ T9513] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 303.679321][ T9513] [ 304.434157][ T9521] zswap: compressor not available [ 304.870500][ T9528] netlink: 354 bytes leftover after parsing attributes in process `syz.2.989'. [ 305.555601][ T9538] netlink: 338 bytes leftover after parsing attributes in process `syz.3.991'. [ 305.719903][ T9540] netlink: 25 bytes leftover after parsing attributes in process `syz.2.992'. [ 306.163154][ T9552] netlink: 'syz.1.996': attribute type 4 has an invalid length. [ 306.182932][ T9552] netlink: 'syz.1.996': attribute type 5 has an invalid length. [ 306.205949][ T9552] netlink: 10 bytes leftover after parsing attributes in process `syz.1.996'. [ 306.538184][ T9558] program syz.0.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.809727][ T9569] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1001'. [ 309.258246][ T9622] net_ratelimit: 21 callbacks suppressed [ 309.258275][ T9622] netlink: set zone limit has 8 unknown bytes [ 309.282933][ T9622] netlink: zone id is out of range [ 309.289938][ T9622] netlink: del zone limit has 4 unknown bytes [ 309.310403][ T9622] HfR: entered promiscuous mode syzkaller syzkaller login: [ 310.822599][ T9646] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1022'. [ 314.305199][ T9696] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1038'. [ 314.416680][ T9701] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1039'. [ 315.758156][ T9714] zswap: compressor not available [ 317.144481][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.153890][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281862][ T9745] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1050' sets config #-1 [ 317.311742][ T9745] FAULT_INJECTION: forcing a failure. [ 317.311742][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 317.342114][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.1.1050 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.342158][ T9745] Tainted: [L]=SOFTLOCKUP [ 317.342167][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.342181][ T9745] Call Trace: [ 317.342189][ T9745] [ 317.342200][ T9745] dump_stack_lvl+0x16c/0x1f0 [ 317.342255][ T9745] should_fail_ex+0x512/0x640 [ 317.342283][ T9745] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 317.342323][ T9745] should_failslab+0xc2/0x120 [ 317.342358][ T9745] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 317.342392][ T9745] ? key_alloc+0xc4d/0x1330 [ 317.342420][ T9745] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 317.342456][ T9745] ? kmemdup_noprof+0x29/0x60 [ 317.342483][ T9745] kmemdup_noprof+0x29/0x60 [ 317.342507][ T9745] key_alloc+0xc4d/0x1330 [ 317.342544][ T9745] ? __pfx_key_alloc+0x10/0x10 [ 317.342566][ T9745] ? __asan_memcpy+0x3c/0x60 [ 317.342597][ T9745] keyring_alloc+0x44/0xc0 [ 317.342630][ T9745] keyctl_get_persistent+0x750/0x8c0 [ 317.342664][ T9745] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 317.342700][ T9745] ? __x64_sys_futex+0x1e0/0x4c0 [ 317.342722][ T9745] ? __x64_sys_futex+0x1e9/0x4c0 [ 317.342753][ T9745] ? xfd_validate_state+0x61/0x180 [ 317.342772][ T9745] ? __pfx_ksys_write+0x10/0x10 [ 317.342811][ T9745] __do_sys_keyctl+0x1a9/0x590 [ 317.342835][ T9745] do_syscall_64+0xcd/0xf80 [ 317.342858][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.342882][ T9745] RIP: 0033:0x7fd0d1d8f7c9 [ 317.342902][ T9745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.342923][ T9745] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 317.342946][ T9745] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 317.342963][ T9745] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 317.342977][ T9745] RBP: 00007fd0d1e13f91 R08: 000000000000000c R09: 0000000000000000 [ 317.342991][ T9745] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 317.343005][ T9745] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 317.343035][ T9745] [ 317.834650][ T5841] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 318.418805][ T9749] FAULT_INJECTION: forcing a failure. [ 318.418805][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 318.463810][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.0.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.463946][ T9749] Tainted: [L]=SOFTLOCKUP [ 318.463955][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.463969][ T9749] Call Trace: [ 318.463978][ T9749] [ 318.463989][ T9749] dump_stack_lvl+0x16c/0x1f0 [ 318.464031][ T9749] should_fail_ex+0x512/0x640 [ 318.464060][ T9749] ? __kvmalloc_node_noprof+0x129/0xa40 [ 318.464101][ T9749] should_failslab+0xc2/0x120 [ 318.464134][ T9749] __kvmalloc_node_noprof+0x14a/0xa40 [ 318.464171][ T9749] ? lockdep_init_map_type+0x5c/0x270 [ 318.464197][ T9749] ? alloc_netdev_mqs+0xc91/0x1550 [ 318.464241][ T9749] ? alloc_netdev_mqs+0xc91/0x1550 [ 318.464274][ T9749] alloc_netdev_mqs+0xc91/0x1550 [ 318.464317][ T9749] ppp_ioctl+0x168f/0x2880 [ 318.464358][ T9749] ? find_held_lock+0x2b/0x80 [ 318.464390][ T9749] ? __pfx_ppp_ioctl+0x10/0x10 [ 318.464454][ T9749] ? __fget_files+0x20e/0x3c0 [ 318.464495][ T9749] ? __pfx_ppp_ioctl+0x10/0x10 [ 318.464533][ T9749] __x64_sys_ioctl+0x18e/0x210 [ 318.464573][ T9749] do_syscall_64+0xcd/0xf80 [ 318.464599][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.464624][ T9749] RIP: 0033:0x7fe233b8f7c9 [ 318.464651][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.464675][ T9749] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.464706][ T9749] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 318.464723][ T9749] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 318.464738][ T9749] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.464754][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.464768][ T9749] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 318.464803][ T9749] [ 319.207106][ T9763] random: crng reseeded on system resumption [ 320.178090][ T9771] Invalid ELF header magic: != ELF [ 320.757354][ T9794] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1061'. [ 320.937952][ T9789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.946033][ T9789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.954222][ T9789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.057685][ T9789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.966919][ T5844] Bluetooth: hci3: command 0x2016 tx timeout [ 322.966942][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.966985][ T5841] Bluetooth: hci0: command 0x2016 tx timeout [ 323.126876][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.769134][ T9838] netlink: 98 bytes leftover after parsing attributes in process `syz.1.1077'. [ 324.088105][ T9846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.094626][ T9846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.102510][ T9846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.120340][ T9846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.071042][ T9862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 325.072468][ T30] audit: type=1800 audit(1768391086.103:9): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1083" name="features" dev="configfs" ino=30123 res=0 errno=0 [ 325.233952][ T30] audit: type=1800 audit(1768391086.263:10): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1085" name="lu_gp_id" dev="configfs" ino=29515 res=0 errno=0 [ 326.166906][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.173646][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.174626][ T5841] Bluetooth: hci3: command 0x2016 tx timeout [ 326.185965][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 326.287427][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1089'. [ 326.316918][ T9894] veth1_macvtap: entered allmulticast mode [ 328.464777][ T9927] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.1101' sets config #-1 [ 328.540315][ T9927] FAULT_INJECTION: forcing a failure. [ 328.540315][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 328.607622][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.0.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.607685][ T9927] Tainted: [L]=SOFTLOCKUP [ 328.607696][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.607711][ T9927] Call Trace: [ 328.607719][ T9927] [ 328.607728][ T9927] dump_stack_lvl+0x16c/0x1f0 [ 328.607775][ T9927] should_fail_ex+0x512/0x640 [ 328.607801][ T9927] ? kmem_cache_alloc_noprof+0x62/0x770 [ 328.607835][ T9927] should_failslab+0xc2/0x120 [ 328.607870][ T9927] kmem_cache_alloc_noprof+0x83/0x770 [ 328.607911][ T9927] ? key_alloc+0xbef/0x1330 [ 328.607949][ T9927] ? key_alloc+0xbef/0x1330 [ 328.607977][ T9927] key_alloc+0xbef/0x1330 [ 328.608028][ T9927] ? __pfx_key_alloc+0x10/0x10 [ 328.608056][ T9927] ? __asan_memcpy+0x3c/0x60 [ 328.608094][ T9927] keyring_alloc+0x44/0xc0 [ 328.608133][ T9927] keyctl_get_persistent+0x750/0x8c0 [ 328.608171][ T9927] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 328.608215][ T9927] ? __x64_sys_futex+0x1e0/0x4c0 [ 328.608242][ T9927] ? __x64_sys_futex+0x1e9/0x4c0 [ 328.608273][ T9927] ? xfd_validate_state+0x61/0x180 [ 328.608300][ T9927] ? __pfx_ksys_write+0x10/0x10 [ 328.608341][ T9927] __do_sys_keyctl+0x1a9/0x590 [ 328.608368][ T9927] do_syscall_64+0xcd/0xf80 [ 328.608392][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.608416][ T9927] RIP: 0033:0x7fe233b8f7c9 [ 328.608436][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.608458][ T9927] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 328.608480][ T9927] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 328.608496][ T9927] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 328.608511][ T9927] RBP: 00007fe233c13f91 R08: 000000000000000c R09: 0000000000000000 [ 328.608525][ T9927] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 328.608540][ T9927] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 328.608575][ T9927] [ 329.217901][ T9928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.224125][ T9928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.232651][ T9928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.239017][ T9928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.462530][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 329.768154][ T8328] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.754997][ T9966] [U]  [ 330.758168][ T9966] [U] [ 330.761299][ T9966] [U] [ 330.764195][ T9966] [U] [ 330.857587][ T9966] [U] [ 330.860384][ T9966] [U] [ 330.863212][ T9966] [U] [ 330.866160][ T9966] [U] [ 330.871981][ T9966] [U] [ 330.875281][ T9966] [U] [ 330.878201][ T9966] [U] [ 330.881388][ T9966] [U] [ 330.886933][ T5841] Bluetooth: hci0: command 0x2016 tx timeout [ 330.886970][ T9966] [U] [ 330.895854][ T9966] [U] [ 330.898753][ T9966] [U] [ 330.901574][ T9966] [U] [ 330.909327][ T9966] [U] [ 330.912246][ T9966] [U] [ 330.915039][ T9966] [U] [ 330.917765][ T9966] [U] [ 330.921949][ T9966] [U] [ 330.925590][ T9966] [U] [ 330.928442][ T9966] [U] [ 330.931386][ T9966] [U] [ 331.013125][ T9966] [U] [ 331.016157][ T9966] [U] [ 331.019550][ T9966] [U] [ 331.022733][ T9966] [U] [ 331.066507][ T9966] [U] [ 331.069418][ T9966] [U] [ 331.072140][ T9966] [U] [ 331.074860][ T9966] [U] [ 331.104988][ T9968] FAULT_INJECTION: forcing a failure. [ 331.104988][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 331.118081][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.1.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.118124][ T9968] Tainted: [L]=SOFTLOCKUP [ 331.118134][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.118149][ T9968] Call Trace: [ 331.118158][ T9968] [ 331.118168][ T9968] dump_stack_lvl+0x16c/0x1f0 [ 331.118215][ T9968] should_fail_ex+0x512/0x640 [ 331.118249][ T9968] ? __kvmalloc_node_noprof+0x129/0xa40 [ 331.118287][ T9968] should_failslab+0xc2/0x120 [ 331.118325][ T9968] __kvmalloc_node_noprof+0x14a/0xa40 [ 331.118359][ T9968] ? lockdep_init_map_type+0x5c/0x270 [ 331.118384][ T9968] ? alloc_netdev_mqs+0xc91/0x1550 [ 331.118425][ T9968] ? alloc_netdev_mqs+0xc91/0x1550 [ 331.118457][ T9968] alloc_netdev_mqs+0xc91/0x1550 [ 331.118498][ T9968] ppp_ioctl+0x168f/0x2880 [ 331.118537][ T9968] ? find_held_lock+0x2b/0x80 [ 331.118567][ T9968] ? __pfx_ppp_ioctl+0x10/0x10 [ 331.118611][ T9968] ? __fget_files+0x20e/0x3c0 [ 331.118650][ T9968] ? __pfx_ppp_ioctl+0x10/0x10 [ 331.118687][ T9968] __x64_sys_ioctl+0x18e/0x210 [ 331.118720][ T9968] do_syscall_64+0xcd/0xf80 [ 331.118745][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.118771][ T9968] RIP: 0033:0x7fd0d1d8f7c9 [ 331.118791][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.118815][ T9968] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.118837][ T9968] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 331.118852][ T9968] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 331.118865][ T9968] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.118879][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.118893][ T9968] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 331.118929][ T9968] [ 331.127806][ T9966] [U] [ 331.330695][ T9966] [U] [ 331.333453][ T9966] [U] [ 331.336151][ T9966] [U] [ 331.347995][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.354198][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.358881][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 331.385564][ T9966] [U] [ 331.388345][ T9966] [U] [ 331.391409][ T9966] [U] [ 331.394832][ T9966] [U] [ 331.398478][ T9966] [U] [ 331.401420][ T9966] [U] [ 331.404140][ T9966] [U] [ 331.406938][ T9966] [U] [ 331.410468][ T9966] [U] [ 331.413343][ T9966] [U] [ 331.416093][ T9966] [U] [ 331.418898][ T9966] [U] [ 331.423544][ T9966] [U] [ 331.426475][ T9966] [U] [ 331.429282][ T9966] [U] [ 331.431991][ T9966] [U] [ 331.438316][ T9966] [U] [ 331.441048][ T9966] [U] [ 331.443761][ T9966] [U] [ 331.446478][ T9966] [U] [ 331.451615][ T9966] [U] [ 331.454339][ T9966] [U] [ 331.457076][ T9966] [U] [ 331.459781][ T9966] [U] [ 331.463521][ T9966] [U] [ 331.466257][ T9966] [U] [ 331.468971][ T9966] [U] [ 331.472201][ T9966] [U] [ 331.475907][ T9966] [U] [ 331.478727][ T9966] [U] [ 331.481457][ T9966] [U] [ 331.484297][ T9966] [U] [ 331.498075][ T9966] [U] [ 331.685453][ T9980] HSR: entered promiscuous mode [ 333.140184][ T30] audit: type=1800 audit(1768391094.173:11): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1134" name="dbroot" dev="configfs" ino=30997 res=0 errno=0 [ 333.916619][T10002] nvme_fabrics: missing parameter 'transport=%s' [ 333.966884][T10002] nvme_fabrics: missing parameter 'nqn=%s' [ 334.307048][T10025] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.1128' sets config #-1 [ 334.932709][T10038] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1130'. [ 334.996444][T10035] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1130'. [ 336.055452][T10060] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 336.099992][T10060] netlink: 'syz.2.1140': attribute type 3 has an invalid length. [ 336.127725][T10060] netlink: 158 bytes leftover after parsing attributes in process `syz.2.1140'. [ 336.177424][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 339.274112][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 339.930541][T10117] bond0: invalid ARP target specified [ 340.400779][T10124] netlink: 158 bytes leftover after parsing attributes in process `syz.0.1156'. [ 340.412038][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 344.374191][T10169] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 344.416927][T10169] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1168'. [ 344.623528][T10176] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 346.016045][T10202] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 346.147065][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 346.539204][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 346.579233][T10217] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 346.580753][T10219] random: crng reseeded on system resumption [ 346.600082][T10217] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1185'. [ 346.920011][T10226] FAULT_INJECTION: forcing a failure. [ 346.920011][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 346.947478][T10226] CPU: 0 UID: 0 PID: 10226 Comm: syz.0.1189 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.947519][T10226] Tainted: [L]=SOFTLOCKUP [ 346.947527][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.947541][T10226] Call Trace: [ 346.947549][T10226] [ 346.947560][T10226] dump_stack_lvl+0x16c/0x1f0 [ 346.947601][T10226] should_fail_ex+0x512/0x640 [ 346.947629][T10226] ? __kmalloc_cache_noprof+0x5f/0x800 [ 346.947660][T10226] should_failslab+0xc2/0x120 [ 346.947695][T10226] __kmalloc_cache_noprof+0x80/0x800 [ 346.947720][T10226] ? fuse_dev_alloc_install+0x2b/0x40 [ 346.947756][T10226] ? cuse_channel_open+0x1de/0x7f0 [ 346.947795][T10226] ? cuse_channel_open+0x1de/0x7f0 [ 346.947828][T10226] cuse_channel_open+0x1de/0x7f0 [ 346.947861][T10226] ? __pfx_cuse_channel_open+0x10/0x10 [ 346.947896][T10226] misc_open+0x26d/0x450 [ 346.947924][T10226] ? __pfx_misc_open+0x10/0x10 [ 346.947952][T10226] chrdev_open+0x234/0x6a0 [ 346.947987][T10226] ? __pfx_apparmor_file_open+0x10/0x10 [ 346.948013][T10226] ? __pfx_chrdev_open+0x10/0x10 [ 346.948051][T10226] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 346.948098][T10226] do_dentry_open+0x748/0x1590 [ 346.948131][T10226] ? __pfx_chrdev_open+0x10/0x10 [ 346.948175][T10226] vfs_open+0x82/0x3f0 [ 346.948205][T10226] path_openat+0x2078/0x3140 [ 346.948252][T10226] ? __pfx_path_openat+0x10/0x10 [ 346.948313][T10226] do_filp_open+0x20b/0x470 [ 346.948350][T10226] ? __pfx_do_filp_open+0x10/0x10 [ 346.948413][T10226] ? alloc_fd+0x471/0x7d0 [ 346.948457][T10226] do_sys_openat2+0x121/0x290 [ 346.948483][T10226] ? __pfx_do_sys_openat2+0x10/0x10 [ 346.948511][T10226] ? find_held_lock+0x2b/0x80 [ 346.948551][T10226] __x64_sys_openat+0x174/0x210 [ 346.948577][T10226] ? __pfx___x64_sys_openat+0x10/0x10 [ 346.948619][T10226] do_syscall_64+0xcd/0xf80 [ 346.948644][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.948669][T10226] RIP: 0033:0x7fe233b8f7c9 [ 346.948690][T10226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.948714][T10226] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 346.948734][T10226] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 346.948749][T10226] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 346.948764][T10226] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.948778][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.948793][T10226] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 346.948828][T10226] [ 347.730072][T10240] vivid-007: ================= START STATUS ================= [ 347.769557][T10240] vivid-007: Generate PTS: true [ 347.774738][T10240] vivid-007: Generate SCR: true [ 347.824005][T10240] tpg source WxH: 320x240 (Y'CbCr) [ 347.846715][T10240] tpg field: 1 [ 347.879429][T10240] tpg crop: (0,0)/320x240 [ 347.891799][T10240] tpg compose: (0,0)/320x240 [ 347.909847][T10240] tpg colorspace: 8 [ 347.913708][T10240] tpg transfer function: 0/0 [ 347.950309][T10240] tpg Y'CbCr encoding: 0/0 [ 347.954789][T10240] tpg quantization: 0/0 [ 347.997803][T10240] tpg RGB range: 0/2 [ 348.017931][T10240] vivid-007: ================== END STATUS ================== [ 350.033039][T10277] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1200'. [ 350.764534][T10293] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1204'. [ 350.846218][T10286] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1204'. [ 352.422290][T10326] netlink: 'syz.3.1216': attribute type 3 has an invalid length. [ 352.453551][T10326] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1216'. [ 352.734329][T10341] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1219'. [ 352.811571][T10338] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1219'. [ 353.001137][ T5840] Bluetooth: hci0: Malformed Event: 0x13 [ 353.423438][T10353] FAULT_INJECTION: forcing a failure. [ 353.423438][T10353] name failslab, interval 1, probability 0, space 0, times 0 [ 353.445297][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.1.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.445338][T10353] Tainted: [L]=SOFTLOCKUP [ 353.445348][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.445364][T10353] Call Trace: [ 353.445372][T10353] [ 353.445383][T10353] dump_stack_lvl+0x16c/0x1f0 [ 353.445430][T10353] should_fail_ex+0x512/0x640 [ 353.445461][T10353] ? kmem_cache_alloc_noprof+0x62/0x770 [ 353.445496][T10353] should_failslab+0xc2/0x120 [ 353.445534][T10353] kmem_cache_alloc_noprof+0x83/0x770 [ 353.445565][T10353] ? __proc_create+0x2c8/0x8d0 [ 353.445604][T10353] ? __proc_create+0x2c8/0x8d0 [ 353.445634][T10353] __proc_create+0x2c8/0x8d0 [ 353.445668][T10353] ? __pfx___proc_create+0x10/0x10 [ 353.445705][T10353] ? proc_register+0x554/0x8b0 [ 353.445743][T10353] ? _raw_write_unlock+0x28/0x50 [ 353.445783][T10353] proc_create_reg+0x7d/0x180 [ 353.445819][T10353] proc_create_net_data+0x8e/0x1c0 [ 353.445851][T10353] ? __pfx_proc_create_net_data+0x10/0x10 [ 353.445883][T10353] ? __pfx_uevent_net_rcv+0x10/0x10 [ 353.445910][T10353] ? ops_init+0x77/0x5f0 [ 353.445942][T10353] ? __pfx_dev_proc_net_init+0x10/0x10 [ 353.445972][T10353] dev_proc_net_init+0x5a/0x220 [ 353.446000][T10353] ops_init+0x1e2/0x5f0 [ 353.446035][T10353] setup_net+0x11d/0x3a0 [ 353.446068][T10353] ? __pfx_setup_net+0x10/0x10 [ 353.446098][T10353] ? lockdep_init_map_type+0x5c/0x270 [ 353.446123][T10353] ? mutex_init_lockep+0x110/0x150 [ 353.446153][T10353] copy_net_ns+0x351/0x7c0 [ 353.446191][T10353] create_new_namespaces+0x3ea/0xab0 [ 353.446231][T10353] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 353.446265][T10353] ksys_unshare+0x45b/0xa40 [ 353.446301][T10353] ? __pfx_ksys_unshare+0x10/0x10 [ 353.446337][T10353] ? xfd_validate_state+0x61/0x180 [ 353.446369][T10353] __x64_sys_unshare+0x31/0x40 [ 353.446390][T10353] do_syscall_64+0xcd/0xf80 [ 353.446416][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.446441][T10353] RIP: 0033:0x7fd0d1d8f7c9 [ 353.446461][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.446485][T10353] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 353.446510][T10353] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 353.446528][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 353.446543][T10353] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.446559][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.446573][T10353] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 353.446610][T10353] [ 358.025054][T10428] [U] [ 358.027812][T10428] [U] [ 358.030629][T10428] [U] [ 358.033347][T10428] [U] [ 358.111219][T10428] [U] [ 358.113949][T10428] [U] [ 358.116717][T10428] [U] [ 358.119392][T10428] [U] [ 358.310270][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'. [ 358.319516][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.393444][T10428] [U] [ 358.396187][T10428] [U] [ 358.398901][T10428] [U] [ 358.401620][T10428] [U] [ 358.439758][T10441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.492839][T10428] [U] [ 358.495602][T10428] [U] [ 358.498320][T10428] [U] [ 358.501039][T10428] [U] [ 358.590038][T10428] [U] [ 358.592804][T10428] [U] [ 358.595602][T10428] [U] [ 358.598312][T10428] [U] [ 358.746254][T10428] [U] [ 358.956840][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'. [ 359.026789][T10450] bond0: entered promiscuous mode [ 359.031952][T10450] bond_slave_0: entered promiscuous mode [ 359.054592][T10450] bond_slave_1: entered promiscuous mode [ 359.093692][T10450] bond0: entered allmulticast mode [ 359.123340][T10450] bond_slave_0: entered allmulticast mode [ 359.168541][T10450] bond_slave_1: entered allmulticast mode [ 361.069531][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 361.079308][T10506] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 361.091976][T10506] netlink: 'syz.1.1263': attribute type 4 has an invalid length. [ 361.113923][T10506] netlink: 'syz.1.1263': attribute type 5 has an invalid length. [ 361.121871][T10506] netlink: 22724 bytes leftover after parsing attributes in process `syz.1.1263'. [ 361.361044][T10513] netlink: 'syz.1.1265': attribute type 4 has an invalid length. [ 361.414048][T10513] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1265'. [ 363.233545][ T30] audit: type=1800 audit(1768393172.284:12): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1278" name="lu_gp_id" dev="configfs" ino=34085 res=0 errno=0 [ 365.554498][T10572] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 365.566566][T10572] File: /dev/nullb0 PID: 10572 Comm: syz.2.1281 [ 365.825588][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 368.024133][T10603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.030565][T10603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.036853][T10603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.043271][T10603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.281569][ T30] audit: type=1800 audit(1768393177.370:13): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1292" name="lu_gp_id" dev="configfs" ino=35062 res=0 errno=0 [ 369.841042][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 369.998044][T10636] hsr_slave_0 (unregistering): left promiscuous mode [ 370.017475][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 370.097215][ T5844] Bluetooth: hci3: command 0x2016 tx timeout [ 370.103344][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 370.109555][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.175832][T10638] random: crng reseeded on system resumption [ 370.588714][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 370.837970][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 370.890172][T10657] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1304'. [ 371.282981][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 371.363632][T10665] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 371.381122][T10663] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1307'. [ 371.688011][T10675] random: crng reseeded on system resumption [ 371.973187][T10673] FAULT_INJECTION: forcing a failure. [ 371.973187][T10673] name failslab, interval 1, probability 0, space 0, times 0 [ 372.026968][T10673] CPU: 0 UID: 0 PID: 10673 Comm: syz.1.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.027009][T10673] Tainted: [L]=SOFTLOCKUP [ 372.027017][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.027031][T10673] Call Trace: [ 372.027039][T10673] [ 372.027049][T10673] dump_stack_lvl+0x16c/0x1f0 [ 372.027093][T10673] should_fail_ex+0x512/0x640 [ 372.027122][T10673] ? __kmalloc_noprof+0xca/0x910 [ 372.027158][T10673] should_failslab+0xc2/0x120 [ 372.027194][T10673] __kmalloc_noprof+0xeb/0x910 [ 372.027218][T10673] ? lsm_blob_alloc+0x68/0x90 [ 372.027257][T10673] ? lsm_blob_alloc+0x68/0x90 [ 372.027287][T10673] lsm_blob_alloc+0x68/0x90 [ 372.027319][T10673] security_sk_alloc+0x2f/0x270 [ 372.027343][T10673] sk_prot_alloc+0x1c7/0x2a0 [ 372.027389][T10673] sk_alloc+0x36/0xe30 [ 372.027416][T10673] tun_chr_open+0x80/0x5e0 [ 372.027437][T10673] ? __pfx_misc_open+0x10/0x10 [ 372.027461][T10673] ? __pfx_tun_chr_open+0x10/0x10 [ 372.027481][T10673] misc_open+0x26d/0x450 [ 372.027504][T10673] ? __pfx_misc_open+0x10/0x10 [ 372.027526][T10673] chrdev_open+0x234/0x6a0 [ 372.027559][T10673] ? __pfx_apparmor_file_open+0x10/0x10 [ 372.027581][T10673] ? __pfx_chrdev_open+0x10/0x10 [ 372.027612][T10673] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 372.027650][T10673] do_dentry_open+0x748/0x1590 [ 372.027678][T10673] ? __pfx_chrdev_open+0x10/0x10 [ 372.027717][T10673] vfs_open+0x82/0x3f0 [ 372.027743][T10673] path_openat+0x2078/0x3140 [ 372.027783][T10673] ? __pfx_path_openat+0x10/0x10 [ 372.027824][T10673] do_filp_open+0x20b/0x470 [ 372.027855][T10673] ? __pfx_do_filp_open+0x10/0x10 [ 372.027907][T10673] ? alloc_fd+0x471/0x7d0 [ 372.027944][T10673] do_sys_openat2+0x121/0x290 [ 372.027967][T10673] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.028002][T10673] __x64_sys_openat+0x174/0x210 [ 372.028025][T10673] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.028061][T10673] do_syscall_64+0xcd/0xf80 [ 372.028083][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.028105][T10673] RIP: 0033:0x7fd0d1d8f7c9 [ 372.028124][T10673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.028147][T10673] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.028169][T10673] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 372.028183][T10673] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 372.028197][T10673] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.028210][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.028222][T10673] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 372.028252][T10673] [ 372.350937][ T30] audit: type=1800 audit(1768393181.461:14): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1312" name="lu_gp_id" dev="configfs" ino=34550 res=0 errno=0 [ 372.675038][T10686] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1315'. [ 374.172632][T10708] FAULT_INJECTION: forcing a failure. [ 374.172632][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 374.238289][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.1.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.238331][T10708] Tainted: [L]=SOFTLOCKUP [ 374.238340][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.238355][T10708] Call Trace: [ 374.238364][T10708] [ 374.238375][T10708] dump_stack_lvl+0x16c/0x1f0 [ 374.238419][T10708] should_fail_ex+0x512/0x640 [ 374.238446][T10708] ? __kmalloc_cache_noprof+0x5f/0x800 [ 374.238478][T10708] should_failslab+0xc2/0x120 [ 374.238516][T10708] __kmalloc_cache_noprof+0x80/0x800 [ 374.238544][T10708] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 374.238580][T10708] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 374.238614][T10708] ? loopback_open+0x145/0x13f0 [ 374.238652][T10708] ? loopback_open+0x145/0x13f0 [ 374.238682][T10708] loopback_open+0x145/0x13f0 [ 374.238723][T10708] snd_pcm_open_substream+0xa60/0x1820 [ 374.238757][T10708] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 374.238799][T10708] snd_pcm_open+0x29e/0x730 [ 374.238832][T10708] ? __pfx_snd_pcm_open+0x10/0x10 [ 374.238861][T10708] ? __pfx_default_wake_function+0x10/0x10 [ 374.238907][T10708] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 374.238940][T10708] snd_pcm_playback_open+0x86/0xe0 [ 374.238972][T10708] snd_open+0x22d/0x4c0 [ 374.238996][T10708] ? __pfx_snd_open+0x10/0x10 [ 374.239018][T10708] chrdev_open+0x234/0x6a0 [ 374.239056][T10708] ? __pfx_chrdev_open+0x10/0x10 [ 374.239123][T10708] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 374.239170][T10708] do_dentry_open+0x748/0x1590 [ 374.239202][T10708] ? __pfx_chrdev_open+0x10/0x10 [ 374.239242][T10708] vfs_open+0x82/0x3f0 [ 374.239269][T10708] path_openat+0x2078/0x3140 [ 374.239307][T10708] ? __pfx_path_openat+0x10/0x10 [ 374.239351][T10708] do_filp_open+0x20b/0x470 [ 374.239382][T10708] ? __pfx_do_filp_open+0x10/0x10 [ 374.239435][T10708] ? alloc_fd+0x471/0x7d0 [ 374.239474][T10708] do_sys_openat2+0x121/0x290 [ 374.239501][T10708] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.239542][T10708] __x64_sys_openat+0x174/0x210 [ 374.239572][T10708] ? __pfx___x64_sys_openat+0x10/0x10 [ 374.239614][T10708] do_syscall_64+0xcd/0xf80 [ 374.239641][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.239667][T10708] RIP: 0033:0x7fd0d1d8f7c9 [ 374.239689][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.239713][T10708] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.239739][T10708] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 374.239756][T10708] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 374.239773][T10708] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.239788][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.239803][T10708] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 374.239838][T10708] [ 374.586951][T10719] FAULT_INJECTION: forcing a failure. [ 374.586951][T10719] name failslab, interval 1, probability 0, space 0, times 0 [ 374.665521][T10719] CPU: 1 UID: 0 PID: 10719 Comm: syz.2.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.665565][T10719] Tainted: [L]=SOFTLOCKUP [ 374.665574][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.665589][T10719] Call Trace: [ 374.665598][T10719] [ 374.665607][T10719] dump_stack_lvl+0x16c/0x1f0 [ 374.665653][T10719] should_fail_ex+0x512/0x640 [ 374.665680][T10719] ? fs_reclaim_acquire+0xae/0x150 [ 374.665722][T10719] should_failslab+0xc2/0x120 [ 374.665759][T10719] __kmalloc_noprof+0xeb/0x910 [ 374.665787][T10719] ? tomoyo_encode2+0x100/0x3e0 [ 374.665825][T10719] ? tomoyo_encode2+0x100/0x3e0 [ 374.665856][T10719] tomoyo_encode2+0x100/0x3e0 [ 374.665905][T10719] tomoyo_encode+0x29/0x50 [ 374.665938][T10719] tomoyo_realpath_from_path+0x18f/0x6e0 [ 374.665984][T10719] tomoyo_mkdev_perm+0x22b/0x570 [ 374.666010][T10719] ? tomoyo_mkdev_perm+0x217/0x570 [ 374.666040][T10719] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 374.666070][T10719] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.666107][T10719] ? do_raw_spin_unlock+0x172/0x230 [ 374.666152][T10719] ? __pfx_current_check_access_path+0x10/0x10 [ 374.666187][T10719] ? simple_lookup+0x105/0x1d0 [ 374.666226][T10719] tomoyo_path_mknod+0x12a/0x190 [ 374.666263][T10719] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 374.666302][T10719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.666343][T10719] security_path_mknod+0x161/0x310 [ 374.666374][T10719] do_mknodat+0x24e/0x6f0 [ 374.666411][T10719] ? __pfx_do_mknodat+0x10/0x10 [ 374.666445][T10719] ? getname_flags.part.0+0x1c5/0x550 [ 374.666479][T10719] __x64_sys_mknod+0x87/0xb0 [ 374.666516][T10719] do_syscall_64+0xcd/0xf80 [ 374.666541][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.666567][T10719] RIP: 0033:0x7fdb1258f7c9 [ 374.666587][T10719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.666611][T10719] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 374.666635][T10719] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 374.666651][T10719] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 374.666667][T10719] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.666682][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.666697][T10719] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 374.666733][T10719] [ 374.666759][T10719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.098130][T10725] FAULT_INJECTION: forcing a failure. [ 375.098130][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 375.111257][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.1.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.111299][T10725] Tainted: [L]=SOFTLOCKUP [ 375.111308][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.111323][T10725] Call Trace: [ 375.111331][T10725] [ 375.111340][T10725] dump_stack_lvl+0x16c/0x1f0 [ 375.111385][T10725] should_fail_ex+0x512/0x640 [ 375.111419][T10725] should_failslab+0xc2/0x120 [ 375.111456][T10725] __kmalloc_cache_noprof+0x80/0x800 [ 375.111487][T10725] ? tipc_dest_push+0x148/0x310 [ 375.111515][T10725] ? tipc_dest_push+0x148/0x310 [ 375.111537][T10725] tipc_dest_push+0x148/0x310 [ 375.111565][T10725] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 375.111603][T10725] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 375.111645][T10725] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 375.111688][T10725] ? find_held_lock+0x2b/0x80 [ 375.111737][T10725] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 375.111768][T10725] tipc_mcast_xmit+0x711/0xfe0 [ 375.111792][T10725] ? __pfx__copy_from_iter+0x10/0x10 [ 375.111819][T10725] ? __pfx___alloc_skb+0x10/0x10 [ 375.111852][T10725] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 375.111881][T10725] ? __lock_acquire+0x436/0x2890 [ 375.111937][T10725] ? tipc_send_group_bcast+0x803/0xa50 [ 375.111958][T10725] tipc_send_group_bcast+0x803/0xa50 [ 375.111994][T10725] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 375.112021][T10725] ? __pfx_woken_wake_function+0x10/0x10 [ 375.112071][T10725] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 375.112106][T10725] __tipc_sendmsg+0x4ab/0x1970 [ 375.112132][T10725] ? __lock_acquire+0x436/0x2890 [ 375.112163][T10725] ? __pfx___tipc_sendmsg+0x10/0x10 [ 375.112189][T10725] ? __lock_acquire+0x436/0x2890 [ 375.112239][T10725] ? __local_bh_enable_ip+0xa4/0x120 [ 375.112276][T10725] tipc_sendmsg+0x4f/0x70 [ 375.112304][T10725] sock_write_iter+0x566/0x610 [ 375.112328][T10725] ? __pfx_sock_write_iter+0x10/0x10 [ 375.112361][T10725] ? preempt_schedule_common+0x44/0xc0 [ 375.112395][T10725] ? copy_iovec_from_user+0x131/0x170 [ 375.112424][T10725] do_iter_readv_writev+0x662/0x9e0 [ 375.112458][T10725] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 375.112487][T10725] ? common_file_perm+0x1b1/0x500 [ 375.112517][T10725] ? bpf_lsm_file_permission+0x9/0x10 [ 375.112543][T10725] ? security_file_permission+0x71/0x210 [ 375.112572][T10725] ? rw_verify_area+0xcf/0x6c0 [ 375.112603][T10725] vfs_writev+0x35f/0xde0 [ 375.112635][T10725] ? __lock_acquire+0x436/0x2890 [ 375.112661][T10725] ? __pfx_vfs_writev+0x10/0x10 [ 375.112718][T10725] ? __fget_files+0x20e/0x3c0 [ 375.112758][T10725] ? do_writev+0x28c/0x340 [ 375.112785][T10725] do_writev+0x28c/0x340 [ 375.112812][T10725] ? __pfx_do_writev+0x10/0x10 [ 375.112850][T10725] do_syscall_64+0xcd/0xf80 [ 375.112870][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.112895][T10725] RIP: 0033:0x7fd0d1d8f7c9 [ 375.112913][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.112935][T10725] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 375.112957][T10725] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 375.112972][T10725] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 375.112984][T10725] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.112997][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.113010][T10725] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 375.113050][T10725] [ 376.222180][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 376.233976][T10741] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1330'. [ 376.388970][T10751] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1334'. [ 376.516544][T10756] vivid-007: ================= START STATUS ================= [ 376.534148][T10756] vivid-007: Enable Output Cropping: true [ 376.555319][T10756] vivid-007: Enable Output Composing: true [ 376.561208][T10756] vivid-007: Enable Output Scaler: true [ 376.594478][T10756] vivid-007: Tx RGB Quantization Range: Automatic [ 376.617393][T10759] 0x000200000001-0xa29656a63616329 : "" [ 376.624624][T10756] vivid-007: Transmit Mode: HDMI [ 376.629643][T10756] vivid-007: Hotplug Present: 0x00000000 [ 376.642890][T10759] mtd: partition "" is out of reach -- disabled [ 376.659682][T10756] vivid-007: RxSense Present: 0x00000000 [ 376.685308][T10756] vivid-007: EDID Present: 0x00000000 [ 376.701297][T10759] ftl_cs: FTL header not found. [ 376.711125][T10756] vivid-007: ================== END STATUS ================== [ 377.011941][T10770] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1340'. [ 377.036196][ T30] audit: type=1800 audit(1768393186.166:15): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1342" name="lu_gp_id" dev="configfs" ino=34757 res=0 errno=0 [ 378.457730][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.464180][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.580754][T10812] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1354'. [ 381.090949][T10848] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 381.179582][ T30] audit: type=1800 audit(1768393190.317:16): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1363" name="lu_gp_id" dev="configfs" ino=36038 res=0 errno=0 [ 382.418276][T10870] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1369'. [ 382.748475][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 382.772401][T10878] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1370'. [ 382.897995][T10880] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 384.221371][T10910] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 384.860948][T10917] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1382'. [ 385.066318][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 385.085292][T10920] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1383'. [ 385.130150][ T30] audit: type=1804 audit(1768393194.308:17): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1384" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=1128 res=1 errno=0 [ 385.586205][T10935] random: crng reseeded on system resumption [ 385.754763][ T30] audit: type=1800 audit(1768393194.931:18): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1390" name="lu_gp_id" dev="configfs" ino=36210 res=0 errno=0 [ 385.765614][T10938] input: f as /devices/virtual/input/input14 [ 386.278615][T10947] FAULT_INJECTION: forcing a failure. [ 386.278615][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 386.305405][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.1.1392 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.305450][T10947] Tainted: [L]=SOFTLOCKUP [ 386.305459][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.305473][T10947] Call Trace: [ 386.305482][T10947] [ 386.305492][T10947] dump_stack_lvl+0x16c/0x1f0 [ 386.305535][T10947] should_fail_ex+0x512/0x640 [ 386.305563][T10947] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 386.305598][T10947] should_failslab+0xc2/0x120 [ 386.305633][T10947] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 386.305665][T10947] ? proc_alloc_inode+0x25/0x200 [ 386.305699][T10947] ? __pfx_proc_alloc_inode+0x10/0x10 [ 386.305726][T10947] ? proc_alloc_inode+0x25/0x200 [ 386.305753][T10947] proc_alloc_inode+0x25/0x200 [ 386.305780][T10947] alloc_inode+0x64/0x240 [ 386.305807][T10947] new_inode+0x22/0x1c0 [ 386.305838][T10947] proc_pid_make_inode+0x22/0x160 [ 386.305868][T10947] proc_pident_instantiate+0x85/0x310 [ 386.305900][T10947] proc_pident_lookup+0x1f5/0x270 [ 386.305938][T10947] __lookup_slow+0x251/0x460 [ 386.305967][T10947] ? __pfx___lookup_slow+0x10/0x10 [ 386.306025][T10947] lookup_slow+0x50/0x70 [ 386.306052][T10947] link_path_walk+0x12d8/0x1c70 [ 386.306095][T10947] path_openat+0x1bd/0x3140 [ 386.306127][T10947] ? do_syscall_64+0xcd/0xf80 [ 386.306147][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.306184][T10947] ? __pfx_path_openat+0x10/0x10 [ 386.306232][T10947] do_filp_open+0x20b/0x470 [ 386.306267][T10947] ? __pfx_do_filp_open+0x10/0x10 [ 386.306314][T10947] ? __pfx_kfree_link+0x10/0x10 [ 386.306353][T10947] ? alloc_fd+0x471/0x7d0 [ 386.306406][T10947] do_sys_openat2+0x121/0x290 [ 386.306433][T10947] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.306461][T10947] ? count_memcg_events+0x122/0x290 [ 386.306503][T10947] __x64_sys_openat+0x174/0x210 [ 386.306531][T10947] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.306560][T10947] ? syscall_user_dispatch+0x78/0x140 [ 386.306594][T10947] do_syscall_64+0xcd/0xf80 [ 386.306615][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.306635][T10947] RIP: 0033:0x7fd0d1d8e010 [ 386.306652][T10947] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 386.306672][T10947] RSP: 002b:00007fd0d2c61f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 386.306691][T10947] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd0d1d8e010 [ 386.306706][T10947] RDX: 0000000000000002 RSI: 00007fd0d2c61fa0 RDI: 00000000ffffff9c [ 386.306719][T10947] RBP: 00007fd0d2c61fa0 R08: 0000000000000000 R09: 0000000000000000 [ 386.306732][T10947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 386.306745][T10947] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 386.306775][T10947] [ 387.819156][T10960] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1397'. [ 387.870978][T10959] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 388.917946][T10980] binder: 10975:10980 ioctl c0306201 200000000000 returned -11 [ 390.635392][T11000] zswap: compressor not available [ 390.727309][T11007] Invalid ELF header magic: != ELF [ 391.006887][T11007] __vm_enough_memory: pid: 11007, comm: syz.0.1412, bytes: 4398046511104 not enough memory for the allocation [ 391.433977][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 391.468290][T11033] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 391.481735][T11033] netlink: 20232 bytes leftover after parsing attributes in process `syz.1.1418'. [ 391.553090][T11008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.574233][T11008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.588187][T11008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.597270][ T30] audit: type=1800 audit(1768411544.803:19): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1419" name="lu_gp_id" dev="configfs" ino=37364 res=0 errno=0 [ 391.628888][T11008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.450974][T11051] sp0: Synchronizing with TNC [ 392.859550][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 393.575435][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 393.655808][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.655917][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.529044][T11074] FAULT_INJECTION: forcing a failure. [ 394.529044][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 394.544535][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.1.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.544576][T11074] Tainted: [L]=SOFTLOCKUP [ 394.544585][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.544601][T11074] Call Trace: [ 394.544608][T11074] [ 394.544618][T11074] dump_stack_lvl+0x16c/0x1f0 [ 394.544662][T11074] should_fail_ex+0x512/0x640 [ 394.544689][T11074] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 394.544724][T11074] should_failslab+0xc2/0x120 [ 394.544760][T11074] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 394.544791][T11074] ? alloc_inode+0x64/0x240 [ 394.544823][T11074] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 394.544859][T11074] ? alloc_inode+0x64/0x240 [ 394.544883][T11074] alloc_inode+0x64/0x240 [ 394.544911][T11074] new_inode+0x22/0x1c0 [ 394.544941][T11074] debugfs_create_symlink+0xd1/0x260 [ 394.544968][T11074] ref_tracker_dir_symlink+0x255/0x3c0 [ 394.545000][T11074] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 394.545032][T11074] ? __lock_acquire+0x436/0x2890 [ 394.545086][T11074] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.545122][T11074] ? crng_make_state+0x48e/0x6c0 [ 394.545157][T11074] ? __pfx_net_ns_net_init+0x10/0x10 [ 394.545197][T11074] net_ns_net_init+0xd2/0x120 [ 394.545232][T11074] ops_init+0x1e2/0x5f0 [ 394.545269][T11074] setup_net+0x11d/0x3a0 [ 394.545311][T11074] ? __pfx_setup_net+0x10/0x10 [ 394.545344][T11074] ? lockdep_init_map_type+0x5c/0x270 [ 394.545370][T11074] ? mutex_init_lockep+0x110/0x150 [ 394.545402][T11074] copy_net_ns+0x351/0x7c0 [ 394.545443][T11074] create_new_namespaces+0x3ea/0xab0 [ 394.545485][T11074] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 394.545521][T11074] ksys_unshare+0x45b/0xa40 [ 394.545559][T11074] ? __pfx_ksys_unshare+0x10/0x10 [ 394.545596][T11074] ? xfd_validate_state+0x61/0x180 [ 394.545630][T11074] __x64_sys_unshare+0x31/0x40 [ 394.545651][T11074] do_syscall_64+0xcd/0xf80 [ 394.545675][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.545700][T11074] RIP: 0033:0x7fd0d1d8f7c9 [ 394.545720][T11074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.545743][T11074] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.545766][T11074] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 394.545784][T11074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 394.545799][T11074] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.545815][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.545830][T11074] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 394.545866][T11074] [ 394.545890][T11074] debugfs: out of free dentries, can not create symlink 'netns-20d-4026533551-notrefcnt' [ 394.724956][T11070] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1429'. [ 395.349726][T11087] can0: slcan on ptm0. [ 395.530732][T11086] can0 (unregistered): slcan off ptm0. [ 395.732000][T11098] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1435'. [ 395.948828][T11108] size and base must be multiples of 4 kiB [ 395.955769][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.1.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.955800][T11108] Tainted: [L]=SOFTLOCKUP [ 395.955806][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.955814][T11108] Call Trace: [ 395.955819][T11108] [ 395.955825][T11108] dump_stack_lvl+0x16c/0x1f0 [ 395.955852][T11108] mtrr_del+0xd1/0x110 [ 395.955873][T11108] mtrr_ioctl+0x922/0xcf0 [ 395.955886][T11108] ? __pfx_mtrr_ioctl+0x10/0x10 [ 395.955901][T11108] ? find_held_lock+0x2b/0x80 [ 395.955923][T11108] ? __fget_files+0x20e/0x3c0 [ 395.955942][T11108] ? __pfx_mtrr_ioctl+0x10/0x10 [ 395.955954][T11108] proc_reg_unlocked_ioctl+0x229/0x320 [ 395.955971][T11108] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 395.955989][T11108] __x64_sys_ioctl+0x18e/0x210 [ 395.956006][T11108] do_syscall_64+0xcd/0xf80 [ 395.956020][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.956033][T11108] RIP: 0033:0x7fd0d1d8f7c9 [ 395.956045][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.956059][T11108] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.956072][T11108] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 395.956082][T11108] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 395.956090][T11108] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.956097][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.956105][T11108] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 395.956130][T11108] [ 396.587709][ T30] audit: type=1800 audit(1768411549.819:20): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1439" name="lu_gp_id" dev="configfs" ino=37548 res=0 errno=0 [ 397.618615][T11137] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1442'. [ 397.840760][T11145] tipc: Started in network mode [ 397.858328][T11145] tipc: Node identity ffffffff, cluster identity 4711 [ 397.877998][T11145] tipc: Node number set to 4294967295 [ 398.012842][T11151] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 398.020618][T11151] netlink: 'syz.0.1446': attribute type 3 has an invalid length. [ 398.099087][T11151] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 398.120550][T11151] netlink: 'syz.0.1446': attribute type 3 has an invalid length. [ 398.151720][T11151] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1446'. [ 398.477627][T11163] random: crng reseeded on system resumption [ 398.595828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b0f2c00: rx timeout, send abort [ 399.025817][T11168] FAULT_INJECTION: forcing a failure. [ 399.025817][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 399.038639][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.0.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.038679][T11168] Tainted: [L]=SOFTLOCKUP [ 399.038688][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.038703][T11168] Call Trace: [ 399.038711][T11168] [ 399.038721][T11168] dump_stack_lvl+0x16c/0x1f0 [ 399.038773][T11168] should_fail_ex+0x512/0x640 [ 399.038806][T11168] should_failslab+0xc2/0x120 [ 399.038845][T11168] __kmalloc_cache_noprof+0x80/0x800 [ 399.038874][T11168] ? tipc_dest_push+0x148/0x310 [ 399.038906][T11168] ? tipc_dest_push+0x148/0x310 [ 399.038928][T11168] tipc_dest_push+0x148/0x310 [ 399.038956][T11168] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 399.038994][T11168] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 399.039037][T11168] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 399.039087][T11168] ? find_held_lock+0x2b/0x80 [ 399.039118][T11168] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 399.039152][T11168] tipc_mcast_xmit+0x711/0xfe0 [ 399.039180][T11168] ? __pfx__copy_from_iter+0x10/0x10 [ 399.039205][T11168] ? __pfx___alloc_skb+0x10/0x10 [ 399.039239][T11168] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 399.039299][T11168] ? mark_held_locks+0x49/0x80 [ 399.039326][T11168] ? tipc_send_group_bcast+0x803/0xa50 [ 399.039349][T11168] tipc_send_group_bcast+0x803/0xa50 [ 399.039386][T11168] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 399.039416][T11168] ? __pfx_woken_wake_function+0x10/0x10 [ 399.039448][T11168] ? __pfx_css_rstat_updated+0x10/0x10 [ 399.039483][T11168] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 399.039522][T11168] __tipc_sendmsg+0x4ab/0x1970 [ 399.039563][T11168] ? __pfx___tipc_sendmsg+0x10/0x10 [ 399.039591][T11168] ? __lock_acquire+0x436/0x2890 [ 399.039646][T11168] ? __local_bh_enable_ip+0xa4/0x120 [ 399.039685][T11168] tipc_sendmsg+0x4f/0x70 [ 399.039715][T11168] sock_write_iter+0x566/0x610 [ 399.039746][T11168] ? __pfx_sock_write_iter+0x10/0x10 [ 399.039785][T11168] ? __futex_wait+0x24b/0x2f0 [ 399.039819][T11168] ? copy_iovec_from_user+0x131/0x170 [ 399.039850][T11168] do_iter_readv_writev+0x662/0x9e0 [ 399.039887][T11168] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 399.039918][T11168] ? common_file_perm+0x1b1/0x500 [ 399.039951][T11168] ? bpf_lsm_file_permission+0x9/0x10 [ 399.039977][T11168] ? security_file_permission+0x71/0x210 [ 399.040008][T11168] ? rw_verify_area+0xcf/0x6c0 [ 399.040042][T11168] vfs_writev+0x35f/0xde0 [ 399.040078][T11168] ? __lock_acquire+0x436/0x2890 [ 399.040103][T11168] ? __pfx_vfs_writev+0x10/0x10 [ 399.040161][T11168] ? __fget_files+0x20e/0x3c0 [ 399.040205][T11168] ? do_writev+0x28c/0x340 [ 399.040240][T11168] do_writev+0x28c/0x340 [ 399.040273][T11168] ? __pfx_do_writev+0x10/0x10 [ 399.040316][T11168] do_syscall_64+0xcd/0xf80 [ 399.040341][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.040366][T11168] RIP: 0033:0x7fe233b8f7c9 [ 399.040387][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.040410][T11168] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 399.040433][T11168] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 399.040450][T11168] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 399.040464][T11168] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.040480][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.040495][T11168] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 399.040533][T11168] [ 399.103004][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b0f2c00: abort rx timeout. Force session deactivation [ 399.575546][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1451'. [ 399.932520][T11178] No such timeout policy "" [ 399.939802][T11178] netlink: Failed to associated timeout policy '' [ 400.333548][T11194] random: crng reseeded on system resumption [ 400.624579][ T30] audit: type=1800 audit(1768411553.880:21): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1461" name="lu_gp_id" dev="configfs" ino=37938 res=0 errno=0 [ 400.651241][T11200] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1458'. syzkaller syzkaller login: [ 402.415772][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 403.249934][T11235] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1469'. [ 404.134083][T11243] netlink: 158 bytes leftover after parsing attributes in process `syz.2.1481'. [ 404.169876][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 404.625161][ T30] audit: type=1800 audit(1768411557.901:22): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1475" name="lu_gp_id" dev="configfs" ino=38080 res=0 errno=0 [ 407.202332][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 407.363562][T11280] netlink: 158 bytes leftover after parsing attributes in process `syz.1.1484'. [ 407.396314][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 407.724272][T11286] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1485'. [ 408.711383][T11299] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1489'. [ 409.355830][T11310] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 411.409851][T11330] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1499'. [ 411.730834][T11341] sp0: Synchronizing with TNC [ 412.948222][T11355] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 414.725449][T11382] input: f as /devices/virtual/input/input15 [ 416.176190][T11402] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1515'. [ 418.870359][T11440] input: f as /devices/virtual/input/input16 [ 422.804040][T11496] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1536'. [ 424.348920][T11512] random: crng reseeded on system resumption [ 424.457046][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 424.472766][T11515] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 424.481503][T11515] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1543'. [ 425.808190][T11543] random: crng reseeded on system resumption [ 427.978934][T11564] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1555'. [ 430.968592][T11609] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1566'. [ 433.149178][T11622] input: f as /devices/virtual/input/input17 [ 433.535992][T11630] Console: switching to colour VGA+ 80x25 [ 434.454007][T11646] vivid-007: ================= START STATUS ================= [ 434.588228][T11646] vivid-007: Generate PTS: true [ 434.651368][T11646] vivid-007: Generate SCR: true [ 434.656305][T11646] tpg source WxH: 320x240 (Y'CbCr) [ 434.731158][T11646] tpg field: 1 [ 434.734581][T11646] tpg crop: (0,0)/320x240 [ 434.738931][T11646] tpg compose: (0,0)/320x240 [ 434.830539][T11646] tpg colorspace: 8 [ 434.834918][T11646] tpg transfer function: 0/0 [ 434.839516][T11646] tpg Y'CbCr encoding: 0/0 [ 434.905447][T11646] tpg quantization: 0/0 [ 434.939810][T11646] tpg RGB range: 0/2 [ 434.987856][ T30] audit: type=1800 audit(1768429932.422:23): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1579" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 434.990556][T11646] vivid-007: ================== END STATUS ================== [ 436.205304][T11671] Invalid ELF header magic: != ELF [ 436.422463][T11669] delete_channel: no stack [ 439.580309][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.586805][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.218607][T11781] Invalid ELF header magic: != ELF [ 445.233055][ T5841] Bluetooth: hci1: Malformed Event: 0x13 [ 446.032058][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1620'. [ 446.046360][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.119727][T11792] [U] [ 446.122478][T11792] [U] [ 446.125194][T11792] [U] [ 446.127898][T11792] [U] [ 446.133571][T11793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.148862][T11792] [U] [ 446.151614][T11792] [U] [ 446.154327][T11792] [U] [ 446.157029][T11792] [U] [ 446.228642][T11792] [U] [ 446.231392][T11792] [U] [ 446.234109][T11792] [U] [ 446.236832][T11792] [U] [ 446.267491][T11792] [U] [ 446.270261][T11792] [U] [ 446.272982][T11792] [U] [ 446.275701][T11792] [U] [ 446.280025][T11792] [U] [ 446.282755][T11792] [U] [ 446.285488][T11792] [U] [ 446.288286][T11792] [U] [ 446.330662][T11792] [U] [ 446.333418][T11792] [U] [ 446.336146][T11792] [U] [ 446.338879][T11792] [U] [ 446.351199][T11792] [U] [ 446.353982][T11792] [U] [ 446.356696][T11792] [U] [ 446.359397][T11792] [U] [ 446.370941][T11792] [U] [ 446.373705][T11792] [U] [ 446.376419][T11792] [U] [ 446.379126][T11792] [U] [ 446.400472][T11792] [U] [ 446.403236][T11792] [U] [ 446.405941][T11792] [U] [ 446.408632][T11792] [U] [ 446.434161][T11792] [U] [ 446.436892][T11792] [U] [ 446.439572][T11792] [U] [ 446.442383][T11792] [U] [ 446.446868][T11792] [U] [ 446.449578][T11792] [U] [ 446.452263][T11792] [U] [ 446.454935][T11792] [U] [ 446.472990][T11792] [U] [ 446.475729][T11792] [U] [ 446.478493][T11792] [U] [ 446.481164][T11792] [U] [ 446.500030][T11792] [U] [ 446.502767][T11792] [U] [ 446.505438][T11792] [U] [ 446.508140][T11792] [U] [ 446.521333][T11792] [U] [ 446.524064][T11792] [U] [ 446.526740][T11792] [U] [ 446.529418][T11792] [U] [ 446.556856][T11792] [U] [ 446.559599][T11792] [U] [ 446.562403][T11792] [U] [ 446.565111][T11792] [U] [ 446.613999][T11792] [U] [ 449.497304][T11849] Invalid ELF header magic: != ELF [ 449.891498][ T30] audit: type=1800 audit(1768429947.400:24): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1625" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 450.281384][ T5841] Bluetooth: hci3: Malformed Event: 0x13 [ 451.432584][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1635'. [ 451.456454][T11885] bond0: entered promiscuous mode [ 451.461704][T11885] bond_slave_0: entered promiscuous mode [ 451.468477][T11885] bond_slave_1: entered promiscuous mode [ 451.487491][T11885] bond0: entered allmulticast mode [ 451.497227][T11885] bond_slave_0: entered allmulticast mode [ 451.544558][T11885] bond_slave_1: entered allmulticast mode [ 451.878226][T11895] Invalid ELF header magic: != ELF [ 452.471463][T11895] __vm_enough_memory: pid: 11895, comm: syz.2.1636, bytes: 4398046511104 not enough memory for the allocation [ 452.766106][T11906] Invalid ELF header magic: != ELF [ 453.179285][T11891] kexec: Could not allocate control_code_buffer [ 453.219635][T11906] __vm_enough_memory: pid: 11906, comm: syz.2.1650, bytes: 4398046511104 not enough memory for the allocation [ 453.757531][T11933] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1648'. [ 455.370323][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a83d400: rx timeout, send abort [ 455.601922][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1658'. [ 455.876052][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a83d400: abort rx timeout. Force session deactivation [ 457.763924][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a7f2000: rx timeout, send abort [ 458.056074][ T5841] Bluetooth: hci2: Malformed Event: 0x13 [ 458.269712][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a7f2000: abort rx timeout. Force session deactivation [ 458.483955][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1672'. [ 458.850504][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a291800: rx timeout, send abort [ 459.357251][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a291800: abort rx timeout. Force session deactivation [ 459.573012][T12041] FAULT_INJECTION: forcing a failure. [ 459.573012][T12041] name failslab, interval 1, probability 0, space 0, times 0 [ 459.617595][T12041] CPU: 1 UID: 0 PID: 12041 Comm: syz.1.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.617635][T12041] Tainted: [L]=SOFTLOCKUP [ 459.617643][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.617658][T12041] Call Trace: [ 459.617666][T12041] [ 459.617675][T12041] dump_stack_lvl+0x16c/0x1f0 [ 459.617719][T12041] should_fail_ex+0x512/0x640 [ 459.617760][T12041] ? __kmalloc_cache_noprof+0x5f/0x800 [ 459.617791][T12041] should_failslab+0xc2/0x120 [ 459.617827][T12041] __kmalloc_cache_noprof+0x80/0x800 [ 459.617854][T12041] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 459.617895][T12041] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 459.617930][T12041] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 459.617963][T12041] drm_atomic_get_connector_state+0x3f8/0x900 [ 459.617997][T12041] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 459.618028][T12041] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 459.618056][T12041] ? modeset_lock+0x114/0x6d0 [ 459.618092][T12041] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 459.618132][T12041] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 459.618166][T12041] ? drm_client_rotation+0x4da/0x6a0 [ 459.618203][T12041] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 459.618246][T12041] ? __mutex_lock+0x27b/0x1ca0 [ 459.618269][T12041] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 459.618299][T12041] ? trace_contention_end+0xdd/0x110 [ 459.618359][T12041] drm_client_modeset_commit_locked+0x14d/0x580 [ 459.618397][T12041] drm_client_modeset_commit+0x4f/0x80 [ 459.618428][T12041] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 459.618463][T12041] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 459.618495][T12041] drm_fbdev_client_restore+0x1b/0x30 [ 459.618518][T12041] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 459.618540][T12041] drm_client_dev_restore+0x200/0x2a0 [ 459.618576][T12041] drm_release+0x2c6/0x360 [ 459.618606][T12041] ? __pfx_drm_release+0x10/0x10 [ 459.618630][T12041] __fput+0x402/0xb70 [ 459.618664][T12041] task_work_run+0x150/0x240 [ 459.618691][T12041] ? __pfx_task_work_run+0x10/0x10 [ 459.618714][T12041] ? __do_sys_close_range+0x278/0x730 [ 459.618761][T12041] exit_to_user_mode_loop+0xfb/0x540 [ 459.618795][T12041] do_syscall_64+0x4ee/0xf80 [ 459.618825][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.618851][T12041] RIP: 0033:0x7fd0d1d8f7c9 [ 459.618871][T12041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.618892][T12041] RSP: 002b:00007fd0d2c41038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 459.618914][T12041] RAX: 0000000000000000 RBX: 00007fd0d1fe6090 RCX: 00007fd0d1d8f7c9 [ 459.618929][T12041] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 459.618943][T12041] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.618957][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.618971][T12041] R13: 00007fd0d1fe6128 R14: 00007fd0d1fe6090 R15: 00007ffe47f9b6a8 [ 459.619015][T12041] [ 460.438699][T12058] ubi31: attaching mtd0 [ 460.448132][T12058] ubi31: scanning is finished [ 460.467021][T12058] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 460.781840][T12058] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 461.384574][T12073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.391648][T12073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.407331][T12073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.430042][T12073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.532070][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1698'. [ 463.451658][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.451698][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.452121][ T5844] Bluetooth: hci3: command 0x2016 tx timeout [ 463.457825][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 464.672706][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1695'. [ 465.474746][T12128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.491117][T12128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.497311][T12128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.550653][T12128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.817549][T12136] Invalid ELF header magic: != ELF [ 467.265308][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'. [ 467.510368][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.510385][ T5841] Bluetooth: hci3: command 0x2016 tx timeout [ 467.510409][ T5834] Bluetooth: hci0: command 0x2016 tx timeout [ 467.669533][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.802604][T12154] netlink: 62 bytes leftover after parsing attributes in process `syz.3.1707'. [ 467.891337][T12159] FAULT_INJECTION: forcing a failure. [ 467.891337][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 467.961705][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.0.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.961732][T12159] Tainted: [L]=SOFTLOCKUP [ 467.961737][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.961746][T12159] Call Trace: [ 467.961751][T12159] [ 467.961757][T12159] dump_stack_lvl+0x16c/0x1f0 [ 467.961784][T12159] should_fail_ex+0x512/0x640 [ 467.961800][T12159] ? __kmalloc_noprof+0xca/0x910 [ 467.961816][T12159] should_failslab+0xc2/0x120 [ 467.961838][T12159] __kmalloc_noprof+0xeb/0x910 [ 467.961852][T12159] ? lsm_blob_alloc+0x68/0x90 [ 467.961874][T12159] ? lsm_blob_alloc+0x68/0x90 [ 467.961892][T12159] lsm_blob_alloc+0x68/0x90 [ 467.961910][T12159] security_sk_alloc+0x2f/0x270 [ 467.961925][T12159] sk_prot_alloc+0x1c7/0x2a0 [ 467.961948][T12159] sk_alloc+0x36/0xe30 [ 467.961964][T12159] tun_chr_open+0x80/0x5e0 [ 467.961977][T12159] ? __pfx_misc_open+0x10/0x10 [ 467.961992][T12159] ? __pfx_tun_chr_open+0x10/0x10 [ 467.962004][T12159] misc_open+0x26d/0x450 [ 467.962019][T12159] ? __pfx_misc_open+0x10/0x10 [ 467.962034][T12159] chrdev_open+0x234/0x6a0 [ 467.962055][T12159] ? __pfx_apparmor_file_open+0x10/0x10 [ 467.962069][T12159] ? __pfx_chrdev_open+0x10/0x10 [ 467.962089][T12159] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 467.962117][T12159] do_dentry_open+0x748/0x1590 [ 467.962135][T12159] ? __pfx_chrdev_open+0x10/0x10 [ 467.962160][T12159] vfs_open+0x82/0x3f0 [ 467.962176][T12159] path_openat+0x2078/0x3140 [ 467.962201][T12159] ? __pfx_path_openat+0x10/0x10 [ 467.962227][T12159] do_filp_open+0x20b/0x470 [ 467.962246][T12159] ? __pfx_do_filp_open+0x10/0x10 [ 467.962279][T12159] ? alloc_fd+0x471/0x7d0 [ 467.962302][T12159] do_sys_openat2+0x121/0x290 [ 467.962317][T12159] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.962339][T12159] __x64_sys_openat+0x174/0x210 [ 467.962364][T12159] ? __pfx___x64_sys_openat+0x10/0x10 [ 467.962388][T12159] do_syscall_64+0xcd/0xf80 [ 467.962402][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.962418][T12159] RIP: 0033:0x7fe233b8f7c9 [ 467.962430][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.962443][T12159] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.962457][T12159] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 467.962466][T12159] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 467.962475][T12159] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.962483][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.962492][T12159] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 467.962511][T12159] [ 471.663889][T12212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 471.714178][T12213] FAULT_INJECTION: forcing a failure. [ 471.714178][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 471.728248][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz.2.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.728293][T12213] Tainted: [L]=SOFTLOCKUP [ 471.728301][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.728316][T12213] Call Trace: [ 471.728323][T12213] [ 471.728333][T12213] dump_stack_lvl+0x16c/0x1f0 [ 471.728378][T12213] should_fail_ex+0x512/0x640 [ 471.728404][T12213] ? __kmalloc_noprof+0xca/0x910 [ 471.728431][T12213] should_failslab+0xc2/0x120 [ 471.728464][T12213] __kmalloc_noprof+0xeb/0x910 [ 471.728487][T12213] ? lsm_blob_alloc+0x68/0x90 [ 471.728523][T12213] ? lsm_blob_alloc+0x68/0x90 [ 471.728550][T12213] lsm_blob_alloc+0x68/0x90 [ 471.728582][T12213] security_sk_alloc+0x2f/0x270 [ 471.728609][T12213] sk_prot_alloc+0x1c7/0x2a0 [ 471.728640][T12213] sk_alloc+0x36/0xe30 [ 471.728660][T12213] tun_chr_open+0x80/0x5e0 [ 471.728673][T12213] ? __pfx_misc_open+0x10/0x10 [ 471.728689][T12213] ? __pfx_tun_chr_open+0x10/0x10 [ 471.728701][T12213] misc_open+0x26d/0x450 [ 471.728716][T12213] ? __pfx_misc_open+0x10/0x10 [ 471.728730][T12213] chrdev_open+0x234/0x6a0 [ 471.728752][T12213] ? __pfx_apparmor_file_open+0x10/0x10 [ 471.728766][T12213] ? __pfx_chrdev_open+0x10/0x10 [ 471.728787][T12213] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 471.728811][T12213] do_dentry_open+0x748/0x1590 [ 471.728829][T12213] ? __pfx_chrdev_open+0x10/0x10 [ 471.728854][T12213] vfs_open+0x82/0x3f0 [ 471.728870][T12213] path_openat+0x2078/0x3140 [ 471.728895][T12213] ? __pfx_path_openat+0x10/0x10 [ 471.728932][T12213] do_filp_open+0x20b/0x470 [ 471.728953][T12213] ? __pfx_do_filp_open+0x10/0x10 [ 471.728987][T12213] ? alloc_fd+0x471/0x7d0 [ 471.729012][T12213] do_sys_openat2+0x121/0x290 [ 471.729028][T12213] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.729050][T12213] __x64_sys_openat+0x174/0x210 [ 471.729065][T12213] ? __pfx___x64_sys_openat+0x10/0x10 [ 471.729087][T12213] do_syscall_64+0xcd/0xf80 [ 471.729101][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.729116][T12213] RIP: 0033:0x7fdb1258f7c9 [ 471.729129][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.729142][T12213] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.729156][T12213] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 471.729166][T12213] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 471.729175][T12213] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.729183][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.729191][T12213] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 471.729210][T12213] [ 475.116518][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 475.463813][T12257] hsr_slave_0 (unregistering): left promiscuous mode [ 476.819419][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'. [ 480.960954][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 481.019017][T12339] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1751'. [ 481.540151][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 484.624301][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 484.694068][T12390] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1766'. [ 485.886656][T12407] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1780'. [ 486.203468][T12409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.332494][T12409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 486.362492][T12409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.368782][T12409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.212730][ T5834] Bluetooth: hci0: command 0x2016 tx timeout [ 488.282351][ T5834] Bluetooth: hci3: command 0x2016 tx timeout [ 488.453150][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.459297][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.724938][T12426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.769070][T12426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.817082][T12426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.824315][T12426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.749704][ T5834] Bluetooth: hci0: command 0x2016 tx timeout [ 490.844775][ T5834] Bluetooth: hci3: command 0x2016 tx timeout [ 490.908795][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.914904][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 491.014053][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1786'. [ 491.156673][T12468] hsr_slave_0 (unregistering): left promiscuous mode [ 491.486300][T12482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.495935][T12482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.507186][T12482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.651338][T12482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.372947][T12503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.386825][T12503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.403311][T12503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.413422][T12503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.276413][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'. [ 495.366770][ T5834] Bluetooth: hci0: command 0x2016 tx timeout [ 495.389018][T12529] hsr_slave_0 (unregistering): left promiscuous mode [ 495.445621][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.445695][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 495.451694][ T5841] Bluetooth: hci3: command 0x2016 tx timeout [ 496.770487][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880352bbc00: rx timeout, send abort [ 496.778944][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880352bbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 498.136615][T12554] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1808'. [ 499.610053][T12590] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 500.704801][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.711197][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.169179][T12625] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1821'. [ 502.301504][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'. [ 504.098700][T12647] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 504.134684][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1829'. [ 506.141799][T12674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 506.159599][T12674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 506.165749][T12674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.172350][T12674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 507.560958][T12685] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1835'. [ 507.914993][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1841'. [ 508.095751][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.189173][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.190686][T12099] Bluetooth: hci3: command 0x2016 tx timeout [ 508.195788][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 508.214284][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 508.230386][T12711] bridge_slave_1 (unregistering): left allmulticast mode [ 508.237879][T12711] bridge_slave_1 (unregistering): left promiscuous mode [ 508.306225][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.538444][T12735] can0: slcan on ttyS2. [ 509.890443][T12738] can0 (unregistered): slcan off ttyS2. [ 511.422611][T12765] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1851'. [ 511.854337][T12774] FAULT_INJECTION: forcing a failure. [ 511.854337][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 511.867023][T12774] CPU: 0 UID: 0 PID: 12774 Comm: syz.2.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.867048][T12774] Tainted: [L]=SOFTLOCKUP [ 511.867054][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.867062][T12774] Call Trace: [ 511.867069][T12774] [ 511.867075][T12774] dump_stack_lvl+0x16c/0x1f0 [ 511.867103][T12774] should_fail_ex+0x512/0x640 [ 511.867120][T12774] ? __kmalloc_noprof+0xca/0x910 [ 511.867137][T12774] should_failslab+0xc2/0x120 [ 511.867158][T12774] __kmalloc_noprof+0xeb/0x910 [ 511.867172][T12774] ? do_raw_spin_lock+0x12c/0x2b0 [ 511.867187][T12774] ? __seq_open_private+0x22/0xd0 [ 511.867206][T12774] ? __seq_open_private+0x22/0xd0 [ 511.867221][T12774] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 511.867241][T12774] __seq_open_private+0x22/0xd0 [ 511.867257][T12774] pid_maps_open+0x29/0xf0 [ 511.867271][T12774] do_dentry_open+0x748/0x1590 [ 511.867289][T12774] ? __pfx_pid_maps_open+0x10/0x10 [ 511.867306][T12774] vfs_open+0x82/0x3f0 [ 511.867322][T12774] path_openat+0x2078/0x3140 [ 511.867349][T12774] ? __pfx_path_openat+0x10/0x10 [ 511.867375][T12774] do_filp_open+0x20b/0x470 [ 511.867394][T12774] ? __pfx_do_filp_open+0x10/0x10 [ 511.867419][T12774] ? __pfx_kfree_link+0x10/0x10 [ 511.867440][T12774] ? alloc_fd+0x471/0x7d0 [ 511.867464][T12774] do_sys_openat2+0x121/0x290 [ 511.867478][T12774] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.867499][T12774] __x64_sys_openat+0x174/0x210 [ 511.867513][T12774] ? __pfx___x64_sys_openat+0x10/0x10 [ 511.867535][T12774] do_syscall_64+0xcd/0xf80 [ 511.867548][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.867562][T12774] RIP: 0033:0x7fdb1258f7c9 [ 511.867573][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.867586][T12774] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.867651][T12774] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 511.867660][T12774] RDX: 0000000000000840 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 511.867668][T12774] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.867677][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.867685][T12774] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 511.867704][T12774] [ 512.667539][T12787] FAULT_INJECTION: forcing a failure. [ 512.667539][T12787] name failslab, interval 1, probability 0, space 0, times 0 [ 512.769555][T12787] CPU: 0 UID: 0 PID: 12787 Comm: syz.2.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.769596][T12787] Tainted: [L]=SOFTLOCKUP [ 512.769605][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.769619][T12787] Call Trace: [ 512.769627][T12787] [ 512.769636][T12787] dump_stack_lvl+0x16c/0x1f0 [ 512.769679][T12787] should_fail_ex+0x512/0x640 [ 512.769707][T12787] ? __kvmalloc_node_noprof+0x129/0xa40 [ 512.769743][T12787] should_failslab+0xc2/0x120 [ 512.769778][T12787] __kvmalloc_node_noprof+0x14a/0xa40 [ 512.769811][T12787] ? bucket_table_alloc.isra.0+0x88/0x460 [ 512.769853][T12787] ? bucket_table_alloc.isra.0+0x88/0x460 [ 512.769887][T12787] bucket_table_alloc.isra.0+0x88/0x460 [ 512.769926][T12787] rhashtable_init_noprof+0x41a/0x7e0 [ 512.769948][T12787] ? kasan_save_track+0x14/0x30 [ 512.769982][T12787] fqdir_init+0xb4/0x1f0 [ 512.770008][T12787] ipv6_frags_init_net+0x2b/0x350 [ 512.770044][T12787] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 512.770079][T12787] ops_init+0x1e2/0x5f0 [ 512.770112][T12787] setup_net+0x11d/0x3a0 [ 512.770142][T12787] ? __pfx_setup_net+0x10/0x10 [ 512.770167][T12787] ? lockdep_init_map_type+0x5c/0x270 [ 512.770188][T12787] ? mutex_init_lockep+0x110/0x150 [ 512.770212][T12787] copy_net_ns+0x351/0x7c0 [ 512.770243][T12787] create_new_namespaces+0x3ea/0xab0 [ 512.770276][T12787] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 512.770305][T12787] ksys_unshare+0x45b/0xa40 [ 512.770334][T12787] ? __pfx_ksys_unshare+0x10/0x10 [ 512.770364][T12787] ? xfd_validate_state+0x61/0x180 [ 512.770391][T12787] __x64_sys_unshare+0x31/0x40 [ 512.770408][T12787] do_syscall_64+0xcd/0xf80 [ 512.770428][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.770448][T12787] RIP: 0033:0x7fdb1258f7c9 [ 512.770464][T12787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.770482][T12787] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 512.770512][T12787] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 512.770526][T12787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 512.770539][T12787] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.770552][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.770564][T12787] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 512.770594][T12787] [ 513.361610][T12796] FAULT_INJECTION: forcing a failure. [ 513.361610][T12796] name failslab, interval 1, probability 0, space 0, times 0 [ 513.411474][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.0.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.411520][T12796] Tainted: [L]=SOFTLOCKUP [ 513.411528][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.411540][T12796] Call Trace: [ 513.411548][T12796] [ 513.411557][T12796] dump_stack_lvl+0x16c/0x1f0 [ 513.411600][T12796] should_fail_ex+0x512/0x640 [ 513.411627][T12796] ? __kmalloc_cache_noprof+0x5f/0x800 [ 513.411657][T12796] should_failslab+0xc2/0x120 [ 513.411707][T12796] __kmalloc_cache_noprof+0x80/0x800 [ 513.411736][T12796] ? alloc_super+0x52/0xd00 [ 513.411772][T12796] ? alloc_super+0x52/0xd00 [ 513.411802][T12796] alloc_super+0x52/0xd00 [ 513.411829][T12796] ? sget_fc+0xd3/0xc20 [ 513.411863][T12796] sget_fc+0x116/0xc20 [ 513.411893][T12796] ? __pfx_set_anon_super_fc+0x10/0x10 [ 513.411923][T12796] ? __pfx_mqueue_fill_super+0x10/0x10 [ 513.411959][T12796] get_tree_nodev+0x28/0x190 [ 513.411993][T12796] mqueue_get_tree+0xf1/0x130 [ 513.412028][T12796] vfs_get_tree+0x8e/0x330 [ 513.412056][T12796] fc_mount_longterm+0x1a/0x270 [ 513.412088][T12796] mq_init_ns+0x482/0x810 [ 513.412117][T12796] copy_ipcs+0x3db/0x7d0 [ 513.412146][T12796] create_new_namespaces+0x20a/0xab0 [ 513.412179][T12796] ? security_capable+0x7e/0x260 [ 513.412220][T12796] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 513.412256][T12796] ksys_unshare+0x45b/0xa40 [ 513.412292][T12796] ? __pfx_ksys_unshare+0x10/0x10 [ 513.412330][T12796] ? xfd_validate_state+0x61/0x180 [ 513.412363][T12796] __x64_sys_unshare+0x31/0x40 [ 513.412397][T12796] do_syscall_64+0xcd/0xf80 [ 513.412423][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.412449][T12796] RIP: 0033:0x7fe233b8f7c9 [ 513.412471][T12796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.412494][T12796] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 513.412518][T12796] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 513.412535][T12796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 513.412549][T12796] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.412563][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.412578][T12796] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 513.412611][T12796] [ 515.164255][T12823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 515.172152][T12823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.179946][T12823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.189004][T12823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.338396][ T5834] Bluetooth: hci3: command 0x2016 tx timeout [ 517.338748][T12853] Bluetooth: hci2: command 0x0c1a tx timeout [ 517.344663][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.356957][ T5841] Bluetooth: hci0: command 0x2016 tx timeout [ 520.251636][T12885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'. [ 520.585494][T12896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.644281][T12896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.916785][T12896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.012338][T12896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.583896][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 522.773283][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 522.982924][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 523.071392][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 523.425992][T12901] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1880'. [ 524.619587][T12938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'. [ 525.143711][T12948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.465467][T12948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.479542][T12948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.507539][T12948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 527.210094][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 527.438976][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 527.522328][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.538226][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 527.737988][T12959] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1894'. [ 527.860481][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 527.909403][T12977] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 527.978492][T12977] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1897'. [ 529.008834][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 529.273162][T12984] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 529.310810][T12984] File: /dev/nullb0 PID: 12984 Comm: syz.1.1898 [ 530.255944][T13004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.394242][T13004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.400371][T13004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.423471][T13004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.293477][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 532.462622][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 532.462645][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.475174][ T5841] Bluetooth: hci3: command 0x2016 tx timeout [ 532.974949][T13012] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1908'. [ 533.367905][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 534.002320][T13047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.023477][T13047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.157497][T13047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.170523][T13047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 536.034532][ T5841] Bluetooth: hci3: command 0x2016 tx timeout [ 536.034744][ T5834] Bluetooth: hci0: command 0x2016 tx timeout [ 536.193328][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.199868][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.822412][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 537.024562][T13079] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1924'. [ 537.191662][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 537.251921][T13091] nfsd: Unknown parameter '*' [ 537.263742][T13091] FAULT_INJECTION: forcing a failure. [ 537.263742][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 537.297443][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.1.1928 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.297482][T13091] Tainted: [L]=SOFTLOCKUP [ 537.297491][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.297503][T13091] Call Trace: [ 537.297511][T13091] [ 537.297521][T13091] dump_stack_lvl+0x16c/0x1f0 [ 537.297566][T13091] should_fail_ex+0x512/0x640 [ 537.297593][T13091] ? __kmalloc_noprof+0xca/0x910 [ 537.297631][T13091] should_failslab+0xc2/0x120 [ 537.297670][T13091] __kmalloc_noprof+0xeb/0x910 [ 537.297698][T13091] ? vhost_dev_set_owner+0x287/0xa50 [ 537.297739][T13091] ? vhost_dev_set_owner+0x287/0xa50 [ 537.297775][T13091] vhost_dev_set_owner+0x287/0xa50 [ 537.297824][T13091] vhost_dev_ioctl+0x2eb/0xe20 [ 537.297857][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.297896][T13091] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 537.297940][T13091] vhost_vsock_dev_ioctl+0x516/0xb30 [ 537.297972][T13091] ? hook_file_ioctl_common+0x144/0x410 [ 537.298003][T13091] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 537.298040][T13091] ? __fget_files+0x20e/0x3c0 [ 537.298079][T13091] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 537.298114][T13091] __x64_sys_ioctl+0x18e/0x210 [ 537.298146][T13091] do_syscall_64+0xcd/0xf80 [ 537.298171][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.298196][T13091] RIP: 0033:0x7fd0d1d8f7c9 [ 537.298217][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.298241][T13091] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.298264][T13091] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 537.298281][T13091] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 537.298296][T13091] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.298311][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.298325][T13091] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 537.298360][T13091] [ 540.764656][T13138] cougar: G6 mapped to space [ 541.149411][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1939'. [ 541.488392][T13146] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1942'. [ 541.550620][T13144] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1941'. [ 543.868645][T13177] input: f as /devices/virtual/input/input20 [ 544.024470][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1948'. [ 546.468318][T13205] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1956'. [ 546.576964][T13219] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 548.330352][T13238] openvswitch: HfR: Dropping previously announced user features [ 550.931826][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 551.037099][T13281] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1977'. [ 551.302330][T13259] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1970'. [ 551.713698][T13284] can0: slcan on ptm0. [ 552.156208][T13283] can0 (unregistered): slcan off ptm0. [ 552.890008][T13306] FAULT_INJECTION: forcing a failure. [ 552.890008][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 552.906458][T13306] CPU: 0 UID: 0 PID: 13306 Comm: syz.0.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.906498][T13306] Tainted: [L]=SOFTLOCKUP [ 552.906507][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.906522][T13306] Call Trace: [ 552.906530][T13306] [ 552.906540][T13306] dump_stack_lvl+0x16c/0x1f0 [ 552.906585][T13306] should_fail_ex+0x512/0x640 [ 552.906612][T13306] ? fs_reclaim_acquire+0xae/0x150 [ 552.906653][T13306] should_failslab+0xc2/0x120 [ 552.906698][T13306] kmem_cache_alloc_noprof+0x83/0x770 [ 552.906729][T13306] ? __pfx_map_id_range_down+0x10/0x10 [ 552.906760][T13306] ? security_inode_alloc+0x3b/0x2b0 [ 552.906791][T13306] ? security_inode_alloc+0x3b/0x2b0 [ 552.906816][T13306] security_inode_alloc+0x3b/0x2b0 [ 552.906845][T13306] inode_init_always_gfp+0xced/0x1040 [ 552.906886][T13306] alloc_inode+0x86/0x240 [ 552.906914][T13306] iget_locked+0x1d9/0x6d0 [ 552.906942][T13306] ? __pfx_iget_locked+0x10/0x10 [ 552.906967][T13306] ? find_held_lock+0x2b/0x80 [ 552.906999][T13306] ? kernfs_find_and_get_node_by_id+0x1c3/0x3f0 [ 552.907040][T13306] kernfs_get_inode+0x46/0x470 [ 552.907068][T13306] kernfs_fh_to_dentry+0xf3/0x250 [ 552.907094][T13306] exportfs_decode_fh_raw+0x167/0x7d0 [ 552.907123][T13306] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 552.907163][T13306] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 552.907189][T13306] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 552.907261][T13306] do_handle_open+0x712/0xd10 [ 552.907300][T13306] ? __pfx_do_handle_open+0x10/0x10 [ 552.907333][T13306] ? __x64_sys_futex+0x1e0/0x4c0 [ 552.907368][T13306] ? xfd_validate_state+0x61/0x180 [ 552.907402][T13306] ? do_syscall_64+0xcd/0xf80 [ 552.907422][T13306] do_syscall_64+0xcd/0xf80 [ 552.907446][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.907471][T13306] RIP: 0033:0x7fe233b8f7c9 [ 552.907491][T13306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.907515][T13306] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 552.907538][T13306] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 552.907555][T13306] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 552.907571][T13306] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.907587][T13306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.907602][T13306] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 552.907637][T13306] [ 555.383775][T13345] zswap: compressor not available [ 556.012276][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 556.018897][ T5834] Bluetooth: hci4: command 0x1003 tx timeout [ 556.398090][ T30] audit: type=1800 audit(4294967311.519:25): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1990" name="lu_gp_id" dev="configfs" ino=55858 res=0 errno=0 [ 556.489585][T13350] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1989'. [ 560.077437][T13381] vivid-007: ================= START STATUS ================= [ 560.104405][T13381] vivid-007: Generate PTS: true [ 560.154348][T13381] vivid-007: Generate SCR: true [ 560.198378][T13381] tpg source WxH: 320x240 (Y'CbCr) [ 560.203679][T13381] tpg field: 1 [ 560.269040][T13381] tpg crop: (0,0)/320x240 [ 560.273409][T13381] tpg compose: (0,0)/320x240 [ 560.318725][T13381] tpg colorspace: 8 [ 560.349337][T13381] tpg transfer function: 0/0 [ 560.353979][T13381] tpg Y'CbCr encoding: 0/0 [ 560.427165][T13381] tpg quantization: 0/0 [ 560.431364][T13381] tpg RGB range: 0/2 [ 560.490280][T13381] vivid-007: ================== END STATUS ================== [ 561.832733][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.840235][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.020013][T13403] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2000'. [ 565.972934][T13456] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 566.983934][T13461] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 567.659030][T13472] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2015'. [ 568.507812][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 568.517364][T13490] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2019'. [ 570.786027][T13515] zswap: compressor not available [ 571.228994][T13529] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2028'. [ 571.637911][T13524] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2027'. [ 573.176479][T13509] kexec: Could not allocate control_code_buffer [ 574.886297][T13575] futex_wake_op: syz.1.2040 tries to shift op by -1; fix this program [ 575.256296][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a7f2000: rx timeout, send abort [ 575.285189][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a7f2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 575.698744][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 577.243885][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880774aac00: rx timeout, send abort [ 577.750038][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880774aac00: abort rx timeout. Force session deactivation [ 578.904985][ T5834] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 578.927680][T13619] netlink: zone id is out of range [ 578.977491][T13619] netlink: del zone limit has 4 unknown bytes [ 579.500649][T13628] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2054'. [ 580.681278][T13644] hub 1-0:1.0: USB hub found [ 580.717352][T13644] hub 1-0:1.0: 1 port detected [ 580.801235][T13642] hub 1-0:1.0: USB hub found [ 580.812165][T13642] hub 1-0:1.0: 1 port detected [ 580.891150][T13651] netlink: 306 bytes leftover after parsing attributes in process `syz.2.2060'. [ 581.518921][T13662] FAULT_INJECTION: forcing a failure. [ 581.518921][T13662] name failslab, interval 1, probability 0, space 0, times 0 [ 581.584967][T13662] CPU: 1 UID: 0 PID: 13662 Comm: syz.2.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.585007][T13662] Tainted: [L]=SOFTLOCKUP [ 581.585015][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.585029][T13662] Call Trace: [ 581.585037][T13662] [ 581.585046][T13662] dump_stack_lvl+0x16c/0x1f0 [ 581.585091][T13662] should_fail_ex+0x512/0x640 [ 581.585118][T13662] ? __kmalloc_cache_noprof+0x5f/0x800 [ 581.585150][T13662] should_failslab+0xc2/0x120 [ 581.585185][T13662] __kmalloc_cache_noprof+0x80/0x800 [ 581.585211][T13662] ? __x64_sys_futex+0x1e9/0x4c0 [ 581.585240][T13662] ? fsnotify_alloc_group+0x92/0x330 [ 581.585282][T13662] ? fsnotify_alloc_group+0x92/0x330 [ 581.585316][T13662] fsnotify_alloc_group+0x92/0x330 [ 581.585353][T13662] do_inotify_init+0x49/0x5f0 [ 581.585378][T13662] ? rcu_is_watching+0x12/0xc0 [ 581.585412][T13662] __x64_sys_inotify_init1+0x30/0x40 [ 581.585441][T13662] do_syscall_64+0xcd/0xf80 [ 581.585465][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.585489][T13662] RIP: 0033:0x7fdb1258f7c9 [ 581.585510][T13662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.585535][T13662] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 581.585558][T13662] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 581.585574][T13662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.585589][T13662] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.585604][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.585618][T13662] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 581.585653][T13662] [ 582.236442][T13677] FAULT_INJECTION: forcing a failure. [ 582.236442][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 582.249510][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.1.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.249550][T13677] Tainted: [L]=SOFTLOCKUP [ 582.249557][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.249572][T13677] Call Trace: [ 582.249580][T13677] [ 582.249591][T13677] dump_stack_lvl+0x16c/0x1f0 [ 582.249631][T13677] should_fail_ex+0x512/0x640 [ 582.249655][T13677] ? __kmalloc_noprof+0xca/0x910 [ 582.249683][T13677] should_failslab+0xc2/0x120 [ 582.249718][T13677] __kmalloc_noprof+0xeb/0x910 [ 582.249739][T13677] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 582.249785][T13677] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 582.249811][T13677] apply_wqattrs_prepare+0xf8/0xbd0 [ 582.249852][T13677] apply_workqueue_attrs_locked+0x64/0xe0 [ 582.249879][T13677] __alloc_workqueue+0xf42/0x1810 [ 582.249920][T13677] alloc_workqueue_noprof+0xd2/0x200 [ 582.249955][T13677] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 582.250011][T13677] nci_register_device+0x511/0xb80 [ 582.250040][T13677] ? __pfx_nci_register_device+0x10/0x10 [ 582.250076][T13677] ? lockdep_init_map_type+0x5c/0x270 [ 582.250104][T13677] virtual_ncidev_open+0x141/0x220 [ 582.250125][T13677] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 582.250138][T13677] misc_open+0x26d/0x450 [ 582.250155][T13677] ? __pfx_misc_open+0x10/0x10 [ 582.250170][T13677] chrdev_open+0x234/0x6a0 [ 582.250190][T13677] ? __pfx_apparmor_file_open+0x10/0x10 [ 582.250204][T13677] ? __pfx_chrdev_open+0x10/0x10 [ 582.250224][T13677] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 582.250248][T13677] do_dentry_open+0x748/0x1590 [ 582.250267][T13677] ? __pfx_chrdev_open+0x10/0x10 [ 582.250292][T13677] vfs_open+0x82/0x3f0 [ 582.250309][T13677] path_openat+0x2078/0x3140 [ 582.250334][T13677] ? __pfx_path_openat+0x10/0x10 [ 582.250360][T13677] do_filp_open+0x20b/0x470 [ 582.250380][T13677] ? __pfx_do_filp_open+0x10/0x10 [ 582.250412][T13677] ? alloc_fd+0x471/0x7d0 [ 582.250436][T13677] do_sys_openat2+0x121/0x290 [ 582.250451][T13677] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.250466][T13677] ? __fput+0x68d/0xb70 [ 582.250483][T13677] __x64_sys_openat+0x174/0x210 [ 582.250498][T13677] ? __pfx___x64_sys_openat+0x10/0x10 [ 582.250521][T13677] do_syscall_64+0xcd/0xf80 [ 582.250534][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.250548][T13677] RIP: 0033:0x7fd0d1d8f7c9 [ 582.250567][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.250580][T13677] RSP: 002b:00007fd0d2c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.250594][T13677] RAX: ffffffffffffffda RBX: 00007fd0d1fe5fa0 RCX: 00007fd0d1d8f7c9 [ 582.250603][T13677] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 582.250612][T13677] RBP: 00007fd0d1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 582.250621][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.250629][T13677] R13: 00007fd0d1fe6038 R14: 00007fd0d1fe5fa0 R15: 00007ffe47f9b6a8 [ 582.250649][T13677] [ 583.107149][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 583.835979][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 584.536127][T13720] random: crng reseeded on system resumption [ 586.612960][T13753] FAULT_INJECTION: forcing a failure. [ 586.612960][T13753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.688864][T13753] CPU: 0 UID: 0 PID: 13753 Comm: syz.0.2085 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.688907][T13753] Tainted: [L]=SOFTLOCKUP [ 586.688915][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.688930][T13753] Call Trace: [ 586.688939][T13753] [ 586.688949][T13753] dump_stack_lvl+0x16c/0x1f0 [ 586.688992][T13753] should_fail_ex+0x512/0x640 [ 586.689026][T13753] _copy_to_user+0x32/0xd0 [ 586.689056][T13753] dma_heap_ioctl+0x416/0x610 [ 586.689087][T13753] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 586.689111][T13753] ? rcu_is_watching+0x12/0xc0 [ 586.689161][T13753] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 586.689196][T13753] __x64_sys_ioctl+0x18e/0x210 [ 586.689230][T13753] do_syscall_64+0xcd/0xf80 [ 586.689255][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.689279][T13753] RIP: 0033:0x7fe233b8f7c9 [ 586.689296][T13753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.689318][T13753] RSP: 002b:00007fe234ad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.689340][T13753] RAX: ffffffffffffffda RBX: 00007fe233de6090 RCX: 00007fe233b8f7c9 [ 586.689357][T13753] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 586.689370][T13753] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.689383][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.689397][T13753] R13: 00007fe233de6128 R14: 00007fe233de6090 R15: 00007ffc418baa18 [ 586.689426][T13753] [ 587.514877][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'. [ 587.660725][T13767] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2089'. [ 589.034162][T13784] block nbd0: Unsupported socket: should be TCP or UNIX. [ 589.370870][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 589.395045][T13787] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 589.437152][T13787] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2096'. [ 589.654021][T13789] zswap: compressor not available [ 589.721142][T13797] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2098'. [ 589.755921][T13789] FAULT_INJECTION: forcing a failure. [ 589.755921][T13789] name failslab, interval 1, probability 0, space 0, times 0 [ 589.900331][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.0.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.900374][T13789] Tainted: [L]=SOFTLOCKUP [ 589.900382][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.900397][T13789] Call Trace: [ 589.900406][T13789] [ 589.900415][T13789] dump_stack_lvl+0x16c/0x1f0 [ 589.900460][T13789] should_fail_ex+0x512/0x640 [ 589.900488][T13789] ? fs_reclaim_acquire+0xae/0x150 [ 589.900528][T13789] should_failslab+0xc2/0x120 [ 589.900564][T13789] kmem_cache_alloc_noprof+0x83/0x770 [ 589.900592][T13789] ? __pfx_map_id_range_down+0x10/0x10 [ 589.900624][T13789] ? security_inode_alloc+0x3b/0x2b0 [ 589.900657][T13789] ? security_inode_alloc+0x3b/0x2b0 [ 589.900681][T13789] security_inode_alloc+0x3b/0x2b0 [ 589.900708][T13789] inode_init_always_gfp+0xced/0x1040 [ 589.900748][T13789] alloc_inode+0x86/0x240 [ 589.900774][T13789] sock_alloc+0x40/0x280 [ 589.900811][T13789] sock_create_lite+0x82/0x120 [ 589.900851][T13789] __netlink_kernel_create+0xbd/0x750 [ 589.900889][T13789] ? __pfx___netlink_kernel_create+0x10/0x10 [ 589.900933][T13789] uevent_net_init+0xf8/0x350 [ 589.900961][T13789] ? __pfx_uevent_net_init+0x10/0x10 [ 589.900987][T13789] ? rcu_is_watching+0x12/0xc0 [ 589.901019][T13789] ? __pfx_uevent_net_rcv+0x10/0x10 [ 589.901056][T13789] ? ops_init+0x77/0x5f0 [ 589.901093][T13789] ? __pfx_uevent_net_init+0x10/0x10 [ 589.901117][T13789] ops_init+0x1e2/0x5f0 [ 589.901151][T13789] setup_net+0x11d/0x3a0 [ 589.901186][T13789] ? __pfx_setup_net+0x10/0x10 [ 589.901217][T13789] ? lockdep_init_map_type+0x5c/0x270 [ 589.901243][T13789] ? mutex_init_lockep+0x110/0x150 [ 589.901273][T13789] copy_net_ns+0x351/0x7c0 [ 589.901309][T13789] create_new_namespaces+0x3ea/0xab0 [ 589.901354][T13789] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 589.901390][T13789] ksys_unshare+0x45b/0xa40 [ 589.901429][T13789] ? __pfx_ksys_unshare+0x10/0x10 [ 589.901467][T13789] ? xfd_validate_state+0x61/0x180 [ 589.901499][T13789] __x64_sys_unshare+0x31/0x40 [ 589.901521][T13789] do_syscall_64+0xcd/0xf80 [ 589.901547][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.901571][T13789] RIP: 0033:0x7fe233b8f7c9 [ 589.901591][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.901615][T13789] RSP: 002b:00007fe234af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.901639][T13789] RAX: ffffffffffffffda RBX: 00007fe233de5fa0 RCX: 00007fe233b8f7c9 [ 589.901654][T13789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.901669][T13789] RBP: 00007fe233c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.901684][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.901698][T13789] R13: 00007fe233de6038 R14: 00007fe233de5fa0 R15: 00007ffc418baa18 [ 589.901733][T13789] [ 590.288877][T13789] kobject_uevent: unable to create netlink socket! [ 590.738662][T13813] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 590.750777][T13813] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 590.759212][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.2.2103 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.770170][T13813] Tainted: [L]=SOFTLOCKUP [ 590.774502][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.784568][T13813] RIP: 0010:strcmp+0x39/0xb0 [ 590.789183][T13813] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 590.808809][T13813] RSP: 0018:ffffc900036377a8 EFLAGS: 00010246 [ 590.814895][T13813] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000d102000 [ 590.822897][T13813] RDX: 0000000000000000 RSI: ffffffff8c237800 RDI: 0000000000000000 [ 590.830881][T13813] RBP: ffffffff8c236760 R08: 0000000000000001 R09: ffffed1004c40709 [ 590.838852][T13813] R10: ffff88802620384f R11: 0000000000000001 R12: ffff888057bf0000 [ 590.846820][T13813] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 590.854787][T13813] FS: 00007fdb1335e6c0(0000) GS:ffff8881249f9000(0000) knlGS:0000000000000000 [ 590.863740][T13813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.870337][T13813] CR2: 0000001b31320ff8 CR3: 000000004eb34000 CR4: 00000000003526f0 [ 590.878313][T13813] Call Trace: [ 590.881676][T13813] [ 590.884612][T13813] zcomp_available_show+0x73/0x130 [ 590.889928][T13813] ? __pfx_comp_algorithm_show+0x10/0x10 [ 590.895555][T13813] comp_algorithm_show+0x98/0xd0 [ 590.900484][T13813] dev_attr_show+0x56/0xe0 [ 590.904911][T13813] ? __pfx_dev_attr_show+0x10/0x10 [ 590.910028][T13813] sysfs_kf_seq_show+0x216/0x3e0 [ 590.914971][T13813] seq_read_iter+0x50e/0x12d0 [ 590.919652][T13813] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 590.925639][T13813] kernfs_fop_read_iter+0x46c/0x610 [ 590.930846][T13813] copy_splice_read+0x618/0xc20 [ 590.935709][T13813] ? __pfx_copy_splice_read+0x10/0x10 [ 590.941084][T13813] ? look_up_lock_class+0x6b/0x130 [ 590.946201][T13813] ? lockdep_init_map_type+0x5c/0x270 [ 590.951565][T13813] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 590.956936][T13813] ? __pfx_copy_splice_read+0x10/0x10 [ 590.962314][T13813] do_splice_read+0x285/0x370 [ 590.967020][T13813] splice_direct_to_actor+0x2a1/0xa30 [ 590.972427][T13813] ? __pfx_direct_splice_actor+0x10/0x10 [ 590.978082][T13813] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 590.984001][T13813] do_splice_direct+0x174/0x240 [ 590.988863][T13813] ? __pfx_do_splice_direct+0x10/0x10 [ 590.994240][T13813] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 591.000145][T13813] ? rw_verify_area+0xcf/0x6c0 [ 591.004925][T13813] do_sendfile+0xb06/0xe50 [ 591.009350][T13813] ? __pfx_do_sendfile+0x10/0x10 [ 591.014290][T13813] ? __x64_sys_futex+0x1e0/0x4c0 [ 591.019229][T13813] ? __x64_sys_futex+0x1e9/0x4c0 [ 591.024163][T13813] __x64_sys_sendfile64+0x1d8/0x220 [ 591.029359][T13813] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 591.035076][T13813] do_syscall_64+0xcd/0xf80 [ 591.039573][T13813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.045460][T13813] RIP: 0033:0x7fdb1258f7c9 [ 591.049865][T13813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.069468][T13813] RSP: 002b:00007fdb1335e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 591.077880][T13813] RAX: ffffffffffffffda RBX: 00007fdb127e5fa0 RCX: 00007fdb1258f7c9 [ 591.085848][T13813] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 591.093818][T13813] RBP: 00007fdb12613f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.101783][T13813] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 591.109744][T13813] R13: 00007fdb127e6038 R14: 00007fdb127e5fa0 R15: 00007ffc2513b9f8 [ 591.117725][T13813] [ 591.120740][T13813] Modules linked in: [ 591.125650][T13813] ---[ end trace 0000000000000000 ]--- [ 591.271487][T13813] RIP: 0010:strcmp+0x39/0xb0 [ 591.276259][T13813] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 591.316436][T13813] RSP: 0018:ffffc900036377a8 EFLAGS: 00010246 [ 591.399529][T13813] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000d102000 [ 591.469902][T13813] RDX: 0000000000000000 RSI: ffffffff8c237800 RDI: 0000000000000000 [ 591.486704][T13813] RBP: ffffffff8c236760 R08: 0000000000000001 R09: ffffed1004c40709 [ 591.500377][T13813] R10: ffff88802620384f R11: 0000000000000001 R12: ffff888057bf0000 [ 591.512900][T13813] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 591.531142][T13813] FS: 00007fdb1335e6c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 591.599518][T13813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.637957][T13813] CR2: 0000001b3121dff8 CR3: 000000004eb34000 CR4: 00000000003526f0 [ 591.677795][T13813] Kernel panic - not syncing: Fatal exception [ 591.684258][T13813] Kernel Offset: disabled [ 591.688575][T13813] Rebooting in 86400 seconds..